What Happened
European Commission Proposes New Cloud Security Requirements
The European Commission has proposed a Cloud and AI Development Act, which aims to establish sovereignty requirements for cloud computing service providers. The Act shares some characteristics with the US FOCI regime and FedRAMP, but also has distinct differences. The frameworks differ in scope, provider location, and data residency, which may impact companies operating in both the EU and the US. The proposal was discussed in an article by Covington & Burling LLP, which highlights the potential implications for companies and the need for compliance with the new regulations.