Europe is racing to build massive data center capacity to support its AI ambitions, but a confidentiality clause inserted after industry lobbying allows companies to keep critical environmental data secret from the public. As the European Commission prepares to unveil a tech sovereignty package on June 3, an investigation by Investigate Europe has exposed how Microsoft and DigitalEurope successfully lobbied to shield site-level energy and water consumption data from public view, undermining transparency in Europe's push for digital independence.

What Exactly Did the Investigation Uncover?

In 2023, the European Union adopted the Energy Efficiency Directive, which required data center operators to submit key performance indicators including water consumption and energy sources. The European Commission then began drafting a delegated act to specify which metrics operators must report. During the public consultation process, both Microsoft and DigitalEurope submitted proposals explicitly requesting that all submitted environmental information be placed under total confidentiality, with no public access allowed.

What shocked investigators was that the final legal text incorporated the industry's suggested language almost word-for-word. "We found it in the law and that was very surprising for us," explained Nico Schmidt, the investigative reporter behind the story. "Usually it happens over a thousand small steps, a thousand small conversations, but here was just so blatant that it was really easy for us almost to show how this has been done".

"When we looked at the final text of this law, we found this suggested law article by Microsoft and DigitalEurope word for word. Mostly there were like a small change of words, they corrected one typo, but we found it in the law," said Nico Schmidt, investigative reporter at Investigate Europe.

Nico Schmidt, Investigative Reporter at Investigate Europe

Senior law scholars consulted by the investigation team unanimously stated that the blanket exclusion from public access to environmental information contradicts existing European legislation, particularly laws governing access to environmental data.

How Is This Affecting Europe's AI Infrastructure Plans?

The European Commission's proposed Cloud and AI Development Act aims to triple EU data center capacity within five years as part of a broader tech sovereignty strategy. The idea is that Europe should operate its own digital infrastructure rather than depend on foreign providers. However, the lack of transparency is creating real-world problems on the ground.

Research into permit filings in the Netherlands reveals a mixed picture: uneven compliance with reporting requirements, limited public insight into environmental impacts, and data centers operating well below capacity even as the industry argues that more facilities are urgently needed. Commission data shows that a significant share of operators who are supposed to report these metrics have not done so.

Steps to Strengthen Data Center Accountability in Europe

• Mandate Public Reporting: Require all data center operators to publicly disclose site-level energy consumption, water usage, and energy sources without confidentiality exemptions, allowing citizens and regulators to assess environmental impact.
• Establish Compliance Verification: Create independent audits to verify that operators are actually submitting required metrics and enforce penalties for non-compliance, addressing the current gap where many facilities fail to report.
• Set Efficiency Standards Before Expansion: Implement minimum performance benchmarks and capacity utilization requirements before approving new data center construction, ensuring existing infrastructure is used efficiently rather than building redundant facilities.
• Align with Existing Environmental Law: Revise the confidentiality clause to comply with European environmental access laws, ensuring data center transparency aligns with broader EU principles of public access to environmental information.

What Happens Next?

The controversy has already sparked significant political reaction. Last week, European Parliament members expressed outrage and wrote to the commissioner demanding that the confidentiality clause be revised in early June, with some parliamentarians calling it unlawful. The timing is critical, as the European Commission is expected to drop several major pieces of legislation as part of the tech sovereignty push, including energy efficiency rules, a new rating system for data centers, and groundwork for minimum performance standards from 2030.

The disconnect between Europe's ambition to build technological sovereignty and its willingness to enforce transparency reveals a fundamental tension. Christiaan van Veen, co-founder of Leitmotiv, a research and policy consultancy analyzing data center permits, noted that the expansion is moving ahead with limited oversight of its environmental footprint. "What does expanding 'technological sovereignty' with real accountability look like in practice?" is the question now facing European policymakers.

As Brussels prepares to unveil its tech sovereignty package, the pressure is mounting to ensure that Europe's push for AI infrastructure independence does not come at the cost of public accountability and environmental transparency. The coming weeks will reveal whether lawmakers prioritize industry interests or public oversight in shaping Europe's digital future.