EU Proposes Four-Tier Cloud Sovereignty Rules Impacting Google’s EU Government Contracts
GOOG•European Commission’s Cloud and AI Development Act introduces four sovereignty tiers for cloud providers and could bar Google Cloud from sensitive E.U. government contracts in banking, energy and healthcare. Google’s joint S3NS venture with Thales and new sovereign cloud offerings aim to meet EU data handling and local infrastructure requirements.
1. EU Introduces Cloud and AI Development Act
The European Commission unveiled the Cloud and AI Development Act to reduce reliance on U.S. providers by categorizing cloud firms into four sovereignty tiers based on data handling, supply chains and facility locations. Public authorities must use E.U. entities for sensitive data and assess provider sovereignty risks.
2. Impact on Google Cloud
Google Cloud, alongside AWS and Microsoft Azure, could be excluded from critical contracts in sectors like banking, energy and healthcare if it fails to reach top-tier sovereignty due to the U.S. Cloud Act’s data access provisions. New procurement rules also favor E.U.-developed software and hardware.
3. Google’s Sovereign Cloud Response
Google formed the S3NS joint venture with Thales and has launched sovereign cloud offerings in Europe to comply with local data handling and infrastructure mandates. These initiatives aim to secure top-tier status and maintain access to sensitive government workloads.
