That figure comes from a new study commissioned by CCIA Europe, a lobbying group whose members include Amazon, Google and Meta, and cited against the European Commission’s proposed Cloud and AI Development Act. The research, carried out by the European Centre for International Political Economy, says the bill could impose costs over the next decade that are more than six times the Commission’s own upper estimate of €18 billion.
The report’s case is straightforward enough. If Europe pushes rules that favor local cloud providers, governments and businesses may have to move workloads, rewrite software and rebuild systems designed around existing platforms. The study puts direct public-sector costs at €33.3 billion and assigns another €80 billion to private companies in banking, healthcare, energy and transport.
That €80 billion is also where the asterisk gets large. The number depends on a modeled scenario in which the Commission extends sovereignty requirements beyond public procurement to cover 25 percent of cloud workloads in essential private-sector industries. It is not a cost already written into law. It is a projection based on how far the rules might go.
Still, the report is not pretending the money disappears into thin air. It says code rewriting and re-architecting account for 69 percent of the projected costs, which is the sort of detail that gives the warning some weight. Anyone who has watched organizations get deeply attached to a particular vendor’s tools will recognize the basic problem: cloud dependence is easy to build and expensive to unwind.
The politics of the warning are harder to miss. CCIA represents companies that dominate much of Europe’s cloud market and have every reason to resist rules that could steer customers elsewhere. The same excerpted report also notes that Amazon and Google have been developing and marketing sovereign cloud offerings of their own. Sovereignty, apparently, is a compelling selling point right up to the moment Brussels starts defining it too strictly.
The study focuses on Article 31 of the proposed legislation, which it says could let the Commission extend sovereignty requirements into essential private-sector services. CCIA is urging EU governments to scale that back, limit restrictions to sensitive workloads and replace origin- or nationality-based requirements with what it calls risk-based technical safeguards.
Its country estimates are tailored to sharpen the argument. Luxembourg is presented as the hardest hit at €1,711 per worker over ten years, followed by Denmark at €905, Austria at €900, Finland at €864 and Ireland at €856.
Mitchell Rutledge, CCIA Europe’s policy manager, said member states “cannot rely on the Commission’s incomplete estimates” when deciding on the bill’s sovereignty requirements because “taxpayers and businesses will foot the bill.”
They may. But this is still a lobbying intervention built around a policy scenario, not a neutral invoice from Brussels.
Marcus Azzopardi 
Sophia Borg 
Harvey Jr. 
Gabriel Fenech