The European Union is moving to tighten its control over sensitive digital infrastructure, a development that could create new challenges for US tech giants. A forthcoming EU law, part of a broader 'tech sovereignty' push, aims to make it harder for companies like Amazon, Google, and Microsoft to win public contracts for 'very critical' cloud services.
So, why is this happening now? There are three main reasons driving this policy shift. First, it's about geopolitics and legal control. The EU is concerned about US laws like the CLOUD Act, which could potentially allow the US government to demand access to data held by US companies, even if that data is stored on servers in Europe. By favoring EU-controlled providers for its most sensitive data, the EU seeks to keep it beyond the reach of foreign laws.
Second, the market structure is a key factor. US hyperscalers currently dominate Europe's cloud market, holding about a 70% share, while local EU providers have only around 15%. This imbalance has created political momentum to reserve the most critical contracts for European companies, helping to nurture the domestic tech industry and ensure a diversity of suppliers.
Third, there's a growing emphasis on security and resilience. Following a series of cyber incidents and under new regulations like the NIS2 Cybersecurity Act, the EU is raising its security standards. The belief is that locally-controlled entities, bound solely by EU law, are better positioned to meet these stringent requirements for critical infrastructure.
This isn't a sudden move. It's the result of a long-building trend, including past EU investigations into cloud market competition and national security certification schemes in countries like France. In response, US companies have already started preparing. For instance, AWS launched its 'European Sovereign Cloud,' which is operated by EU residents, as a way to comply with potential new rules. The new law seems poised to make such arrangements a requirement, not just an option, for the most sensitive contracts. While the direct financial hit from losing these contracts might be a low single-digit percentage of the tech giants' massive revenues, the real impact could be on their operating models. They may be forced to create more expensive, legally separate joint ventures or subsidiaries in the EU, which could squeeze profit margins and add complexity to their European operations.
- Hyperscaler: A term for very large-scale cloud computing providers that dominate the market, such as Amazon Web Services (AWS), Microsoft Azure, and Google Cloud.
- Tech Sovereignty: A concept where a country or region seeks to have control over its own digital technology, data, and infrastructure to reduce dependence on foreign nations.
- U.S. CLOUD Act: A US federal law that allows federal law enforcement to compel US-based technology companies to provide requested data stored on their servers, regardless of whether the data is stored in the U.S. or on foreign soil.