A "significant event" is needed
It's all too easy for those in CTO roles to continue to ignore the risk created by US owned cloud infrastructure. Let's face it, that's exactly what they have done for the last decade, despite all the evidence that the data they insist we put on other people's computers is far from safe or confidential. As long as they can collect some nice fat bonus payments for that yacht before they move on to the next job, that seems to be all they're interested in.
The UK is the last country I would be looking to for any solution here. They're more likely to just take a copy of your data before passing them on to the US. I'm cheerleading for Lidl at the moment. They have the reach and the cash to actually make something.
Sadly, the only thing that will wake up the EU's sleeping CTOs is a "significant event" like the US being caught red-handed with data which could only have been obtained by stealing it from a US company's cloud service. Or maybe the EU growing a pair and telling the truth about how secure and confidential all the data that companies donate to Microsoft, Google and friends really is. Transatlantic data sharing agreements have been repeatedly shown to provide insufficient protections to be compatible with the GDPR and it should be illegal to use US cloud services in the EU on that basis.
I'd also love to see Microsoft kicked out of Sweden. They get tax breaks to put their data centres here, whereas local Swedish companies get nothing. It's not as if Microsoft's data centres provide any significant benefits for Sweden - maybe 20 jobs are needed to oversee a data centre, but still the government thinks that depriving the Swedish tax payer of the money Microsoft should pay to run a business here is somehow a good deal.
And as for all these "analysts" telling us "it's too hard to switch" and that "AI is the future", I trust their advice less than I trust Microsoft's promises about the privacy of data harvested by their ad-slinging, user profiling "operating systems".