EU cloud sovereignty law could cost Europe €115bn, US tech lobby study says

A study by Brussels think tank ECIPE estimates the EU’s proposed Cloud and AI Development Act (CADA) could cost Europe €115bn over ten years. CCIA Europe, whose members include Amazon, Google and Meta, paid for the study; the article provides no further details on the estimate.

Analysis

The investable signal is policy uncertainty, not the study’s headline cost estimate: a lobby-funded scenario is not a measure of lost revenue or an enacted compliance burden. The key transmission channel is whether CADA creates enforceable procurement, data-location, or AI-stack requirements. If it does, Amazon and Alphabet could face added duplication and certification costs, but their scale may also let them absorb compliance and capture contracts that smaller providers cannot serve. Localization rules could therefore raise industry costs while strengthening the largest compliant operators. Meta should not be treated as having the same direct cloud exposure; any impact would depend on the law’s scope for AI and data services.

Near term, expect headlines and lobbying claims to move perceived regulatory risk more than earnings estimates. Over 1–3 months, watch draft text, carve-outs, procurement rules, and implementation timelines. Over 6–18 months, the structural effect depends on whether requirements force genuinely separate infrastructure or merely add auditable controls. The study’s sponsorship warrants skepticism, but does not establish that the proposal is harmless. No direct trade is justified without the legislative text and company-level exposure disclosures.

Key Decisions for Investors

• Do not short AMZN or GOOG solely on the €115bn estimate; it is a macro scenario, not a company-specific cost estimate. Treat any headline-driven selloff as a watch item until the draft specifies covered services and obligations.
• Track CADA amendments and procurement language over the next 1–3 months. Escalate the risk assessment if requirements mandate separate EU infrastructure or materially restrict cross-border data and AI services; reduce it if the proposal relies mainly on certification or includes broad carve-outs.
• Separate exposures: assess AMZN and GOOG for cloud-related compliance and contract effects, and META only against provisions that explicitly cover its data or AI services. Do not use a uniform three-stock short basket.
• Falsification check: the adverse thesis weakens if final rules preserve existing cloud architectures and company disclosures show no material change to EU capex, contract eligibility, or guidance; it strengthens if binding localization requirements are adopted and firms flag incremental investment or lost tenders.