Skip to content
Crypt Weekly

The security desk for defenders

Tech News

EU Cloud Act May Cost €115B: Amazon, Google-Funded Study Warns Billions in Sovereignty

Crypt Weekly ·
Illustration: A towering stack of identical silver server blades sits isolated on a concrete floor.
AI-generated illustration: Crypt Weekly

A study funded by Amazon and Google claims European cloud independence efforts will cost billions, far exceeding official estimates.

Key points

  • CCIA Europe commissioned a report warning that the Cloud and AI Development Act could cost €115 billion.
  • The European Commission previously estimated the upper cost at €18 billion over ten years.
  • The study assumes strict sovereignty rules apply to 25 percent of private-sector cloud workloads.

A lobbying group representing major US technology companies has issued a stark warning to European policymakers. They argue that plans to reduce reliance on American cloud services will impose massive financial burdens on the continent.

What happened

According to The Register, Amazon, Google, and Meta are members of the Computer and Communications Industry Association (CCIA) Europe, which commissioned a new study. The research was conducted by the European Centre for International Political Economy (ECIPE). It claims the European Commission’s proposed Cloud and AI Development Act (CADA) could cost Europe €115 billion over the next decade. This figure is more than six times the Commission’s own upper estimate of €18 billion.

The report breaks down the costs into €33.3 billion for the public sector and €80 billion for private industries. These private costs include banking, healthcare, energy, and transport sectors. However, TechRadar notes that the €80 billion figure relies on a specific assumption. It presumes the Commission extends sovereignty requirements to cover 25 percent of cloud workloads in essential private industries. This is a modeled scenario rather than a confirmed legislative outcome. The CCIA urges policymakers to assess risks based on actual threats rather than vendor nationality.

Why it matters

Cloud sovereignty refers to the control and location of data processing. When governments mandate that data stay within national borders, it often requires migrating systems from global providers to local ones. This process involves significant technical complexity. Organizations must rewrite software to comply with new restrictions. They also face higher operating costs because local providers may not have the same economies of scale.

Understanding these dynamics helps explain why US tech giants oppose such regulations. They stand to lose market share if European businesses are forced to switch providers. The debate centers on balancing national security concerns with economic efficiency. Teams usually evaluate whether the security benefits of localization outweigh the financial and operational costs of migration.

The fix

  • Review current cloud service contracts for data residency clauses.
  • Assess the technical effort required to migrate workloads to alternative providers.
  • Monitor legislative updates regarding the Cloud and AI Development Act.
  • Consult legal teams to understand compliance requirements for essential sectors.

Why it matters

When evaluating technology policy, it is important to consider who funds the research. Lobbying groups often highlight costs that benefit their members. Readers should look for independent analysis to balance these claims. Sovereignty measures aim to reduce foreign dependence but can increase expenses. Organizations should focus on risk management rather than just vendor origin. Check whether proposed regulations define clear security standards. Evaluate how data protection laws interact with cloud service agreements. Consider the long-term impact on innovation and competition in the market.

What to do and how to stay safe: Amazon

  • Identify which systems process sensitive or regulated data.
  • Determine if current cloud providers offer sovereign cloud options.
  • Estimate the cost of migrating workloads to different providers.
  • Stay informed about changes in EU technology regulations.

Step-by-step guide: What is password policies and how they protect systems

General security guidance from the Crypt Weekly newsroom. It is not confirmed advice from the organisations named in this story.

Frequently asked questions

How much will the Cloud and AI Development Act cost?

The CCIA-commissioned study estimates €115 billion over ten years, while the European Commission estimates up to €18 billion.

Who commissioned the report warning about these costs?

The Computer and Communications Industry Association (CCIA) Europe, whose members include Amazon, Google, and Meta, commissioned the study.

Does the €115 billion figure include private sector costs?

Yes, it includes €33.3 billion for the public sector and €80 billion for private sectors like banking and healthcare.

Sources

  1. The Register
  2. TechRadar
AmazonGoogleMetaCCIA EuropeCloud and AI Development Act

You might also like