How do data centre permits and single information points work in Portugal under CADA?

Under the proposed Cloud and AI Development Act (CADA), Portugal would be required to designate one or more single information points (SIPs) to assist data

Summary Under the proposed Cloud and AI Development Act (CADA), Portugal would be required to designate one or more single information points (SIPs) to assist data centre operators with all authorisations within designated data centre acceleration zones, as mandated by Article 12. These SIPs would streamline the permitting process by coordinating with an aggregated baseline permit established under Article 13, which covers zone-level administrative authorisations while explicitly excluding installation-specific permits. This framework aims to cap the permit-granting procedure for individual projects at a maximum of 12 months and allows Portugal to integrate these functions with existing structures under the Gigabit Infrastructure Act (Regulation (EU) 2024/1309), avoiding bureaucratic duplication.

Detail

The Cloud and AI Development Act (CADA), as proposed in COM(2026) 502 final, introduces a harmonised framework designed to accelerate the deployment of data centres across the European Union. For Portugal, as for all Member States, the proposal addresses critical bottlenecks in permitting and administrative coordination through two primary mechanisms: the designation of Single Information Points (SIPs) under Article 12 and the creation of Aggregated Baseline Permits under Article 13. These measures are intended to transform the regulatory landscape for data centre operators, shifting from a project-by-project approval model to a zone-based acceleration model.

The Role of Single Information Points (Article 12)

Article 12 of the CADA proposal imposes a clear obligation on Member States to designate one or more single information points (SIPs) specifically for data centre operators deploying projects within data centre acceleration zones. The primary function of the SIP is to provide comprehensive assistance to the operator throughout the entire lifecycle of the data centre project regarding all authorisations required for deployment.

The text of Article 12(1) states: "The data centre operator shall have the right, upon request, to be assisted by a single information point throughout the entire lifecycle of the data centre project in an acceleration zone with respect to all authorisations required for the deployment of the data centre. For that purpose, Member States shall designate one or more single information points for data centre operators of data centre projects in acceleration zones."

Crucially, the proposal is designed to leverage existing administrative efficiencies rather than creating entirely new bureaucracies. Article 12(1) explicitly notes: "The Member States may designate for this purpose a single information point established under Regulation (EU) 2024/1309." Regulation (EU) 2024/1309, known as the Gigabit Infrastructure Act, already mandates single points of contact for the deployment of electronic communications networks. By permitting the use of this existing SIP, CADA aims to avoid bureaucratic duplication and allow Portugal to leverage established administrative channels. If Portugal designates the existing Gigabit SIP for CADA purposes, the functions, procedures, and mechanisms applicable under Regulation (EU) 2024/1309—including digital access, administrative coordination, and dispute settlement—would also apply to data centre projects.

The scope of assistance provided by the SIP is broad and covers the full spectrum of regulatory hurdles. Article 12(2) outlines that the role may include coordinating, facilitating, monitoring, and sharing information on procedures relating to:

Spatial planning and building permits;
Environmental assessments, in accordance with the forthcoming Regulation on speeding-up environmental assessments;
Authorisations regarding water abstraction, wastewater discharge, and heat utilisation and recovery;
Compliance with applicable administrative and reporting obligations;
Information to the public, with the aim of increasing public acceptance of the data centre project;
Applications for connection to electricity, heat, or communications networks.

Furthermore, Article 12(3) mandates that the SIP shall assist in assessing whether a data centre project may qualify as a strategic project under Article 14 of CADA. This is a critical function, as strategic projects are eligible for additional support measures and prioritisation.

To ensure that smaller operators are not disadvantaged, Article 12(4) requires that when providing administrative support, the SIP shall pay particular attention to SMEs. Where appropriate, the SIP must establish a dedicated channel for communication with SMEs to provide guidance and respond to queries related to the implementation of the Regulation.

The Aggregated Baseline Permit (Article 13)

While the SIP provides coordination and assistance, Article 13 establishes the substantive mechanism for accelerating the permit-granting process. The cornerstone of this acceleration is the "aggregated baseline permit."

Article 13(2) states: "For each designated acceleration zone, Member States shall prepare and issue an aggregated baseline permit authorising the deployment of data centres in that acceleration zone. This aggregated baseline permit shall cover the permits and administrative authorisations required for the data centre projects located within the acceleration zone, excluding installation-specific permits."

This provision fundamentally shifts the permitting burden. Instead of each individual data centre operator negotiating zone-level environmental and spatial planning approvals from scratch, the Member State (Portugal) must carry out all necessary procedures and assessments—including environmental assessments and planning procedures—at the zone level before issuing the baseline permit (Article 13(3)). Consequently, data centres deployed in these zones are required to obtain additional permits only for activities falling outside the aggregated baseline permit (Article 13(4)).

The proposal sets a strict timeline for the remaining permit-granting process. Article 13(5) mandates: "The permit-granting procedure for data centre projects deployed in data centre acceleration zones shall not exceed 12 months, from the moment a comprehensive application has been submitted." This 12-month limit applies to the specific installation permits that remain after the baseline permit has been issued. Member States may set shorter time limits, but they cannot exceed this 12-month threshold.

Additionally, Article 13(5) encourages Member States to allocate the status of highest national significance to data centre projects where such a status exists in national law, treating them as such in permit-granting processes. This is a discretionary measure for Member States and does not create an obligation to introduce such a status if it does not already exist.

Interaction with Existing EU Frameworks

The CADA's permitting framework is designed to complement, not replace, existing EU legislation. The reference to Regulation (EU) 2024/1309 in Article 12 highlights the intention to align with the Gigabit Infrastructure Act. This alignment is strategic, as data centres require robust connectivity. By potentially using the same SIP, operators in Portugal would benefit from a unified administrative interface for both their power/connectivity infrastructure and their data centre construction permits.

Moreover, Article 13(1) states that data centre projects deployed in acceleration zones shall be considered as strategic projects within the meaning of the forthcoming Regulation on speeding-up environmental assessments. This designation allows these projects to benefit from a dedicated toolbox established under that Regulation, further accelerating environmental impact assessments.

Implementation Timeline

The CADA proposal specifies that Member States must designate data centre acceleration zones by the date of entry into force plus six months (Article 10(1)). The obligations for SIPs and aggregated baseline permits would fall into effect alongside these designations. Portugal would need to ensure its administrative structures are ready to handle these new responsibilities, including the potential integration of the Gigabit SIP or the creation of a new dedicated body.

What this means for you

For CTOs, architects, and SMEs evaluating the practical impact of CADA in Portugal, the introduction of single information points and aggregated baseline permits represents a significant reduction in administrative uncertainty and timeline variability.

For SMEs: The explicit requirement in Article 12(4) for SIPs to pay particular attention to SMEs and establish dedicated communication channels is a notable safeguard. This means that smaller operators will not be left to navigate complex regulatory frameworks alone. When engaging with the Portuguese SIP, SMEs should proactively seek out these dedicated channels to ensure they receive tailored guidance on compliance and permit applications.

For Project Planning: The 12-month maximum permit-granting procedure under Article 13(5) provides a clearer ceiling for project timelines. Previously, permitting timelines in various EU jurisdictions could be unpredictable and lengthy. With the aggregated baseline permit handling zone-level approvals, operators can focus their due diligence on installation-specific permits, which are now subject to a strict statutory deadline. This predictability aids in financial modelling and investment decisions.

For Strategic Projects: If your data centre project includes highly sustainable or innovative features, supports essential public sector functions, or addresses a major shortage of compute capacity, it may qualify as a strategic project under Article 14. The SIP is obligated to assist in assessing this qualification (Article 12(3)). Early engagement with the SIP to determine strategic project status can unlock additional benefits, such as potential support measures from Member States and Union programmes.

For Connectivity Integration: If Portugal designates the existing Gigabit Infrastructure Act SIP as the CADA SIP, you may be able to coordinate your data centre permit applications with your network connectivity applications through a single interface. This integration can streamline the deployment of both compute and connectivity infrastructure, reducing the administrative overhead of dealing with multiple regulatory bodies.

Common misconceptions

Misconception 1: The Single Information Point grants the permits. The SIP does not have the authority to grant permits. Its role is to assist, coordinate, facilitate, and monitor the process. The actual permit-granting authority remains with the relevant national, regional, or local authorities. The SIP acts as a guide and coordinator, ensuring that all necessary information is shared and that procedures are followed efficiently, but it does not replace the regulatory decision-makers.

Misconception 2: The aggregated baseline permit covers all permits. The aggregated baseline permit covers zone-level authorisations, such as spatial planning and certain environmental assessments. It explicitly excludes installation-specific permits (Article 13(2)). Operators will still need to obtain permits for specific installation details that are not covered by the baseline permit. However, the scope of these remaining permits is significantly reduced, and their processing is subject to the 12-month maximum timeline.

Misconception 3: Portugal must create a new SIP from scratch. Article 12(1) allows Member States to designate an existing single information point, specifically mentioning the one established under Regulation (EU) 2024/1309 (Gigabit Infrastructure Act). Portugal is not obligated to create a new, separate administrative body if it can effectively integrate these functions into an existing structure. This promotes administrative efficiency and reduces the burden on both the state and operators.

Misconception 4: The 12-month timeline applies to the entire project lifecycle. The 12-month maximum timeline under Article 13(5) applies specifically to the permit-granting procedure for data centre projects deployed in acceleration zones, starting from the moment a comprehensive application is submitted. It does not cover the time required for the Member State to issue the initial aggregated baseline permit for the zone, which is a separate process carried out by the state before individual projects apply. Nor does it cover the time required for construction or operation.

This is general information about a draft EU regulation, not legal advice.