Summary Under the proposed Cloud and AI Development Act (CADA), every EU Member State is legally required to create a national cloud and AI strategy. As proposed in Article 7(1), Member States must establish these strategies within one year of the regulation's entry into force. The purpose is to align national efforts with EU-wide goals for digital sovereignty, technological innovation, and the secure adoption of cloud and AI technologies across public and private sectors. These strategies are not optional; they must include specific measures for data centre deployment, high-intensity computing, and the "AI first" principle, while remaining consistent with the Digital Decade targets.

Detail

The Cloud and AI Development Act (CADA), as proposed in COM(2026) 502 final, introduces a coordinated framework to strengthen Europe's cloud and AI ecosystem. A central pillar of this framework is the requirement for Member States to adopt national strategies that translate EU-level ambitions into actionable national plans. This section breaks down the legal obligations, the mandatory content, and the governance structure surrounding these strategies.

The Legal Requirement: Article 7(1)

The primary obligation is set out in Article 7 of the CADA proposal. Specifically, Article 7(1) establishes a strict, binding timeline:

"By [same day as entry into force plus one year], Member States shall establish national cloud and AI strategies (the 'national strategies')."

This creates a non-negotiable deadline for all Member States. Once the regulation enters into force (which, as proposed in Article 48, would be on the twentieth day following its publication in the Official Journal), governments have exactly one year to draft, adopt, and formalize their national cloud and AI strategies. This ensures that the EU's broader digital transition is not left to fragmented, voluntary national initiatives but is instead driven by a synchronized, legally binding timeline.

Mandatory Content: What Must Be Included?

The national cloud and AI strategy is not merely a high-level policy document; it is an operational roadmap. Article 7(2) explicitly lists the minimum elements that every strategy must contain. These requirements are designed to ensure that national plans address the specific bottlenecks identified in the CADA proposal, such as capacity gaps, sovereignty risks, and skills shortages.

According to Article 7(2), the strategies must include at least the following:

  1. Key Objectives and the "AI First" Principle: Strategies must define key objectives and priorities for cloud and AI adoption, explicitly aligning with the "AI first" principle. This principle, as referenced in the CADA explanatory memorandum and Article 7(2)(a), urges organisations to reflect on their business processes and consider the needs and opportunities offered by AI, rather than treating it as an afterthought.
  2. Acceleration Measures: The strategies must outline measures to accelerate the development and adoption of cloud and AI at national, regional, and local levels. Crucially, Article 7(2)(b) mandates specific support for public sector bodies, small and medium-sized enterprises (SMEs), and small mid-cap enterprises (SMCs), including by supporting the "Centres for AI" as entry points to the European AI innovation ecosystem.
  3. Strategic Sector Deployment: Strategies must include measures to support the broad deployment and uptake of AI in strategic industrial and public sectors. Article 7(2)(c) specifically cites healthcare, energy, and mobility as priority areas.
  4. Data Centre Capacity: A critical component is supporting the deployment of data centre capacity. Article 7(2)(d) requires measures focused on high-value data centres that deliver significant economic and societal benefits while adhering to high environmental and energy-efficiency standards.
  5. High-Intensity Computing Infrastructure: Strategies must include measures to invest in high-intensity computing infrastructure. Article 7(2)(e) explicitly lists AI factories, AI gigafactories, and quantum computers as strategic national and cross-border assets supporting research, development, and industrial AI deployment.
  6. Technological Sovereignty: To reduce dependencies, strategies must support the development of cloud computing stack technologies built upon open hardware and software. Article 7(2)(g) highlights this as a means to strengthen technological sovereignty and enhance the competitiveness of strategic European industries.
  7. Data Accessibility: Strategies must include measures to ensure the accessibility of high-quality data for AI development. Article 7(2)(h) notes the necessity of preventing data bottlenecks encountered by organisations.
  8. Public Procurement Measures: Strategies must include measures to support the development of cloud and AI capabilities through public procurement, including the public procurement of innovation measures set out in Article 33 of the proposal.

Consistency, Monitoring, and Updates

The CADA proposal ensures that these national strategies do not operate in a vacuum. Article 7(3) requires that national strategies be consistent with the objectives of the CADA regulation itself. Furthermore, Article 7(4) mandates that these strategies contribute to the associated digital targets established under the Digital Decade Policy Programme (Decision (EU) 2022/2481). This links the national cloud and AI strategy directly to broader EU digital benchmarks, such as the target for 75% of Union enterprises to adopt cloud computing and AI.

To ensure accountability and adaptability, Article 7(5) imposes a rigorous monitoring regime:

  • Notification: Member States must notify the Commission of their national strategies within three months of their adoption.
  • Periodic Assessment: Member States must assess their national strategies at least every three years on the basis of key performance indicators.
  • Updates: Strategies must be updated where necessary to reflect technological changes or progress.
  • Commission Monitoring: The Commission shall monitor the adoption and revision of the national strategies.

Coordination and Support: The Role of the AI Board

The regulation recognizes that developing and implementing these strategies requires coordination and expertise. Article 7(6) assigns a specific advisory role to the European Artificial Intelligence Board (the "AI Board"), which was established by the AI Act (Regulation (EU) 2024/1689).

The AI Board is tasked with advising and assisting Member States regarding the coordination of national strategies. As stated in Article 7(6), the Board shall "facilitate exchange of best practices among Member States." This ensures that strategies are effective, consistent, and learn from each other's successes and challenges, preventing a "race to the bottom" or regulatory fragmentation.

What this means for you

For public-sector bodies, industry stakeholders, and investors, the national cloud and AI strategy is a critical reference document that will shape the market for the next decade.

For Public Sector Bodies and Procurement Officers

The national strategy will likely dictate the strategic direction of public procurement. As Article 7(2)(f) requires strategies to include public procurement measures, your procurement processes will need to align with national goals for technological sovereignty and open-source adoption. This may mean prioritizing providers that meet specific Union assurance levels (as defined in Article 16 and Annex II) or those that contribute to the European digital supply chain. The strategy will also outline national priorities for investing in high-intensity computing and data centre capacity, meaning procurement officers should anticipate increased demand for these resources.

For SMEs and Start-ups

The explicit inclusion of SMEs and SMCs in Article 7(2)(b) signals that national strategies will likely include measures to improve access to procurement markets for smaller players. This could translate into simplified procedures, division of contracts into lots, or specific matchmaking initiatives. SMEs should monitor their national strategy to identify entry points for support, such as the "Centres for AI" mentioned in the proposal.

For Data Centre Operators and Investors

The requirement to support data centre capacity (Article 7(2)(d)) and high-intensity computing (Article 7(2)(e)) means that national strategies will likely identify specific acceleration zones or investment priorities. Operators should align their investment plans with these national roadmaps to ensure they qualify for potential support measures or streamlined permitting processes.

For the Wider Ecosystem

The focus on "AI first" and data accessibility suggests a shift in how public and private organisations approach digital transformation. Strategies will likely encourage the reuse of data and the adoption of open standards, creating a more interoperable and sovereign ecosystem.

Common misconceptions

"The strategy is optional or voluntary." No. Under Article 7(1), establishing a national cloud and AI strategy is a mandatory legal obligation for all Member States. The deadline is strict: one year from the regulation's entry into force. Failure to adopt a strategy would constitute a breach of the Regulation.

"The strategy is a one-time document." Incorrect. Article 7(5) requires Member States to assess their strategies at least every three years based on key performance indicators and update them where necessary. This ensures the strategy remains relevant amidst rapid technological changes and evolving market conditions.

"The strategy only applies to the private sector." False. The strategy explicitly includes measures to accelerate adoption in the public sector, support public sector bodies, and ensure the deployment of AI in critical public domains like healthcare and education (Article 7(2)(b) and (c)). Public bodies are both the target of these measures and the primary actors in implementing them.

"National strategies can ignore EU-level targets." No. Article 7(4) requires national strategies to be consistent with and contribute to the digital targets set under the Digital Decade Policy Programme. National plans must align with broader EU ambitions, such as the adoption rates for cloud and AI by enterprises.

"The strategy is just about AI models." While AI is central, the strategy is equally about the underlying infrastructure. Article 7(2) explicitly mandates measures for data centre capacity, high-intensity computing infrastructure (AI factories, quantum computers), and cloud computing stack technologies. It addresses the full stack, from hardware to software to adoption.

Official sources

Related

This is general information about a draft EU regulation, not legal advice.