EU Data Sovereignty Consultation Closes September 15 — Signals New Regulatory Framework Ahead

The European Commission is running a targeted consultation — open through September 15, 2026 — on challenges to data sovereignty and data flows facing EU organisations operating internationally. The consultation focuses on the practical difficulties EU organisations face in complying with foreign law demands (including US CLOUD Act orders), maintaining control over data processed by non-EU cloud providers, and navigating an international data governance landscape that is increasingly fragmented. The consultation is expected to inform a new EU Data Sovereignty Framework or legislative instrument in 2027, building on the EC's October 2025 Cloud Sovereignty Framework. Separately, the EU e-evidence package came into force on August 18, 2026, enabling EU law enforcement to obtain electronic evidence across member states via European Production Orders. For firms advising multinational clients on data governance, the period between now and the consultation deadline is an opportunity to shape the future framework through participation.