Europe has been depending on Amazon, Google and Microsoft for its most critical data for years. You are about to cut off their access
The European Commission is taking action. This organization is expected to present its “Technological Sovereignty Package” on May 27. This directive will include a series of measures aimed at boosting the EU’s strategic autonomy in sensitive areas, and that means something unique: stopping depending as much as possible on US hyperscalers to store critical data. The fear of the off button. The measures are being applied due to growing political instability and some recent cases that have demonstrated the power that the US has over the European technological infrastructure. In May Microsoft “cancelled” the email of Karim Khan, a prosecutor who had been directly cited in an executive order from Donald Trump. Microsoft he denied itbut the damage had already been done, and these problems have raised fears that Trump could use a kind of “off button” against European institutions that depend on the hardware and software infrastructure provided by companies like Microsoft, Google or Amazon. Legal espionage. The CLOUD Act (Clarifying Lawful Overseas Use of Data Act) is a 2018 US law that allows law enforcement to force US-based technology companies (such as Google, Microsoft or Amazon) to provide data, regardless of where it is stored, whether inside or outside the United States. This law updates the Stored Communications Act to prioritize data control over its location. Or what is the same: if you use the services of US hyperscalers, the US may end up accessing your data. And since you’ve accepted their terms of use, you agree to let them legally spy on you if they “need to.” If you want my critical data, you’ll have to protect it. The new regulations require service providers who want to work with critical European data to demonstrate that they are not subject to requests from non-EU governments. This automatically excludes Microsoft, Google or Amazon, because all three are subject to the CLOUD Act. Europe is thus looking for providers that guarantee that critical data will not be in the possession of companies that then have to transfer it to foreign powers. Europe depends on the American cloud. The reality is that today Amazon (AWS), Microsoft (Azure) and Google (Google Cloud) currently control more than 70% of the Cloud Computing market in the old continent. Losing these institutional contracts would mean a significant financial blow, but it also sends a powerful signal to European private companies: if Brussels does not trust the US with its secrets, why should European corporations? The domino effect could be huge. Europe has its own clouds. This directive would give an important opportunity to initiatives that seemed stalled like GAIA-Xbut there are also companies with their own infrastructure such as OVH (France) or T-Systems (Germany). There are significant technical challenges in that area, because US hyperscalers have been refining their offering over the past two decades. However, Brussels seems willing to accept a somewhat less efficient or complete service in exchange for greater autonomy. The options existno doubt, but the challenge is enormous. Migrating is going to be expensive. It is one thing to make the decision and quite another to complete that migration that will require moving decades of data and systems to a different infrastructure. Current data centers would have to be expanded to meet demand, they say some analysisand that would mean a cost of between 14,000 and 24,000 million euros. Consulting companies like Forrester they don’t see anything clear that the EU can achieve cloud sovereignty, and other experts also make it clear that Europe will not abandon the hyperscalers. Traceability. In addition to changing suppliers, the board also wants to impose strict requirements regarding transparency. AI systems that have access to that data must be auditable by the newly created EU AI Office. The Commission wants to know who has access to the code, who maintains the servers and who has the technical capacity to manage and even intercept such data transfers. Data too sensitive. In comments to CNBCEU officials explained that there are active debates demanding that financial, judicial or health data used at the government level and in the public sector have a sovereign cloud infrastructure. That’s also true for military data, of course, and There are already movements in that direction. Fragmented Internet. The move confirms that the world appears to be heading toward a future with a fragmented internet and one that will have important geopolitical boundaries. While the US tries to defend its technology against China, Europe and the entire world are trying to avoid or at least mitigate their excessive dependence on American technological solutions. Image | İsmail Enes Ayhan and François Genon In Xataka | Europe no longer trusts Google. That is why several start-ups are designing an independent payment system on Android