Summary Under the proposed Cloud and AI Development Act (CADA), data centre legal teams face a dual-edged sword: a harmonised acceleration regime with a strict 12-month maximum for permit-granting procedures, balanced against a fragmented scope of authorisations. Article 13 mandates that Member States issue an "aggregated baseline permit" covering zone-wide authorisations, but explicitly excludes "installation-specific permits," leaving operators responsible for securing these additional authorisations. Crucially, the 12-month clock starts only upon submission of a "comprehensive application," creating a high-stakes compliance checkpoint. Furthermore, while Article 13(5) requires projects to be treated with the "highest national significance" status where such a status exists in national law, it does not oblige Member States to create such a status if one is absent. Legal teams must therefore map the intersection of the EU baseline, national "toolbox" measures for environmental assessments, and local permitting gaps to avoid delays or revocation.

Detail

The proposed Cloud and AI Development Act (CADA), COM(2026) 502 final, fundamentally reshapes the administrative landscape for data centre deployment in the EU. For legal teams, the primary mechanism for this change is Article 13 of the proposal, titled "Facilitating administrative and permit-granting processes." This article operates within the context of "data centre acceleration zones" designated under Article 10. While the proposal aims to triple EU data centre capacity by 2035, the permitting regime introduces specific procedural traps and scope limitations that require meticulous navigation.

The 12-Month Procedural Ceiling

The most immediate operational constraint introduced by CADA is the temporal limit on administrative processing. Article 13(5) establishes a hard deadline: "The permit-granting procedure for data centre projects deployed in data centre acceleration zones shall not exceed 12 months, from the moment a comprehensive application has been submitted."

This provision creates a "use it or lose it" dynamic for public authorities, but it also places the onus on the applicant to ensure the trigger event occurs correctly. The deadline is calculated from the submission of a "comprehensive application." For legal counsel, this implies that the definition of "comprehensive" is the critical risk vector. If an application is deemed incomplete, the clock may not start, or the authority may request further information, potentially suspending the timeline or leading to rejection. The text mandates that Member States ensure applications are processed in an "efficient, transparent and timely manner," but the 12-month cap is the only quantifiable metric provided in the proposal.

It is important to note that this 12-month limit is a maximum ceiling. Article 13(5) states: "The time limit shall be without prejudice to any shorter time limits set by Member States." Consequently, legal teams must verify whether the specific Member State has enacted stricter national timelines that would supersede the EU proposal's baseline.

The Aggregated Baseline Permit: Scope and Exclusions

To reduce administrative redundancy, Article 13(2) requires Member States to prepare and issue an "aggregated baseline permit" for each designated acceleration zone. This permit is designed to cover "the permits and administrative authorisations required for the data centre projects located within the acceleration zone, excluding installation-specific permits."

Before issuing this baseline permit, Member States must carry out all necessary procedures and assessments at the zone level, including "any relevant environmental assessments, planning procedures and evaluations" (Article 13(3)). This shifts the burden of generic, zone-wide impact assessments from individual operators to the state, provided the project aligns with the zone's pre-approved characteristics.

However, the scope of this baseline permit is intentionally limited. Article 13(4) clarifies the boundary: "Data centres deployed in acceleration zones shall be required to obtain additional permits only for activities falling outside the aggregated baseline permit."

This creates a distinct legal bifurcation:

  1. Zone-Level Compliance: Handled by the state via the baseline permit (e.g., general zoning, broad environmental impact of the zone).
  2. Installation-Level Compliance: Handled by the operator via additional permits (e.g., specific grid connection, unique structural engineering approvals, or site-specific environmental mitigations).

Legal teams must conduct a granular gap analysis. The "aggregated baseline permit" does not automatically grant the right to build a specific facility; it grants the right to build within the zone subject to specific installation-level conditions. Failure to identify and secure these "installation-specific permits" could result in a project being stalled even if the baseline permit is in place.

Strategic Project Status and Environmental Assessments

CADA leverages cross-referencing with other legislative instruments to accelerate approvals. Article 13(1) stipulates that data centre projects in acceleration zones "shall be considered as strategic projects within the meaning of Article 14 of Regulation (EU) 2026/XXX [on speeding-up environmental assessments] and shall benefit from the toolbox set out in the Annex to that Regulation."

This is a critical cross-reference. It designates these projects as "strategic" under a separate, proposed regulation dedicated to speeding up environmental assessments. This triggers a "dedicated toolbox" of measures, which likely includes streamlined public consultation periods, prioritised processing, and combined assessments. Legal teams must monitor the adoption and specific content of this companion regulation (referenced as COM(2025) 984 final in the explanatory memorandum) to understand the exact procedural advantages available. The proposal notes that data centre projects in acceleration zones are considered strategic projects "within the meaning of Article 14" of that regulation, confirming that the environmental assessment acceleration is a prerequisite for the full permitting speed-up.

The "Highest National Significance" Nuance

A potentially powerful but often misunderstood provision is found in Article 13(5), which addresses national legal hierarchies. The text states: "Where such a status exists in national law, data centre projects shall be allocated the status of highest national significance possible and be treated as such in permit-granting processes."

The provision continues with a crucial limitation: "This paragraph shall apply only where such status exists in national law and shall not create an obligation for Member States to introduce such status."

This creates a conditional obligation:

  • If the Member State has a "highest national significance" status: The data centre project must be allocated this status, which typically triggers faster judicial review, higher administrative priority, and potentially exemptions from certain standard procedures.
  • If the Member State lacks such a status: CADA imposes no duty to create one. The project proceeds under the standard national hierarchy, albeit with the 12-month EU ceiling.

For legal teams, this means the "acceleration" benefit of this clause is entirely dependent on the pre-existing national legal framework. In jurisdictions without a specific "highest significance" tier, this provision offers no additional procedural leverage beyond the 12-month deadline.

Sustainability and Anti-Speculation Risks

While Article 13 focuses on speed, it does not decouple permitting from substantive compliance. Article 11(1) mandates that sustainability requirements for data centres in acceleration zones must use the key performance indicators (KPIs) specified in Delegated Regulation (EU) 2024/1364. Legal teams must ensure that the "aggregated baseline permit" and any subsequent installation-specific permits explicitly incorporate these KPIs. Failure to meet these standards could lead to the revocation of permits or penalties, regardless of the procedural speed achieved.

Furthermore, Article 11(2) prohibits speculative reservation of resources. It requires that allocation and use of resources within acceleration zones take place on "fair, reasonable and non-discriminatory terms" and must not "give rise to speculative reservation or foreclosure practices." Legal teams must ensure their land acquisition and resource reservation strategies do not trigger these prohibitions, which could invalidate the permitting process.

What this means for you

For in-house counsel and compliance officers, CADA transforms the permitting landscape from a fragmented, open-ended process into a structured, time-bound obligation with specific strategic levers. The following actions are critical:

  1. Define "Comprehensive Application" Early: The 12-month clock in Article 13(5) is triggered by a "comprehensive application." Legal teams must work with technical leads to ensure the initial dossier is complete according to the specific requirements of the acceleration zone's baseline permit. Incomplete submissions risk the clock not starting or the application being rejected, causing significant delays.
  2. Conduct a Baseline Permit Gap Analysis: Obtain the text of the "aggregated baseline permit" for the target acceleration zone immediately. Conduct a rigorous gap analysis to identify "installation-specific permits" excluded under Article 13(4). These gaps often include grid connection permits, specific building codes, or unique environmental mitigations. Do not assume the baseline permit covers the entire project.
  3. Audit National "Highest Significance" Status: Investigate whether the relevant Member State has a legal concept of "highest national significance" or an equivalent tier. If it exists, ensure your permitting applications explicitly invoke Article 13(5) to secure this status. If it does not exist, recognize that this provision offers no additional leverage and focus resources on the 12-month deadline.
  4. Monitor the Environmental Assessment Regulation: The "strategic project" status under Article 13(1) depends on the adoption of the Regulation on speeding-up environmental assessments. Track the progress of this legislation to understand the specific "toolbox" measures available, as these will define the environmental assessment timeline.
  5. Align with Delegated Regulation (EU) 2024/1364: Ensure project design aligns with the KPIs from this Delegated Regulation from the outset. Non-compliance with these sustainability metrics can jeopardise permit status, even if the procedural timeline is met.

Common misconceptions

  • Misconception: The aggregated baseline permit covers all permits.
    • Reality: Article 13(4) explicitly states that additional permits are required for activities falling outside the aggregated baseline permit. Operators must still secure installation-specific authorisations, which can be a significant source of delay if not identified early.
  • Misconception: CADA forces Member States to create a "highest national significance" status.
    • Reality: Article 13(5) clarifies that this provision applies "only where such status exists in national law." It does not mandate the creation of new legal statuses in Member States that lack them.
  • Misconception: The 12-month timeline is a guarantee of approval.
    • Reality: The timeline in Article 13(5) is a procedural maximum for the permit-granting process. It does not guarantee approval if the project fails to meet substantive legal, environmental, or technical requirements.
  • Misconception: CADA overrides national environmental laws.
    • Reality: CADA harmonises procedures and introduces acceleration tools but does not eliminate substantive environmental protections. Projects must still comply with all applicable EU and national environmental directives, including those on energy efficiency and emissions, as referenced in Article 11.

Related

This is general information about a draft EU regulation, not legal advice.