This legal analysis from A&O Shearman identifies the convergence of multiple overlapping regulatory regimes governing AI data center development: US export controls and investment screening (including post-Trump relief on China sales in exchange for licensing and revenue-share); EU and UK cybersecurity mandates (NIS 2, DORA, CNI status) with director liability and fines up to 7% of turnover for supply-chain violations; data localization rules in over 100 countries; and EU data sovereignty frameworks driving regional fragmentation of facilities. Energy demands are forcing utilities to reverse coal-phase-out commitments and divert capex from renewables to gas, nuclear, and SMRs. The analysis emphasizes that operator obligations cannot be downstreamed to tenants, and contracts are increasingly used to allocate geopolitical and regulatory risk between operators, hyperscalers, and tenants. This signals that compliance cost and geopolitical contingency pricing are now material drivers of data center ROI and financing terms, and that political volatility around China exports is reducing addressable market predictability.
332 other tracked developments touching the same claims.