Transparency rules live — high-risk duties postponed · Risk 6.8/10 · 4 active alerts
Article 50 transparency duties and Commission GPAI enforcement powers have applied since 2 Aug 2026. Regulation 2026/1744 moved Annex III high-risk duties to 2 Dec 2027 and product-safety high-risk duties to 2 Aug 2028. The GPAI Code was finalised in Jul 2025; CADA was proposed on 3 Jun 2026.
Editorial snapshot: 2026-09-13
Transparency rules are live — GPAI obligations have applied since 2 Aug 2025, while Article 50 transparency and Commission GPAI enforcement powers apply from 2 Aug 2026. Regulation 2026/1744 postpones Annex III high-risk duties to 2 Dec 2027 and Annex I duties to 2 Aug 2028. The final GPAI Code of Practice was published 10 Jul 2025.
Enforcement is entering its next phase. Article 50 transparency duties and Commission GPAI enforcement powers now apply. Member-State market-surveillance arrangements remain an implementation variable, while high-risk duties have been postponed by Regulation 2026/1744.
AI's environmental footprint is now a regulatory issue. The AI Act requires GPAI providers to document energy consumption. CADA was proposed on 3 Jun 2026 and is now in the co-legislative process. EED data-center reporting is tracked separately from AI Act enforcement.
Regulation (EU) 2024/1689 · In Force 1 Aug 2024 · Analysis: April 2026
A Complete Critical Analysis with Belgian Citizen Impact
“The AI Act brands itself as the first-ever legislation that uniformly regulates AI across all sectors. This branding appears not to be one hundred per cent accurate.”— TU Delft academic research on AI Act exemptions, 2024 [^1]
The EU Artificial Intelligence Act applies a risk-based classification system: unacceptable risk (banned), high-risk (tightly regulated), limited risk (transparency obligations), and minimal risk (largely unregulated).
On paper, it bans manipulative AI, social scoring, most mass biometric surveillance, and emotion recognition at work and school. In reality — as this report documents — the law is riddled with exemptions, self-certification escape hatches, enforcement gaps, jurisdictional blind spots, and is already being actively dismantled from within by the European Commission through the Digital Omnibus proposals of November 2025.
It does not cover the military. It does not meaningfully bind foreign tech companies under CLOUD Act jurisdiction. It does not protect migrants and asylum seekers. It does not mandate real-time public disclosure of energy and water consumption by AI data centres. It does not protect workers from workplace surveillance. It does not address the structural dependency of EU institutions on US-owned AI platforms like Palantir. And it is being delayed and weakened under direct lobbying pressure from US tech companies and the Trump administration.
What follows is the most complete critical map of every significant weakness, gap, and failure in the EU AI Act — with direct analysis of what that means for you as a Belgian citizen.
Click any gap to expand the full analysis.
The amendment preserves Article 50 transparency from 2 Aug 2026 while postponing standalone high-risk duties to Dec 2027 and product-embedded duties to Aug 2028.
Draft Code of Practice includes energy consumption documentation requirements for GPAI providers. Industry (OpenAI, Google) argues for aggregate disclosure; civil society demands per-model lifecycle data. Public consultation closes April 30.
digital-strategy.ec.europa.eu
Commission publishes first aggregated analysis of EED Article 12 DC reporting. EU average PUE: 1.46; WUE: 1.1 L/kWh; renewable share: 47%. Hyperscalers significantly outperform average. 2,400+ DCs reported.
commission.europa.eu
Analysis shows only 11 member states have designated market surveillance authorities for AI Act. 16 states behind schedule. France, Germany, Netherlands designated; many Eastern European states lagging. Commission considering infringement.
Euractiv
GPAI enforcement, codes of practice, AI Pact coordination. Staffing details are maintained on the AI Office page
Co-lead on AI Act. Oversight of DMA/DSA enforcement, AI safety hearings (incl. Anthropic Mythos session)
Co-lead on AI Act. Fundamental rights, prohibited AI uses, law enforcement AI oversight
AI-cybersecurity intersection, threat landscape for AI systems, secure AI guidelines
AI Act enforcement at national level. Member States are designating national market-surveillance authorities
IEA estimate for 2024; projected 150 TWh by 2030
~2% of global electricity demand; AI is the main growth driver
Could reach 165–326 TWh by 2028 globally
Equivalent to emissions of New York City in 2025
Direct + indirect (electricity generation) water use
US data centers alone in 2023; EU figure not yet public. Commission's first aggregated EU DC water dataset expected Q3 2026 from EED/Delegated Reg 2024/1364 reporting
Data center electricity demand growing 12% annually for 5 years
By 2024-25, inference dominates AI energy use (was 70-80% training in 2020-22)
~227 GWh annually for ChatGPT alone (1B+ queries/day)
4× higher than IEA generic estimate; based on Meta 2024 disclosure
Expected 2026–2031 investment in EU data center infrastructure
Aims to triple EU DC capacity in 5-7 years
| Facility | Operator | Country | Status | Power MW | PUE | Water ML/yr | Renewable | AI |
|---|---|---|---|---|---|---|---|---|
| Google Saint-Ghislain | Google (Alphabet) | Belgium | Operational | ~110 | 1.09 | 1,490 | 82% CFE | AI |
| Google Farciennes (under construction) | Google (Alphabet) | Belgium | Under Construction | TBD | Target <1.10 | TBD | Target 100% CFE | AI |
| Google Eemshaven | Google (Alphabet) | Netherlands | Expanding | ~100–130 | ~1.10 | ~600 | ~90% CFE | AI |
| Google Middenmeer (Agriport) | Google (Alphabet) | Netherlands | Operational | ~80–110 | ~1.10 | Not disclosed | ~90% CFE | AI |
| Google Hamina | Google (Alphabet) | Finland | Expanding | ~90–110 | ~1.10 | ~0 potable water | ~97% CFE (Nordic hydro/wind) | AI |
| Google Fredericia | Google (Alphabet) | Denmark | Operational | ~60–90 | ~1.08 | Not disclosed | ~90% CFE (Danish wind) | AI |
| Microsoft Azure West Europe (Amsterdam region) | Microsoft | Netherlands | Expanding | ~200+ | ~1.18 | Not disclosed | ~70% (global average) | AI |
| Microsoft Azure North Europe (Dublin/Ireland) | Microsoft | Ireland | Expanding | ~300+ | ~1.20 | Not disclosed | ~65% (Ireland grid mix + PPAs) | AI |
| Microsoft Azure Belgium Central | Microsoft | Belgium | Operational | ~40–60 | Not disclosed (Belgium) | Not disclosed | Not disclosed (Belgium) | AI |
| Microsoft Azure Sweden Central (Gävle/Sandviken) | Microsoft | Sweden | Expanding | ~130+ | ~1.12 | Minimal | ~95% (Swedish hydro + wind) | AI |
| Microsoft Azure Finland (Kirkkonummi/Espoo) | Microsoft | Finland | Under Construction | TBD | Target <1.15 | TBD | Target 100% | AI |
| Microsoft Azure Spain (Madrid/Zaragoza) | Microsoft | Spain | Under Construction | TBD | TBD | TBD | Target ~100% (Spanish solar PPAs) | AI |
| Meta Luleå | Meta (Facebook) | Sweden | Expanding | ~160+ | ~1.10 | ~20 | 100% (Lule River hydro) | AI |
| Meta Clonee | Meta (Facebook) | Ireland | Expanding | ~200+ | ~1.10 | ~650 | ~100% (PPAs + Irish renewable certificates) | AI |
| Meta Odense (Tietgenbyen) | Meta (Facebook) | Denmark | Operational | ~110 | ~1.08 | Not disclosed | 100% (Danish wind PPAs) | AI |
| Meta Talavera de la Reina (planned) | Meta (Facebook) | Spain | Planned | TBD | TBD | TBD | Target 100% (solar) | AI |
| AWS eu-west-1 (Dublin/Ireland) | Amazon (AWS) | Ireland | Expanding | ~350+ | ~1.15 | Not disclosed | ~100% (PPAs — Amazon largest corporate renewable buyer globally) | AI |
| AWS eu-central-1 (Frankfurt/Germany) | Amazon (AWS) | Germany | Expanding | ~300+ | ~1.15 | Not disclosed | ~100% (German renewable certificates + PPAs) | AI |
| AWS eu-south-2 (Aragón, Spain) | Amazon (AWS) | Spain | Expanding | ~150+ | TBD | TBD | Target 100% (solar) | AI |
| AWS eu-north-1 (Stockholm/Sweden) | Amazon (AWS) | Sweden | Operational | ~100+ | ~1.12 | Low | ~100% (Swedish hydro/wind) | AI |
| Facility | Operator | Country | Status | Power MW | PUE | Water ML/yr | Renewable | AI |
|---|---|---|---|---|---|---|---|---|
| OVHcloud Gravelines | OVHcloud | France | Operational | ~80+ | ~1.15 | Low (closed-loop) | ~78% (French nuclear + renewables) | AI |
| Scaleway DC5 (Paris) | Scaleway (Iliad Group) | France | Operational | ~15–25 | ~1.15 | Low | ~90% (nuclear + renewables) | AI |
| Hetzner Falkenstein/Nuremberg | Hetzner | Germany | Operational | ~50+ | ~1.15 | Low | 100% (German renewable tariff) | AI |
| Kevlinx BRU01 (Brussels) | Kevlinx | Belgium | Under Construction | ~20 | Target <1.25 | TBD | Target 100% | AI |
| Equinix Amsterdam (AM1–AM9) | Equinix | Netherlands | Expanding | ~280+ | ~1.20 | Not disclosed | ~95% (PPAs + certificates) | AI |
| Equinix Frankfurt (FR1–FR11) | Equinix | Germany | Expanding | ~250+ | ~1.25 | Not disclosed | ~100% (German renewable tariff + PPAs) | AI |
| Equinix Paris (PA1–PA8) | Equinix | France | Expanding | ~140+ | ~1.20 | Not disclosed | ~90% (French nuclear + renewables) | AI |
| Digital Realty / Interxion Amsterdam (AMS1–AMS18) | Digital Realty (Interxion) | Netherlands | Expanding | ~200+ | ~1.20 | Not disclosed | ~100% (Dutch certificates + PPAs) | AI |
| Digital Realty / Interxion Frankfurt (FRA1–FRA16) | Digital Realty (Interxion) | Germany | Expanding | ~180+ | ~1.25 | Not disclosed | ~100% (German renewable tariff) | AI |
| NTT Global Data Centers EMEA (multiple) | NTT Ltd (Global Data Centers) | Germany / UK / Netherlands | Expanding | ~140+ | ~1.20 | Not disclosed | ~80%+ (PPAs per region) | AI |
| T-Systems / Telekom DC (Biere & Magdeburg) | T-Systems (Deutsche Telekom) | Germany | Operational | ~55+ | ~1.30 | Not disclosed | ~100% (Deutsche Telekom green electricity target) | AI |
| LuxConnect DC1–DC2 (Bettembourg/Roost) | LuxConnect | Luxembourg | Operational | ~30+ | ~1.30 | Low | ~100% (Luxembourg green tariff) | — |
| CERN Data Centre (Geneva/Prévessin) | CERN | Switzerland (EU-associated) | Expanding | ~25 | ~1.10 | Low | ~100% (French nuclear-heavy grid) | AI |
Data centers consume as much electricity as Belgium or Austria. Price impact on wholesale markets estimated at +3-5% during peak demand.
Excludes indirect water for electricity generation (3-4× larger). Spain, Ireland, Netherlands face acute water stress from DC clusters.
Offset partially by renewable PPAs, but marginal grid emissions still apply. AI training runs can emit as much CO₂ as 5 transatlantic flights per model.
Prime agricultural land in Netherlands (Agriport), Spain (Aragón), Ireland converted. Irreversible soil sealing.
Elia (Belgium): DC requests = 10× supply. Ireland: DCs = 21% of electricity. Amsterdam halted new DC permits 2019-22. Grid investment paid by all electricity users.
Elia (BE) 2024: DC connection requests = 10× available capacity, forcing €1B+ grid upgrades. EirGrid (IE): €2.4B Grid Development Strategy partly DC-driven. TenneT (NL): Amsterdam/Rotterdam grid reinforcements. Costs passed to all electricity consumers via network tariffs.
Thermal discharge raises water temperature, reduces dissolved oxygen, can harm aquatic ecosystems. Google Hamina (Gulf of Finland), various evaporative cooling sites discharge warmed water.
Dutch provincial docs: biocides, corrosion inhibitors from cooling towers may reach groundwater/surface water. No systematic EU monitoring program exists.
North Holland: DC water use threatens drinking water supply. Ireland: water infrastructure strained. Spain: DC projects in drought zones.
Core EU framework for data center energy transparency. Mandates annual reporting of energy, water, and sustainability KPIs for all DCs ≥500 kW IT load.
Implements EED Article 12. Creates EU-wide database and common rating scheme. Defines 4 mandatory sustainability KPIs.
World-first comprehensive AI regulation. Includes energy transparency requirement for GPAI models.
Part of AI Continent Action Plan. Aims to triple EU DC capacity in 5–7 years while ensuring sustainability. OVERDUE: formal proposal was expected by Q2 2026 but has not been published — likely delayed by political pushback on environmental trade-offs.
Classifies data centers as potentially sustainable economic activity. Requires compliance with EU DC Code of Conduct for Taxonomy alignment.
Most stringent national DC energy law in EU. Binding PUE limits and 100% renewable mandate.
Commission developing comprehensive DC energy package including EU-wide label, potential minimum PUE/WUE standards.
Industry self-regulation pact signed by 100+ DC operators. Commission using as input for EU standards.
Corporate Sustainability Reporting Directive requires DC operators above thresholds to disclose energy, water, and emissions data under European Sustainability Reporting Standards (ESRS).
Core EU water law. Requires member states to achieve "good status" for all surface and groundwater bodies. DC water abstraction and thermal discharge must comply with river basin management plans.
EU industrial pollution prevention and control. 2024 revision expands scope. Large data centers with significant thermal/water discharge may fall under permitting requirements.
Requires EU member states to restore 20% of degraded land and sea areas by 2030. DC expansion on greenfield/agricultural land directly conflicts with restoration targets.
EirGrid and CRU (Commission for Regulation of Utilities) imposed effective moratorium on new DC grid connections in Dublin region. Government Data Centre Policy Statement requires DCs to support grid stability.