Summary As proposed, the Cloud and AI Development Act (CADA) does not grant the European Commission the power to unilaterally amend or directly revise the Digital Decade Policy Programme 2030 targets for compute capacity. Instead, Article 15(1) mandates the Commission to monitor the Union's compute capacity, demand, and the resulting capacity gap. While Recital 44 explicitly states that the Commission should review the Digital Decade targets to reflect "technical, economic or societal developments," this review is an action taken in accordance with the Digital Decade Policy Programme itself, informed by the data gathered under CADA. Compliance officers should focus on the rigorous monitoring framework and the potential for Commission recommendations, rather than expecting CADA to automatically trigger legislative changes to the Digital Decade benchmarks.

Detail

The relationship between the proposed Cloud and AI Development Act (CADA) and the Digital Decade Policy Programme 2030 is one of evidence-based alignment rather than direct legislative amendment. To determine whether CADA reviews Digital Decade compute targets, one must distinguish between the monitoring of capacity gaps (a CADA obligation) and the revision of political targets (a Digital Decade process).

The Monitoring Mandate: Article 15

Under Article 15(1) of the CADA proposal, the Commission is explicitly tasked with identifying and monitoring three specific metrics to support the achievement of the objectives of Decision (EU) 2022/2481 (the Digital Decade Policy Programme):

  1. The compute capacity available in the Union, including edge computing capacity.
  2. The volume of demand for data centre capacity.
  3. The size of the capacity gap and underserved areas that could be identified by the Commission, in cooperation with the Member States.

This provision establishes a factual baseline. The Commission must actively track the disparity between supply and demand across the Union. However, Article 15 does not confer the authority to alter the Digital Decade targets themselves. The Digital Decade targets are established under a separate legal instrument (Decision (EU) 2022/2481), and any formal revision of those targets would require amendments to that Decision, not CADA. CADA serves as the data engine, not the legislative switch.

The Role of Recital 44: The Review Mechanism

Recital 44 provides the critical political and procedural context for this monitoring activity. It states that to foster the strategic deployment of data centre capacity, the Commission should monitor available compute capacity and demand to identify the size of the capacity gap. Crucially, the Recital notes: "To guide Member States in accelerating the deployment of data centre capacity, the Commission may recommend, where appropriate, measures to address the identified Union capacity gap."

The Recital then addresses the targets directly: "In accordance with the Digital Decade Policy Programme 2030, the Commission should also review the digital decade targets to reflect the technical, economic or societal developments and the evolution of the Union's priorities in that regard."

This language is precise. It indicates that the review of Digital Decade targets is an action the Commission should take in the broader context of the Digital Decade Programme, informed by the data gathered under CADA. It does not mean CADA itself contains the mechanism for that review. Instead, CADA provides the evidence base (via Article 15 monitoring) that will likely inform the Commission's future recommendations and potential proposals to update the Digital Decade framework. The review is a consequence of the monitoring, not a direct power granted by the CADA text to override the Digital Decade Decision.

Implications for Compliance and Reporting

For in-house counsel and compliance officers, the distinction is operational. CADA creates a structured obligation for the Commission to gather data. While Article 15 places the monitoring duty on the Commission, the broader CADA framework (particularly Title III on Data Centre Capacities) imposes obligations on Member States to designate acceleration zones and single information points.

The "review" mentioned in Recital 44 suggests a dynamic policy environment. As the Commission monitors the capacity gap under Article 15, it may identify that current Digital Decade targets are either too ambitious or insufficient given new technical or economic realities. If the Commission issues recommendations based on this review, Member States may be pressured to adjust their national roadmaps or investment strategies to align with updated EU-wide expectations. This creates a feedback loop where CADA data drives Digital Decade evolution, even if CADA does not legally rewrite the Decade itself.

What this means for you

For legal and compliance teams operating in the cloud and data centre sectors, the lack of a direct "review" power in CADA is less significant than the rigorous monitoring framework it establishes. Here is how this impacts your obligations and strategic planning:

  1. Anticipate Data Requests and Market Scrutiny: As the Commission begins monitoring compute capacity and demand under Article 15, expect increased scrutiny on market data. While Article 15 places the monitoring duty on the Commission, the Commission will likely rely on industry data, national reports from Member States, and market studies to fulfill its duties. Ensure your internal data on capacity utilization, demand forecasting, and infrastructure deployment is robust and auditable, as it may be requested indirectly through national authorities or market studies.
  2. Align with National Strategies: Member States must align their national cloud and AI strategies (Article 7) with the Digital Decade targets. If the Commission reviews and adjusts these targets based on CADA monitoring, Member States will likely update their national strategies to reflect the new reality. Compliance officers should monitor these national updates closely, as they may trigger new local requirements for data centre deployment, sustainability standards, or sovereignty criteria.
  3. Monitor Commission Recommendations: Recital 44 empowers the Commission to recommend measures to address the capacity gap. These recommendations, while not directly binding in the same way as a Regulation, can signal significant shifts in policy priority. For example, if the Commission identifies a severe gap in edge computing or specific underserved regions, it may prioritize funding or regulatory support for those areas, affecting investment decisions and compliance priorities for data centre operators.
  4. Prepare for Sovereignty Assessments: The monitoring of capacity gaps is linked to the broader sovereignty framework. If certain regions are identified as underserved, the Commission may encourage the deployment of sovereign cloud services in those areas to ensure resilience. Ensure your cloud offerings are prepared for the Union assurance level assessments (Article 16) that will accompany these deployments, particularly if the Commission recommends specific assurance levels for critical infrastructure in underserved zones.

Common misconceptions

Misconception 1: CADA allows the Commission to change Digital Decade targets directly. Correction: CADA does not amend Decision (EU) 2022/2481. Article 15 mandates monitoring, and Recital 44 suggests the Commission should review targets in the context of the Digital Decade Programme, but the legal authority to revise those targets lies with the legislative process governing the Digital Decade Decision, not CADA. CADA provides the data; the Digital Decade framework provides the targets.

Misconception 2: The "capacity gap" is a fixed number defined by CADA. Correction: Article 15(1)(c) requires the Commission to identify the size of the capacity gap. This is a dynamic metric that will be calculated based on available compute capacity and volume of demand. It is not a static threshold set in stone by the Regulation. The gap will evolve as the Commission gathers more data and as the market changes.

Misconception 3: Private cloud providers must directly report capacity data to the Commission under Article 15. Correction: Article 15 places the monitoring obligation on the Commission. While the Commission will likely use industry data, the direct reporting obligations for data centre operators are primarily focused on permitting and acceleration zone compliance (Title III) and sovereignty assurance (Title IV). There is no explicit clause in Article 15 mandating private sector entities to submit raw capacity metrics directly to the Commission, though indirect reporting via national authorities or market studies is probable and likely.

Official sources

Related

This is general information about a draft EU regulation, not legal advice.