Recital (62)

printed pages 30 · source locator: Recital (62); printed pages 30

Official source: COM(2026) 502 final — Proposal for a Cloud and AI Development Act

(62)

To ensure a coherent and risk-based approach to the autonomy of the Union, Member
            States and the Union entities should carry out one or more risk assessments to
            determine public-sector activities that concerns public order. The risk assessment
            should determine which Union assurance level is appropriate for the activities, due to
            their importance in preserving public order in sectors falling under Directive (EU)
            2022/2555 and in the areas of national security, internal security, external border
            management, defence, justice or law enforcement, including the prevention,
            investigation, detection and prosecution of criminal offence. To ensure consistent
            application of this Regulation and preserve the integrity of the digital single market,
            the Commission will provide guidance to assist Member States in carrying out their
            risk assessments. Whereas the determination of the level of sensitivity of information
            that may be hosted in a cloud computing service that offers a Union assurance level
            lies within the competence and discretion of the Member States, to provide
            consistency across the Union, Union assurance levels 3 and 4 should allow for the
            secure hosting of EU classified information.

Qualifications

• Text is a faithful source slice; PDF page furniture and form-feed separators are removed.
• Source footnotes remain in the source slice in their printed location.