TL;DR
- The European Union’s cloud certification scheme is being recommended to mimic France’s SecNumCloud model.
- MEP Sarah Knafo argues that the current European Cybersecurity Certification Scheme for Cloud Services (EUCS) lacks sufficient protections for sensitive data.
- The proposal aims to enhance EU technological sovereignty by ensuring data immunity from non-European regulations.
- The discussions around EUCS have been politically charged, reflecting broader debates over sovereignty in data governance.
The future of cloud cybersecurity certification in the European Union (EU) is under scrutiny as a report from MEP Sarah Knafo, part of the far-right Europe of Sovereign Nations group, advocates for a new approach grounded in France’s existing SecNumCloud scheme. With the advancement of the EU’s Cybersecurity Certification Scheme for Cloud Services (EUCS) still pending, Knafo’s report seeks to address significant gaps related to the protection of sensitive data across European digital services.
Concerns About Current Certification
The EUCS framework has faced criticism for not providing adequate security guarantees regarding the hosting of sensitive European data. Knafo’s report emphasizes the necessity of introducing a European cybersecurity criterion that prioritizes sovereignty. According to her findings, “When it comes to sensitive data, a European cybersecurity criterion should be introduced that takes sovereignty into account,” highlighting the need for potential alignment with SecNumCloud’s stringent requirements.
“To ensure that the hosting provider is not subject to non-European legislation, the EUCS certification would have to align with the guarantees required by the French SecNumCloud certification regarding the criteria of ‘immunity’ of data from extraterritorial laws and company control.”
These assertions come amidst ongoing discussions initiated by the European Commission in 2019, which requested the EU’s cybersecurity agency, ENISA, to take the lead in developing the EUCS framework. However, these discussions have been marred by political disagreements, particularly concerning the sovereignty requirements that many member states advocate. France has been particularly vocal, emphasizing its need to maintain the SecNumCloud certification even as the broader EU scheme progresses.
Political Nuances and Future Implications
The current state of the EUCS discussions illustrates the complex intersection of cybersecurity and national sovereignty within the EU. Knafo’s report suggests six recommendations aimed at bolstering the EU’s technological independence, which include:
- Encouraging private investment in promising European technology companies by simplifying regulations.
- Eliminating two existing regulations for every new regulation proposed in strategic sectors.
- Ensuring immunity for sensitive data from non-EU laws.
As the report awaits a decision from the European Parliament’s Industry, Research and Energy (ITRE) committee, the future of the EUCS remains uncertain. The political environment is heavily influenced by a so-called “cordon sanitaire” against Knafo’s ESN group from more mainstream political blocs, compounding the challenges of reaching consensus on a unified cybersecurity strategy.
Conclusion
The debate around cloud certification in the EU reflects broader concerns regarding data sovereignty as technology continues to evolve. Knafo’s recommendations, rooted in the French SecNumCloud model, may pave the way for a more robust cybersecurity framework capable of safeguarding sensitive data within the EU. As negotiations move into critical phases, the implications of these discussions will likely influence how European digital services adapt to future cybersecurity challenges.
References
[^1]: EU cloud certification should mimic French scheme, says nationalist lawmaker. (27 February 2025). Euronews. Retrieved 9 November 2025.
[^2]: EU cloud certification should mimic French scheme, says nationalist MEP. (27 February 2025). Yahoo News. Retrieved 9 November 2025.
[^3]: Cloud certification should mimic French scheme, says nationalist MEP. (27 February 2025). Ground News. Retrieved 9 November 2025.
[^4]: Sarah Knafo on LinkedIn regarding French non-paper on EUCS. (Date Unknown). LinkedIn. Retrieved 9 November 2025.
