finance
EU to Propose Rules Requiring Sovereign Cloud Infrastructure for Sensitive Public-Sector Data
The European Commission is set to unveil its Tech Sovereignty Package on May 27, including measures that would restrict member governments' use of non-EU cloud platforms for sensitive public-sector information. Discussions focus on financial, judicial and health data without affecting private companies.
May 7, 5:13 AM·2m read2 sources
FI
Substrate placeholder — needs reviewAudio version
Tap play to generate a narrated version.
Developing·Limited corroboration so far. This page will refresh as more sources emerge.
U.S. cloud providers to handle sensitive data. The European Commission is expected to present its Tech Sovereignty Package on May 27.
Post by @financialjuice on X
The package will include a range of measures aimed at bolstering the bloc's strategic autonomy in key digital areas. Discussions are taking place within the Commission around limiting the exposure of sensitive public-sector data to cloud platforms provided by companies outside of the EU.
"The core idea is defining sectors that have to be hosted on European cloud capacity," one of the officials said.
Could be impacted. The proposals would not prohibit overseas companies' cloud platforms from government contracts entirely. Instead they would limit use of overseas cloud platforms in processing sensitive data at public sector organizations, depending on the level of sensitivity.
Talks are ongoing and yet to be finalized. U.S. cloud providers could face restrictions in certain sensitive and strategic sectors within EU member states' public bodies. There are discussions around proposing that financial, judicial and health data processed by governments and public-sector organizations require high levels of sovereign cloud infrastructure.
The discussions do not relate to private-sector companies. The Tech Sovereignty Package would not propose rules about private-sector companies' use of cloud platforms. Once presented by the Commission, the package would need to be greenlit by all 27 member states.
