Summary Under the proposed Cloud and AI Development Act (CADA), Member States are required to adopt national cloud and AI strategies that will fundamentally reshape the market for cloud service providers and data centre operators. These are not merely policy statements; they are legally mandated frameworks that must include concrete measures to accelerate data centre deployment, support open-source cloud stacks, and leverage public procurement to drive innovation. For providers, aligning with these strategiesβ€”specifically through the criteria in Article 7(2)(d), (f), and (g)β€”is essential to accessing public sector contracts, securing investment in infrastructure, and engaging with the Centres for AI network.

Detail

The Cloud and AI Development Act (CADA), as proposed in COM(2026) 502 final, establishes a dual-track approach to strengthening Europe's digital ecosystem: top-down EU initiatives and bottom-up national implementation. A cornerstone of this framework is the obligation for Member States to adopt national cloud and AI strategies (referred to in the text as 'national strategies'). As stipulated in Article 7, these strategies must be established within one year of the Regulation's entry into force and serve as the primary vehicle for translating EU-wide objectives into national action.

For cloud service providers and data centre operators, the content of these national strategies dictates the regulatory environment, investment opportunities, and procurement pathways. Article 7(2) outlines the minimum content these strategies must include. Several of these provisions have direct commercial implications, creating specific demand signals and eligibility criteria for providers.

Key Strategic Pillars for Providers

1. Accelerating Data Centre Capacity and Deployment National strategies must include measures to support the deployment of data centre capacity, with a specific focus on high-value data centres that deliver significant economic and societal benefits while adhering to high environmental and energy-efficiency standards (Article 7(2)(d)). This signals a clear preference for providers who can demonstrate sustainability and high operational efficiency.

Furthermore, strategies must include measures to invest in high-intensity computing infrastructure, such as AI factories, AI gigafactories, and quantum computers, which are designated as strategic national and cross-border assets (Article 7(2)(e)). For data centre operators, this creates a roadmap for where public investment and regulatory facilitation (such as accelerated permitting in 'data centre acceleration zones' under Article 10) will be concentrated. Providers that align their expansion plans with these designated zones and infrastructure priorities will be better positioned to benefit from streamlined permitting and potential public support.

2. Promoting Open Cloud Stacks and Technological Sovereignty A critical component of the national strategies is the support for cloud computing stack technologies built upon open hardware and software. Article 7(2)(g) explicitly requires measures to support these technologies to "strengthen technological sovereignty and enhance the competitiveness of strategic European industries."

This provision encourages providers to develop and offer services based on open-source components, reducing dependency on proprietary, non-EU technologies. Providers that integrate open standards and open-source middleware into their offerings will be better positioned to meet the strategic goals of Member States. This alignment is not just about compliance; it is a strategic advantage for qualifying for support under the Cloud and AI Leadership Initiatives and for meeting the "European added value" criteria in public procurement.

3. Leveraging Public Procurement for Innovation National strategies must include measures to support the development of cloud and AI capabilities through public procurement, including specific public procurement of innovation measures set out in Article 33 (Article 7(2)(f)). This is a direct signal to providers that public authorities will use their purchasing power to drive market demand for innovative, secure, and sovereign cloud solutions.

By aligning their service offerings with the innovation priorities outlined in their national strategy, providers can position themselves to win these high-value contracts. The strategies also mandate measures to accelerate cloud and AI adoption at national, regional, and local levels, particularly among public sector bodies, SMEs, and small mid-caps (Article 7(2)(b)), broadening the potential customer base for cloud providers. This creates a direct pipeline from national strategy to procurement notices, where providers demonstrating alignment with Article 32 (Union added value) and Article 33 (innovation procurement) will have a competitive edge.

Consistency, Monitoring, and the Role of Centres for AI

Member States must ensure their national strategies are consistent with the objectives of CADA and contribute to the digital targets established under the Digital Decade Policy Programme (Article 7(4)). The Commission will monitor the adoption and revision of these strategies, and Member States must notify the Commission of their strategies within three months of adoption (Article 7(5)). This creates a transparent environment where providers can track national priorities and align their business development efforts accordingly.

Crucially, Article 7(2)(b) requires national strategies to include measures to support the broad deployment of AI and cloud adoption, "including by supporting the Centres for AI referred to in Article 5 as entry points to the European AI innovation ecosystem." These Centres for AI, built on the network of European Digital Innovation Hubs, are tasked with helping organizations accelerate their digital transformation and connecting them with European providers of cloud and AI technologies (Article 5(3)(a)).

For providers, this means the Centres for AI are not just training hubs but active market connectors. They are mandated to help organizations "connect with European providers of cloud and AI technologies" and facilitate the transfer of expertise across regions. Engaging with these Centres allows providers to showcase their solutions, gain feedback, and connect with potential public sector and SME clients who are actively seeking to implement the national strategy.

What this means for you

For cloud service providers and data centre operators, the national cloud and AI strategy is a strategic roadmap. Understanding and engaging with these strategies is no longer optional for those seeking to operate in the EU public sector or benefit from EU funding.

1. Align Your Infrastructure with National Priorities Review the national strategies of the Member States where you operate or plan to expand. Pay close attention to their measures on data centre capacity (Article 7(2)(d)) and high-intensity computing infrastructure (Article 7(2)(e)). If a Member State is prioritizing AI gigafactories or sustainable data centres, ensure your facility plans and service offerings highlight these attributes. This alignment can facilitate access to 'data centre acceleration zones' and other supportive measures, potentially unlocking faster permitting and access to public funding.

2. Embrace Open Source and Sovereign Stacks Given the emphasis on open hardware and software in Article 7(2)(g), providers should evaluate their technology stack. Investing in open-source middleware, ensuring transparency in your supply chain, and demonstrating how your services reduce dependency on non-EU providers will make you a more attractive partner for public sector bodies. This alignment is increasingly becoming a prerequisite for being considered a "sovereign" or "trusted" provider under the broader CADA framework.

3. Engage with Centres for AI National strategies must support the broad deployment of AI by supporting the Centres for AI referred to in Article 5 as entry points to the European AI innovation ecosystem (Article 7(2)(b)). These Centres for AI are tasked with helping organizations accelerate their digital transformation and connecting them with European providers of cloud and AI technologies (Article 5(3)(a)). Providers should actively engage with these Centres to showcase their solutions, gain feedback, and connect with potential public sector and SME clients. This engagement is a direct channel to the market demand generated by the national strategy.

4. Prepare for Innovation Procurement Since national strategies must include measures for public procurement of innovation (Article 7(2)(f)), providers should monitor public procurement notices closely. Look for tenders that emphasize European added value, innovation, and sovereignty. Tailor your bids to demonstrate how your solutions contribute to the national strategy's goals, such as strengthening the digital supply chain or integrating EU-developed technologies. Remember that under Article 33, Member States are encouraged to award at least 25% of relevant innovation procedures to SMEs, creating specific opportunities for smaller providers.

Common misconceptions

Misconception 1: National strategies are just high-level policy documents with no immediate impact. Reality: National strategies are legally mandated under Article 7 and must include concrete measures on data centre deployment, open cloud stacks, and public procurement. They directly influence where infrastructure investments are facilitated and which providers are favored in public procurement processes. Ignoring them means missing out on significant market opportunities and potentially facing barriers to entry in key markets.

Misconception 2: Only large hyperscalers need to worry about national strategies. Reality: While large providers are certainly affected, national strategies explicitly aim to support SMEs and small mid-caps (Article 7(2)(b)) and promote the participation of innovative SMEs in procurement (Article 33(4)). Smaller providers can leverage these strategies by engaging with Centres for AI and targeting innovation-focused procurement lots that are designed to be SME-friendly. The strategies are designed to foster a diverse ecosystem, not just consolidate incumbents.

Misconception 3: National strategies replace the need for EU-wide compliance. Reality: National strategies must be consistent with the objectives of CADA and the Digital Decade targets (Article 7(3)-(4)). They do not override EU-wide rules on sovereignty assurance levels, data protection, or cybersecurity. Providers must comply with both the overarching EU framework (including the Union assurance levels in Article 16) and the specific national measures outlined in the strategies. The strategies are the implementation layer, not a replacement for the regulatory baseline.

Official sources

Related

This is general information about a draft EU regulation, not legal advice.