The Short Version
The European Commission just dropped the most consequential EU tech policy package in years. Four measures: Chips Act 2.0 with emergency powers to override chip supply contracts, a Cloud and AI Development Act creating four tiers of cloud sovereignty (that effectively restrict US providers from sensitive government data), an open-source strategy to fund European alternatives, and an energy-AI roadmap. The price tag: €320 billion over 10 years. The subtext: Europe is done being dependent on American and Asian technology.
🔍 THE BOTTOM LINE
Europe isn’t asking permission anymore. It’s rewriting the rules for chips, cloud, and AI on its own terms — and the US tech companies that dominate European infrastructure are the ones who’ll have to adapt.
The Four Pillars
1. Chips Act 2.0 — Emergency Powers
The original 2023 Chips Act subsidised fabrication plants. Intel scrapped two planned mega-fabs in Germany. The EU still produces under 10% of the world’s semiconductors and is almost wholly reliant on the US and Asia for chips below 5 nanometres — the ones that train AI models.
Chips Act 2.0 shifts from supply to demand and adds teeth. According to a draft seen by the Financial Times, the Commission could:
- Override chip supply contracts during a declared crisis, forcing chipmakers to prioritise orders for “crisis-critical” products
- Buy chips centrally on behalf of member states
- Fine companies up to €300,000 for withholding information about supply-chain capacity
This is emergency wartime economics applied to semiconductors. The message to TSMC, Samsung, and Intel: if there’s a crisis, we’ll tell you who gets your chips.
2. Cloud and AI Development Act — Sovereignty Tiers
This is the one that directly challenges US cloud providers. The Act creates four tiers of cloud “sovereignty,” judged on:
- Control over the service and supply chain
- Where AI inference data is processed
- Where infrastructure physically sits
- Cybersecurity standards
The practical effect: public authorities would be restricted from using US cloud providers for sensitive data in healthcare, finance, and judicial systems. The US CLOUD Act — which can compel American firms to hand over data regardless of where it’s stored — makes it nearly impossible for US providers to reach the highest sovereignty tier.
As Commission Vice-President Henna Virkkunen put it: the aim is to ensure providers of critical workloads don’t hold a “kill switch” over European data.
3. Open Source Strategy
A softer measure that funds European open-source alternatives and pushes public administrations towards open-source tools. Less dramatic than the chip and cloud measures, but strategically important — it’s about building alternatives that don’t depend on US or Chinese proprietary software.
4. Energy-AI Roadmap
A plan for digitalisation and AI in the energy system. This is the “we need to power all this somehow” acknowledgement, and it’s a real concern — AI data centres are straining European grids already.
The Political Reality
The Draghi competitiveness report found the EU is reliant on non-EU suppliers for more than 80% of its digital products, services, and infrastructure. That’s the foundation for this entire package.
But the 27 member states are split:
- France and Germany want a stricter European-preference line
- The Nordics and Ireland — where US cloud firms base much of their European operations — want a softer approach
- Southern and Eastern European states are more concerned about access and cost than sovereignty
All 27 states must approve the texts. The political horse-trading hasn’t even started.
Commission President Ursula von der Leyen was blunt: Europe “cannot afford to depend on others for the technologies that keep its hospitals running and its grids stable.”
POLITICO’s assessment: this is “the long game against US digital supremacy.”
What This Means for NZ
New Zealand trades with both the EU and the US. This package has several direct implications:
- Supply chain shifts: If the EU starts prioritising its own chip supply during crises, NZ’s already-precarious semiconductor access gets worse. We’re not a crisis-critical market in anyone’s definition.
- Cloud sovereignty spreads: The UK CMA’s publisher opt-out ruling and the EU’s cloud sovereignty tiers are part of the same movement. NZ should expect similar sovereignty frameworks in our region, driven by Australia’s leadership.
- Open-source opportunity: The EU is funding open-source alternatives. For NZ’s open-source community, that’s potential collaboration funding.
- Trade tension: The US won’t love the cloud restrictions. NZ could find itself in the uncomfortable position of being asked to pick sides.
The €320 Billion Question
€320 billion over 10 years sounds enormous. But earlier EU ambitions tell a cautionary tale:
- The original Chips Act committed €52 billion in public and private money with “limited movement” on Europe’s chip production share
- The AI gigafactory programme is stalling — only 2 of 5 planned data centres are fundable before 2028, and interest has narrowed from 70 companies to about 10
- The EU’s sovereign cloud contracts have delivered €180 million — a fraction of what’s needed
The EU has a track record of announcing big numbers and struggling to deliver. This package will test whether the political will exists to follow through.
❓ Frequently Asked Questions
Q: Does this mean US cloud providers are banned in Europe? No. The restrictions apply to sensitive public-sector data in healthcare, finance, and judicial systems. Private-sector use of AWS, Azure, and Google Cloud is unaffected. US providers can also achieve lower sovereignty tiers — they just can’t reach the top tier because of the US CLOUD Act.
Q: Can the EU actually override chip supply contracts? The draft legislation gives the Commission that power during a declared crisis. It hasn’t been tested yet. The legal and commercial pushback from chipmakers would be fierce.
Q: What’s the timeline? The texts must be approved by all 27 member states. That process typically takes 12-18 months minimum. Implementation will take years after that.
Q: Is this related to the UK CMA ruling on Google AI search? Indirectly. Both are part of the same global movement toward digital sovereignty and platform regulation. The UK ruling is about publisher control; the EU package is about infrastructure control. Different mechanisms, same direction.
🔍 THE BOTTOM LINE
Europe just put €320 billion and emergency legal powers behind the idea that it shouldn’t depend on American and Asian tech. The chip emergency powers can override private contracts. The cloud sovereignty tiers effectively wall off sensitive government data from US providers. And the first legal definition of “digital sovereignty” is now on the books. Whether the money and political will hold up is an open question — but the direction of travel is unmistakable. The US-EU tech relationship just got a lot more complicated.
SOURCES
- European Commission: “Strengthening Europe’s tech sovereignty”
- The Next Web: “EU tech sovereignty package: chip emergency powers and curbs on US cloud”
- POLITICO: “4 ways Europe wants to wean off US tech” / “EU plots long game against US digital supremacy”
- Bloomberg: “EU Targets Chip, AI Supply Chains With Sweeping Tech Sovereignty Measures”
- Financial Times (cited in Implicator.ai coverage)
- Agence Europe: “€320 billion needed over 10 years”
