Key organisations express concerns over the Cybersecurity Certification Scheme for Cloud Services

AmCham EU issued a joint statement alongside key EU digital business organisations to express concerns over several procedural and substantial elements in the Cybersecurity Certification Scheme for Cloud Services (EUCS) currently undertaken within the European Union Agency for Cybersecurity (ENISA). While the EU's ambition to tackle global cyber threats and protect citizens, institutions and businesses through cybersecurity certifications is appreciated, the inclusion of 'digital sovereignty' requirements risks negatively impacting international and European providers of cloud computing solutions as well as organisations that use cloud and require high levels of cybersecurity assurances.

News
13 Jun 2022
Digital
Key organisations express concerns over the Cybersecurity Certification Scheme for Cloud Services

AmCham EU issued a joint statement alongside key EU digital business organisations to express concerns over several procedural and substantial elements in the Cybersecurity Certification Scheme for Cloud Services (EUCS) currently undertaken within the European Union Agency for Cybersecurity (ENISA). While the EU's ambition to tackle global cyber threats and protect citizens, institutions and businesses through cybersecurity certifications is appreciated, the inclusion of 'digital sovereignty' requirements risks negatively impacting international and European providers of cloud computing solutions as well as organisations that use cloud and require high levels of cybersecurity assurances.

The potential inclusion of 'digital sovereignty' requirements will create complex legal compliance procedures, create obstacles to information sharing, give rise to significant entry barriers for companies and will not necessarily increase levels of cybersecurity. The EUCS discussions have been characterised by limited transparency and lack of stakeholder engagement. Moreover, the different Member States' positions on this issue might result in Single Market fragmentation, should these provisions be adopted. Thus, the signatories urge ENISA and the European Commission to inform and engage with stakeholders throughout the EUCS finalisation process to prevent it from carrying unnecessary and discriminatory requirements.

Related items

News
24 Mar 2026

Reducing complexity in Europe’s digital rulebook

The EU’s digital regulatory landscape has expanded significantly in recent years. While the creation of these rules pursues important objectives, their interaction has not always been fully aligned, creating legal uncertainty and increased compliance burdens for businesses.  

The European Commission’s proposals for a Digital Omnibus and the Digital Omnibus on AI Regulation Proposal (AI Omnibus) both offer opportunities to improve coherence across the EU’s digital rulebook while supporting Europe’s competitiveness in the digital economy. Both initiatives represent a positive step forward, but further refinements will be needed to ensure they fully deliver on their objectives while maintaining high standards for safety and fundamental rights. 

The AI Omnibus focuses on the AI Act, while the Digital Omnibus addresses broader elements of the digital acquis, including data and cybersecurity legislation. Together, they aim to reduce fragmentation and streamline obligations across multiple frameworks. Explore below how these proposals can better support innovation and competitiveness in Europe.

Digital
Read more
Read more about Reducing complexity in Europe’s digital rulebook
News
13 Mar 2026

Discussing digital policy priorities with MEPs in Strasbourg

From Monday, 9 to Wednesday, 11 March 2026, AmCham EU travelled to the European Parliament in Strasbourg for a series of meetings with policymakers to discuss ongoing EU digital policy initiatives. The delegation met with  members of the European Parliament, accredited parliamentary assistants and group policy advisers , to discuss priorities for the EU’s digital agenda. This includes exchanges on AI Omnibus, Digital Omnibus, Cybersecurity Act review, the Digital Networks Act and the upcoming Cloud and AI Development Act. Throughout the meetings, members emphasised the importance of urgent action to support the simplification of overlapping digital rules, strengthening cybersecurity while avoiding fragmentation in the Single Market and supporting innovation through proportionate, risk-based regulation.

Digital
Read more
Read more about Discussing digital policy priorities with MEPs in Strasbourg
Position Paper
11 Mar 2026

Advancing EU data and cybersecurity rules through the Digital Omnibus

Digital
Simplification
Read more
Read more about Advancing EU data and cybersecurity rules through the Digital Omnibus