EU Proposes Tech Sovereignty Package with Major Implications for Digital Markets
The European Commission's new legislative package introduces significant measures across semiconductors, cloud, AI, open source, and data centers that will reshape the regulatory landscape for technology companies operating in Europe.
On June 3, 2026, the European Commission proposed the European Technological Sovereignty Package, marking a significant shift in the European Union's approach to reducing its dependence on non-EU technology providers.
The package comprises four interconnected initiatives. First, the proposed Chips Act 2.0 would strengthen Europe's semiconductor ecosystem by supporting advanced chip design and manufacturing, accelerating permitting to a maximum of 12 months, introducing "Grand Challenges" for AI chips, and targeting €120 billion (around $138 billion) in investment by 2035. It would also introduce "Demand Accelerators" to connect EU chip producers with industrial buyers.
Second, the proposed Cloud and AI Development Act, or CADA, would introduce a single EU-wide sovereignty framework with four assurance levels for cloud services, requires Member States to conduct sovereignty risk assessments, and aims to triple EU data center capacity within five to seven years. Under the proposal, public authorities would face obligations regarding sensitive data, which would need to be hosted on services controlled by EU entities. Union added-value award criteria in public procurement are designed to channel public sector demand toward providers that can demonstrate EU-based design, manufacturing, or operational control.
Third, the EU Open Source Strategy positions open source software as a structural lever of digital sovereignty. The strategy commits €2 billion (around $2.3 billion) over seven years, introduces a "Free Software first" principle for public cloud and AI procurement, and targets 30 million active users of open source collaboration tools by 2030. This initiative could significantly affect public procurement requirements and the competitive positioning of proprietary software providers.
Fourth, the Strategic Roadmap for Digitalisation and AI in Energy addresses the growing energy demands of digital infrastructure. It envisages tripartite agreements between data center operators, energy stakeholders, and public authorities, and proposes a pan-European AI model for power grid management. Data center operators in the European Union should monitor this initiative closely given the compliance obligations it may create.
The package now proceeds to the European Parliament and Council under the ordinary legislative procedure. Significant amendments are possible during negotiations, and a timeline of 18 to 24 months to final adoption would not be unusual for proposals of this scope.
Companies across the semiconductor, software, cloud, and data center sectors should assess how these proposals may affect their European operations, procurement relationships, and market access strategies.
