Skip to content
Today
Sections

Leadership Independently confirmed2 publishers 2 min read Published

Trade body for Amazon, Google and Meta funds study pricing EU cloud act at €115bn

ECIPE says the EU's Cloud and AI Development Act could cost €115bn over a decade, six times the Commission's €18bn upper estimate. CCIA Europe, whose members include Amazon, Google and Meta, funded it. Buyers can test its software re-architecting line against their own estate without accepting the total.

The Board Room · Leadership desk

Send a correction

Illustration accompanying Trade body for Amazon, Google and Meta funds study pricing EU cloud act at €115bn
Generated illustration
ECIPE names three costs the Commission missed Costs ECIPE says the Commission's impact assessment of the Cloud and AI Development Act did not include.

Three figures from ECIPE. Software re-architecting and code rewriting account for 69% of the Act's real-world impact. Direct public budget exposure is €33.3 billion. Private-sector spill-overs could be as much as €80 billion (disputed). ECIPE says the impact assessment left these out.

ECIPE names three costs the Commission missed
FigureValueNoteClaim
Re-architecting and code rewriting, share of impact69%6
Public budget exposure€33.3bn5
Private-sector spill-overs€80bn up todisputed18

What happened

  • ECIPE attributes the gap to three blind spots in the Commission's impact assessment, the first being €33.3bn in direct public budget exposure.
  • It says the assessment ignored software re-architecting and code rewriting, which ECIPE puts at 69% of the Act's real-world impact.
  • The third is private-sector spill-overs, which the report puts at as much as €80bn.
  • CCIA Europe singles out Article 31, which lets the Commission extend strict sovereignty restrictions beyond public procurement to banking, energy, healthcare and transport.

Why it matters

  • Who's exposed exposure Exposure runs through suppliers as well as a buyer's own code: CCIA Europe says European software vendors and digital SMEs would have to redesign applications built on global cloud architectures.
  • What doesn't add up contradiction CCIA Europe's Mitchell Rutledge says the Commission missed 70% of the Act's impact, but on ECIPE's own totals the €18bn covers about 16% of €115bn, so the implied miss is 84%.
  • What it limits constraint Buying a sovereign region from a US provider does not settle the question, because the US Cloud Act lets US law enforcement demand data those firms hold even when it is stored outside the US.

Next story · Security · Oct 9

ICO extracts data protection pledges from ten AI developers over training data

Confirmed2 publishers

The pieces of ECIPE's total do not fit together on the page. The gap between €115bn and €18bn is €97bn [4][14]. The two omissions that carry a stated figure, €33.3bn in direct public budget exposure and up to €80bn in private-sector spill-overs, add up to €113.3bn [5][18][15]. That exceeds the gap. If the 69% share ECIPE assigns to re-architecting applies to the full €115bn, the software line alone is about €79bn [6][16], close to the spill-over ceiling of €80bn. The itpro account does not include ECIPE's method, a Commission response or a date for member-state decisions.

A skeptic would say that a study paid for by a trade body whose members include Amazon, Google and Meta was always going to find a large number [2]. The same body asks that trusted international partners such as its members be exempt from Article 18 country screening [10]. Both points are fair, and they are reason enough to carry €115bn as an advocate's figure. The cost category is a separate question, and a buyer can check it locally. Mitchell Rutledge, CCIA Europe's policy manager [13], said: "Businesses cannot simply switch servers; they must redesign software and rewrite code across entire supply chains." [9] A buyer can count how many of its applications run on global cloud platforms and fall in the sectors Article 31 covers [7].

The cost is conditional on choices not yet made. The Act as proposed excludes non-EU providers from parts of the cloud and AI market [3], and CCIA Europe wants member states to limit sovereignty restrictions to sensitive workloads where specific public-order risks are demonstrated [10]. A buyer in the affected sectors faces a trade-off. Re-architecting now spends engineering time on rules that member states may narrow. Waiting means a later start on the rewrite if they do not. An inventory of exposed applications commits little, and in our view it is the step this quarter supports. Once member states take positions on Article 31, the inventory turns a sector-wide figure into a number for the buyer's own estate.

The market is moving ahead of the rule. AWS's European Sovereign Cloud keeps enterprise data hosted and stored solely in the region, and Microsoft and Google make similar promises [11]. Gartner found in research published earlier this year that one in five European workloads is moving to local clouds, and that spending on sovereign cloud infrastructure in the region is set to triple between 2025 and 2027 [20]. That movement is under way while the Act is still a proposal [1], so a buyer's migration budget is likely to mix the trend's cost with the Act's.

What to watch

  • Whether the Commission publishes a response or a revised impact assessment that addresses re-architecting costs and the €33.3bn of public budget exposure.
  • Whether member states keep Article 31's reach into private sectors or limit the Act to sensitive workloads, as CCIA Europe asks.
  • Whether ECIPE publishes its method, so the 69% re-architecting share and the €80bn spill-over ceiling can be checked.

Clarity's read

What the record supports and how the coverage leans. The claims behind it follow.

Reality

Evidence30
Adoption
Not scored
Hype gap+40
Incentives90
Confidence70
Why these scores

Claim ledger

Ranked by verification strength, evidence, and original report placement.

  1. [1]

    ECIPE issued a report claiming that the EU's proposed sovereignty rules could cost the bloc billions; the report examines the European Commission's proposed Cloud and AI Development Act (CADA).

    Reported Supported Source: itpro.com, reporting the ECIPE reportView cited source
  2. [2]

    The ECIPE research was funded by CCIA Europe, a trade body with members including Amazon, Google and Meta.

    Reported Supported Source: itpro.comView cited source
  3. [3]

    CADA, as proposed by the Commission, excludes non-EU providers from parts of the cloud and AI market.

    Reported Supported Source: itpro.com description of the ActView cited source
  4. [4]

    The research found the Act risks imposing €115 billion in costs over the next decade, six times the Commission's upper estimate of €18 billion.

    Reported Supported Source: ECIPE research, as reported by itpro.comView cited source
  5. [5]

    ECIPE says the Commission's impact assessment failed to include €33.3 billion in direct public budget exposure.

    Reported Supported Source: ECIPE, as reported by itpro.comView cited source
  6. [6]

    ECIPE says the impact assessment ignored the cost of software re-architecting and code-rewriting, which ECIPE said accounts for 69% of CADA's real-world impact.

    Reported Supported Source: ECIPE, as reported by itpro.comView cited source
  7. [7]

    Article 31 of the Act allows the Commission to extend strict sovereignty restrictions beyond public procurement to certain private sectors, including banking, energy, healthcare and transport.

    Reported Supported Source: itpro.com, reporting CCIA Europe's objectionView cited source
  8. [8]

    CCIA Europe says European software vendors and digital SMEs would be forced to redesign applications currently built on global cloud architectures and AI platforms.

    Reported Supported Source: CCIA Europe, as reported by itpro.comView cited source
  9. [9]

    Rutledge said: "Businesses cannot simply switch servers; they must redesign software and rewrite code across entire supply chains."

    Reported Supported Source: Mitchell Rutledge, CCIA Europe, quoted by itpro.comView cited source
  10. [10]

    CCIA Europe wants member states to limit sovereignty restrictions to sensitive workloads where specific public-order risks are demonstrated, and wants 'trusted international partners' with bilateral EU procurement commitments, like its members, exempted from Article 18 country screening.

    Reported Supported Source: CCIA Europe, as reported by itpro.comView cited source
  11. [11]

    AWS's European Sovereign Cloud hosts and stores enterprise data solely in the region, separate from other AWS Regions; Microsoft's Sovereign Cloud and Google's sovereign solutions make similar promises.

    Reported Supported Source: itpro.comView cited source
  12. [12]

    US tech firms are subject to the US Cloud Act, which allows US law enforcement to demand access to the data they hold, even when it is stored outside the US.

    Reported Supported Source: itpro.comView cited source
  13. [13]

    Mitchell Rutledge is CCIA Europe's policy manager.

    Reported Supported Source: itpro.comView cited source
  14. [14]

    The gap between ECIPE's €115bn and the Commission's €18bn upper estimate is €97bn.

    Derived Supported
  15. [15]

    The two quantified omissions, €33.3bn and up to €80bn, add up to €113.3bn, which exceeds the €97bn gap.

    Derived Supported
  16. [16]

    If the 69% re-architecting share applies to the €115bn total, the software line is about €79bn.

    Derived Supported
  17. [17]

    Rutledge said: "Taxpayers and businesses will foot the bill, yet the official assessment missed 70% of CADA's true impact."

    Reported Contested Source: Mitchell Rutledge, CCIA Europe, quoted by itpro.comView cited source
  18. [18]

    ECIPE says the assessment failed to take into account private-sector spill-over costs, which the report found could amount to as much as €80 billion.

    Reported Contested Source: ECIPE, as reported by itpro.comView cited source
  19. [19]

    On ECIPE's own totals the Commission's €18bn is about 16% of €115bn, so the implied miss is about 84%, against the 70% Rutledge cited.

    Derived Contested
  20. [20]

    According to Gartner research earlier this year, a fifth of European workloads are shifting to local clouds, with sovereign cloud infrastructure spending in the region set to triple between 2025 and 2027.

    Reported Insufficient Source: Gartner, as cited by itpro.comView cited source

Sources

2 independent publishers whose own reporting we read for this story.

  1. assets.theregister.com

    1 article · October 15, 2026

    US tech giants warn Europe that ditching US tech giants could cost €115B (5 minute read)
  2. itpro.com

    1 article · October 15, 2026

    EU can't afford sovereign cloud, research claims

Topics and entities

Topics

Entities