Cloud Gatekeepers, the Price of Privacy and Europe's Capital Gap

Europe spent the week pushing its rulebook down towards the infrastructure layer, where its dependence runs deepest. The clearest signal came at the end of the week: according to The Next Web, the European Commission plans to designate Amazon Web Services and Microsoft Azure as gatekeepers under the Digital Markets Act in November. Such a designation would require both cloud giants to comply with the DMA's rules, with consequences for competition and data portability across the single market.

The DMA already shapes product decisions in quieter ways. Heise noted that Microsoft is switching on Windows settings backup by default in Windows 11 26H2, but not automatically in regions covered by the Digital Markets Act. It is a minor feature, yet it shows a global vendor shipping a different default for European users.

Competition law is only one route to digital sovereignty, and several stories showed what European cloud alternatives look like in practice. Presse-Citron described the launch of Digital EO, a cloud for satellite data built with OVHcloud and CGI that seeks to reduce reliance on US providers for sensitive Earth observation data. In the Netherlands, the national government, provinces, municipalities and SURF signed an agreement to structurally increase their use of open source, presented by Digitale Overheid as a route to greater independence. Germany, Heise reported, is excluding providers from risk states such as China as its public safety radio network moves from Tetra to LTE and 5G, a transition aimed at real-time data, video and image transmission by 2030.

Agenda Digitale supplied the sharper warnings. It treated the closure of the Italian server Autistici/Inventati, which it links to US governmental action, as evidence of how exposed European services remain to decisions taken elsewhere. A second analysis in the same outlet argued that in military cloud services, sovereignty risks go well beyond where the data physically sits, touching confidentiality, availability and procedural integrity, while European tools mainly address questions of power.

Where data sits no longer settles who controls it.

The week's second thread ran through data protection, where the argument is shifting from compliance cost to economic value. BEUC published research claiming that weakening privacy rules would cost European consumers more than €100 annually through Big Tech data exploitation, and that strong GDPR enforcement is an economic asset for companies rather than a burden. The consumer organisation wants consent-based processing kept and consumer data rights strengthened.

On paper, enforcement is tightening. New guidelines from the European Data Protection Board significantly restrict national authorities' discretion and establish a strong presumption of sanctions for non-minor GDPR violations, Agenda Digitale reported. France's CNIL set out when individuals can claim compensation after a data breach: there must be a GDPR infringement, real harm, and a direct link between the two. In Germany, Moritz Hennemann took office as Federal Data Protection Commissioner at a moment when, in Heise's assessment, government plans risk weakening data protection authorities rather than strengthening them.

Consumer protection produced the most visible new case. Through the Consumer Protection Cooperation Network, European consumer watchdogs are investigating nine gaming companies, including the creators of Candy Crush and Minecraft, over in-game payments. According to Silicon Republic, the probe looks at transparency around costs and possible pressure on players to buy virtual currency. It is an investigation, not a finding of wrongdoing.

Scams on social media drew pressure of their own. European consumer groups, in a call published by BEUC, urged EU and national authorities to enforce the Digital Services Act against platforms that enable fraud, pointing to losses of €4.2 billion in 2024. Generative AI is raising the stakes: Heise reported that Italian prosecutors are investigating fraud cases in which scammers impersonated a bank CEO via WhatsApp and used AI-generated voices to trick a manager into transferring €95 million.

The Commission also proposed the KIDS ACT, which would restrict access to certain platforms for under-15s. EDRi criticised the proposal for leaning on age limits instead of tackling the harmful design choices and business models behind online harm.

Across the Atlantic, the regulatory contrast was hard to miss. Google, Meta, OpenAI and other tech firms signed a voluntary AI security accord with Donald Trump, pledging internal checks and external review. Agenda Digitale pointed out that three of the signatories are already committed to more detailed obligations under the EU's AI Act.

Europe still invents more than it finances.

The final theme is an old one with fresh numbers. Six of the world's ten leading innovation economies are European in WIPO's Global Innovation Index, EU-Startups reported, yet the continent captures less than 10% of global venture capital deal value. Agenda Digitale made a parallel case about chips: ASML holds critical technology, but Europe struggles to attract the factories that use its machines.

Public money is trying to close part of that gap. Silicon Republic reported that the Commission added €500 million to Horizon Europe, bringing its total budget for 2026 and 2027 to €14.8 billion. Tech.eu tracked more than 70 deals worth over €3.9 billion across Europe during the week and noted that Bull opened a new €80 million production building in France for supercomputers and AI infrastructure.

Among the smaller rounds, the ones most relevant to sovereignty said so openly. Berlin-based Deepslate raised €7.7 million for a voice AI platform focused on European languages and hosted entirely within the EU. Danish Sovera Security secured €535,000 from EIFO to build AI cybersecurity centred on data and operational sovereignty. Helsingborg's Klang raised €1.32 million and released Pianissimo, an open-source speech-to-text model for Swedish. On the investor side, DIG Ventures closed a $120 million third fund to back around 30 early-stage European AI infrastructure startups.

Taken together, the week's stories describe a continent sharpening its legal tools for cloud, data and platforms, while the money and industrial capacity needed to build its own alternatives still trail its ambitions.