The United States is on the brink of losing its primary federal law governing data centre standards, the Federal Data Center Enhancement Act (FDCEA) of 2023, with no replacement legislation in sight. The act, which covers security protocols, energy efficiency targets, and sustainability reporting for government-owned data centres, is set to expire this month. Critics warn that the lapse could create a regulatory vacuum at a time when data centre demand is soaring, driven by artificial intelligence and cloud computing.
Although the FDCEA applies directly to US federal facilities, its expiry has implications far beyond American borders. Many UK businesses rely on US-based cloud providers — such as Amazon Web Services, Microsoft Azure, and Google Cloud — for data storage and processing. Without federal standards in place, there is concern that security and environmental benchmarks could slip, leaving UK customers with less assurance about how their data is handled and what energy footprint it carries.
The timing is particularly sensitive. The European Union’s AI Act, which came into force this year, imposes strict requirements on data centres used for training high-risk AI models. The UK Information Commissioner’s Office (ICO) has also signalled that it expects high standards of data security and energy transparency from cloud providers operating in Britain. Industry experts suggest the US regulatory gap could complicate compliance for multinational firms that must satisfy both UK and EU rules.
Dr. Eleanor Marsh, a technology policy researcher at the University of Cambridge, said: “The lapse of the FDCEA creates a dangerous gap. UK businesses that use American cloud infrastructure may find themselves caught between US deregulation and tightening EU rules. The ICO should consider issuing its own guidance to fill the void, particularly on sustainability reporting and security audits.” She added that the situation also presents an opportunity for UK-based data centre operators to market themselves as more stable and compliant alternatives.
For the UK economy, the stakes are high. Data centres underpin everything from banking and retail to public services and AI development. A lack of consistent standards could increase the risk of data breaches, raise energy costs, and slow the adoption of green computing practices. The UK’s own data centre strategy, published last year, emphasises the importance of resilience and net-zero targets — goals that may be harder to achieve if US partners are not held to similar standards.
Industry bodies have called on the US Congress to act swiftly, but with political gridlock in Washington, a quick fix appears unlikely. In the meantime, UK businesses that contract with US providers should review their service-level agreements and demand clear commitments on security and sustainability. Source: UKPulse Media analysis of public legislative records and expert interviews.