Big Tech writes EU law: The silent subversion of AI regulation: Your toaster is more transparent than the US AI lobby
Xpert Pre-Release
Available in 27 languages 📢
Prefer Xpert.Digital on GoogleⓘPublished on: May 2, 2026 / Updated on: May 2, 2026 – Author: Konrad Wolfenstein
Big Tech writes EU law: The silent subversion of AI regulation: Your toaster is more transparent than the US AI lobby – Image: Xpert.Digital
Copy & Paste in Brussels: The silent lobbying scandal surrounding AI's gigantic electricity consumption
Secret deals for data centers: How Microsoft and others are undermining European climate protection
Who controls AI? A revelation shows how US corporations are writing Europe's laws
While every conventional household appliance in the EU must carry a strict energy label, the gigantic electricity and water consumption of massive AI data centers remains a closely guarded secret. This is no accident, but the result of an unprecedented lobbying coup: An international investigative report reveals how tech giants like Microsoft, Amazon, and Meta have undermined European legislative processes through massive influence. With wording proposals copied almost verbatim into EU law, Big Tech has succeeded in secretly circumventing planned environmental transparency obligations. The fatal consequence: Citizens, municipalities, and parliaments are completely in the dark about the true ecological costs of artificial intelligence. The case not only demonstrates the explosive resource hunger of this new technology, but also raises a highly sensitive fundamental democratic question: Who actually writes the rules for Europe's digital future – the elected representatives or the US corporations?
Related to this:
Who is allowed to know how much electricity an AI data center consumes? Apparently, only the corporation that owns it.
Europe's capitulation to Big Tech: Why the true price of the AI boom is to remain a closely guarded secret
Every toaster in Europe carries an EU energy label. Anyone buying a household appliance knows immediately how much electricity it consumes. The AI data centers of Microsoft, Amazon, Google, and Meta, however, remain shrouded in secrecy—at least regarding their location-specific environmental data. That this is no coincidence, but rather the result of targeted influence on the European legislative process, was revealed in April 2026 by a cross-border investigative report by Investigate Europe, published jointly with The Guardian, Le Monde, El País, and other media outlets in nine countries. What at first glance sounds like a technical regulatory dispute is, in reality, a fundamental political question: Who writes the rules for the AI age in Europe?
Related to this:
The explosive energy hunger of the AI boom
Europe's digital infrastructure is growing at an unprecedented pace. As part of its AI Continent Action Plan, the European Commission has set the goal of at least tripling the Union's data center capacity within five to seven years. A network of AI Factories, AI Gigafactories, and a dedicated Cloud and AI Development Act are intended to contribute to this goal – with a total of up to €200 billion to be mobilized through the InvestAI initiative.
Behind these growth figures lies a massive increase in energy consumption. In Germany alone, the electricity demand of data centers will reach 21.3 billion kilowatt-hours in 2025 – an increase of almost 80 percent compared to 12 billion kWh in 2015. By 2030, Germany's data center capacity is expected to increase by another 70 percent, with AI data centers alone quadrupling. Across Europe, energy analyst EMBER predicts that electricity demand from data centers will rise to 236 terawatt-hours by 2035 – almost tripling compared to 2024. Globally, according to an Economist Impact study commissioned by the industrial property insurer FM, AI will drive up energy demand by 60 percent by 2028, and electricity consumption by data centers alone is expected to more than double to 945 TWh worldwide by 2030.
Besides the insatiable demand for electricity, another resource problem is coming to the fore: water. Large data centers require millions of liters of drinking water to cool their server infrastructure. An average data center consumes up to 26 million liters of water per year, while hyperscale data centers can use up to 766 million liters – equivalent to the water consumption of a small town. The Microsoft data center in the Dutch region of Agriport A7 alone consumed 84 million liters of water during the 2021 drought, while farmers and municipalities simultaneously had to accept irrigation bans. Local communities are thus losing vital resources, while technology companies reap high profits – a conflict that extends across Europe and therefore requires public scrutiny and transparency.
Related to this:
The Energy Efficiency Directive and its original intention
With the Energy Efficiency Directive (EED) of 2023 – Directive (EU) 2023/1791 – the European Union made its first serious attempt at regulation as part of the European Green Deal. Article 12 of the Directive obliges Member States to require owners and operators of data centers with an IT power demand of at least 500 kilowatts to publish a set of key indicators by May 15, 2024, and annually thereafter: energy consumption, water use, energy efficiency, and the share of renewable energy. The idea was simple and sensible: if even a household toaster has to carry an energy label, then the most energy-intensive facilities in the digital economy should also be subject to public scrutiny.
A first draft of the delegated regulation—an implementing act intended to specify the details of the reporting obligations—was circulated by the European Commission in December 2023. This initial draft stipulated that the collected data should be published in aggregated form. Based on this, citizens, municipalities, journalists, environmental organizations, and scientists could have at least gained an overview of the environmental impact of individual data centers. But then the lobbying machine kicked into gear.
Related to this:
Copy, paste, govern: How corporate wishes became EU law
The research by Corporate Europe Observatory and AlgorithmWatch, published by Investigate Europe, reveals a precise pattern of targeted influence. Microsoft and the Brussels-based lobbying group DigitalEurope – whose members include Amazon, Google, Apple, and Meta – submitted position papers to the European Commission and coordinated closely with one another. Their shared goal: to significantly weaken the transparency requirements of the EED and to expand the scope of trade secrets to encompass all data about individual data centers.
Microsoft urged the Commission to go even further: Access to information should be restricted not only at the EU level, but also in the member states. DigitalEurope added in its statement that the confidentiality rules in the EED were unclear and that the delegated act should ensure that information on specific key performance indicators (KPIs) is protected before its disclosure. Both organizations ultimately proposed identical amendments to the delegated act: All information relating to individual data centers should be classified as confidential – even if requested under the EU Regulation on access to documents or the Aarhus Convention, which explicitly guarantees citizens access to environmental data.
What's shocking about this finding isn't just that corporations are lobbying – that's normal practice in Brussels. What's shocking is the nature of their influence: the wording from the position papers by Microsoft and DigitalEurope is said to have been adopted almost verbatim into the Commission's delegated act. The Guardian wrote that the confidentiality clause was "almost directly copied" into the Commission's proposal. The result: while the EED itself was designed to make all information about data centers with a power consumption exceeding 500 kW publicly available – unless it falls under trade or business secrets – the delegated act now allows all information about the performance indicators of individual data centers to be kept secret.
The legal dimension: When EU law undermines EU law
What has happened here is highly problematic from a legal perspective. A delegated act – an implementing act of the Commission – must not, in principle, contradict the directive it implements. However, this appears to be precisely the case. The EED itself stipulates a publication obligation; the delegated act creates such a far-reaching presumption of confidentiality that it effectively undermines this obligation.
Even more serious is the potential violation of international and European transparency standards. The Aarhus Convention, to which the EU is a signatory, obliges contracting states to grant the public systematic access to environmental information. Luc Lavrysen, former president of the Belgian Constitutional Court and professor of environmental law at Ghent University, stated that the confidentiality clause is “clearly in violation” – unequivocally incompatible – with EU transparency standards and the Aarhus Convention. Krist Irion, a legal scholar at the University of Amsterdam, reached a similar conclusion: The far-reaching, blanket presumption of confidentiality unfairly favors corporate interests over public access to information; sensitive business information should be protected on a case-by-case basis, not across the board.
The European Commission has rejected the accusations. A spokesperson stated that it had fulfilled its obligation to create a public dashboard and proposed a rating scheme for data centers. However, the dashboard only displays aggregated national data. The site-specific information required for genuine democratic oversight remains confidential.
DigitalEurope: The voice of digital concentration
To understand the dynamics of this influence, it's worth taking a closer look at DigitalEurope. The association is considered one of the most active and financially powerful lobbying groups in Brussels, representing not only 65 of the largest companies in the electrical, software, and telecommunications sectors, but also 40 national trade associations, such as the German digital association Bitkom. DigitalEurope holds 27 lobby passes for the European Parliament—more than any other tech player in Brussels—and, according to Netzpolitik.org, is among the top five most active lobbying groups overall.
The association claims to represent a broad sector. In reality, however, its positions are largely shaped by its largest and most financially powerful members – Microsoft, Amazon, Google, Apple, and Meta. These five companies alone are responsible for a disproportionate share of lobbying expenditures. Meta spends €10 million annually on EU lobbying, while Microsoft, Amazon, and Apple each spend €7 million. According to a study by LobbyControl and Corporate Europe Observatory, the entire digital sector now invests €151 million per year in EU lobbying – an increase of 33.6 percent since 2023 and 55.6 percent since 2021. This is the highest lobbying budget ever recorded for the technology sector in Brussels.
Particularly alarming: The number of tech lobbyists in Brussels has now exceeded the number of Members of the European Parliament. While the European Parliament has 720 members, representatives in Brussels lobbi for the tech industry on the equivalent of 890 full-time equivalent positions. In the first half of 2025, Big Tech held an average of three lobbying meetings per day with Commission representatives and MEPs. This sheer presence creates structural advantages of access that are simply not available to civil society organizations, environmental groups, or local representatives.
Our EU and German expertise in business development, sales and marketing
Our EU and German expertise in business development, sales and marketing - Image: Xpert.Digital
Industry focus areas: B2B, digitalization (from AI to XR), mechanical engineering, logistics, renewable energies and industry
More information here:
A thematic hub offering insights and expertise:
- Knowledge platform covering global and regional economies, innovation and industry-specific trends
- A collection of analyses, insights, and background information from our key areas of focus
- A place for expertise and information on current developments in business and technology
- A hub for companies seeking information on markets, digitalization, and industry innovations
Lobbying instead of control and how Big Tech is stealing transparency from Europe: The Digital Omnibus and its consequences
A pattern, not an exception: The Digital Omnibus and the system of dilution
The data center transparency case is not an isolated incident, but part of a larger pattern. A parallel investigation by LobbyControl and Corporate Europe Observatory from January 2026 shows that the European Commission directly adopted lobbying positions from Big Tech in at least seven instances within the so-called Digital Omnibus – a legislative package intended to simplify existing digital legislation. The legislation in question includes the AI Act, the General Data Protection Regulation (GDPR), the ePrivacy Directive, and the Data Act. Critics describe the Commission's plans as an “unprecedented attack” on the digital rights of European citizens.
Particularly worrying is the strategic alliance that Big Tech has forged with right-wing populist and far-right parties in the European Parliament. According to analysis, the number of lobbying meetings between Meta and MEPs affiliated with far-right groups rose from a single meeting in the previous legislative term to 38 in the current one. Google and Microsoft pursued similar strategies because the far-right groups support the Commission's deregulation plans. The result is a political coalition of US corporate interests, European deregulation ideologues, and the structural conformism of a Commission that increasingly instrumentalizes competitiveness as an argument for dismantling intellectual property rights.
US President Donald Trump has further fueled this climate by openly threatening to impose punitive tariffs on the EU should Brussels continue to regulate US technology companies. The combination of record-high lobbying expenditures, political pressure from Washington, and a European deregulation trend is creating an environment in which corporate interests are systematically prioritized over citizens' interests.
Related to this:
The transparency deficit and its practical consequences
What does the secrecy surrounding data center data actually mean? For citizens and municipalities, it means they don't know the resource burden a planned data center in their neighborhood would place on their resources. Local authorities cannot make a fact-based assessment of the economic benefits versus the environmental costs. For journalists, it means that investigations into the environmental footprint of individual facilities are thwarted by the confidentiality clause. For environmental organizations, it means that even requests based on the EU Regulation on access to documents or the Aarhus Convention can be rejected with reference to trade secrets.
The data available internally to the Commission is quite revealing. Since 2024, the Commission has been collecting key performance indicators such as energy efficiency and water consumption of data centers. Ireland – one of Europe's most important data center locations – has already missed the first two reporting deadlines and is also expected to miss the May 15, 2026 deadline, as the transposition of the EED into national law is still pending. This demonstrates that even the less stringent transparency requirements are not being consistently enforced.
The paradox is remarkable. Europe is intensely debating the concept of digital sovereignty. The EU Commission is investing €200 billion in building a European AI infrastructure. At the same time, European citizens, municipalities, and parliaments cannot track how much electricity and water a single data center belonging to Microsoft, Amazon, or Google consumes in their vicinity. Sovereignty over infrastructure presupposes that this infrastructure can actually be seen and assessed.
The concept of digital sovereignty and its structural contradictions
The European Union has used the concept of digital sovereignty as a guiding political principle for years. The core idea is sound and important: Europe should be able to shape its own digital future without becoming geopolitically dependent on US or Chinese technology companies. According to an analysis by the EuroStack consortium, over 80 percent of critical digital technologies in Europe are currently dependent on non-European providers. This includes cloud infrastructures, AI models, semiconductors, and fundamental software platforms.
However, digital sovereignty cannot be credibly claimed as long as the rules by which Europe's digital infrastructure is assessed and controlled are formulated by the very corporations whose dependence one seeks to overcome. This is not a rhetorical objection, but a structural problem. Anyone who allows US corporations to define the transparency standards for their own facilities in Europe implicitly accepts that information control over Europe's digital infrastructure lies with external actors. This undermines the core promise of digital sovereignty – control, self-determination, and resilience – at its very foundation.
The EuroStack strategic plan, for which investments of around 300 billion euros are projected, explicitly calls for the development of a sovereign digital economy based on European values, European governance, and European standards. This includes not only European AI models and European chips – above all, it includes European regulatory sovereignty that cannot be undermined by lobbying.
Democratic governance or corporate co-governance?
Brussels lobbying is not a phenomenon that only emerged with the AI era. Companies and associations contribute their positions to legislative processes – this is legitimate as long as it is transparent and enriches the democratic process rather than corrupting it. The line between legitimate interest representation and illegitimate influence is crossed when lobbyist language is incorporated verbatim into legal texts, when the influence systematically aims to undermine democratic control mechanisms, and when those affected – citizens, municipalities, civil society – are structurally excluded from this process.
This is precisely what happened in the case of data center transparency. The investigations reveal not merely lobbying, but the adoption of legal language by corporations that simultaneously profit commercially from the lack of transparency. This is a fundamental conflict between corporate and public interests – and the Commission appears to have favored the corporate side in this conflict.
The institutional asymmetry is glaring. DigitalEurope alone holds 27 lobby passes for the European Parliament. Environmental and consumer protection organizations, municipal associations, and research institutions have a fraction of these resources and access. However, a democratic digital policy requires that all relevant interests be able to participate equally in the legislative process – not just those who can afford the most expensive lobbying firms.
The coalition of Big Tech with far-right factions in the European Parliament is a particularly worrying signal in this context. When the deregulation interests of US corporations and national-populist skepticism towards European regulation form a strategic alliance, a political dynamic emerges that structurally restricts the European legislator's ability to act – not through arguments, but through voting power.
What Europe needs to do now
The findings of the Investigate Europe research are a wake-up call that demands concrete political action. First, the confidentiality clause in the delegated act implementing the EED must be revised. Environmental data from data centers with a capacity exceeding 500 kW must be publicly accessible at the site-by-site level – with clearly defined and narrowly defined exceptions for genuine trade and business secrets, which must be justified on a case-by-case basis. A blanket presumption of confidentiality is incompatible with both the EED itself and the Aarhus Convention.
Secondly, Europe urgently needs to strengthen the EU Transparency Register and introduce binding cooling-off periods for Commission officials who have previously worked with lobby organizations. If corporate language can be adopted verbatim into legislation without this process being publicly documented or subject to parliamentary scrutiny, this is not a failure of individual officials, but an institutional deficit.
Third, the EU must give substance to its pronouncements on digital sovereignty. An AI Continent Action Plan that mobilizes €200 billion but simultaneously allows the benefiting corporations to retain control over the environmental consequences of this infrastructure is inherently contradictory. Sovereign infrastructure requires sovereign regulatory authority – that is, laws formulated in Europe according to European standards and in the European interest, not dictated by companies based overseas.
Fourth, civil society should be structurally strengthened. When 890 tech lobbyists face more than 720 Members of the European Parliament, this is not a question of a lack of engagement from civil society, but rather a result of massive resource inequality. A publicly funded counterpart mechanism – such as an EU-funded fund for civil society lobbying in regulatory procedures of particular democratic importance – could ensure a structural balance here.
Related to this:
Digital sovereignty begins with the law, not the server
The analysis of events surrounding the EU Energy Efficiency Directive and the transparency obligations for data centers reveals a deep tension within the European digital project. Europe is investing hundreds of billions of euros to become more technologically independent – while simultaneously allowing the conceptual foundations of this independence to be formulated by the very actors it seeks to break free from. This is not sovereignty; it is a new form of dependency bearing the EU stamp.
The digital infrastructure of the AI age – data centers, cloud platforms, AI models – is a critical societal infrastructure, comparable to energy grids or water supplies. As with any critical infrastructure, transparency is not a favor granted to the operators, but a fundamental democratic right of those affected. Anyone who undermines this principle by enshrining confidentiality clauses in EU law that prevent precisely this kind of oversight is acting not only against the letter and spirit of the EED, but against the fundamental principle of democratic governance.
The question posed by Investigate Europe is therefore not purely technical. It is a profoundly political one: Whose interests does European legislation represent – those of the citizens or those of corporations? As long as this question remains unanswered, Europe's digital sovereignty will remain a promise without foundation. Digital sovereignty does not begin in the data center. It begins with the question of who writes the laws.
Related to this:
