# EU Cloud and AI Development Act Could Create Tensions With Cloud Access and NATO Interoperability

DevFeed: [EU Cloud and AI Development Act Could Create Tensions With Cloud Access and NATO Interoperability](<https://devfeed.tech/articles/the-eu-sovereignty-trap-57857.md>)

Original publisher: [Read original article](<https://www.infoworld.com/article/4224647/the-eu-sovereignty-trap-when-rules-outrun-reality.html>)

Author: David Linthicum

Published: 2026-09-22T09:00:00Z

Content type: opinion

Language: en

Sources: [InfoWorld](<https://devfeed.tech/sources/infoworld.md>)

Topics: [cloud-infrastructure](<https://devfeed.tech/topics/cloud-infrastructure.md>), [Cloud](<https://devfeed.tech/topics/cloud.md>), [interoperability](<https://devfeed.tech/topics/interoperability.md>), [AI Development](<https://devfeed.tech/topics/ai-development.md>), [national security](<https://devfeed.tech/topics/national-security.md>), [Security](<https://devfeed.tech/topics/security.md>)

Tags: [ai](<https://devfeed.tech/tags/ai.md>), [artificial-intelligence](<https://devfeed.tech/tags/artificial-intelligence.md>), [artificial-intelligence-cloud-computing-data-and-information-security-security](<https://devfeed.tech/tags/artificial-intelligence-cloud-computing-data-and-information-security-security.md>), [cloud](<https://devfeed.tech/tags/cloud.md>), [cloud-computing](<https://devfeed.tech/tags/cloud-computing.md>), [cloud-infrastructure](<https://devfeed.tech/tags/cloud-infrastructure.md>), [data-and-information-security](<https://devfeed.tech/tags/data-and-information-security.md>), [eu](<https://devfeed.tech/tags/eu.md>), [interoperability](<https://devfeed.tech/tags/interoperability.md>), [law-enforcement](<https://devfeed.tech/tags/law-enforcement.md>), [procurement](<https://devfeed.tech/tags/procurement.md>), [public-sector](<https://devfeed.tech/tags/public-sector.md>), [security](<https://devfeed.tech/tags/security.md>), [sovereignty](<https://devfeed.tech/tags/sovereignty.md>)

## AI overview

The opinion examines the EU's proposed Cloud and AI Development Act, which would impose a four-level sovereignty framework on cloud services used by public-sector organizations. It argues that stricter requirements could limit access to major cloud and AI providers and complicate interoperability with NATO systems.

## Source excerpt

The European Union is once again legislating sovereignty with its proposed Cloud and AI Development Act, or CADA. The legislation would establish a four-level sovereignty framework for cloud services used by EU institutions and public-sector organizations, with the most sensitive workloads (defense, national security, justice, and law enforcement) required to run on services at the higher assurance levels. The thinking is straightforward: With AWS, Microsoft, and Google controlling roughly 70% of Europe's cloud infrastructure market, the continent's public sector is exposed to overseas laws, mostly American ones, in ways that make Brussels uncomfortable. Not everyone in Europe is on board, and that's where the story gets interesting. According to Financial Times, defense officials from several member states, particularly the eastern and Nordic countries closest to a contested border, are pushing back. Their argument is practical, not ideological. Stricter sovereignty rules could restrict access to the cloud and to AI capabilities supplied by the major US hyperscalers and could complicate interoperability with NATO systems. This matters because NATO's own digital strategy mandates federated, multi-classification hybrid clouds with binding interoperability standards for nations participating in NATO-led operations. In other words, one arm of Europe's security apparatus is telling the other that its well-intentioned sovereignty rules could make joint military operations harder to execute. CADA isn't a blanket ban; it carves out exceptions where compliant services don't exist, but the pressure it applies to procurement decisions is real, and it's arriving at precisely the moment European militaries need to move faster, not slower. I've watched this debate play out in various forms for more than two decades, and I keep seeing the same fundamental misunderstanding. So let's talk about what's actually being traded away here. Why use public clouds at all? The biggest miscon