The European DIGITAL SME Alliance has expressed concern over modifications to the EU Cloud Services Cybersecurity Certification Scheme (EUCS). The Alliance believes that the removal of provisions requiring EU-based cloud services to store and process data within the European Union significantly compromises the security and sovereignty of EU citizens’ personal data. This revision, which could allow foreign cloud providers more access to sensitive information, is seen as a step back in Europe's push for digital independence.

The DIGITAL SME Alliance calls for the restoration of these "sovereignty requirements" to protect citizens' data, promote local cloud innovation, and strengthen the EU's digital ecosystem. They argue that without strict EU data storage policies, foreign entities could pose cybersecurity risks, potentially exposing personal data to surveillance or breaches. The Alliance emphasises the need for a competitive, secure cloud infrastructure managed by European providers, fostering independence from external companies and governments.

In light of these changes, the group advocates for a stronger European stance on digital sovereignty, arguing that ensuring secure cloud services is critical to protecting not just citizens' data, but also the broader digital economy. They propose reinstating the criteria for local data management to secure Europe’s digital future and boost trust in the EU’s cloud infrastructure.