Data centre regulation in Estonia
Our tracker lists 7 rules for building and running a data centre in Estonia, national and EU, and 4 of them are in force.
Each comes with its status, who it applies to and the next date that matters. When a rule here changes, the change is logged below with its date.
- 4 of 7rules that apply, in forceRegulation tracker, updated 19 Oct 2026
- 3not yet in forceproposed, adopted or in scrutiny
- 14 Dec 2026next date, EURegulation tracker, updated 19 Oct 2026
Rules that apply in Estonia
National rules first, then the EU rules every member state applies. Status as on the tracker.
| Rule | Level | Status | Applies to | Next date |
|---|---|---|---|---|
| Cybersecurity Act, § 2 point 1, § 3(3) point 1 and § 3(4) point 8, as amended by the act of 10 December 2025 transposing NIS2 | National | In force since 1 January 2026 | New and existing sites. Data centre service providers with 250 or more staff and a balance sheet above 43 million euros or turnover above 50 million euros are essential entities; those with 50 or more staff and a balance sheet or turnover above 10 million euros are important entities; providers already meeting the criteria have three years from the entry into force of § 3¹(1) to comply (§ 28¹(3)) | No date published |
| EED reporting, Article 12 and Delegated Regulation 2024/1364 | EU | In force | New and existing sites. Data centres ≥500 kW installed IT power | 15 May 2027, next annual report |
| EED waste heat, Article 26(6) | EU | In force | New and existing sites. Data centres >1 MW total rated energy input | Ongoing duty |
| EED energy management systems, Article 11 | EU | In force as a Directive duty on Member States; deadline not yet reached | Enterprises, including data-centre operators, with average annual energy consumption above 85 TJ (23.6 GWh) over the previous three years, all energy carriers together | 11 October 2027, certified energy management system in place |
| EU rating scheme, delegated regulation adopted 21 Sep 2026 | EU | Adopted, in Parliament and Council scrutiny | New and existing sites. Same ≥500 kW reporting population | In force 20 days after Official Journal publication, if not objected to |
| EU minimum performance standards | EU | Consultation open | Not yet defined | 14 December 2026, consultation closes |
| Cloud and AI Development Act, COM(2026) 502 | EU | Proposal, with Parliament and Council | Cloud and AI infrastructure providers broadly | No fixed date |
Estonia in detail
What the national rules say, with the legal texts.
Estonia has not yet enacted the EU data centre reporting duty. The rule in force today is cyber security: since 1 January 2026 the Cybersecurity Act classes data centre service providers with 250 or more staff and more than 43 million euros of balance sheet or 50 million euros of turnover as essential entities, and smaller providers with 50 or more staff and more than 10 million euros of balance sheet or turnover as important entities. A government bill to transpose the Energy Efficiency Directive was sent for inter-ministerial coordination on 3 August 2026.
Dates to watch
The next dates for Estonia and the EU, soonest first.
- 14 Dec 2026The EU Commission's minimum performance standards consultation and call for evidence closes
- 15 May 2027EU database dueevery year
- 11 Oct 2027EU deadline under Article 11 of the Energy Efficiency Directive for a certified energy management system at enterprises above 85 TJ (23.6 GWh) of annual energy consumption
Formal refusals and bans since 2025
Verified decisions only.
No formal refusal or ban recorded for Estonia; absence is not evidence of low planning risk.
Decisions from 1 Jan 2025; statuses checked 21 Oct 2026.
What changed
The latest changes to these rules on the tracker, newest first.
- 18 Oct 2026Added to the tracker: EED energy management systems, Article 11 (In force as a Directive duty on Member States; deadline not yet reached).
- 15 Oct 2026Added to the tracker: Cybersecurity Act, § 2 point 1, § 3(3) point 1 and § 3(4) point 8, as amended by the act of 10 December 2025 transposing NIS2 (In force since 1 January 2026).
Questions
Which rules apply to a data centre in Estonia?
Our tracker lists 7 rules for building and running a data centre in Estonia, national and EU, and 4 of them are in force.
What is the next date for data centre rules in Estonia?
The next date is 14 Dec 2026: the EU Commission's minimum performance standards consultation and call for evidence closes.
Sources
From the European data-centre regulation tracker, which cites the legal text for every rule. Data-centre market data for Estonia.
Not legal advice. Confirm each duty against the text itself.