🤖 EU AI & Sovereignty Weekly
July 26, 2026 — Full AI Act enforcement in 7 days
This week’s EU AI & Sovereignty update covers the final countdown to full AI Act enforcement on August 2, the Digital Omnibus compromise, the new Cloud and AI Development Act, and the growing push for European digital sovereignty.
wetgeving
🔥 HOOG
EU AI Act: Full Enforcement from August 2, 2026
In exactly one week, the full AI Act enters into force. High-risk AI systems must comply with risk management, human oversight, transparency, and documentation requirements. Fines can reach €35 million or 7% of global annual turnover. Systems interacting with humans must clearly disclose they are AI, unless obvious from context. This is the single biggest regulatory milestone in AI governance — every company deploying AI in the EU needs to be ready.
wetgeving
📌 MEDIUM
Digital Omnibus on AI — Postponement and Simplification
In May 2026, the Council and European Parliament reached a provisional political agreement on targeted amendments to the AI Act via the “Digital Omnibus” package. The changes shift certain compliance deadlines and reduce administrative burdens while preserving the regulation’s core protections. The final compromise text was published on May 13, 2026. Formal approval by the EP and Council is expected before August 2, 2026 — meaning the Omnibus could land just in time for the full enforcement date.
Commissie
🔥 HOOG
European Technological Sovereignty Package (June 3, 2026)
The European Commission presented the “European Technological Sovereignty Package” on June 3, 2026 — a suite of measures to strengthen Europe’s capacity in semiconductors, AI, cloud, and open source. It includes two legislative proposals: the Chips Act 2.0 and the Cloud and AI Development Act (CADA), plus an Open Source Strategy and a Strategic Roadmap for digitalization and AI in the energy sector. This is the most ambitious tech sovereignty push from the Commission to date.
wetgeving
🔥 HOOG
Cloud and AI Development Act (CADA) — New Law for Digital Sovereignty
The Cloud and AI Development Act is a cornerstone of the sovereignty package. The regulation aims to support businesses, cloud providers, investors, and governments by creating better conditions for innovation in AI and cloud technology. Its goal: strengthen Europe’s technological sovereignty and reduce strategic dependency on critical digital infrastructure. CADA is expected to define “sovereign cloud” in EU law for the first time — a major step for European cloud providers and a challenge for US hyperscalers.
investeringen
📌 MEDIUM
Sovereign Cloud Framework — €180M Contract for EU Institutions
In April 2026, the European Commission awarded a €180 million contract for sovereign cloud services to EU institutions, spread over 6 years, to four selected providers. The accompanying “Cloud Sovereignty Framework” is an evaluation tool the Commission developed to assess sovereign cloud providers. The framework is drawing significant attention from governments and IT companies across the EU, signaling a major shift in how European institutions approach cloud procurement.
wetgeving
📌 MEDIUM
Transparency Rules: Deepfakes and AI Interaction Disclosure
From August 2, 2026, the AI Act’s transparency obligations take effect. Deepfakes and manipulated audio, image, or video content must be disclosed as artificially generated. Systems that communicate directly with humans must make it clear that one is interacting with a machine. AI systems for synthetic content already on the market before August 2 get a transition deadline to comply with Article 50(2). This will have immediate impact on social media platforms, content creators, and customer service chatbots.
wetgeving
🔥 HOOG
Cyber Resilience Act (CRA) — Effective September 2026
Starting September 2026, the Cyber Resilience Act requires all products with digital elements sold in the EU to meet mandatory cybersecurity standards, including reporting actively exploited vulnerabilities. This affects a broad range of products — from IoT devices to software — and forms a key pillar of EU digital sovereignty. Combined with the AI Act, the CRA creates a comprehensive regulatory framework that will reshape how tech products are designed and brought to market in Europe.
technology
📌 MEDIUM
EU Tech Sovereignty: Cloud Concentration Risk Report
The Cloud Security Alliance published a report in June 2026 analyzing how dependency on non-EU cloud providers (particularly US-based) creates risks for EU digital sovereignty, especially in banking, healthcare, and government sectors. The US Cloud Act is driving boards to demand EU-controlled systems. The report’s “compliance cascade” analysis shows how one jurisdiction’s data access laws can ripple through the entire cloud supply chain.
wetgeving
📌 MEDIUM
AI Act: New Rules for Training Data and Copyright
The AI Act introduces new obligations around training data and copyright. Providers of AI models must publish a summary of the training data used, so rights holders can check whether their work was used. For open-source foundation models this is already common practice in research papers; for closed-source models like OpenAI it becomes significantly more complex. Companies are advised to start auditing training data, documenting data provenance, and labeling AI-generated content now.
lidstaten
📌 MEDIUM
European Sovereign Cloud Day 2026 — Policy and Politics
The European Sovereign Cloud Day 2026 brought together EU policymakers, regulators, civil society, and industry leaders to discuss the evolution of the cloud sovereignty agenda. Central topics included the upcoming Cloud and AI Development Act (CADA), the implementation reality for governments and critical sectors, and the political trade-offs around sovereign cloud infrastructure in Europe. The event signals that sovereign cloud is moving from a technical discussion to a mainstream policy priority.
📈 Key Trends
- • Regulatory avalanche: August 2 marks the single biggest compliance deadline in AI history — the AI Act, transparency rules, and the CRA create a cascade of obligations hitting within weeks of each other.
- • From regulation to investment: The Sovereignty Package and CADA show the EU is shifting from purely regulating AI to actively building European alternatives — Chips Act 2.0 and sovereign cloud contracts signal real money behind the rhetoric.
- • Cloud sovereignty goes mainstream: The €180M sovereign cloud contract and the CSA report show that cloud concentration risk is no longer a niche concern — it’s driving procurement decisions at the highest level.
- • Training data transparency: The copyright and training data rules will force unprecedented disclosure from AI companies — a major shift for an industry built on opacity around training data.
- • Digital Omnibus as safety valve: The last-minute Omnibus adjustments suggest the EU recognizes the burden it’s placing on businesses — expect more fine-tuning as the real-world impact becomes clear.
Wat vond je van dit bericht?
