Summary The proposed Cloud and AI Development Act (CADA) would create a targeted support framework for Small and Medium-sized Enterprises (SMEs) to adopt cloud and AI technologies. As proposed, CADA would mandate the establishment of Experience and Acceleration Centres for AI (Centres for AI) to provide SMEs with technical expertise, testing facilities, and market connections. The proposal would also require Member States to develop a dedicated curriculum on cloud and AI skills to address the talent gap. Crucially, CADA would aim to "reduce obstacles to test and deploy AI models," particularly for SMEs in strategic sectors. These measures are designed to help the EU meet the Digital Decade target of ensuring that at least 75% of Union enterprises adopt cloud, big data, and AI for their business operations.
Detail
The Cloud and AI Development Act (CADA), as set out in the Commission proposal COM(2026) 502 final, is designed to strengthen Europe's cloud and AI ecosystem by addressing structural barriers that disproportionately affect smaller players. For SMEs, the proposal shifts the regulatory landscape from one of potential fragmentation to one of coordinated support, aiming to remove the technical, financial, and skills-related hurdles that often prevent smaller enterprises from competing with large incumbents.
Reducing Barriers to Testing and Deployment
A core pillar of CADA is the explicit removal of obstacles to testing and deploying AI. Recital 19 of the proposal states that the Cloud and AI Leadership Initiatives should "reduce obstacles to test and deploy AI models, in particular within cities and regions." This is particularly critical for SMEs, which often lack the capital for large-scale, risky deployments or the legal resources to navigate complex regulatory environments.
The proposal specifically highlights the need to facilitate the development, testing, and deployment of AI systems in diverse real-world environments. For instance, in the automotive sector, the text notes that "Member States should facilitate the development, testing and deployment of AI systems for autonomous driving, including through cooperation with the Centres for AI, the automotive industry, suppliers, cities and regions." By creating safer, more predictable environments for innovation, CADA would allow SMEs to validate their solutions without bearing the full burden of regulatory uncertainty.
Furthermore, the proposal emphasizes the "AI first" principle. Recital 32 explains that national cloud and AI strategies should include this principle, "urging organisations to reflect on their business processes, considering the needs of an opportunities offered by AI." This cultural shift is supported by structural changes in how public procurement and national strategies are handled, ensuring that SMEs are not sidelined in the digital transformation of the economy.
The Role of Experience and Acceleration Centres for AI
One of the most tangible benefits for SMEs under CADA would be the establishment of Experience and Acceleration Centres for AI (referred to as "Centres for AI"). Article 5 of the proposal mandates that "Each Member State shall establish Experience and Acceleration Centres for AI." These centres would build on the existing network of European Digital Innovation Hubs, refocusing them to support the specific objectives of the Cloud and AI Leadership Initiatives.
For an SME, these Centres for AI would serve as a localized, accessible entry point for technical expertise, testing facilities, and market connections. Article 5(3) explicitly tasks these centres with:
- Helping organisations accelerate their digital transformation through access to and use of AI technologies, including by connecting organisations with European providers of cloud and AI technologies.
- Ensuring or providing access to relevant upskilling and reskilling schemes, in close collaboration with the AI Skills Academy.
- Facilitating the transfer of expertise across regions.
- Supporting the scaling-up of spin-offs and start-ups emerging from universities, incubators and other accelerators by facilitating access to clients, companies and organisations seeking specialised AI services.
This infrastructure would significantly reduce the need for SMEs to hire expensive specialized staff immediately or invest in proprietary testing environments, lowering the barrier to entry for adopting advanced cloud and AI solutions.
Skills and Curriculum Development
Adoption is often hindered not just by technology, but by a critical skills gap. Recital 23 of CADA highlights the urgent need to develop a "dedicated curriculum on cloud computing and AI skills" to equip workers in both the public and private sectors with advanced competencies. The proposal states that this curriculum is intended "to reduce dependence on non-EU providers and develop next-generation capabilities."
The proposal specifies that this curriculum should be built on relevant European initiatives, including the AI Skills Academy and the network of Centres for AI. By standardizing and promoting these skills across the Union, CADA would aim to ensure that SMEs have access to a workforce capable of implementing and managing cloud and AI solutions effectively. This aligns with the broader objective of fostering a "digital transformation of businesses" and ensuring that the EU has the human capital necessary to sustain its technological sovereignty.
Alignment with Digital Decade Targets
CADA is closely aligned with the broader EU digital ambitions, specifically the Digital Decade Policy Programme 2030. Recital 32 notes that national cloud and AI strategies must be consistent with the digital targets set under this programme. Specifically, it cites the target for the "adoption of cloud computing services, big data and AI by at least 75% of Union enterprises for their business operations."
By tying CADA's implementation to this 75% target, the proposal places a clear expectation on Member States to support SMEs in reaching this milestone. Article 7 requires Member States to adopt national cloud and AI strategies within one year of the regulation's entry into force. These strategies must include measures to "accelerate the development and adoption of cloud and AI at national, regional and local level, particularly among public sector bodies, SMEs and SMCs." This ensures that the support mechanisms are not just theoretical but are embedded in national planning and execution.
Procurement and Market Access
While CADA introduces sovereignty requirements for public sector procurement to safeguard public order, it simultaneously includes robust measures to foster innovation and SME participation. Article 33 requires Member States to monitor the procurement of innovation in cloud and AI, with a specific objective to ensure that "at least 25% of their procurement for cloud computing services and AI systems be awarded to innovative SMEs."
This creates a protected channel for SMEs to demonstrate their solutions in public sector environments, providing a crucial market validation and revenue stream. The proposal encourages "matchmaking between public buyers and innovative solutions provided by European SMEs and start-ups," helping to overcome the "valley of death" many innovative SMEs face between development and scale. Furthermore, Article 32 allows contracting authorities to include non-price award criteria that evaluate a tenderer's contribution to the European cloud and AI ecosystem, potentially favoring SMEs that integrate Union technologies or strengthen the digital supply chain.
What this means for you
For SMEs, public-sector procurement officers, and policy makers, CADA presents both obligations and opportunities to support local innovation.
- Leverage Centres for AI: SMEs should actively engage with their national or regional Centre for AI. These hubs are designed to provide access to testing facilities, technical expertise, and connections to European cloud providers. For public bodies, partnering with these centres can help identify local SMEs capable of delivering innovative cloud and AI solutions.
- Align with the 75% Target: Member States and public authorities must ensure their procurement plans contribute to the national goal of 75% enterprise adoption of cloud, big data, and AI. Prioritizing contracts that involve SMEs, especially those leveraging open-source solutions as encouraged by Article 41, is a direct way to meet this target.
- Support Skills Development: Collaboration with the Centres for AI and the AI Skills Academy is essential. SMEs should utilize the proposed curriculum to upskill their workforce, while public bodies should support these initiatives to ensure a skilled ecosystem capable of evaluating and integrating SME-provided AI solutions.
- Innovation Procurement: Public authorities should use the innovation procurement provisions in Article 33 to create dedicated lots for SMEs. This not only supports the local economy but also drives the technological sovereignty goals of CADA by fostering homegrown providers.
Common misconceptions
- "CADA only helps large tech companies." While CADA addresses the dominance of hyperscalers, it includes specific provisions to support SMEs, such as the 25% innovation procurement target and the establishment of Centres for AI. The goal is to create a diverse ecosystem, not just a few large players.
- "SMEs will be excluded by sovereignty requirements." The sovereignty framework (Union Assurance Levels) is designed to protect public order, not to exclude EU providers. In fact, by creating a level playing field with clear EU-based standards, CADA would help EU-based SMEs compete against non-EU providers who might otherwise dominate due to lower costs or existing market share.
- "Skills training is optional." While the proposal encourages the development of curricula, the integration of skills development into national strategies (Article 7) and the role of Centres for AI (Article 5) make it a central part of the implementation framework. Ignoring the skills gap will hinder the achievement of the Digital Decade targets.
Official sources
Related
- What does CADA mean for automotive suppliers and Tier 1 vendors?
- Why does CADA emphasise secure and verifiable compute for sensitive sectors?
- Which CADA obligations bite hardest for fintech companies?
- Which CADA assurance level should defence workloads use?
- Which CADA assurance level applies to patient and medical records?
This is general information about a draft EU regulation, not legal advice.