Summary As proposed, the Cloud and AI Development Act (CADA) would address EU-wide permitting fragmentation by harmonising data centre deployment through the mandatory designation of "data centre acceleration zones" (Article 10) and the establishment of "single information points" (Article 12). It would introduce an "aggregated baseline permit" mechanism (Article 13) to streamline approvals and cap the permit-granting procedure at 12 months for projects within these zones (Article 13(5)). These measures are designed to replace divergent national approaches with a coherent EU framework, improving legal certainty and reducing barriers to cross-border investment.
Detail
CADA — COM(2026) 502 final, proposed by the Commission on 3 June 2026 and not yet in force — identifies fragmented national permitting as a primary obstacle to rapidly deploying computing capacity in the EU. The explanatory memorandum states that "the current fragmentation in data centre deployment is driven by divergent national approaches to capacity expansion, sustainability requirements, and permitting procedures," which "risks creating regulatory disparities that could undermine the internal market." To remedy this, CADA introduces a harmonised framework, primarily in Title III.
Harmonised acceleration zones
Under Article 10(1), where data centre capacity is being deployed in its territory, a Member State must designate at least one "data centre acceleration zone," within six months of the regulation's entry into force. When designating zones, Member States must consider specific factors, including:
- the location and dimension of the site or area, and the minimum and maximum size of facilities;
- available and future power grid capacity and network connectivity;
- the ability of the site to function sustainably, particularly as regards environmental impacts and climate resilience;
- a preference for reusing brownfield sites over greenfield sites.
By standardising these criteria, CADA aims to channel data centres to locations with adequate infrastructure and clear regulatory support, reducing the uncertainty that affects site selection across Member States.
Single information points
Article 12(1) would require Member States to designate one or more "single information points" for data centre operators of projects in acceleration zones. These would serve as a central contact across the project lifecycle, assisting with all required authorisations. Under Article 12(2), the role may include coordinating spatial planning and building permits, environmental assessments, water and heat authorisations, compliance obligations, public information, and network connections — reducing the need for operators to navigate multiple disparate national bodies.
Aggregated baseline permits and time limits
The most significant anti-delay tool is in Article 13. Under Article 13(2), Member States must prepare and issue an "aggregated baseline permit" for each designated acceleration zone, covering the permits and administrative authorisations required for data centre projects within the zone, excluding installation-specific permits. Before issuing it, Member States must carry out the necessary procedures and assessments at the level of the zone (Article 13(3)). By pre-clearing many hurdles at zone level, the proposal reduces the time needed for individual projects, which then need additional permits only for activities outside the baseline (Article 13(4)).
Furthermore, Article 13(5) sets a firm limit: the permit-granting procedure for data centre projects deployed in acceleration zones "shall not exceed 12 months, from the moment a comprehensive application has been submitted," without prejudice to any shorter national limits. As proposed, where such a status exists in national law, projects "shall be allocated the status of highest national significance possible" and be treated accordingly — but the article does not oblige Member States to create such a status.
Added value and internal-market functioning
The explanatory memorandum grounds EU action in Article 114 TFEU to eliminate internal-market barriers. It notes that "variations in public procurement practices for cloud computing services, as well as inconsistent sovereignty criteria, may hinder providers' ability to operate seamlessly across Member States." The memorandum also states that a Regulation "is essential to remove single market barriers, particularly in areas such as sovereignty and sustainability standards." By harmonising the deployment framework, CADA seeks to level the playing field and help the EU meet its computing-capacity needs by 2035.
What this means for you
For in-house counsel and compliance officers overseeing data centre investments, CADA as proposed would bring several obligations and opportunities:
- Site selection strategy. Prioritise sites in designated acceleration zones to benefit from streamlined permitting; sites outside zones would face longer, less predictable national timelines. Track national designations, due within six months of entry into force.
- Engagement with single information points. On selecting a site, engage the designated single information point as your primary liaison for authorisations, and keep clear records to support the 12-month timeline.
- Sustainability compliance. Ensure projects meet the sustainability conditions in Article 11, which requires use of the KPIs specified in Delegated Regulation (EU) 2024/1364; failure could jeopardise zone benefits and delay permitting.
- National transposition / implementation. Although a Regulation is directly applicable, Member States will operationalise key steps (zone designation, the aggregated baseline permit). Track national measures for procedural specifics.
- Risk management. The 12-month limit runs from a comprehensive application; ensure documentation is complete to avoid requests for further information that could affect the timeline, and plan for installation-specific permits outside the baseline.
Common misconceptions
- "CADA eliminates national permitting requirements." No. As proposed, it harmonises and streamlines permitting through acceleration zones and baseline permits, but installation-specific permits and compliance with national environmental and planning law still apply. The aim is to reduce, not abolish, administrative burden.
- "The 12-month deadline applies to all EU data centre projects." No. The cap under Article 13(5) applies to projects deployed within designated acceleration zones; projects outside remain subject to existing national timelines.
- "CADA forces Member States to build data centres." No. CADA does not mandate construction; Member States must designate zones and facilitate permitting, but actual deployment depends on market demand and investment.
- "Single information points replace national authorities." No. As proposed, they coordinate and facilitate; they do not override the legal authority of national planning, environmental or grid authorities.
Related
- CADA Article 13: Permitting Risks for Data Centre Legal Teams
- How does CADA support balanced data centre investment across the EU?
- How does CADA address data centre water use?
- How can a legal team navigate data centre permitting under CADA?
- Does CADA address legacy copper network phase-out via data centre zones?
This is general information about a draft EU regulation, not legal advice.