Industrial Policy & Trade Monitor· 2666 actions· ✨ 90 recent

On 3 June 2026 the European Commission adopted a legislative proposal for the Cloud and AI Development Act (CADA) — COM(2026) 502 — as part of the European Technological Sovereignty Package. The CADA proposes to triple EU data-centre capacity over five to seven years, introduces a single EU-wide sovereignty assessment framework for cloud and AI services, and establishes common EU-level procurement mechanisms for public administrations prioritising EU-based cloud and AI infrastructure. As a Commission proposal the CADA now enters co-decision (European Parliament + Council) and is not yet law; it is structurally distinct from the co-adopted Chips Act 2.0, addressing cloud infrastructure and AI compute capacity rather than semiconductor supply chains.

On 16 January 2026 the Saudi Council of Ministers, via Cabinet Decision No. 468/1447 (issued 30 December 2025 / 9 Rajab 1447H), published in the Umm Al-Qura Official Gazette four sets of implementing regulations governing the King Abdullah Economic City (KAEC), Ras Al-Khair, Jazan, and Cloud Computing & IT Special Economic Zones. The regulations entered into force on 16 April 2026 (90 days after gazette publication) and operationalise the SEZ framework first launched by ECZA in April 2023. Each zone has its own standalone framework but they share a common headline tax package: 5% corporate income tax for up to 20 years, zero VAT on intra-SEZ and SEZ-import flows, customs-duty suspension on qualifying imports, withholding-tax exemption on dividends and approved cross-border payments, and exemption from key provisions of the Saudi Companies Law, Commercial Register Law, and Trade Names Law. KAEC focuses on advanced manufacturing, automotive, consumer goods, ICT and pharmaceuticals; Ras Al-Khair targets shipbuilding, offshore rigs and MRO; Jazan covers food processing, metals conversion and logistics for Africa-bound trade; the Cloud Computing SEZ is a virtual zone (data centres can sit anywhere in KSA, headquarters must be in Riyadh) for cloud and AI-compute workloads. The package is the operational implementation layer for the 2024 Investment Law and a core Vision 2030 FDI-attraction instrument.

Uruguay's Poder Ejecutivo promulgated Decreto Nº 329/025 on 23 December 2025, comprehensively overhauling the general investment-promotion framework established under Ley Nº 16.906 (1998) and replacing Decreto 268/020. Administered by COMAP under the Ministerio de Economía y Finanzas, the decree entered into force on 1 February 2026 with a coexistence transition period through 30 April 2026 and became the sole operative instrument from 1 May 2026. The decree extends project timelines, creates tiered investment categories (including a mega-investment tier providing up to 25-year IRAE exemptions), expands incentives for SMEs, and explicitly calibrates the scoring matrix toward decentralisation, innovation, export capacity, and strategic sectors including data-centers, green hydrogen, sustainable forestry-pulp, agtech, and global business services.

Government Decree 53/2022/ND-CP, signed 15 August 2022 and effective 1 October 2022, implements Article 26 of Vietnam's 2018 Law on Cybersecurity. It mandates in-country storage of three categories of data — personal data of users in Vietnam, user-generated data, and user-relationship data — for both domestic and foreign cyberspace- service providers, with a minimum 24-month retention period. Foreign enterprises providing telecoms, data storage, domain names, e-commerce, online payments, social networks, online video games, or messaging services to users in Vietnam must establish a Vietnamese branch or representative office within 12 months of a Minister of Public Security written request. The decree closes a four-year implementation gap on the 2018 Cybersecurity Law and is the principal Vietnamese digital-trade barrier alongside Decree 13/2023/ND-CP (Personal Data Protection).