How do data centre permits and single information points work in Romania under CADA?

Under the proposed Cloud and AI Development Act (CADA), Romania would be required to designate one or more Single Information Points (SIPs) to assist data

Summary Under the proposed Cloud and AI Development Act (CADA), Romania would be required to designate one or more Single Information Points (SIPs) to assist data centre operators with all authorisations within designated data centre acceleration zones. These SIPs would act as a centralised administrative hub, coordinating procedures ranging from spatial planning to grid connections. This framework is paired with an aggregated baseline permit for the zone, which pre-covers generic environmental and planning approvals, leaving only installation-specific permits to be processed individually. Crucially, the proposal allows Romania to leverage existing SIPs established under the Gigabit Infrastructure Act (Regulation (EU) 2024/1309) to avoid administrative duplication. For operators, this means a potential 12-month cap on the remaining permit-granting procedure, provided the project is located within a designated zone and a comprehensive application is submitted.

Detail

The proposed Cloud and AI Development Act (CADA), COM(2026) 502 final, introduces a harmonised regulatory framework designed to accelerate the deployment of data centres across the European Union. For Romania, as for all Member States, the core mechanisms for simplifying administrative burdens and reducing the compute capacity gap are outlined in Title III, specifically Article 12 and Article 13. These provisions would shift the regulatory model from a fragmented, multi-authority approval process to a coordinated, zone-based approach, directly addressing the bottlenecks that currently hinder rapid infrastructure deployment.

The Role of the Single Information Point (Article 12)

Article 12 establishes a mandatory obligation for Member States, including Romania, to designate one or more single information points (SIPs) for data centre operators deploying projects within designated data centre acceleration zones. The primary function of the SIP is to assist the operator throughout the entire lifecycle of the data centre project regarding all authorisations required for deployment.

The text of Article 12(1) explicitly states that the data centre operator has the right, upon request, to be assisted by a single information point. This assistance covers "all authorisations required for the deployment of the data centre." Crucially, the proposal allows Member States to leverage existing administrative structures to minimise new bureaucratic layers. Article 12(1) notes that Romania may designate for this purpose a single information point established under Regulation (EU) 2024/1309 (the Gigabit Infrastructure Act). This interoperability is significant for CTOs and architects, as it suggests that the regulatory touchpoint for digital infrastructure connectivity may also serve as the primary liaison for data centre construction and operational permits, reducing the need to navigate separate bureaucratic silos.

The scope of the SIP's role is broad and administrative. According to Article 12(2), the functions may include coordinating, facilitating, monitoring, and sharing information on procedures relating to:

Spatial planning and building permits.
Environmental assessments, in accordance with the forthcoming Regulation on speeding-up environmental assessments.
Authorisations regarding water abstraction, wastewater discharge, and heat utilisation and recovery.
Compliance with applicable administrative and reporting obligations.
Information to the public, aimed at increasing public acceptance of the data centre project.
Applications for connection to electricity, heat, or communications networks, or other relevant networks.

Furthermore, Article 12(3) assigns the SIP a strategic advisory role: it shall assist in assessing whether a data centre project may qualify as a strategic project under Article 14. This means the SIP is not merely a passive information desk but an active participant in helping operators identify opportunities for additional EU-level support and streamlined procedures associated with strategic status.

Article 12(4) introduces a specific focus on small and medium-sized enterprises (SMEs). When providing administrative support, the single point of contact must pay particular attention to SMEs and, where appropriate, establish a dedicated channel for communication. This provision acknowledges that SMEs often lack the legal and administrative resources of hyperscalers to navigate complex permitting landscapes, mandating a more accessible interface for smaller operators.

The Aggregated Baseline Permit (Article 13)

While Article 12 addresses the administrative interface, Article 13 addresses the substantive permitting process through the concept of an aggregated baseline permit. This mechanism is designed to pre-clear generic regulatory hurdles for an entire acceleration zone, rather than requiring each operator to repeat the same assessments.

Article 13(2) obliges Member States to prepare and issue an aggregated baseline permit authorising the deployment of data centres in the designated acceleration zone. This permit covers the permits and administrative authorisations required for data centre projects located within that zone, with a critical exception: it excludes installation-specific permits. This distinction is vital for architects and engineers. It implies that generic environmental impact assessments, noise studies, or general land-use approvals are conducted at the zone level. Once the zone is approved, individual operators do not need to repeat these broad assessments unless their specific installation introduces new, zone-specific impacts.

Before issuing this aggregated baseline permit, Article 13(3) requires Member States to carry out all necessary procedures and assessments, including any relevant environmental assessments, planning procedures, and evaluations applicable at the level of the acceleration zone. This front-loading of regulatory work is intended to provide certainty to investors. Once the baseline permit is in place, Article 13(4) clarifies that data centres deployed in the zone are required to obtain additional permits only for activities falling outside the aggregated baseline permit.

Article 13(5) sets a strict timeline for the remaining administrative applications. It states that administrative applications related to planning, construction, and operation of data centres in acceleration zones must be processed in an efficient, transparent, and timely manner. The permit-granting procedure for these projects shall not exceed 12 months, from the moment a comprehensive application has been submitted. This 12-month cap applies to the specific installation permits not covered by the baseline permit. The article also notes that this time limit is without prejudice to any shorter time limits set by Member States, meaning Romania could choose to implement even faster processing times if desired.

Interaction with Existing Frameworks

The proposal is designed to build upon existing EU legislation rather than replace it entirely. The reference to Regulation (EU) 2024/1309 in Article 12(1) is a key integration point. The Gigabit Infrastructure Act already established single information points for the deployment of gigabit electronic communications networks. By allowing the reuse of these SIPs, CADA aims to create a unified digital infrastructure portal. For a CTO evaluating site options in Romania, this means that the entity helping them secure fibre connectivity permits may also be the entity coordinating their data centre's environmental and building permits, provided the data centre is located in an acceleration zone.

Additionally, Article 13(1) links data centre projects in acceleration zones to the forthcoming Regulation on speeding-up environmental assessments. These projects are considered strategic projects within the meaning of that regulation, granting them access to a dedicated toolbox for accelerated environmental assessments. This further reinforces the streamlined nature of the permitting process for projects located in designated zones.

What this means for you

For CTOs, architects, and SMEs evaluating data centre investments in Romania, CADA's provisions would offer a more predictable and faster regulatory environment, but they also impose specific strategic considerations.

1. Site Selection is Critical: The benefits of the aggregated baseline permit and the 12-month permitting cap would only apply to data centres located within designated data centre acceleration zones. If you build outside these zones, you may not benefit from the pre-approved baseline permits or the strict 12-month timeline. Therefore, identifying which areas in Romania have been, or will be, designated as acceleration zones is a primary step in site selection.

2. One-Stop Shop for Administrative Coordination: You would no longer need to navigate multiple independent authorities for generic approvals. The single information point (SIP) would serve as your primary contact for coordinating spatial planning, environmental assessments, water authorisations, and network connections. This reduces the administrative burden of managing parallel timelines with different agencies. For SMEs, the mandatory dedicated communication channel within the SIP provides a clearer path to guidance and support.

3. Faster Installation-Specific Permits: While the zone-level approvals are pre-cleared via the aggregated baseline permit, you would still need to obtain installation-specific permits. However, the clock for these permits starts only when a comprehensive application is submitted, and the entire process is capped at 12 months. This provides a hard deadline for regulatory approval, reducing the risk of indefinite delays.

4. Strategic Project Eligibility: The SIP can assist in assessing whether your project qualifies as a strategic project under Article 14. If your project meets the criteria (e.g., highly sustainable features, support for grid stability, or use of EU-manufactured components), it may receive additional support and streamlined procedures. Engaging with the SIP early to explore this possibility is advisable.

5. Leverage Existing Gigabit SIPs: If Romania designates the existing Gigabit Infrastructure Act SIPs to also serve as CADA SIPs, you can leverage the existing relationships and processes established for connectivity projects. This may simplify the coordination between your data centre's power and network requirements.

6. Prepare for Comprehensive Applications: The 12-month timeline begins only upon submission of a comprehensive application. This underscores the importance of thorough preparation before submitting your permit application. Incomplete or poorly documented applications could delay the start of the clock or lead to requests for further information, potentially suspending the timeline under other regulatory frameworks.

Common misconceptions

Misconception 1: The single information point grants the permits. The SIP does not have the authority to grant permits itself. Its role is to assist, coordinate, facilitate, and monitor the procedure. The actual permitting decisions are still made by the relevant competent authorities (e.g., environmental agencies, building control). The SIP acts as a facilitator and coordinator, not the decision-maker.

Misconception 2: All permits are covered by the aggregated baseline permit. The aggregated baseline permit covers zone-level authorisations, such as general environmental impact assessments and spatial planning approvals. It explicitly excludes installation-specific permits. You would still need to obtain permits for your specific building design, structural integrity, fire safety, and other installation-specific requirements. The baseline permit simplifies the process by removing the need to repeat generic zone-level assessments for each individual project.

Misconception 3: The 12-month timeline applies to the entire project from conception. The 12-month permit-granting procedure starts from the moment a comprehensive application has been submitted. It does not cover the time spent preparing the application, conducting internal feasibility studies, or engaging in pre-application consultations. Furthermore, this timeline applies to the installation-specific permits not covered by the baseline permit. The zone-level assessments are completed before the baseline permit is issued.

Misconception 4: SMEs receive automatic exemptions from permitting requirements. SMEs do not receive exemptions from the permitting requirements. However, Article 12(4) mandates that SIPs pay particular attention to SMEs and establish dedicated communication channels. This means SMEs may receive more tailored guidance and support, but they must still comply with all applicable regulations and obtain the necessary permits.

Misconception 5: The Gigabit Infrastructure Act SIP is automatically the CADA SIP. While Article 12(1) allows Member States to designate the existing Gigabit Infrastructure Act SIPs to serve as CADA SIPs, it is not automatic. Romania must explicitly choose to do so. If Romania designates a new, separate SIP for data centres, operators may need to engage with a different entity for CADA-related assistance. However, the option to reuse the existing SIP is designed to minimise administrative fragmentation.

This is general information about a draft EU regulation, not legal advice.