Enforcement Authorities

Are CADA fines based on company turnover? As proposed, the Cloud and AI Development Act (CADA) does not impose fines as a fixed percentage of global turnover, unlike the GDPR or the AI Act. Are CADA penalties harmonised across Member States? No, the proposed Cloud and AI Development Act (CADA) does not harmonise specific penalty amounts or maximum fine ceilings across the European Union. Are CADA periodic penalty payments capped? Article 24 & 26 explained Under the proposed Cloud and AI Development Act (CADA), periodic penalty payments are not subject to a fixed EU-wide monetary cap. CADA Article 26 Powers: How They Support Article 17 Recognition Tasks Under the proposed Cloud and AI Development Act (CADA), the investigative and enforcement powers granted to national competent authorities in Article 26 ar CADA Article 28: Deadline for authorities to act on Commission requests Under the proposed Cloud and AI Development Act (CADA), the national competent authority of establishment must respond to a request from the European Commi CADA Authority Register: What's in the Entry? As proposed in the Cloud and AI Development Act (CADA), the European Commission will maintain a public register of national competent authorities designate CADA Competent Authorities: Required Resources & Obligations As proposed in the Cloud and AI Development Act (CADA), Member States are legally required to ensure their designated national competent authorities posses CADA Cross-Border Cooperation: How Article 28 Works Under the proposed Cloud and AI Development Act (CADA), cross-border cooperation is the mechanism that allows a national competent authority in the Member CADA Cross-Border Disputes: What Happens When Authorities Disagree? Under the proposed Cloud and AI Development Act (CADA), enforcement competence is exclusively vested in the national competent authority of the Member Stat CADA Cross-Border Requests: What the Establishment Authority Must Report Under the proposed Cloud and AI Development Act (CADA), when a competent authority in a Member State where a cloud service is used (the "destination author CADA Enforcement: Authority of Establishment vs. Destination Under the proposed Cloud and AI Development Act (CADA), the regulatory landscape is defined by a strict division of powers to ensure a single market withou CADA Enforcement: Burden of Proof, Rights of Defence & National Rules Under the proposed Cloud and AI Development Act (CADA), the burden of proof in enforcement cases rests squarely with the national competent authority of th CADA enforcement deadlines: Mutual assistance and cross-border cooperation timelines Under the proposed Cloud and AI Development Act (CADA), national competent authorities face strict statutory deadlines when cooperating on enforcement. CADA Enforcement: Explanatory Memorandum view on NCAs, penalties & cross-border cooperation The Cloud and AI Development Act (CADA) explanatory memorandum outlines a decentralised enforcement model where Member States designate national competent CADA Enforcement: How Article 24 & 26 Reshape Cloud Contracts As proposed, the Cloud and AI Development Act (CADA) would fundamentally alter cloud service agreements by introducing binding sovereignty criteria and a p CADA Enforcement: How Article 26 Balances Powers with Fundamental Rights The proposed Cloud and AI Development Act (CADA) grants national competent authorities robust investigative and enforcement powers to ensure compliance wit CADA Enforcement: How National Law Shapes Penalties and Procedures Under the proposed Cloud and AI Development Act (CADA), the EU establishes the substantive standards for cloud sovereignty, but national law plays the deci CADA Enforcement Readiness: The Compliance Checklist for Providers As proposed in COM(2026) 502 final, the Cloud and AI Development Act (CADA) establishes a rigorous enforcement regime for cloud computing service providers CADA Enforcement: The Commission's Coordinating Role vs. National Powers Under the proposed Cloud and AI Development Act (CADA), the European Commission does not directly enforce the regulation or impose penalties on cloud servi CADA Enforcement Timeline: Designating Authorities and Notifying Penalties Under the proposed Cloud and AI Development Act (CADA), Member States face two distinct but critical deadlines regarding enforcement. CADA Enforcement: What Compliance Officers Must Know About Penalties & Powers Under the proposed Cloud and AI Development Act (CADA), compliance officers must prepare for direct, high-stakes oversight by national competent authoritie CADA Investigations: What safeguards protect cloud providers? Under the proposed Cloud and AI Development Act (CADA), national competent authorities would possess significant investigative and enforcement powers, but CADA Mutual Assistance: How Authorities Cooperate Across Borders Under the proposed Cloud and AI Development Act (CADA), mutual assistance is a mandatory cooperation mechanism designed to ensure the consistent and effici CADA Mutual Assistance: The Two-Month Response Deadline Explained Under the proposed Cloud and AI Development Act (CADA), a competent authority receiving a mutual assistance request must comply with the request and inform CADA Mutual Assistance vs Cross-Border Cooperation: Key Differences Under the proposed Cloud and AI Development Act (CADA), mutual assistance (Article 27) and cross-border cooperation (Article 28) are distinct enforcement m CADA Penalties: Aggravating & Mitigating Factors Explained Under the proposed Cloud and AI Development Act (CADA), Member States would establish penalty rules for cloud computing service providers that must be "eff CADA Penalties: Do They Apply to AI Model Providers? No, the proposed Cloud and AI Development Act (CADA) does not impose penalties directly on AI model providers acting solely in that capacity. CADA Penalties vs GDPR: How Fines Are Calculated and Capped The proposed Cloud and AI Development Act (CADA) does not establish fixed EU-wide maximum fines for cloud computing service providers, unlike the General D CADA Penalties: What 'Effective, Proportionate and Dissuasive' Means Under the proposed Cloud and AI Development Act (CADA), Member States must establish penalties for infringements by cloud computing service providers that CADA Public Register of Competent Authorities: What Providers Need to Know Under the proposed Cloud and AI Development Act (CADA), the European Commission would maintain a centralised public register of national competent authorit CADA vs AI Act: How Enforcement and Penalties Differ As proposed, the Cloud and AI Development Act (CADA) and the AI Act establish fundamentally different enforcement architectures. CADA vs NIS2: How enforcement authorities interact and overlap Under the proposed Cloud and AI Development Act (CADA), enforcement of the cloud sovereignty framework is the exclusive responsibility of the national comp Can a business sue a cloud provider for breaching CADA? Yes, under the proposed Cloud and AI Development Act (CADA), a business can sue a cloud provider for damages if the provider breaches obligations under the Can a CADA authority act on a tip from a competitor? As proposed, national competent authorities under the Cloud and AI Development Act (CADA) would have the explicit power to act on information provided by c Can a CADA authority ask for more information on a cross-border request? Yes, under the proposed Cloud and AI Development Act (CADA), a national competent authority of establishment may request additional information if a cross- Can a CADA authority delegate inspections to other public bodies? As proposed, the Cloud and AI Development Act (CADA) does not grant national competent authorities the power to unilaterally "delegate" their statutory enf Can a CADA authority impose both fines and remedies at once? Yes, as proposed, a national competent authority under the Cloud and AI Development Act (CADA) can impose both remedial measures and financial penalties fo Can a CADA authority involve other public authorities in an assistance request? Under the proposed Cloud and AI Development Act (CADA), a national competent authority receiving a mutual assistance request has the explicit power to invo Can a CADA authority publish its enforcement decisions? The proposed Cloud and AI Development Act (CADA) does not explicitly mandate that national competent authorities publish their individual enforcement decis Can a CADA authority refuse a mutual assistance request? Under the proposed Cloud and AI Development Act (CADA), a national competent authority cannot arbitrarily refuse a request for mutual assistance from anoth Can a CADA authority share information with another country's authority? Under the proposed Cloud and AI Development Act (CADA), national competent authorities are explicitly empowered to share information with counterparts in o Can a CADA enforcement decision be enforced in another Member State? Under the proposed Cloud and AI Development Act (CADA), there is no automatic mutual recognition of enforcement decisions across Member States. Can a CADA fine and a periodic penalty be combined? Yes, under the proposed Cloud and AI Development Act (CADA), a national competent authority can impose both a fine and a periodic penalty payment on a clou Can a CADA fine be challenged in court? Judicial remedies explained Yes, under the proposed Cloud and AI Development Act (CADA), any fine or enforcement measure can be challenged in court. Can a cloud provider negotiate remedies with a CADA authority? Under the proposed Cloud and AI Development Act (CADA), cloud service providers cannot freely "negotiate" the legal standards, Union assurance levels, or f Can a Member State designate more than one CADA authority? Yes, under the proposed Cloud and AI Development Act (CADA), a Member State may designate more than one national competent authority. Can an existing regulator be designated as a CADA authority? Yes, as proposed, Member States may designate an existing national regulator to act as the competent authority for the Cloud and AI Development Act (CADA). Can a provider be penalised for obstructing a CADA investigation? Yes, under the proposed Cloud and AI Development Act (CADA), a cloud computing service provider can be penalised for obstructing an investigation or failin Can CADA authorities act against a non-EU cloud provider? Under the proposed Cloud and AI Development Act (CADA), national competent authorities can enforce sovereignty and transparency obligations against non-EU Can CADA authorities act before an infringement is confirmed? Yes, under the proposed Cloud and AI Development Act (CADA), national competent authorities possess the power to act decisively before an infringement is f Can CADA authorities coordinate a joint investigation? Under the proposed Cloud and AI Development Act (CADA), national competent authorities would be required to provide mutual assistance to one another to ens Can CADA authorities demand information from a cloud provider? Yes, as proposed, national competent authorities under the Cloud and AI Development Act (CADA) possess broad administrative powers to demand information fr Can CADA authorities impose fines on cloud providers? Yes, under the proposed Cloud and AI Development Act (CADA), national competent authorities would have the power to impose fines on cloud computing service Can CADA authorities inspect a cloud provider's premises? Yes — under the proposed Cloud and AI Development Act (CADA, COM(2026) 502 final, a proposal not yet in force), national competent authorities would be abl Can CADA authorities investigate an auditing organisation? Yes, as proposed, the Cloud and AI Development Act (CADA) empowers national competent authorities to investigate auditing organisations directly. Can CADA authorities order a provider to stop an infringement? Yes, as proposed, national competent authorities under the Cloud and AI Development Act (CADA) possess the explicit power to order a cloud computing servic Can CADA authorities question a provider's staff? As proposed in the Cloud and AI Development Act (CADA), national competent authorities possess the explicit power to question staff or representatives of c Can CADA authorities require information from a provider's suppliers? Yes, as proposed, the Cloud and AI Development Act (CADA) grants national competent authorities the explicit power to require information not only from clo Can CADA authorities seize a cloud provider's data? Under the proposed Cloud and AI Development Act (CADA), national competent authorities would possess explicit powers to seize data from cloud computing ser Can CADA enforcement be triggered by an audit finding? Yes, as proposed, enforcement under the Cloud and AI Development Act (CADA) can be directly triggered by an audit finding. Can CADA enforcement lead to a provider losing its assurance-level recognition? Yes, under the proposed Cloud and AI Development Act (CADA), enforcement actions can directly lead to a cloud service provider losing its Union assurance-l Can CADA penalties be imposed without a court? As proposed, the Cloud and AI Development Act (CADA) does not mandate that penalties be imposed exclusively by courts. Can recipients claim compensation and report a breach at the same time under CADA? Yes, under the proposed Cloud and AI Development Act (CADA), recipients of cloud computing services can simultaneously pursue compensation for damages and Can taking remedial action reduce a CADA penalty? Yes, taking prompt and effective remedial action can significantly reduce a penalty under the proposed Cloud and AI Development Act (CADA). Can the Commission ask a CADA authority to investigate a provider? Yes, under the proposed Cloud and AI Development Act (CADA), the European Commission holds a direct power to request a Member State's national competent au Do CADA enforcement powers respect the right to privacy? Yes, as proposed, the Cloud and AI Development Act (CADA) explicitly anchors its enforcement powers in fundamental rights. Do CADA inspections need a court order? Article 26 explained Under the proposed Cloud and AI Development Act (CADA), national competent authorities do not possess an automatic, unconditional right to enter a cloud co Does a provider's size affect CADA enforcement measures? Yes, a provider's size and financial capacity directly influence enforcement measures under the proposed Cloud and AI Development Act (CADA). Does CADA allow daily penalties until compliance? Yes, as proposed, the Cloud and AI Development Act (CADA) explicitly empowers national competent authorities to impose periodic penalty payments to compel Does CADA enforcement apply to providers established outside the EU but serving it? Under the proposed Cloud and AI Development Act (CADA), enforcement jurisdiction is strictly anchored to the provider's main establishment within the Union Does CADA enforcement cover transparency reporting failures? Yes, under the proposed Cloud and AI Development Act (CADA), enforcement authorities can penalise cloud service providers for failing to meet transparency Does CADA give customers a private right of action against providers? The proposed Cloud and AI Development Act (CADA) does not establish a broad, standalone private right of action for every regulatory violation. Does CADA protect whistleblowers who report cloud-provider breaches? The proposed Cloud and AI Development Act (CADA) does not contain a dedicated, standalone whistleblower protection scheme within its core enforcement chapt Does CADA require cooperation with other EU regulators? As proposed, the Cloud and AI Development Act (CADA) explicitly mandates a coordinated enforcement approach that integrates national competent authorities Does CADA require Member States to set criminal penalties? No, as proposed, the Cloud and AI Development Act (CADA) does not explicitly mandate Member States to establish criminal penalties for infringements. Does CADA set a maximum fine amount? Understanding Article 24 No, the proposed Cloud and AI Development Act (CADA) does not set a specific maximum fine amount or a fixed percentage cap on penalties. Does CADA use a one-stop-shop enforcement model? Yes, as proposed, the Cloud and AI Development Act (CADA) adopts a one-stop-shop enforcement model for its sovereignty framework, centered on the competent Does financial benefit from an infringement increase a CADA fine? Under the proposed Cloud and AI Development Act (CADA), financial benefit gained or losses avoided due to an infringement is a mandatory criterion Member S Does the Commission cooperate with CADA national authorities? Yes, as proposed in the Cloud and AI Development Act (CADA), the European Commission plays a central coordinating role in the enforcement of the cloud sove Do Member States notify the Commission of their CADA penalty rules? Yes, under the proposed Cloud and AI Development Act (CADA), Member States are strictly required to notify the European Commission of the national rules on Do repeat infringements lead to higher CADA penalties? Under the proposed Cloud and AI Development Act (CADA), repeat infringements are a specific statutory factor that national competent authorities must consi How are CADA enforcement powers limited by proportionality? Under the proposed Cloud and AI Development Act (CADA), national competent authorities are strictly bound by the principle of proportionality when exercisi How are CADA penalties calculated? CADA is a proposal (COM(2026) 502 final) and is not yet in force. How can a cloud customer report a CADA breach? As proposed, the Cloud and AI Development Act (CADA) does not establish a direct reporting portal for cloud customers to contact the European Commission. How do CADA authorities request information from each other? Under the proposed Cloud and AI Development Act (CADA), the enforcement of cloud sovereignty relies on a mandatory mutual assistance framework. How do CADA authorities supervise cloud providers day to day? Under the proposed Cloud and AI Development Act (CADA), national competent authorities supervise cloud providers through a centralized "exclusive competenc How does a cloud provider respond to a CADA information request? Under the proposed Cloud and AI Development Act (CADA), cloud computing service providers face a strict obligation to cooperate with national competent aut How does a public buyer benefit from CADA enforcement? Under the proposed Cloud and AI Development Act (CADA), public buyers gain a robust regulatory safety net that transforms "Union assurance levels" from mar How does CADA enforcement reach hyperscale cloud providers? As proposed, the Cloud and AI Development Act (CADA) establishes a "one-stop-shop" enforcement model where the national competent authority of the provider How does CADA enforcement support the sovereignty assurance levels? As proposed, the Cloud and AI Development Act (CADA) establishes a centralized enforcement architecture to protect the integrity of the four Union assuranc How does CADA ensure consistent enforcement across the EU? As proposed, the Cloud and AI Development Act (CADA) ensures consistent enforcement across the EU by establishing a "single market" approach to sovereignty How does CADA protect the rights of defence during enforcement? Under the proposed Cloud and AI Development Act (CADA), cloud computing service providers facing enforcement actions by national competent authorities are How do I appeal a CADA enforcement decision? Under the proposed Cloud and AI Development Act (CADA), there is no single, EU-wide administrative tribunal to appeal enforcement decisions. How do I claim compensation from a cloud provider under CADA? Under the proposed Cloud and AI Development Act (CADA), recipients of cloud computing services have a statutory right to seek compensation from providers f How do I find the CADA competent authority for my Member State? Under the proposed Cloud and AI Development Act (CADA), your regulatory oversight is determined by your "main establishment." The Member State where your c How long does a cross-border CADA request take? Under the proposed Cloud and AI Development Act (CADA), a competent authority of establishment must respond to a cross-border cooperation request as soon a How should a cloud provider prepare for a CADA investigation? Under the proposed Cloud and AI Development Act (CADA), cloud service providers seeking or holding Union assurance levels must be prepared for rigorous inv Is there a CADA enforcement board or network of authorities? Under the proposed Cloud and AI Development Act (CADA), there is no single, centralized EU-level enforcement board or supranational authority with direct s Must CADA authorities act impartially and transparently? Under the proposed Cloud and AI Development Act (CADA), national competent authorities are legally bound to perform their supervisory and enforcement tasks Must cross-border CADA requests be reasoned? Yes, under the proposed Cloud and AI Development Act (CADA), any cross-border cooperation request sent by a competent authority of a destination Member Sta What are national competent authorities under CADA? CADA is a proposal (COM(2026) 502 final) and is not yet in force. What counts as an infringement under CADA? Penalties & Powers Under the proposed Cloud and AI Development Act (CADA), an infringement occurs when a cloud computing service provider fails to comply with the specific so What damages can a cloud customer recover under CADA? Under the proposed Cloud and AI Development Act (CADA), cloud customers (recipients) have a direct statutory right to seek compensation from providers for What does CADA enforcement mean for cloud providers? Under the proposed Cloud and AI Development Act (CADA), cloud computing service providers face direct enforcement by National Competent Authorities (NCAs) What does CADA enforcement mean for public-sector cloud buyers? Under the proposed Cloud and AI Development Act (CADA), public-sector buyers are active guardians of the Union's cloud sovereignty, not just passive consum What does proportionate enforcement mean under CADA? Under the proposed Cloud and AI Development Act (CADA), proportionate enforcement is a statutory requirement that prevents a "one-size-fits-all" regulatory What enforcement powers do CADA authorities have? Under the proposed Cloud and AI Development Act (CADA, COM(2026) 502 final — a proposal, not yet in force), national competent authorities would have three What evidence can CADA authorities collect during an investigation? Under the proposed Cloud and AI Development Act (CADA), national competent authorities would possess extensive investigative powers to verify compliance wi What happens during a CADA investigation, step by step? Under the proposed Cloud and AI Development Act (CADA), national competent authorities possess robust powers to investigate suspected infringements of the What happens if a provider ignores a CADA investigative order? If a cloud computing service provider ignores an investigative order issued by a national competent authority under the proposed Cloud and AI Development A What happens if a provider stops meeting Annex II requirements under CADA? Under the proposed Cloud and AI Development Act (CADA), compliance with Annex II criteria is a continuous obligation, not a one-time certification. What happens to seized information after a CADA investigation? Under the proposed Cloud and AI Development Act (CADA), when national competent authorities seize, take, or copy information during an investigation, the s What investigative powers do CADA authorities have? Under the proposed Cloud and AI Development Act (CADA, COM(2026) 502 final — a proposal, not yet in force), national competent authorities would have three What is a periodic penalty payment under CADA? Under the proposed Cloud and AI Development Act (CADA), a periodic penalty payment is a coercive enforcement tool designed to compel cloud computing servic What is 'main establishment' under CADA? The single-supervisor rule Under the proposed Cloud and AI Development Act (CADA), a cloud computing service provider's "main establishment" is strictly defined as the location of it What is the appeal timeline for a CADA decision? The proposed Cloud and AI Development Act (CADA) does not establish a uniform, EU-wide calendar for appealing enforcement decisions. What is the competent authority of destination under CADA? Under the proposed Cloud and AI Development Act (CADA), the "competent authority of destination" is the national supervisory body in the Member State where What is the competent authority of establishment under CADA? Under the proposed Cloud and AI Development Act (CADA, COM(2026) 502 final, a proposal not yet in force), the competent authority of establishment would be What is the difference between an investigative order and an enforcement order under CADA? Under the proposed Cloud and AI Development Act (CADA), national competent authorities wield two distinct but interconnected sets of powers to ensure cloud What is the relationship between CADA penalties and remedies? Under the proposed Cloud and AI Development Act (CADA), penalties and remedies serve distinct but complementary enforcement functions: remedies are correct What is the right to be heard under CADA? Under the proposed Cloud and AI Development Act (CADA), the right to be heard is a fundamental procedural safeguard for cloud computing service providers f What is the right to compensation under CADA (Article 24)? CADA is a proposal (COM(2026) 502 final) and is not yet in force. What is the role of judicial authorities in CADA enforcement? Under the proposed Cloud and AI Development Act (CADA), judicial authorities do not act as the primary enforcers; that role belongs to national competent a What obligations do CADA authorities have toward the Commission? Under the proposed Cloud and AI Development Act (CADA), national competent authorities designated by Member States have specific, time-bound reporting and What penalties apply under the Cloud and AI Development Act (CADA)? The Cloud and AI Development Act (CADA) is a proposal (COM(2026) 502 final), not yet in force. What powers do CADA national competent authorities have? Under the proposed Cloud and AI Development Act (CADA, COM(2026) 502 final — a proposal, not yet in force), national competent authorities would hold both What records feed CADA supervision of providers? Under the proposed Cloud and AI Development Act (CADA), national competent authorities supervise cloud providers through a continuous feedback loop driven What records should a provider keep for CADA enforcement? Under the proposed Cloud and AI Development Act (CADA), cloud computing service providers must maintain a rigorous, verifiable record-keeping regime to sec What remedies can CADA authorities impose on providers? Under the proposed Cloud and AI Development Act (CADA), national competent authorities would possess robust powers to enforce the Union cloud computing sov What should a startup cloud provider know about CADA penalties? Under the proposed Cloud and AI Development Act (CADA), startup cloud providers seeking recognition for Union assurance levels face enforcement measures ex What triggers a CADA investigation into a cloud provider? Under the proposed Cloud and AI Development Act (CADA), an investigation into a cloud computing service provider is not initiated randomly but is triggered When must Member States designate a CADA competent authority? Under the proposed Cloud and AI Development Act (CADA), Member States must designate one or more national competent authorities responsible for enforcing t Which CADA obligations can lead to penalties? Under the proposed Cloud and AI Development Act (CADA), financial penalties and compensation rights are strictly confined to infringements of the Union clo Which Member State enforces CADA against a cloud provider? Under the proposed Cloud and AI Development Act (CADA), enforcement against a cloud computing service provider is exclusively the responsibility of the Mem Who can claim compensation under CADA? Recipients, damages and the right to seek redress As proposed in COM(2026) 502 final, Article 24(3) of the Cloud and AI Development Act (CADA) establishes a specific right to compensation for "recipients o Who enforces CADA (the Cloud and AI Development Act)? CADA is a proposal (COM(2026) 502 final) and is not yet in force. Who is eligible for compensation under the proposed CADA? Under the proposed Cloud and AI Development Act (CADA), the right to claim compensation is explicitly granted to "recipients of the cloud computing service Who is liable for a CADA infringement within a provider group? Under the proposed Cloud and AI Development Act (CADA), liability for infringements of the cloud sovereignty framework rests exclusively with the specific Who pays compensation if a cloud provider breaches CADA? Under the proposed Cloud and AI Development Act (CADA), the cloud computing service provider that breaches the regulation is directly liable for any damage Who sets the penalty rules under CADA? Article 24 explained Under the proposed Cloud and AI Development Act (CADA), the European Union does not prescribe fixed fine amounts for infringements of the cloud computing s