Data centre regulation in Cyprus
Our tracker lists 8 rules for building and running a data centre in Cyprus, national and EU, and 5 of them are in force.
Each comes with its status, who it applies to and the next date that matters. When a rule here changes, the change is logged below with its date.
- 5 of 8rules that apply, in forceRegulation tracker, updated 19 Oct 2026
- 3not yet in forceproposed, adopted or in scrutiny
- 14 Dec 2026next date, EURegulation tracker, updated 19 Oct 2026
Rules that apply in Cyprus
National rules first, then the EU rules every member state applies. Status as on the tracker.
| Rule | Level | Status | Applies to | Next date |
|---|---|---|---|---|
| Energy Efficiency Law 2009 to 2025, article 8 point (ιβ) (power to set data centre duties), added by Law 8(I)/2025; Energy Efficiency (Specification of the obligations of owners and operators of data centres with installed IT power demand of at least 500 kW) Order of 2025 (Κ.Δ.Π. 83/2025) | National | In force since 21 March 2025 (Order 83/2025, Official Gazette III 5933 of 21 March 2025, in force on publication); enabling power added by Law 8(I)/2025 (Official Gazette I 5027 of 21 February 2025) | New and existing sites. Owners and operators of data centres in Cyprus with installed IT power demand of at least 500 kW publish the Annex information (name, owner and operators, start date, municipality; floor area, installed power, data traffic and data volumes; performance in the last full calendar year on energy use, power use, temperature set points, waste heat use, water use and renewable energy, based on Delegated Regulation 2024/1364) by 30 April each year through an online platform named on the competent authority's website; operators at 1 MW or more are urged to take the EU Code of Conduct best practices into account; defence and civil protection centres excluded | 30 April 2027 (annual deadline 30 April, for the previous calendar year) |
| Network and Information Systems Security Law of 2020 as amended by Law 60(I)/2025 (NIS2 transposition), article 2A and Annex I sector 8 (digital infrastructure: providers of data centre services) | National | In force since 25 April 2025 (Law 60(I)/2025, Official Gazette I 5036 of 25 April 2025; in force on publication, with only article 7 of the amending law delayed) | New and existing sites. Providers of data centre services that are medium-sized enterprises or exceed the medium-size ceilings (article 2A(1)); smaller providers are caught only where a condition of article 2A(2), such as sole provider status or national importance, is met | No date published |
| EED reporting, Article 12 and Delegated Regulation 2024/1364 | EU | In force | New and existing sites. Data centres ≥500 kW installed IT power | 15 May 2027, next annual report |
| EED waste heat, Article 26(6) | EU | In force | New and existing sites. Data centres >1 MW total rated energy input | Ongoing duty |
| EED energy management systems, Article 11 | EU | In force as a Directive duty on Member States; deadline not yet reached | Enterprises, including data-centre operators, with average annual energy consumption above 85 TJ (23.6 GWh) over the previous three years, all energy carriers together | 11 October 2027, certified energy management system in place |
| EU rating scheme, delegated regulation adopted 21 Sep 2026 | EU | Adopted, in Parliament and Council scrutiny | New and existing sites. Same ≥500 kW reporting population | In force 20 days after Official Journal publication, if not objected to |
| EU minimum performance standards | EU | Consultation open | Not yet defined | 14 December 2026, consultation closes |
| Cloud and AI Development Act, COM(2026) 502 | EU | Proposal, with Parliament and Council | Cloud and AI infrastructure providers broadly | No fixed date |
Cyprus in detail
What the national rules say, with the legal texts.
Cyprus put the Directive's data centre reporting duty into a ministerial order. Law 8(I)/2025 of 21 February 2025 gave the Minister the power. Order 83/2025 has been in force since 21 March 2025. Owners and operators of data centres with installed IT power demand of at least 500 kW must publish their energy performance data every year by 30 April. That is about two weeks before the European deadline of 15 May. Data centre service providers also fall under the NIS2 law, Law 60(I)/2025, in force since 25 April 2025.
Dates to watch
The next dates for Cyprus and the EU, soonest first.
- 14 Dec 2026The EU Commission's minimum performance standards consultation and call for evidence closes
- 30 Apr 2027Cyprus's data publication dueevery year
- 15 May 2027EU database dueevery year
- 11 Oct 2027EU deadline under Article 11 of the Energy Efficiency Directive for a certified energy management system at enterprises above 85 TJ (23.6 GWh) of annual energy consumption
What changed
The latest changes to these rules on the tracker, newest first.
- 18 Oct 2026Added to the tracker: EED energy management systems, Article 11 (In force as a Directive duty on Member States; deadline not yet reached).
- 16 Oct 2026Added to the tracker: Energy Efficiency Law 2009 to 2025, article 8 point (ιβ) (power to set data centre duties), added by Law 8(I)/2025; Energy Efficiency (Specification of the obligations of owners and operators of data centres with installed IT power demand of at least 500 kW) Order of 2025 (Κ.Δ.Π. 83/2025) (In force since 21 March 2025 (Order 83/2025, Official Gazette III 5933 of 21 March 2025, in force on publication); enabling power added by Law 8(I)/2025 (Official Gazette I 5027 of 21 February 2025)).
- 16 Oct 2026Added to the tracker: Network and Information Systems Security Law of 2020 as amended by Law 60(I)/2025 (NIS2 transposition), article 2A and Annex I sector 8 (digital infrastructure: providers of data centre services) (In force since 25 April 2025 (Law 60(I)/2025, Official Gazette I 5036 of 25 April 2025; in force on publication, with only article 7 of the amending law delayed)).
Questions
Which rules apply to a data centre in Cyprus?
Our tracker lists 8 rules for building and running a data centre in Cyprus, national and EU, and 5 of them are in force.
What is the next date for data centre rules in Cyprus?
The next date is 14 Dec 2026: the EU Commission's minimum performance standards consultation and call for evidence closes.
Sources
From the European data-centre regulation tracker, which cites the legal text for every rule.
Not legal advice. Confirm each duty against the text itself.