BSA welcomes the European Commission’s ambition to strengthen Europe’s cloud and AI ecosystem, investment, and infrastructure through the Cloud and AI Development Act (CADA).

BSA recommends that governments prioritize deploying AI for cybersecurity, giving cybersecurity professionals priority access to frontier AI cybersecurity systems, improving vulnerability management, modernizing legacy systems, and building resilience into systems. BSA also recommends aligning regulations to strengthen cybersecurity, upgrading to post-quantum cryptography, and measuring cybersecurity outcomes.

Governments have a sovereign interest in ensuring capable, resilient, and secure digital environments at home. BSA urges policymakers that are pursuing digital sovereignty to focus on supply-chain resilience through frameworks grounded in collaboration, innovation, openness, and choice—not exclusion and self-isolation.

BSA supports the promotion of innovation and patent quality alongside steps to combat abuse of the system.

Launching a voluntary public-private partnership to execute a strategic, phased rollout of frontier AI cybersecurity systems will make the digital ecosystem stronger and more resilient.

Comprehensive privacy legislation must create strong obligations for all companies that handle consumer data. These obligations will only be strong enough to protect consumer privacy and instill trust, though, if they reflect how a company interacts with consumer data.

This document focuses on what processors can (and cannot) do in helping controllers respond to consumer rights requests.