Summary Under the proposed Cloud and AI Development Act (CADA), Member States are legally required to process administrative applications for data centre projects deployed in designated data centre acceleration zones in an "efficient, transparent and timely manner." Specifically, Article 13(5) mandates that the permit-granting procedure shall not exceed 12 months from the moment a "comprehensive application" has been submitted. This strict timeline is designed to accelerate the deployment of computing capacity across the EU, though Member States retain the discretion to set shorter national time limits. The clock starts only upon the submission of a complete application, and the regulation encourages Member States to grant these projects the "status of highest national significance possible" where such a status exists in national law.
Detail
The proposed Cloud and AI Development Act (CADA), COM(2026) 502 final, establishes a harmonised framework to address the critical shortage of computing capacity in the EU. A central pillar of this framework is the creation of data centre acceleration zones (Article 10), where specific regulatory conditions apply to facilitate rapid infrastructure deployment. Within these zones, the processing of applications is governed by strict procedural obligations designed to eliminate the bureaucratic delays that have historically hindered the sector.
The Obligation for Efficient and Transparent Processing
Article 13(5) of the CADA proposal explicitly imposes a positive duty on Member States. It states that administrative applications related to the planning, construction, and operation of data centres deployed in acceleration zones must be processed in an "efficient, transparent and timely manner."
While the regulation does not provide granular technical definitions for "efficient" or "transparent," these terms are interpreted within the context of EU administrative law principles. They require national and local authorities to maintain clear communication channels, follow predictable procedures, and avoid unjustified delays or hidden criteria. This obligation ensures that the acceleration zones function as intended: as streamlined pathways for investment rather than new bureaucratic hurdles.
The 12-Month Cap: A Hard Deadline
The most concrete procedural safeguard in Article 13(5) is the strict time limit. The regulation stipulates that the "permit-granting procedure for data centre projects deployed in data centre acceleration zones shall not exceed 12 months, from the moment a comprehensive application has been submitted."
This 12-month cap is a maximum ceiling. It applies to the entire administrative review process required for the project-level permits that fall within the scope of the acceleration zone's pre-approved framework. Crucially, the timeline is triggered only by the submission of a "comprehensive application." If an application is incomplete, the clock does not start, or the authority may request further information. However, once the application is deemed comprehensive, the 12-month deadline becomes a binding constraint on the authority.
The Role of the Aggregated Baseline Permit
To make this 12-month target achievable, CADA introduces the concept of an "aggregated baseline permit" under Article 13(2). Before issuing this permit, Member States must carry out all necessary procedures and assessments—including environmental assessments—at the level of the acceleration zone itself.
Consequently, data centres deployed within these zones are generally only required to obtain additional permits for activities falling outside this baseline (Article 13(4)). The 12-month limit in Article 13(5) applies to the processing of these specific, project-level applications. By leveraging the pre-approved baseline, the regulation aims to avoid duplicative assessments and ensure that the 12-month window is sufficient for the remaining administrative steps.
Member State Discretion and "Highest National Significance"
While 12 months is the maximum EU-wide limit, the regulation explicitly encourages faster processing. Article 13(5) notes that "The time limit shall be without prejudice to any shorter time limits set by Member States." This means national governments are free to impose stricter, faster deadlines (e.g., 6 or 9 months) if their domestic legal frameworks allow. The EU standard acts as a ceiling, not a floor, encouraging Member States to compete on regulatory speed.
Furthermore, to further ensure timely processing, Article 13(5) requires Member States to allocate data centre projects the "status of highest national significance possible" within their national legal systems, provided such a status exists. This classification typically triggers expedited review processes and higher-level political oversight, reducing the risk of local bottlenecks. If a Member State's law does not include such a status, there is no obligation to create one, but the 12-month cap still applies.
Interaction with Single Information Points
The efficiency of this process is supported by Article 12, which requires Member States to designate single information points for data centre operators in acceleration zones. These points assist operators throughout the entire lifecycle of the project, helping to ensure that applications are "comprehensive" upon submission, thereby preventing delays caused by incomplete documentation before the 12-month clock even starts.
What this means for you
For cloud service providers, data centre operators, and investors, the 12-month cap and transparency requirements in Article 13(5) offer significant legal certainty and predictability.
- Planning and Investment Security: You can structure your financial models and construction timelines with greater confidence. The permit-granting phase for projects in acceleration zones now has a defined maximum duration, reducing the risk of prolonged "permit limbo" that can stall projects for years under fragmented national regimes.
- The Critical Importance of "Comprehensive" Applications: To ensure the 12-month clock starts immediately, you must submit a truly comprehensive application. Incomplete submissions may reset the clock or delay the start date. It is advisable to work closely with the designated Single Information Point (Article 12) to verify completeness before formal submission.
- Monitoring Deadlines and Enforcement: If an authority exceeds the 12-month limit without a justified suspension, you may have grounds for administrative challenge. While the regulation does not specify a suspension mechanism for permits as explicitly as it does for recognition procedures (e.g., Article 17(5) for cloud assurance), the principle of "efficient and timely" processing implies that delays must be justified. Keep detailed records of submission dates and authority communications.
- Leveraging National Status: Investigate whether your host Member State has a "highest national significance" classification for infrastructure. If so, ensure your application explicitly requests this status to benefit from any associated expedited national procedures, which may further shorten the timeline below the 12-month cap.
Common misconceptions
- "The 12-month limit applies to all data centre projects in the EU." Incorrect. The 12-month cap under Article 13(5) applies specifically to data centre projects deployed in designated data centre acceleration zones. Projects outside these zones may be subject to different, potentially longer, national permitting timelines.
- "The 12 months starts from the first day I express interest." Incorrect. The timeline starts strictly from the moment a "comprehensive application" has been submitted. Pre-application consultations, expressions of interest, or incomplete submissions do not trigger the statutory clock.
- "Member States cannot extend the timeline under any circumstances." Partially incorrect. While the cap is strict, the regulation allows for the suspension of time limits if the authority requests further information. However, such suspensions are generally limited (e.g., not exceeding 30 days in total unless justified by exceptional circumstances, as seen in similar recognition procedures under Article 17). The core principle is that the total process should not be unduly extended beyond the 12-month benchmark without valid, documented reasons.
- "This replaces national environmental assessment laws." Incorrect. CADA complements existing laws. The "aggregated baseline permit" includes necessary environmental assessments conducted at the zone level. The 12-month limit applies to the administrative processing of the project within that pre-assessed framework. It does not abolish the need for environmental compliance but streamlines it through pre-zoning assessments.
Related
- CADA Article 14: How many criteria must a data centre strategic project meet?
- CADA Data Centre KPIs: What Must Be Reported in Acceleration Zones?
- CADA Article 13: Permitting Risks for Data Centre Legal Teams
- CADA Article 13: The Environmental Assessment Toolbox for Data Centre Zones
- CADA Article 14: Open calls for strategic data centre projects
This is general information about a draft EU regulation, not legal advice.