How will new Spanish and EU data centre regulations impact Europe’s digital infrastructure boom?

Europe's Digital Infrastructure Market Surge

Rapid expansion in artificial intelligence (AI), cloud computing, and digital services has triggered an unprecedented surge in European data centre development, transforming facilities into highly sought-after real estate assets while exposing deep vulnerabilities in energy grids and water infrastructure. 

Across the European Union (EU) and within Spain specifically, governments are deploying stringent regulatory frameworks designed to align digital infrastructure with rigorous environmental, resource, and sovereignty standards. 

These regulatory interventions are fundamentally reshaping investment strategies, project timelines, and geographic capital allocation across the Iberian real estate sector.

EU Mandates New Sustainability Ratings

At the pan-European level, digital infrastructure growth is coming under unified regulatory oversight as power demand surges. 

According to International Energy Agency (IEA) data, electricity consumption by EU data centres reached 68 TWh in 2024 and is projected to nearly double to 114 TWh by 2030, representing over 3% of total EU electricity demand.

While the European Commission (EC) aims to triple the bloc's data centre capacity over the next five to seven years to advance technological independence, policymakers are taking steps to ensure expansion does not strain power grids or compromise decarbonisation targets.

On 21 September 2026, the EC adopted a Delegated Regulation establishing a common rating scheme for data centres with an installed IT power demand of 500 kW or more. 

Building upon the reporting framework established under the recast Energy Efficiency Directive (EED), the regulation introduces mandatory sustainability labels starting 15 August 2027. 

Under this scheme, facilities receive two independent A-to-G ratings based on operational efficiency. The Energy Score is evaluated via Power Usage Effectiveness (PUE), where Class A requires a PUE of 1.15 or lower, and Class G applies to values exceeding 1.9. 

The Water Score is evaluated via Water Usage Effectiveness (WUE), where Class A requires a WUE of 0.1 or lower, and Class G applies to values exceeding 1.0.

In addition to resource efficiency, these sustainability labels track energy source breakdowns, distinguishing between on-site renewables, power purchase agreements (PPAs), guarantees of origin, and nuclear energy. The scheme also monitors grid flexibility provision, cooling degree days, and "waste heat reuse ready" status. 

The Commission estimates that capturing and reusing roughly 50% of the waste heat generated by European data centres could satisfy the total heating demand of 4 million households.

This rating system forms the second stage of a three-step European regulatory roadmap. Following a public consultation running through 14th December 2026, the EC intends to introduce a legislative proposal in Q2 2027 establishing binding minimum performance standards across energy efficiency, water usage, waste heat recovery, and grid services.

Spain Imposes Strict Operational Hurdles

While Brussels establishes European standards, Spain is pursuing an aggressive regulatory agenda through a Draft Royal Decree (DRD) under Royal Decree-Law 7/2026. 

Processed under urgent procedures by the Ministry for the Ecological Transition and the Demographic Challenge (MITECO), the Ministry of Economy, and the Ministry of Digital Transformation and Public Function, the proposed decree completed its public consultation in September 2026 ahead of planned Cabinet approval.

Spanish Prime Minister Pedro Sanchez has publicly defended the framework in international op-eds, characterising grid access capacity as a finite, strategic resource that must be safeguarded against speculative or inefficient developments. 

Citing a Cambridge University study detailing the "data centre heat island effect", Sanchez highlighted how unchecked facilities increase local ambient temperatures and strain civic infrastructure. 

This interventionist stance contrasts sharply with the US model, where rapidly expanding data centre energy consumption, projected to grow from 4.4% in 2023 to 12% by 2028, has sparked public opposition, including a Gallup poll indicating that 71% of Americans oppose local AI data centre construction.

Spain's proposed regulations apply mandatory reporting to facilities with an IT load of 500 kW or more, while imposing operational requirements on facilities connecting to the grid with an access capacity of 1 MW or greater. 

Under these operational standards, facilities must achieve an annual European Class A label, maintaining a PUE of 1.15 or less and a WUE of 0.1 or less, with two consecutive years of Class B ratings or lower risking permit revocation. 

Operators must also verify that 80% of electricity consumed in every single hour is matched by renewable generation, evaluated on a monthly basis by the system operator.

To meet additionality requirements, at least 80% of consumed power must be backed by self-consumption or bilateral PPAs linked to Spanish renewable generation or energy storage assets commissioned no earlier than 18 months prior to the data centre's connection date. 

Bilateral PPAs must be notarised, run for a minimum of 10 years, and exclude unlinked financial contracts or forward instruments backed solely by guarantees of origin. 

On digital sovereignty, facilities hosting public-sector data under the National Security Framework must store, process, and transfer all data, records, and metadata exclusively within the EU. 

Operating entities must maintain EU establishment, enforce strict third-country access controls, and monitor direct subcontractors. 

Off-grid facilities and sites dedicated exclusively to defence, civil protection, and public safety are exempt, while unconnected projects holding permits face a six-month window to demonstrate compliance or voluntarily surrender permits without forfeiting performance deposits.

Failure to meet these operational standards carries heavy financial and administrative penalties. Non-compliance with additionality rules can trigger surcharges on grid tolls and access fees of up to 500% if newly built renewable generation accounts for less than 20% of annual consumption. 

Failing the hourly correlation rule incurs a 50% tariff increase, alongside an additional 10% penalty for each consecutive month of non-compliance, eventually leading to permit revocation.

Industry Backlash Drives Capital Reallocation

The draft regulations have drawn fierce resistance from industry associations, developers, and global infrastructure funds. 

Data centre association SpainDC estimates that the proposed decree puts between 80% and 90% of planned investments through 2030 at risk, placing up to EUR 66.9 billion in capital deployment in jeopardy and threatening EUR 9 billion across three immediate major projects. The sector submitted over 600 objections during the public consultation period.

The central point of friction is the technical impossibility of the proposed compliance timelines. 

While data centre operators support 100% green energy targets, obtaining licences, navigating administrative procedures, and constructing new renewable generation or storage facilities in Spain typically takes three to five years. 

Forcing developers to secure supply from brand-new assets within six-month transitional windows creates severe operational bottlenecks. This regulatory uncertainty has prompted international investors to pause Spanish developments and reallocate capital to neighbouring jurisdictions. 

Hyperscalers are adjusting site selection strategies, with Google directing major new investments toward France to leverage its stable nuclear power network, while Microsoft is directing expanding workloads into Portugal. 

Investors increasingly evaluate the Iberian Peninsula as an integrated digital market, leading companies like Merlin Properties to plan a EUR 2.2 billion deployment into Portuguese data centres by the end of 2028, building on an initial EUR 500 million investment. 

Because Spain and Portugal share an interconnected electricity market, developers can construct facilities in Portugal to avoid Spanish regulatory hurdles, draw upon regional energy supplies, and export computing tokens back into Spanish markets.

While benefiting from capital inflows, Portuguese officials are taking measures to manage capacity growth. 

Portuguese Infrastructure Minister Miguel Pinto Luz emphasised that the country intends to host "productive" data centres rather than become the "dumping ground of Europe", building upon a mandatory deposit of at least EUR 13,500 per MVA introduced in 2025 to curb capacity speculation.

Navigating Regional Market Realities

Despite regulatory headwinds, core regional markets in Spain continue to record substantial development activity, driven by fundamental demand for processing power and strategic geography. 

Malaga has emerged as a premier location for new data centre developments, ranking 11th worldwide and 1st in Spain in a global study by leading property consultancy Savills, placing it ahead of Madrid, Zurich, and New York. 

Malaga's appeal stems from competitive power costs, streamlined local planning, cooler coastal temperatures, and less competition for grid allocations compared to traditional European hubs. 

Anchor developments include a EUR 1.257 billion Tier III/III+ facility at Malaga TechPark by Saltburn Holding, which was granted strategic interest status to support 100 MW of computing power requiring 150 MW of electricity supply.

Madrid remains Spain's dominant digital infrastructure market, hosting 58 projects currently operational or under construction alongside a further 40 in development, representing an estimated EUR 15 billion in total investment. 

Demonstrating ongoing institutional commitment, Spanish operator Nabiax broke ground on its Alcalá Data Center 3 (ADC3) facility in Alcalá de Henares. Representing an investment of nearly EUR 800 million, the closed-loop cooled expansion will add 100 MW of IT capacity through 2029, bringing Nabiax's total Spanish operational footprint to 135 MW.

The massive energy requirements of AI computing are also driving capital deployment across the renewable energy supply chain. Spanish developer Ignis Energia prepared an initial public offering (IPO) backed by Vortex Energy to raise up to EUR 600 million, positioning itself to supply dedicated green energy and storage to data centre operators. 

To mitigate price volatility and solar overproduction, Ignis contracted a revenue-securement agreement with Engie SA for a Spanish energy-storage portfolio, complementing the Spanish government's planned investment of over EUR 17 billion in national power grid upgrades through 2030.

At the intersection of cloud infrastructure and national security, Amazon Web Services (AWS) received alliance-wide approval from NATO to handle NATO RESTRICTED workloads across 15 cloud regions, including seven in mainland Europe. 

Evaluated by Spain's National Cryptographic Centre (CCN) against NATO's D32 security standard, the deployment uses AWS Trusted Secure Enclave - Sensitive Edition to isolate sensitive defence, intelligence, and public safety data, highlighting how defence requirements reinforce the need for secure, localised European cloud infrastructure.

Regulatory Outlook and Market Alignment

The Spanish government is processing over 600 industry submissions alongside required reports from the competition regulator CNMC before making the decision to approve the final royal decree. 

Institutional investors, developers, and corporate tenants face a landscape where environmental compliance, renewable energy sourcing, and digital sovereignty are no longer optional features, but core determinants of real estate asset viability and grid connection rights. 

Finding a balance between environmental targets and realistic development timelines will decide whether Spain retains its position as a primary digital infrastructure hub in Southern Europe.

► Connect with the decision-makers shaping the future at GRI CRE & Data Centres Europe 2026
 

---

Sources:
A&O Shearman
Briefs
Clifford Chance
Data Center Dynamics
EjePrime
European Commission
Freshfields
Portugal Resident
The Defense Post
The Olive Press
TodoAlicante