A key US data center law covering security and sustainability is set to lapse worryingly soon, with no sign of a replacement
A key federal data center law expires on September 30, 2026No replacement legislation has been proposed by Congress or the administrationFederal agencies could soon design data centers without uniform security standards
A US law setting security, reliability, and sustainability standards for federal data centers is on track to expire September 30, 2026, with no confirmed replacement.
The Federal Data Center Enhancement Act (FDCEA) of 2023 currently governs facilities owned, operated, or maintained by federal agencies nationwide.
Its possible lapse comes at an awkward moment, just as the country keeps building out data center capacity to meet rising AI and computing demand.
Federal data center rules face an uncertain future
Under the FDCEA, federal facilities must maintain protections covering uptime, power reliability, physical security, cybersecurity, and resilience against natural disasters.
The law also sets expectations around sustainable energy use as agencies expand their computing footprint year over year.
Guidance from the Office of Management and Budget (OMB) says agencies must ensure their data centers offer secure, highly available computing environments at all times.
That guidance goes further, stating that proper operation depends on continuous monitoring and resource optimization, including automated systems that track measurements like electrical consumption.
Agencies are also expected to weigh energy and water use against broader financial and environmental considerations before building anything new.
Crucially, the OMB states that federal facilities must meet reliability and resilience requirements through appropriate security protections, both digital and physical.
The FDCEA itself replaced an earlier consolidation effort once agencies recognized that federal computing needs had shifted considerably since 2014.
Without renewal or some new law stepping in to fill the gap, federal agencies would gain considerably more freedom over how future data center projects get designed and run.
That fits a broader pattern: the Trump administration has generally leaned toward cutting regulation while speeding up approvals for new data centers, especially those built for AI development.
Reports suggest the administration has little appetite for introducing nationwide environmental rules across the wider data center sector.
Data center expansion is colliding with growing public unease
Environmental concerns have only intensified as construction accelerates, with communities increasingly vocal about electricity demand, water consumption, and pollution near new sites.
One recent survey found that more than 70% of respondents would oppose an AI-focused data center being built in their own neighbourhood.
Critics point to the sheer resource demands of these facilities, while supporters keep pushing for faster buildout regardless of local pushback.
The FDCEA's looming expiration lands right as that tension between infrastructure growth and community resistance is reaching a real boiling point.
Should no replacement framework materialize before September, individual agencies would be left to set their own standards for whatever data center projects come next.
