Summary As proposed, the Cloud and AI Development Act (CADA) would significantly benefit French cloud providers and data centre operators by streamlining physical deployment through data centre acceleration zones with aggregated baseline permits and single information points (Articles 10, 12, 13). Simultaneously, it creates a unified Union cloud computing sovereignty framework, allowing compliant French providers to gain formal recognition across the EU and access public procurement markets via a central repository (Articles 16, 22). This dual approach aims to reduce administrative bottlenecks while enhancing the commercial competitiveness of European infrastructure providers.

Detail

The Cloud and AI Development Act (CADA), as set out in the proposal COM(2026) 502 final, represents a structural shift from fragmented national approaches to a harmonised EU framework for digital infrastructure. For operators in France, the proposal offers concrete mechanisms to reduce administrative burdens, accelerate construction timelines, and expand market access beyond national borders. The benefits fall into two primary categories: accelerated physical deployment of infrastructure through streamlined permitting, and enhanced commercial opportunities through the new sovereignty framework.

Accelerated Deployment: Acceleration Zones and Single Information Points

A major bottleneck for data centre operators in France and across the EU has historically been the complexity, duration, and fragmentation of permitting processes. CADA addresses this directly by introducing data centre acceleration zones.

Under Article 10, Member States are required to designate at least one data centre acceleration zone within their territory where data centre capacity is being deployed. When designating these zones, France would be required to consider specific factors including the available and future power grid capacity, network connectivity, and a preference for reusing brownfield sites over greenfield sites. Crucially, Article 10(2) obliges Member States to conduct a comprehensive analysis of energy needs for these zones, identifying current and future requirements and their impact on greenhouse gas emissions. This analysis must be reflected in national network development plans, ensuring that grid planning anticipates future demand and reduces the risk of projects being stalled due to insufficient power infrastructure.

To further streamline operations and reduce administrative friction, Article 12 mandates the establishment of single information points (SIPs) for data centre operators within these acceleration zones. The SIP acts as a centralised contact for the entire lifecycle of the project, coordinating administrative support for spatial planning, building permits, environmental assessments, and network connections. This eliminates the need for operators to navigate multiple disparate municipal and regional authorities independently, providing a dedicated channel for guidance and query resolution, particularly for SMEs.

Perhaps the most significant operational benefit is found in Article 13, which facilitates administrative and permit-granting processes. Data centre projects deployed in acceleration zones are explicitly considered strategic projects within the meaning of the Regulation on speeding-up environmental assessments. This status grants them access to a dedicated toolbox for faster environmental assessments, ensuring coherence while accommodating the need for accelerated deployment.

Furthermore, Article 13(2) requires Member States to issue an aggregated baseline permit for each designated acceleration zone. This permit covers the permits and administrative authorisations commonly required for data centre projects within that zone, excluding only installation-specific permits. This means that much of the environmental and spatial planning assessment is done once for the zone, rather than repeatedly for each individual facility. Consequently, data centres in these zones only need to obtain additional permits for activities falling outside the baseline. Article 13(5) sets a strict ceiling, stating that the permit-granting procedure for projects in acceleration zones shall not exceed 12 months from the moment a comprehensive application has been submitted. This provides a predictable timeline for investment planning.

Market Access: The Sovereignty Framework and Central Repository

Beyond physical deployment, CADA addresses the commercial challenges faced by European providers who compete against non-EU hyperscalers. The proposal introduces a Union cloud computing sovereignty framework with four assurance levels, as established in Article 16.

For French cloud providers, this framework offers a pathway to formal recognition and market differentiation. Under Article 17, providers can apply to their national competent authority (in France, this would be the designated authority under Article 25) for recognition as offering a specific Union assurance level. For Union assurance level 1, this involves a conformity self-assessment and an EU statement of conformity. For Levels 2, 3, and 4, it requires independent third-party audits by an auditing organisation, resulting in a positive audit opinion.

Once recognised, these services are registered in a central repository established and maintained by the Commission, as outlined in Article 22. This repository is publicly available and serves as a trusted list for public sector bodies across the EU. By being listed, French providers gain visibility and credibility, making them eligible for public procurement procedures that require specific sovereignty assurances. This is particularly relevant as Article 30 mandates that public sector bodies must procure services with at least Union assurance level 1, and higher levels (2, 3, or 4) for activities identified as contributing to the preservation of public order.

Strategic Projects and Financial Support

CADA also provides a mechanism for data centre strategic projects under Article 14. The Commission may designate projects that fulfil specific criteria, such as supporting essential public sector functions, incorporating highly sustainable or innovative features, contributing to grid stability, or addressing major compute capacity shortages. Designation as a strategic project can facilitate access to Union funding and support measures, providing a financial advantage to qualifying French operators and helping to bridge the capacity gap.

What this means for you

If you are a cloud service provider or data centre operator in France, CADA, if adopted in its current form, would offer several actionable advantages:

  1. Reduced Time-to-Market: By locating new facilities in designated acceleration zones, you can benefit from the aggregated baseline permit. This pre-clears many environmental and spatial planning hurdles, potentially cutting your permitting timeline to a maximum of 12 months from the submission of a comprehensive application, as mandated by Article 13(5).
  2. Administrative Simplicity: The single information point (SIP) provides a single point of contact for all authorisations throughout the project lifecycle. You no longer need to manage parallel communications with multiple local authorities, reducing administrative overhead and the risk of procedural errors.
  3. Grid Certainty: The requirement for Member States to analyse energy needs in acceleration zones under Article 10(2) means you can have greater confidence that grid capacity will be planned and available, reducing the risk of project delays due to power constraints.
  4. Pan-European Market Access: By undergoing the conformity assessment or audit process for the Union assurance levels, you can get your services listed in the central repository under Article 22. This makes your services eligible for public procurement not just in France, but across the entire EU, where public authorities are increasingly required to prioritise sovereign cloud services under Article 30.
  5. Competitive Advantage in Procurement: Public procurement rules under CADA (Article 32) allow contracting authorities to include "Union added value" criteria. As a French provider, you can leverage your local presence, compliance with EU standards, and contribution to the European digital supply chain to score points against non-EU competitors in tenders for innovative cloud and AI services.
  6. Access to Strategic Support: If your project meets the criteria for a data centre strategic project under Article 14, you may gain access to Union funding and support measures, enhancing the financial viability of large-scale deployments.

Common misconceptions

Misconception: CADA forces all data centres to move to acceleration zones.

  • Reality: CADA does not prohibit the construction of data centres outside acceleration zones. However, projects within acceleration zones benefit from the streamlined permitting process (aggregated baseline permit, 12-month limit) and strategic project status. Projects outside these zones remain subject to standard national permitting procedures, which may be slower and more fragmented.

Misconception: The sovereignty framework bans non-EU cloud providers.

  • Reality: CADA does not ban non-EU providers. Instead, it creates a tiered system. Non-EU providers can still operate, but for public sector activities identified as critical to public order, Member States must procure services with higher Union assurance levels (2, 3, or 4). Meeting these higher levels often requires stricter controls on data localisation, third-country control, and personnel screening, which may be challenging for some non-EU providers, but it is not an outright ban.

Misconception: The aggregated baseline permit covers everything.

  • Reality: The aggregated baseline permit covers permits commonly required for data centre projects within the zone, excluding installation-specific permits. Operators still need to obtain permits for activities that fall outside the scope of the baseline permit, such as specific grid connection permits or unique environmental impacts not covered by the zone-wide assessment.

Misconception: Recognition in the central repository is automatic.

  • Reality: Recognition requires a formal application to the national competent authority. For Union assurance levels 2, 3, and 4, it requires a positive audit opinion from an independent auditing organisation. The process involves a 60-day review period and potential objections from other Member States. It is not an automatic right upon incorporation in France.

Misconception: CADA replaces existing environmental laws.

  • Reality: CADA works in conjunction with existing frameworks. Article 13 explicitly references the Regulation on speeding-up environmental assessments, ensuring that data centre projects in acceleration zones benefit from its dedicated toolbox while maintaining high levels of environmental protection.

Related

This is general information about a draft EU regulation, not legal advice.