Summary Article 114 of the Treaty on the Functioning of the European Union (TFEU) empowers the EU to adopt harmonisation measures improving the functioning of the internal market. As proposed, the Cloud and AI Development Act (CADA) relies on Article 114 TFEU — together with Article 173(3) TFEU on industrial competitiveness — to create a uniform legal framework for cloud computing services and data-centre deployment, addressing fragmentation in national permitting and sovereignty criteria. This harmonisation would level the playing field for providers and standardise sovereignty assurance across Member States.

Detail

The proposed CADA (COM(2026) 502 final) establishes a framework for strengthening Europe's cloud and AI ecosystem. A critical part of its architecture is a dual legal basis, with Article 114 TFEU founding its internal-market harmonisation objectives.

The role of Article 114 TFEU in CADA

Article 114 TFEU empowers the EU to adopt measures for the approximation of national provisions that have as their object the establishment and functioning of the internal market. In CADA, this basis is used to address regulatory disparities that hinder cloud services operating across the Union.

As the explanatory memorandum states, current fragmentation in data-centre deployment is "driven by divergent national approaches to capacity expansion, sustainability requirements, and permitting procedures," which risks creating regulatory disparities that could undermine the internal market. Likewise, variations in public-procurement practices and inconsistent sovereignty criteria "may hinder providers' ability to operate seamlessly across Member States." The memorandum concludes that EU intervention is justified under Article 114 TFEU "as it seeks to eliminate barriers to the internal market and levels the playing field for cloud computing service providers."

Article 1: subject matter and dual objectives

Article 1 distinguishes between the two legal bases:

  • Article 1(1) establishes the framework for strengthening the cloud and AI ecosystem through measures including the Cloud and AI Leadership Initiatives, accelerated data-centre deployment, a sovereign cloud and AI offer, reduced dependencies and fostering public-sector cloud adoption.
  • Article 1(2) sets the first general objective: ensuring the conditions necessary for the competitiveness and innovation capacity of the Union's cloud and AI ecosystem — primarily linked to Article 173(3) TFEU.
  • Article 1(3) sets the second general objective, "separate from and complementary to" the first: improving the functioning of the single market by laying down a uniform Union legal framework for increasing the Union's resilience and strategic autonomy in cloud and AI technologies — grounded in Article 114 TFEU.

The memorandum explains that, given the dual objective, the proposal would be adopted as a single instrument "under the cumulative legal basis of Articles 114 and 173(3) TFEU," providing a unified response to market fragmentation and strategic industrial capacity-building.

Addressing fragmentation and sovereignty

A core rationale for Article 114 TFEU is to address fragmentation in data-centre permitting and sovereignty criteria. Member States are developing national approaches to sovereign services, but, as the proposal explains, such national measures do not adequately address cross-border issues and risk fragmenting the internal market.

CADA would introduce a Union cloud computing sovereignty framework of four assurance levels (Article 16), providing harmonised, auditable criteria. Standardising these criteria would let contracting authorities across the Union make informed decisions and use their buying power to lower dependencies, making the supply of cloud services more resilient — particularly in the public sector — and protecting public order.

The proposal also accelerates data-centre deployment: Article 10 would require Member States to designate data centre acceleration zones, and Article 13 would facilitate administrative and permit-granting processes (with the permit procedure not to exceed 12 months from a comprehensive application). The memorandum states the proposal aims to triple EU capacity in the next five-to-seven years. Without EU-level harmonisation under Article 114, the memorandum suggests, divergent national permitting and sustainability rules would hamper these efforts.

Levelling the playing field

By establishing a uniform framework, CADA aims to let providers operate across Member States without navigating divergent national rules on sovereignty and sustainability — important for European providers that, as the memorandum notes, struggle to scale across the EU under different national trustworthiness standards. The memorandum also frames the goal as enabling cloud computing service providers "to grow beyond their national markets" and compete on a level playing field.

What this means for you

For in-house counsel and compliance officers, reliance on Article 114 TFEU signals that, once adopted, CADA would create binding, directly applicable rules across all Member States. Practical implications:

  • Harmonised compliance: You would comply with a single set of EU-wide standards for cloud sovereignty and data-centre deployment rather than a patchwork — simpler, but requiring a thorough grasp of the Union assurance levels and the audit/recognition processes.
  • Public procurement: Contracting authorities and B2G suppliers would need to meet the harmonised sovereignty criteria, with public bodies conducting risk assessments and procuring at the appropriate Union assurance level.
  • Data-centre deployment: Operators would benefit from streamlined permitting in acceleration zones but must meet harmonised sustainability and other conditions.
  • Level playing field: European providers may find cross-border scaling easier, while third-country providers may face new hurdles if they cannot meet the assurance levels. Assess your supply chain and offerings against the proposed framework.

Common misconceptions

  • CADA is only about industrial policy: While there is an industrial-policy dimension (Article 173(3) TFEU), a significant part rests on internal-market harmonisation under Article 114 TFEU — removing barriers to the free movement of cloud services, not just boosting competitiveness.
  • National sovereignty rules will continue to apply unchanged: As proposed, CADA would replace fragmented national sovereignty criteria with a harmonised Union framework. Member States would still conduct risk assessments, but the Union assurance-level criteria would be standardised.
  • CADA does not affect private-sector providers: While the framework centres on public-sector procurement, it would have spillover effects: private entities in regulated sectors may mirror requirements (and Article 31 allows them to run impact assessments), and providers seeking public-sector work must meet the assurance levels.

Related

This is general information about a draft EU regulation, not legal advice.