EU Commission Action Plan on Cybersecurity and AI — Cloud and AI Development Act Proposed

The European Commission presented an Action Plan on Cybersecurity and Artificial Intelligence on July 7, 2026, aimed at supporting safe and responsible AI use while strengthening cyber resilience across the EU. The following day, July 8, it also presented the proposed Cloud and AI Development Act as part of the AI Continent Action Plan — a framework intended to address cloud concentration risk, promote EU-based sovereign AI infrastructure, and reduce European dependency on non-EU cloud and AI platforms. The convergence of the NIS2 enforcement referral, the data sovereignty consultation, the Cloud and AI Development Act proposal, and the EU AI Act transparency obligations activating August 2 represents the most concentrated week of European digital regulatory action since GDPR entered into force. For law firms advising clients on EU digital compliance strategy, the aggregate regulatory signal is unambiguous: Brussels is moving from standard-setting to enforcement across the full stack of digital law simultaneously, and compliance programmes built to meet each obligation in isolation will not be adequate for the cross-cutting governance infrastructure the EU is now requiring.