
Publication
Giurisprudenza | IVASS e sanzioni per ritardi e contrarietà ai principi di correttezza e diligenza
IVASS e sanzioni per ritardi e contrarietà ai principi di correttezza e diligenza: il Consiglio di Stato conferma la linea dura
Middle East | Publication | July 2025
Organisations across all sectors are increasingly leveraging emerging technologies like artificial intelligence (“AI”), 5G technology and the internet of things to drive operational efficiency, enhance customer engagement and expand their market presence. This technological shift is fuelling unprecedented demand for robust digital infrastructure, with data centres at the heart of this transformation.
As the backbone for processing, storing and securing the vast quantities of data generated by these technologies, we are seeing a rapid growth in data centres. However, this expansion brings with it a host of technical and practical challenges, ranging from the physical demands of constructing and operating facilities, heightened energy requirements and evolving regulatory obligations, to the need for stringent data governance.
For businesses and industry stakeholders the growth of data centres presents significant opportunities for innovative construction projects. However, particularly in regions like the Middle East, where environmental factors add further complexity, careful planning is essential to mitigate the risks of these complex projects. In this article, we explore the key legal and practical considerations for developing and operating data centres, offering insights to help organisations manage risk and seize the opportunities presented by digital transformation.
Emerging technologies are rapidly transforming the construction industry, driving a surge in demand for advanced infrastructure – particularly data centres, which serve as a backbone for the digital world. Data centres are highly secure facilities that house computer systems and associated components such as servers, storage devices, networking hardware, and backup power systems. They are crucial for hosting websites, running applications, processing data, hosting cloud computing and powering AI models.
This trend of increasing demand for advanced infrastructure is particularly strong in the Middle East, with various governments and businesses investing heavily into data centres to support digital transformation targets. The UAE has reinforced its commitment to the development of emerging technologies through the formation of AIATC. AIATC’s goal is to accelerate the deployment of cutting-edge infrastructure by building on existing national investments and collaborating with leading global technology and investment partners.
Various data centre projects are underway across the region, with many expected to reach completion in 2026, illustrating the region’s commitment to digital transformation and technological advancement. Some notable developments within the UAE and Saudi Arabia include:
Unlike many other types of commercial or industrial construction projects, a data centre is purpose-built to house and protect vast amounts of critical digital information. This unique function requires highly specialised infrastructure, exceptional reliability, layers of redundancy and significant energy consumption capacity.
As technology evolves and the volume of internet traffic continues to rise, the demand for computing resources – and consequently, operational servers housed in data centres – is rising. To keep these servers running efficiently, data centres consume colossal amounts of power. The International Energy Agency reported that data centres (excluding those processing cryptocurrency mining) consumed between 1 to 1.3 percent of the global electricity demand in 2022. As such, proximity to a stable high-capacity power grid and access to reliable connectivity are critical considerations in site selection and infrastructure planning. To meet these demands, many data centre projects now include the construction of dedicated electrical substations as part of their development.
The uninterrupted operation of a data centre is essential, as even brief downtime can result in disastrous commercial and reputational losses as well as data loss or corruption. To mitigate this risk, many data centres are being designed with redundant power systems, including backup generators, and uninterruptible power supply systems, to ensure continuous operation – even in the event of a grid failure.
Beyond traditional grid connections, many data centre operators are exploring on-site renewable energy generation, entering into corporate agreements with nuclear power plants, deploying energy storage solutions, and using smart grid integration to enhance energy security and sustainability. These strategies not only support operational continuity but also align with broader regional objectives for energy diversification and focus on net-zero.
Data centre servers generate enormous amounts of heat, and efficient cooling systems are essential to prevent overheating and failure of the dense server configurations. This is especially important for data centres built in climates with extreme temperatures, like those in the Middle East, where maintaining optimal operating conditions can be particularly challenging.
Common methods currently used to address these thermal challenges include:
Securing a reliable water supply for cooling purposes, especially in systems that use evaporative cooling methods, is a key part of construction planning. Modern data centres increasingly incorporate architectural and engineering strategies – such as raised floors, hot and cold aisle containment, and precision air conditioning systems – to enhance airflow and prevent localised overheating.
A detailed data centre strategy must account for physical, cyber and geographical security considerations. With highly sensitive digital information at stake, physical security is paramount. Developers and operators implement robust access controls, advanced surveillance, and physical barriers to prevent unauthorised entry and ensure the safety of critical infrastructure.
Strategic site selection is equally crucial. The right location minimises risks that could lead to downtime, financial loss, reputational damage and decreased trust from stakeholders. Environmental risks like sandstorms, extreme temperatures, floods and other natural disasters must be carefully assessed and mitigated. Mitigation steps include incorporating reinforced foundations and resilient infrastructure to ensure uninterrupted operations.
The proximity to end-users is key for performance. The closer the data centre is to its end-users, the lower the latency and network congestion, which improves overall speed and reliability. Even small delays - ranging from single-digit milliseconds to triple-digit milliseconds - can impact real-time applications. As demand for low-latency, high-availability services continues to grow, data centre developers in the Middle East and beyond are prioritizing resilient design, advanced security protocols, and strategic geographic positioning to deliver reliable, high-performance services.
In a region where atmospheric temperatures can reach extreme levels, cooling the physical infrastructure is a major concern. Given traditional air conditioning systems have proven to be inefficient and costly, strategic design and optimisation are essential for ensuring that data centres operate effectively.
To protect cooling systems, direct sunlight must be avoided, and all external-facing piping and ductwork should be heavily insulated to minimise thermal gain. In tandem with the sophisticated cooling systems outlined above, other strategies to optimise data centre cooling include:
Looking ahead, adaptive cooling methods, including those powered by AI to continuously learn and adjust to the specific cooling needs of a data centre, are poised to transform thermal management. By combining advanced cooling technologies with intelligent design and automation, operators are reducing energy consumption and supporting sustainability – even in the region’s harshest climates.
Energy efficiency remains crucial as the region pursues ambitious environmental targets. By optimising cooling systems, operators can significantly reduce their environmental footprint and costs. Many operators are also investing in renewable energy sources, including solar and wind, to enhance energy independence.
A comprehensive approach to sustainability combines renewable energy integration, energy-efficient hardware and storage solutions like fuel cells and high-capacity batteries, and innovative building materials with high thermal resistances. These measures reduce cooling loads and improve overall energy performance, allowing data centres to minimize their environmental impact.
As the demand for digital infrastructure grows, energy efficiency is no longer optional. Governments and industry leaders are responding with green building standards, incentives for clean energy adoption, and encouraging innovation in sustainable design. These efforts not only reduce the environmental impact of data centre growth, but also position the region as a hub for climate-conscious digital innovation.
Data localisation requires specific data that originated in a country to be collected, processed, and/ or stored within that country. This can result in major hurdles for cross-border businesses by creating logistical, financial and operational complexities. Saudi Arabia and the UAE both have data localisation requirements, but their approaches differ in scope and application. Saudi Arabia has introduced strict data localisation requirements, particularly for sensitive and government-related data. In contrast, the UAE has taken a more flexible approach, allowing certain cross-border data transfers while still imposing localisation obligations in specific regulated sectors like banking and healthcare. Both countries impose significant penalties for non-compliance and businesses operating in these jurisdictions must carefully consider how and where they process and store data. This can often necessitate the construction of additional data centres solely to comply with data localisation requirements.
The complexities and risks set out in the sections above can have a significant impact on the entire lifecycle of the data centre. Failure to identify and mitigate challenges appropriately can result in costly repairs and delays in construction. Some key mitigation methods include:
As the world continues to explore the use of emerging technologies and integrates the associated efficiencies into daily business operations, the demand for robust, innovative, secure and locally compliant data centres in the Middle East is set to accelerate. These projects present distinct regional challenges – particularly around regulatory compliance and operational resilience – and early engagement with specialised design and planning experts is essential. By doing so, projects can avoid critical mistakes that threaten the use and reliability of these centres and future-proof data centres against evolving technological, environmental, and legal requirements.
Publication
IVASS e sanzioni per ritardi e contrarietà ai principi di correttezza e diligenza: il Consiglio di Stato conferma la linea dura
Subscribe and stay up to date with the latest legal news, information and events . . .
© Norton Rose Fulbright LLP 2025