European tech contenders are urging Brussels to stop giving American and Chinese platforms a structural free pass, warning that unless the European Union enforces its own rulebook with more bite, Portugal-based startups and scale-ups will remain trapped on an uneven playing field.
Why This Matters
• Regulatory asymmetry: Non-EU providers currently dodge standards imposed on homegrown rivals, keeping European alternatives boxed out.
• Procurement leverage: Public administrations across Portugal and the wider EU are being asked to prioritize European suppliers in government contracts.
• Sovereignty timeline: The European Commission is set to unveil a tech-sovereignty package by mid-2026, including rules that could reshape cloud infrastructure procurement across the bloc.
A coalition comprising Ecosia (the Berlin-based search engine), Proton (the Swiss privacy-focused email service), and Mastodon (the federated social network) signed a joint statement alongside NGOs such as Defend Democracy and Save Social, plus Green members of the European Parliament. Their core argument: Brussels has drafted robust legislation—the Digital Markets Act (DMA), the AI Act, and various content-moderation frameworks—but enforcement remains toothless, allowing incumbents from the United States and China to retain dominance.
The Structural Tilt
"The EU digital ecosystem continues to face conditions where non-European suppliers operate with a structural advantage that exempts them from the standards Europe expects of its own actors," the signatories wrote. They acknowledge that recent regulations reflect the continent's commitment to human-centric, privacy-respecting technology, yet argue those same rules fall short when gatekeepers—defined by the DMA as platforms with significant market power—skirt obligations in practice.
Current data shows more than 80% of the EU's digital products, services, infrastructure, and intellectual property depend on foreign sources. American cloud giants Amazon Web Services, Microsoft Azure, and Google Cloud command roughly 70% of the European market, while China has built a state-backed digital fortress that spans e-commerce, telecommunications, facial recognition, and electric-vehicle software.
For Portugal, this dependency translates into limited leverage: government agencies, municipalities, and state-owned enterprises often default to American SaaS subscriptions or Chinese hardware because European alternatives lack scale, brand recognition, or interoperability guarantees. The signatories contend this is not merely a competitive disadvantage but a strategic exposure in an era of tense geopolitics and accelerating tech decoupling.
What Brussels Is Planning
The European Commission is preparing a Cloud and AI Development Act (CADA), expected to be formally proposed by mid-2026. The draft legislation aims to triple EU data-center capacity over the next five to seven years and satisfy domestic demand entirely by 2035. To achieve this, CADA will introduce mandatory procurement criteria for public-sector buyers: contracts deemed critical or sensitive will require cloud vendors to demonstrate EU-developed software and hardware, alongside robust data-protection guarantees.
In parallel, an Energy Efficiency Package for Data Centers is scheduled for release in Q1 2026, targeting carbon-neutral operations by 2030. The package will set minimum performance benchmarks, streamline environmental-impact assessments, and fast-track permits for facilities that use European-manufactured chips or achieve significant energy savings.
Together, these measures represent the backbone of the EU's tech-sovereignty strategy—a bid to ensure the bloc can run its own digital infrastructure without depending on foreign vendors whose home governments wield extraterritorial laws, such as the United States CLOUD Act, or restrict technology exports for geopolitical leverage.
Impact on Residents and Businesses
For professionals and companies living in Portugal, the shift carries both opportunity and friction.
Opportunity: Portuguese tech firms—many of them small and medium-sized enterprises (SMEs)—stand to benefit if public administrations across the EU prioritize homegrown suppliers. National programs such as Portugal 2030 and the Recovery and Resilience Plan already allocate €11 billion toward digitalization and innovation. To access these funds, eligible companies and public bodies can apply through the COMPETE 2030 and Digital Portugal portals, or contact the Institute for Support to Small and Medium Enterprises (INAPEM) for eligibility guidance. More information is available on the Portuguese government's digitalization initiative website and EU funding databases. This positioning allows Portugal-based developers to compete for newly opened contracts in cloud services, cybersecurity, and AI. Tech professionals can monitor opportunities through EU procurement databases and the Portuguese Digital Government Portal, while SMEs should review their EU compliance status and data-localization requirements ahead of 2026 procurement changes.
Friction: In the near term, compliance costs will rise. Government bodies, hospitals, and universities that currently rely on American productivity suites or Chinese networking hardware will face pressure to audit supply chains, renegotiate contracts, and migrate data—a process that can be expensive, time-consuming, and disruptive. Smaller municipalities with lean IT budgets may struggle to meet new procurement thresholds without additional EU grants or technical assistance.
Investors watching Portugal's startup scene should note that the regulatory environment is tilting toward interoperability, open standards, and energy efficiency—traits that favor lean, modular platforms over monolithic legacy systems. Companies emerging from Portugal's innovation ecosystem exemplify the type of ventures positioned to capitalize on Brussels' push toward European digital independence.
Enforcement Gap
The Digital Markets Act has been in force since May 2023 and became enforceable against designated gatekeepers—Alphabet (Google), Apple, Meta, Amazon, Microsoft, Booking.com, and ByteDance (TikTok)—in March 2024. Yet critics argue the European Commission has been slow to sanction non-compliance, allowing platforms to drag their feet on obligations such as data portability, third-party app-store access, and unbiased search rankings.
The tech coalition's statement calls for "more rigorous application" of the DMA to level the playing field. Specifically:
• Ban self-preferencing: Search engines and app stores must rank results by relevance, not commercial interest.
• Mandate data sharing: Gatekeepers must provide business users and competitors with access to anonymized datasets, enabling startups to build complementary services.
• Enable direct communication: Developers should reach end-users outside platform-controlled channels, reducing the gatekeeper's grip on customer relationships.
• Accelerate interoperability: Messaging apps and social networks must open APIs so smaller European services can connect without reverse-engineering.
For Portugal-based developers building privacy-focused alternatives—whether in email, messaging, or cloud storage—these provisions translate directly into market access. A startup offering end-to-end encrypted collaboration tools can now, in theory, integrate with Microsoft Teams or Slack via mandated APIs, rather than remaining an isolated island.
Public Procurement as Industrial Policy
The signatories argue that government purchasing power should be deployed as industrial policy. "Public procurement must contribute to the creation of viable markets for European digital solutions and infrastructure that respect principles and values such as openness, collaboration, privacy, energy efficiency, and social and environmental rights," the statement reads.
This approach mirrors China's longstanding practice of directing state buyers toward domestic suppliers—Huawei, Alibaba Cloud, and Tencent—through subsidies, tax breaks, and regulatory steering. The United States, by contrast, has instructed diplomats to oppose foreign data-sovereignty rules, viewing them as protectionist barriers that harm American tech exporters.
Brussels is attempting a middle path: using regulatory standards rather than overt subsidies to nurture European champions. If successful, the model could create a €75 million federally funded telco-edge-cloud network (EURO-3C) and dozens of regional data hubs powered by European-manufactured semiconductors under the European Chips Act.
Competitive Landscape
United States: The America's AI Action Plan, launched in 2025, commits billions to maintaining supremacy in artificial intelligence, semiconductors, and quantum computing. American firms hold commanding leads in patents, venture capital, and hyperscaler infrastructure. IBM, Intel, and Nvidia continue to set benchmarks in chip design, even as the U.S. remains dependent on ASML (a Netherlands-based firm) for the most advanced lithography machines.
China: Beijing pursues cyber-sovereignty through a state-orchestrated ecosystem encompassing national cloud platforms, sovereign networks, and autonomous operating systems. China leads in drone manufacturing, facial recognition, high-speed rail automation, and renewable-energy hardware. Recent moves include blocking foreign acquisitions of AI firms and promoting a BRICS Digital coalition to challenge Western technological hegemony.
European Union: The bloc is betting on regulatory power as a competitive moat—strict privacy rules, carbon accounting, and ethical AI standards that, if enforced, could raise the cost of doing business for foreign platforms while creating niches for compliant European alternatives. Whether this regulatory fortress translates into commercial success remains an open question.
Open Questions
Critics warn that stricter procurement rules risk fragmenting the single market if each member state interprets "European technology" differently. Does a Portugal-registered subsidiary of a Californian cloud provider qualify? What if the software is open-source but the data centers sit in Virginia? And will smaller member states with limited domestic tech capacity end up paying premium prices for lower-quality services simply to tick a sovereignty box?
Supporters counter that without decisive action, Europe will remain a rule-taker rather than a rule-maker—dependent on foreign platforms that can unilaterally change terms, pricing, or availability in response to geopolitical winds.
For residents and businesses in Portugal, the stakes are immediate: the direction Brussels takes over the next 12 months will determine whether local tech talent builds the next generation of digital infrastructure or continues migrating to Silicon Valley and Shenzhen.
