The European Technological Sovereignty Package
Bottom Line: On June 3, the European Commission officially released its highly anticipated European Technological Sovereignty Package, rolling out a sweeping set of digital policies headlined by the Chips Act 2.0 and the Cloud and AI Development Act (CADA). The regulatory bundle also introduces a new Open Source Strategy alongside a strategic roadmap for digitizing Europe's energy grid. While the package aims to secure the bloc's digital self-reliance, the rollout introduces significant legal uncertainty and fragmentation for businesses.
Why it matters: The sweeping framework threatens to isolate European industries from global innovation by creating protectionist barriers, particularly for American providers. U.S. technology companies and their interconnected supply chains are deeply woven into the European economy, supporting a massive €1.0 trillion in EU GDP, which equates to roughly 5.4% of the bloc's total economic output. By implementing strict origin-based restrictions rather than objective security standards, the EU risks fracturing the transatlantic digital ecosystem and disabling the competitive edge of European sectors like manufacturing, healthcare, finance, and retail that rely heavily on advanced global tech.
Go deeper: At the center of corporate concern is CADA's new four-tier assurance framework, which public sector bodies must apply based on localized risk assessments.
Level 1 requires standard data processing and storage inside the Union;
Level 2 demands that providers demonstrate independence from third countries alongside strict software supply chain transparency;
Level 3 mandates that providers be entirely owned and controlled within the EU, complete with local personnel citizenship requirements, though the Commission retains a mechanism to recognize certain third-country entities;
Level 4 demands complete control over the software supply chain with absolute immunity from third-country interference.
Because the actual risk assessments and procurement rules are left to individual Member States to implement, companies face a high probability of compliance fragmentation across the single market. On a more positive note, The Package’s Strategic Roadmap for Digitalization and AI in energy is being welcomed as a progressive step that leverages AI to build flexible grids capable of supporting the massive, low-carbon energy demands of modern data infrastructure.
AmCham Sweden will monitor the situation.