Summary Under the proposed Cloud and AI Development Act (CADA), the permitting process for data centres in designated "acceleration zones" is split into two distinct tiers to accelerate deployment. Article 13(2) mandates that Member States issue an "aggregated baseline permit" for the zone itself, which covers all common administrative authorisations required for data centre projects located within that area. Crucially, this baseline permit excludes installation-specific permits. Consequently, Article 13(4) clarifies that data centre operators are only required to obtain additional, installation-specific permits for activities that fall outside the scope of the aggregated baseline permit. This two-tiered approach, supported by a 12-month maximum timeline for the overall procedure under Article 13(5), aims to eliminate duplicate environmental and planning assessments while retaining necessary project-specific controls.

Detail

The proposed Cloud and AI Development Act (CADA), COM(2026) 502 final, introduces a transformative permitting mechanism designed to address the fragmentation and delays currently hindering data centre deployment in the EU. Central to this mechanism is the distinction between zone-level regulatory clearance and project-specific operational approvals, as detailed in Article 13 of the proposal. This article establishes a facilitated administrative and permit-granting process specifically for data centre projects deployed in designated "acceleration zones."

The Aggregated Baseline Permit: Zone-Level Clearance

The cornerstone of the streamlined process is the aggregated baseline permit. Under Article 13(2), Member States are obliged to prepare and issue this permit for each designated acceleration zone. Unlike traditional permits that are tied to a specific operator or facility, the aggregated baseline permit is a zone-level instrument. It serves as a blanket authorisation for the general deployment of data centres within the geographical boundaries of the acceleration zone.

The scope of this permit is explicitly defined in Article 13(2), which states that the aggregated baseline permit "shall cover the permits and administrative authorisations required for the data centre projects located within the acceleration zone, excluding installation-specific permits." This provision effectively shifts the burden of zone-wide regulatory compliance from individual operators to the Member State. Before issuing this permit, Article 13(3) requires Member States to carry out all necessary procedures and assessments applicable at the level of the acceleration zone. These assessments include:

  • Environmental assessments: Conducted at the zone level to evaluate cumulative impacts, rather than repeating them for every individual project.
  • Planning procedures: Spatial and development plans that establish the suitability of the zone for data centre infrastructure.
  • Evaluations: Any other regulatory evaluations applicable to the zone as a whole.

By centralising these assessments, the proposal aims to prevent individual data centre operators from having to repeat the same environmental or spatial planning evaluations that have already been conducted and validated for the zone. The baseline permit certifies that the zone itself meets the necessary regulatory standards for hosting data centre infrastructure, thereby creating a "pre-approved" environment for deployment.

Installation-Specific Permits: Project-Level Requirements

While the aggregated baseline permit provides a robust foundation for deployment, it does not grant carte blanche for every aspect of a specific data centre's construction and operation. Article 13(4) clearly delineates the boundary between the zone-level permit and project-specific needs. It states: "Data centres deployed in acceleration zones shall be required to obtain additional permits only for activities falling outside the aggregated baseline permit referred to in paragraph 2."

These installation-specific permits are necessary for elements that vary from one data centre project to another and cannot be generalised at the zone level. Because the baseline permit covers common, zone-wide requirements, the installation-specific permits focus on the unique characteristics of the individual facility. While the proposal does not provide an exhaustive list of every possible installation-specific permit, the distinction implies that any activity not covered by the zone-wide aggregated assessment requires separate approval. Typical examples of such activities include:

  • Construction permits: Specific to the physical building's design, engineering, and structural integrity, which vary based on the specific technology and scale of the facility.
  • Operational licences: Authorisations that depend on the specific technical configuration, energy consumption profile, or cooling systems of the individual facility.
  • Grid connection permits: While the baseline permit may assess the zone's capacity, specific connection agreements for a particular installation often require separate processing.
  • Water abstraction or wastewater discharge: Specific to the volume and nature of the water usage of the individual project.

The proposal emphasises efficiency in this process. Article 13(5) mandates that administrative applications related to the planning, construction, and operation of data centres in acceleration zones be processed in an efficient, transparent, and timely manner. Specifically, the permit-granting procedure for data centre projects in these zones "shall not exceed 12 months, from the moment a comprehensive application has been submitted." This 12-month deadline applies to the overall process for obtaining the necessary installation-specific permits, assuming the aggregated baseline permit is already in place.

Strategic Context and Legislative Intent

This two-tiered permitting structure is a direct response to the regulatory bottlenecks that currently slow down the expansion of computing capacity in the EU. By separating zone-level assessments (handled once by the Member State via the baseline permit) from project-specific assessments (handled by the operator via installation-specific permits), CADA aims to significantly reduce regulatory duplication and administrative burden.

The proposal explicitly links this mechanism to its broader objective of tripling EU data centre capacity within the next five to seven years. By ensuring that operators do not have to navigate redundant environmental and planning procedures for every new facility, the Act seeks to create a more predictable and attractive investment environment. The 12-month cap on the permit-granting procedure further reinforces this commitment to speed, providing a clear timeline for investors and operators.

What this means for you

For in-house counsel, compliance officers, and project managers overseeing data centre expansion in the EU, understanding the distinction between the aggregated baseline permit and installation-specific permits is critical for accurate project planning, risk management, and timeline estimation.

1. Verify Zone Status and Baseline Permit Issuance Before initiating any project in a proposed acceleration zone, your first step must be to verify that the Member State has officially designated the zone and, crucially, issued the aggregated baseline permit under Article 13(2). If the baseline permit has not been issued, or if the zone has not been officially designated, you cannot rely on the streamlined permitting process. You must ensure that the zone-level environmental and planning assessments referenced in Article 13(3) have been completed. Without this, you may face unexpected delays as regulators attempt to complete zone-level assessments concurrently with your project-specific applications, negating the benefits of the acceleration zone.

2. Scoping Your Permit Applications When preparing your permit applications, you must carefully map your project's requirements against the scope of the baseline permit. Article 13(4) limits the need for additional permits strictly to activities "falling outside" the baseline. To avoid redundancy and ensure compliance:

  • Request a detailed breakdown: Obtain a clear definition from the relevant national authority of exactly what the aggregated baseline permit covers for that specific zone.
  • Identify exclusions: Pinpoint any activities that are not covered by the zone-level assessment. These will require separate, installation-specific permits.
  • Focus your application: Prepare your application to focus exclusively on these installation-specific elements. Avoid submitting redundant documentation for zone-level issues that have already been resolved by the baseline permit. This targeted approach can significantly speed up the review process.

3. Adhering to the 12-Month Deadline Article 13(5) imposes a strict 12-month timeline for the permit-granting procedure. As compliance officers, you must ensure that your applications for installation-specific permits are comprehensive and submitted promptly. The clock starts from the submission of a "comprehensive application." Any delays in providing required information, or any requests for additional data from the authorities, could jeopardise the ability to meet this deadline. Monitor the progress of your installation-specific permit applications closely, as the 12-month limit is a hard cap intended to prevent bureaucratic stalling.

4. Monitoring Legislative Developments CADA is currently a proposal, and the final text may change during the legislative procedure. Keep track of any amendments to Article 13, particularly regarding the precise definition of "installation-specific permits" and the scope of the baseline permit. Furthermore, national implementing measures will be crucial, as Member States will determine the specific administrative processes and authorities responsible for issuing these permits.

Common misconceptions

Misconception 1: The baseline permit replaces all permits. A common error is to assume that the aggregated baseline permit eliminates the need for any further permitting. This is incorrect. Article 13(4) explicitly states that data centres must still obtain additional permits for activities falling outside the baseline. The baseline permit only covers zone-level authorisations; project-specific construction, operational, and technical permits remain necessary.

Misconception 2: Installation-specific permits are optional. Some stakeholders mistakenly believe that operators can choose to bypass installation-specific permits if they rely on the baseline permit. In reality, Article 13(4) makes it mandatory to obtain additional permits for any activity not covered by the baseline. Failure to secure these installation-specific permits would result in non-compliance and potential enforcement actions, regardless of the existence of the baseline permit.

Misconception 3: The 12-month deadline applies only to installation-specific permits. The 12-month permit-granting procedure mentioned in Article 13(5) applies to the entire process for data centre projects in acceleration zones, specifically the time taken to process the installation-specific permits. However, this timeline assumes that the zone-level baseline permit is already in place. If the baseline permit is not yet issued, the streamlined timeline may not apply, and the overall process could take significantly longer as the zone-level assessments are conducted.

Related

This is general information about a draft EU regulation, not legal advice.