EU Proposes Tech Sovereignty Package to Reduce Reliance on US and Chinese Suppliers

Summary
The European Commission proposed a package to reduce reliance on foreign technology, including cloud sovereignty levels and funding for critical open-source security. The proposals require approval by the European Parliament and Council.
Key points
- The proposed package includes draft Chips Act 2.0 and Cloud and AI Development Act (CADA), an Open Source Strategy, and an energy-system digitalization roadmap.
- CADA sets four cloud assurance levels, ranging from EU data processing and storage to full supply-chain control without third-country interference.
- The Commission says it will fund long-term maintenance and security of critical open-source infrastructure, including cybersecurity-related projects.
- Chips Act 2.0 would require approvals for new fabrication plants within 12 months and extend state aid for first-of-a-kind facilities.
- The Commission says the EU relies on foreign countries for more than 80% of key digital products, services, infrastructure, and intellectual property.
- The proposals remain subject to negotiations and approval by the European Parliament and European Council.
Article Details
- Event Type
- European Commission proposal for technology-sovereignty laws and strategies
- Impact
- The proposals aim to reduce reliance on foreign suppliers across semiconductors, cloud computing, AI, and open-source software, citing supply-chain and jurisdictional risks. They include plans for open-source security funding and new cloud-sovereignty requirements, but their security benefits remain uncertain and depend on implementation; all proposals require approval by the European Parliament and European Council.
People
Alexandra PaulusAt the German Institute for International and Security Affairs, she argued that developing European technology alternatives depends on promoting open source.Erik ReinPresident of the European Semiconductor Industry Association; he commented that Europe cannot regulate its way into semiconductor leadership.Henna VirkkunenThe European Commission’s tech lead, who described the proposals as a major shift in Europe’s approach to technological sovereignty and advocated greater control over data and supply chains.Josh GoldAn analyst whose essay argued that European cyber resilience should prioritize transparency, portability, and recoverability over ownership and location requirements.
Vendors
Armcompanies — Nvidia, AMD, Qualcomm, Apple and Broadcom — give the American industry an enormous footprint in advanced logic design, and Britain’s Arm dominates processor IP licensing globally.ASML#XZUtilsIntelIntel had planned to build a manufacturing plant in Magdeburg, Germany — intended to be one of the most advanced in the world — before pulling the plug on the decision in February.SUSEOpen-source vendor SUSE said the approach validated its argument that inspectable, openly maintained software is better placed to meet sovereignty goals than proprietary stacks, while warning that implementation wouldTSMC#XZUtils
Products
Countries
Britaincompanies — Nvidia, AMD, Qualcomm, Apple and Broadcom — give the American industry an enormous footprint in advanced logic design, and Britain’s Arm dominates processor IP licensing globally.ChinaRead More: https://therecord.media/eu-unveils-tech-sovereignty-package-cut-reliance-us-chinaGermanyIntel had planned to build a manufacturing plant in Magdeburg, Germany — intended to be one of the most advanced in the world — before pulling the plug on the decision in February.TaiwanDependence on Taiwan’s TSMC for advanced fabrication is essentially universal, applying to the United States as much as to the European Union.United StatesU.S. firms dominate Europe’s cybersecurity market, with European buyers relying heavily on American suppliers.
Industries
Artificial intelligenceSpanning semiconductors, cloud computing, artificial intelligence and open-source software, the proposals amount to what the Commission’s tech lead Henna Virkkunen called “a major shift in how Europe approachesCloud Computingnew laws and strategies to reduce the EU’s dependence on foreign technology across semiconductors, cloud computing, AI, and open-source software, framing technological sovereignty as a security priority.Cybersecuritysays it will scale up European open-source alternatives in priority areas that explicitly include cybersecurity, and fund the long-term maintenance and security of Europe’s critical open-source infrastructure — theOpen-source softwarereduce the EU’s dependence on foreign technology across semiconductors, cloud computing, AI, and open-source software, framing technological sovereignty as a security priority.Semiconductorshas proposed new laws and strategies to reduce the EU’s dependence on foreign technology across semiconductors, cloud computing, AI, and open-source software, framing technological sovereignty as a security
