How Big Tech Lobbied the EU to Hide Data Centers' Environmental Toll

The European Commission incorporated a secrecy provision drafted by Microsoft and tech lobby group DigitalEurope into European Union law, blocking public access to critical information on data centers' environmental impact, an investigation led by Investigate Europe, an independent journalism cooperative, in collaboration with Tech Policy Press, has found.

The confidentiality clause — inserted into a 2024 implementing regulation under the EU Energy Efficiency Directive (Directive 2023/1791) — shields information on energy use and water consumption from affected communities, researchers and journalists. Ten legal scholars told Investigate Europe it may violate the EU's obligations under the Aarhus Convention, an international treaty guaranteeing public access to environmental information.

With the EU set to triple its data center capacity over the next five years, the European Commission collects key metrics like energy efficiency and water consumption from facilities. But information on individual facilities' footprint is kept secret, after the industry pushed to amend the legislation to classify it as confidential and commercially sensitive.

Jerzy Jendrośka, a professor of environmental law at Opole University, who spent 19 years on the compliance body overseeing the Aarhus Convention, said: "In two decades, I cannot recall a comparable case. "This clearly seems not to be in line with the convention."

EU member states were also encouraged to refuse public requests for the information, Investigate Europe can reveal. In an email sent in early 2025 and shared with Investigate Europe, a senior Commission figure stressed to national authorities that they were “obliged to keep confidential all information and key performance indicators for individual data centers.”

Copy-pasted into law

The confidentiality clause is one of several business-friendly carve-outs that the industry pushed to add to EU regulations, Investigate Europe has found.

Europe is building data centers at breakneck speed, with €176 billion in investment expected over the next five years. The rush has triggered widespread concerns about pollution and intense energy use as well as impacts on communities and natural habitats.

One attempt to regulate the sector was a 2023 revision to the EU Energy Efficiency Directive, obliging operators to report data on key performance indicators like energy use and water consumption.

Soon after, the European Commission drew up more detailed instructions on the new duties. A first draft was circulated in December 2023, stating that the data should be “published in aggregated form.” The EU executive then fielded comments from stakeholders as per the standard consultative process.

At the start of 2024, Microsoft and DigitalEurope gave feedback: both suggested an identical new article classifying all individual information on data centers as confidential, citing commercial interest. They wanted to go beyond the initial Commission proposal and ensure that the data could not even be accessed through freedom of information requests.

When the Commission published the final text in March 2024, their proposed article had been added almost word-for-word.

The final text of Article 5 requires “the Commission and Member States concerned [to] keep confidential all information and key performance indicators for individual data centers. Such information shall be considered confidential information affecting the commercial interests of operators and owners of data centers.”

As a result, only broad, national-level data is made public, while information about the precise impact of individual data centers is kept out of reach of affected communities, academics, journalists and the wider public.

It is another example of industry “ramping up their lobby efforts to shape EU legislation”, said Bram Vranken, who researches the area for Corporate Europe Observatory, an NGO in Brussels. He said he had never seen such a striking example of changes to EU law.

“The fact that the Commission copy-pasted a Microsoft amendment is shocking,” Vranken said. “Who does the Commission really represent: Big Tech or the public interest?”

Legal experts say the clause goes against the EU Charter of Fundamental Rights and the Aarhus Convention, which grants public access to environmental information such as emissions data.

Luc Lavrysen, the former president of the Belgian Constitutional Court and emeritus professor of environmental law at Ghent University, said the blanket confidentiality clause "is clearly in violation” of EU transparency rules and the Aarhus Convention.

Kristina Irion, an associate professor in information law at the University of Amsterdam, reached the same interpretation. She said the “sweeping presumption of confidentiality” incorrectly benefits corporate interests over public access to at least some of the data.

“What deserves protection as confidential information affecting the commercial interests of data center companies should be determined on a case-by-case basis,” she said.

When approached for comment, the European Commission said that confidentiality had always been part of its proposal and declined to give an on-the-record response. “During the consultation, we received many comments on the topic,” an EU official said on condition of anonymity. “We analyzed the feedback and adopted a text reflecting it, as per usual practice.”

Microsoft and DigitalEurope did not respond to requests for comment.

The Commission's internal position, according to sources close to the matter, is that making each data center’s information public might see operators stop reporting despite obligations.

However, according to the EU’s own data, only 36 percent of eligible data centers — around 770 facilities — have reported so far. The Commission added that only 80 percent of the reported data is “deemed to be accurate and reliable.”

The industry has “a real interest in keeping the numbers hidden”, said Alex de Vries-Gao, a researcher at VU Amsterdam. De Vries-Gao has published several studies attempting to quantify the environmental footprint of AI, but they have mostly relied on aggregated data.

“Public information is extremely limited," he said. “You typically have to bend over backward to come up with any numbers."

Fast-tracked permits

The confidentiality clause is not the only recent trace of industry influence on laws governing data centers.

In December, the European Commission put forward a draft bill to speed up EU-mandated environmental impact assessments for major construction projects, including many of the biggest data center projects. The proposal is part of a broader push to slash bureaucratic burden on businesses. The proposed law, now under review, sets hard response deadlines for responsible authorities, puts a cap of 90 days for community consultation, and could see high-priority applications fast-tracked through certain administrative steps.

A document obtained by a freedom of information request by Investigate Europe shows Microsoft met with an EU official in late October to discuss “permitting”, with the company calling for “capping deadlines”. Microsoft saw the “streamlining of permitting procedures as a critical enabler,” the company wrote in an email to the European Commission. “Together with our teams on the ground, we have developed a set of concrete proposals.”

For months, Microsoft and Amazon were among those publicly lobbying for fast-tracked planning permission processes, both pointing to the Spanish region of Aragón's “one-stop shop” approach for environmental paperwork. The area has emerged as a major European data center hub, with Amazon investing €33 billion in AI and cloud infrastructure in Spain alone, according to a March report by the company.

The region’s new investor-friendly rules have been criticized by local activists for letting operators like Amazon “rezone land, avoid taxes and deadlines, with little public participation.” Amazon and Microsoft failed to respond to requests for comment. Ioannis Agapakis, a lawyer from non-profit group Client Earth, warned that contracting community consultation could see people miss their chance to identify serious issues. "In the worst case, it could legitimize projects that might have procedural or substantive illegalities," he said.

The consequences of these changes will be felt most by those closest to Europe’s broadening network of data centers. "Society is paying the full price for the carbon emissions and the water consumption of data centers,” said de Vries-Gao of VU Amsterdam.

The Commission does plan to publish sustainability scores covering a handful of indicators for individual data centers. It is a step forward, but the vast majority of what operators report will remain confidential, shielded by the very clause that industry wrote for itself.

***

Additional reporting: Pascal Hansens

This investigation was led and coordinated by Investigate Europe, a cross-border journalism team. The story is being published with media partners including Altreconomia, Die Zeit, El País, EU Observer, The Guardian, The Journal, Le Monde, Público and Tech Policy Press.