How do data centre permits and single information points work in Estonia under CADA?

Under the proposed Cloud and AI Development Act (CADA), Estonia would be required to designate one or more Single Information Points (SIPs) to assist data

Summary Under the proposed Cloud and AI Development Act (CADA), Estonia would be required to designate one or more Single Information Points (SIPs) to assist data centre operators with all authorisations for projects located within data centre acceleration zones, as mandated by Article 12. This mechanism would streamline the permitting process through Article 13, which introduces an "aggregated baseline permit" covering zone-level authorisations while explicitly excluding installation-specific permits. Crucially, Estonia could leverage existing SIPs established under the Gigabit Infrastructure Act (Regulation (EU) 2024/1309) to avoid administrative duplication. If adopted, this framework would impose a strict 12-month maximum on permit-granting procedures for projects within these zones, significantly reducing regulatory fragmentation for CTOs, architects, and SMEs.

Detail

The Cloud and AI Development Act (CADA), proposed by the European Commission in COM(2026) 502 final, establishes a harmonised framework to accelerate the deployment of data centre capacity across the EU. For Estonia, a nation with ambitious digital infrastructure goals, Articles 12 and 13 introduce specific mechanisms to dismantle the regulatory bottlenecks that have historically slowed data centre development. These provisions address the fragmentation of permitting by mandating the creation of dedicated administrative support structures (SIPs) and a novel permit architecture (aggregated baseline permits) within designated acceleration zones.

The Single Information Point (SIP): A Unified Administrative Gateway (Article 12)

Article 12 of the CADA proposal imposes a clear obligation on Member States, including Estonia, to designate one or more Single Information Points (SIPs) for data centre operators deploying projects within acceleration zones. The primary function of these SIPs is to assist operators throughout the entire lifecycle of a data centre project with respect to all authorisations required for deployment.

Scope of Assistance The SIPs are designed as active administrative support structures, not merely passive informational portals. According to Article 12(2), the role of a single information point may include coordinating, facilitating, monitoring, and sharing information on procedures relating to:

Spatial planning and building permits.
Environmental assessments, in accordance with the Regulation on speeding-up environmental assessments.
Authorisations regarding water abstraction, wastewater discharge, and heat utilisation and recovery.
Compliance with applicable administrative and reporting obligations.
Information to the public, aimed at increasing public acceptance of the data centre project.
Applications for connection to electricity, heat, or communications networks, or other relevant networks.

Interaction with the Gigabit Infrastructure Act (Regulation (EU) 2024/1309) A critical efficiency measure in Article 12(1) is the explicit permission for Member States to designate a SIP already established under Regulation (EU) 2024/1309 (the Gigabit Infrastructure Act) for data centre projects. This is particularly relevant for Estonia, which has already modernised its digital infrastructure permitting under the Gigabit Act. By leveraging existing SIPs, CADA aims to avoid the creation of duplicative administrative silos. The text states that the functions, procedures, and mechanisms applicable to SIPs under the Gigabit Infrastructure Act—including those relating to digital access, administrative coordination, and dispute settlement—shall also apply to the data centre SIPs. This ensures continuity for public authorities and reduces the learning curve for private operators.

Support for SMEs Recognising that smaller operators often lack the legal and administrative resources to navigate complex permitting landscapes, Article 12(4) mandates that SIPs pay particular attention to SMEs. Where appropriate, SIPs must establish a dedicated channel for communication with SMEs to provide guidance and respond to queries related to the implementation of the Regulation. This ensures that the benefits of accelerated deployment are accessible to smaller Estonian firms, not just large hyperscalers.

The Aggregated Baseline Permit: Shifting the Permitting Burden (Article 13)

While Article 12 establishes the who (the SIP), Article 13 establishes the what (the permit structure). Article 13 introduces a radical shift in how permits are granted for data centres within acceleration zones by mandating the creation of an "aggregated baseline permit."

Zone-Level vs. Installation-Specific Permits Article 13(2) requires Member States to prepare and issue an aggregated baseline permit for each designated acceleration zone. This permit authorises the deployment of data centres within that specific zone. Crucially, the text specifies that this baseline permit covers the permits and administrative authorisations required for data centre projects located within the zone, excluding installation-specific permits.

This distinction is vital for architects and CTOs. It means that generic, zone-wide regulatory hurdles—such as general environmental impact assessments, spatial planning approvals, and baseline noise or heat emission standards—are resolved at the zone level before individual projects begin detailed design. Once the aggregated baseline permit is in place, data centre operators are only required to obtain additional permits for activities falling outside the scope of this baseline (Article 13(4)). This significantly narrows the scope of individual project permitting, focusing only on installation-specific variables such as exact building footprints, specific grid connection points, and unique structural engineering details.

Timeline and Efficiency Article 13(5) sets a strict, binding timeline for this process. It mandates that administrative applications related to the planning, construction, and operation of data centres deployed in acceleration zones be processed in an efficient, transparent, and timely manner. Specifically, the permit-granting procedure for data centre projects deployed in data centre acceleration zones shall not exceed 12 months from the moment a comprehensive application has been submitted. This 12-month cap is a hard limit, although Member States may set shorter time limits. This provision directly addresses the uncertainty and prolonged timelines that have historically plagued data centre development in the EU.

Strategic Project Status Article 13(1) further enhances this framework by classifying data centre projects deployed in acceleration zones as "strategic projects" within the meaning of the Regulation on speeding-up environmental assessments. This classification allows these projects to benefit from a dedicated toolbox designed to accelerate environmental assessments while maintaining high levels of protection for human health and the environment.

Implementation in Estonia

For Estonia, the implementation of Articles 12 and 13 requires alignment with national administrative structures. Estonia's proactive approach to digitalising public services provides a strong foundation. The Estonian government would need to:

Designate specific zones as data centre acceleration zones, considering factors such as grid capacity, network connectivity, and environmental sustainability (Article 10).
Appoint or upgrade existing authorities to serve as the Single Information Point, ensuring they have the capacity to handle the complex, multi-agency coordination required by Article 12(2).
Develop the methodology for issuing aggregated baseline permits for these zones, ensuring that all zone-level assessments are completed upfront.

The interaction between the CADA SIP and the Estonian e-Governance ecosystem offers an opportunity to create a fully digital, one-stop-shop for data centre permitting. This would allow CTOs and architects to submit applications, track progress, and receive feedback through a single digital interface, reducing the need for physical interactions and manual document exchanges.

What this means for you

For CTOs, architects, and SMEs evaluating the practical impact of CADA, the changes introduced by Articles 12 and 13 represent a significant reduction in regulatory risk and timeline uncertainty.

For CTOs and Infrastructure Planners:

Predictable Timelines: The 12-month cap on permit-granting procedures (Article 13(5)) allows for more accurate financial modelling and project scheduling. You would no longer face indefinite delays due to fragmented municipal or regional approvals.
Reduced Scope of Work: By leveraging the aggregated baseline permit, your team could focus on installation-specific engineering and compliance rather than re-litigating zone-wide environmental or spatial planning issues. This reduces the need for extensive legal and environmental consulting at the project initiation phase.
Single Point of Contact: Dealing with one SIP instead of multiple municipal, environmental, and energy authorities simplifies stakeholder management. The SIP is legally obliged to coordinate these entities, shifting the burden of coordination from the operator to the state.

For Architects and Engineers:

Earlier Certainty: The availability of an aggregated baseline permit means that many regulatory constraints (e.g., maximum building heights, general noise limits, waste heat requirements) would be known before detailed design begins. This allows for more efficient architectural planning and reduces the likelihood of costly redesigns due to late-stage permit rejections.
Focus on Innovation: With the administrative burden reduced, architects could focus more on sustainable design features, such as advanced cooling systems and waste heat recovery, which are encouraged by CADA's sustainability requirements (Article 11).

For SMEs:

Level Playing Field: The mandatory dedicated channel for SMEs within the SIP (Article 12(4)) would ensure that smaller operators receive the guidance and support needed to navigate the permitting process. This reduces the administrative overhead that often disproportionately affects smaller businesses, making it more feasible for Estonian SMEs to compete in the data centre market.
Lower Entry Barriers: By clarifying the permitting process and reducing timelines, CADA would make it less risky for SMEs to invest in data centre infrastructure, particularly in less traditional hubs outside of Tallinn.

Common misconceptions

Misconception 1: The Single Information Point grants the permits. Correction: The SIP does not have the authority to grant permits itself. Its role is to assist, coordinate, and facilitate the process. The actual permits are still issued by the relevant competent authorities (e.g., environmental agencies, building control departments). However, the SIP ensures that these authorities work in a coordinated manner and that the operator has a clear path to compliance.

Misconception 2: The aggregated baseline permit covers all aspects of the data centre project. Correction: The aggregated baseline permit covers zone-level authorisations only. Installation-specific permits are still required. For example, while the zone may have a general environmental assessment, the specific construction of a building may still require a building permit. The baseline permit removes the need for duplicate zone-wide assessments, but it does not eliminate all permitting requirements.

Misconception 3: CADA replaces the Gigabit Infrastructure Act's Single Information Point. Correction: CADA does not replace it; it leverages it. Article 12(1) explicitly allows Member States to designate the SIP established under the Gigabit Infrastructure Act (Regulation (EU) 2024/1309) for data centre projects. This creates a unified digital infrastructure permitting portal, rather than two separate systems.

Misconception 4: The 12-month timeline applies to all data centre projects in Estonia. Correction: The 12-month cap applies only to data centre projects deployed within designated data centre acceleration zones (Article 13(5)). Projects outside these zones may still be subject to national permitting timelines, which could be longer. Therefore, locating a project within an acceleration zone is a strategic decision to benefit from this accelerated timeline.

This is general information about a draft EU regulation, not legal advice.