European Union officials and member states are engaged in discussions over technology policies concerning the allocation of mobile satellite spectrum and cybersecurity standards for cloud computing services. The debates highlight differing views within the bloc on how to balance goals of digital sovereignty with principles of open market competition.
The discussions center on two key regulatory areas. The first involves a proposal to provide an EU-based consortium preferential access to spectrum for a new satellite network. The network is intended to allow direct-to-mobile satellite communications across the European continent. Proponents of the plan argue that it would advance the EU’s “strategic autonomy” by creating a secure, independent communications infrastructure and fostering European leadership in the satellite industry.
According to reports, the proposed consortium includes European satellite and telecommunications companies. However, the approach has prompted debate among member states. Some officials and industry groups have expressed concerns that granting exclusive access could limit competition and potentially sideline non-EU companies with established technologies in the sector.
The second area of debate involves the EU Cybersecurity Certification Scheme (EUCS) for cloud services. A draft of the scheme included provisions that would require non-EU cloud providers to form a joint venture with a European company to be certified to handle the bloc’s most sensitive data. The requirements also stipulated that the infrastructure must be operated and maintained from within the EU, and that the services would not be subject to non-EU laws.
These cybersecurity provisions are supported by officials who contend they are necessary to protect EU data from foreign surveillance and to bolster the continent’s domestic cloud industry. They argue such measures would ensure that sensitive government and commercial data remains under EU jurisdiction.
Conversely, a number of member states and business associations have raised objections. They argue the requirements could be protectionist, limit the EU’s access to leading global cloud technologies, and potentially lead to retaliatory trade measures. Opponents of the stricter requirements advocate for a certification process based on technical security standards rather than a company’s corporate headquarters.
Both policy debates reflect the broader conversation within the EU about achieving “digital sovereignty”—a policy objective aimed at reducing the bloc’s reliance on foreign technology for critical infrastructure and services. The outcome of these internal discussions will shape the regulatory framework for both EU and non-EU technology companies operating within the European Union. Final decisions on the policies have not yet been reached.
