Summary of Key Points
Data centers, which were once merely ordinary infrastructure consisting of land, power, and cooling systems, have now been upgraded to strategic assets that are crucial for data and computing power due to the surge in demand for AI and cloud services. The logic behind foreign direct investment (FDI) reviews for data centers has fundamentally changed worldwide: the focus has shifted from examining the identity of investors to assessing their ability to control core capabilities such as data, computing power, and algorithms. Regulatory attitudes vary significantly across regions—Europe has tightened its rules, the United States appears open but conducts rigorous reviews, while Asia is complex and diverse. Chinese companies seeking to expand overseas in the data center sector need to adopt targeted strategies to mitigate risks.
Detailed Analysis
1. The Transformation of Data Centers from Hardware Collections to the Heart of the Digital Economy
In the past, data centers were simply large warehouses for hosting servers, requiring land, electricity, and cooling systems, and generating revenue through long-term customer contracts. However, with the rise of AI, cloud services, and short-video applications that demand substantial computing power, data centers have become essential facilities for providing this capability. For example, the U.S. AI Action Plan explicitly states that data centers are vital for supporting AI development. McKinsey predicts that by 2030, global spending on data centers will reach $6.7 trillion (about 45 trillion RMB). Today, data centers are not just physical structures; they are also control points for the digital economy. The location of data, who can access it, and the reliability of AI services are all closely tied to these facilities, which is why countries regard them as strategic assets.
2. Changes in FDI Reviews: From Who You Are to What You Can Obtain
Previously, foreign investment reviews focused on the nationality of investors and the percentage of shares they held. Now, the focus has shifted to determining what core capabilities the investment can enable a company to acquire. For instance, if an investment in a data center grants access to sensitive data, control over computing resources, or influence on the operation of AI services, these factors are of greater importance. Lawyers point out that AI-related reviews emphasize “soft capabilities” such as technical documentation, training data for AI models, key R&D personnel, and computing resources. These aspects are also intertwined with export controls, cybersecurity, and data protection, making the review process more complex.
3. Global Regulatory Divergence: Some Countries Are Strict, While Others Appear Open but Have Hidden Restrictions
The approach to FDI in data centers varies greatly between countries:
- Europe has tightened its rules: The Netherlands requires mandatory reporting for data centers with a capacity of over 50 megawatts and has suspended the construction of new facilities exceeding 70 megawatts. Germany is even stricter, with facilities as small as those consuming about the electricity needed by a medium-sized mall potentially subject to review. The UK plans to include all third-party-operated data centers under its review framework.
- The United States appears open but has strict regulations: For example, while a Saudi company may wish to invest $20 billion in building an AI data center in the U.S., the CFIUS (Committee on Foreign Investment in the United States) reviews are rigorous. If foreign investment could lead to control over sensitive data or critical facilities, it will be scrutinized, and there is less tolerance for previous security agreements.
- Asia is complex: Japan has recently passed laws to tighten data center FDI regulations and plans to establish a mechanism similar to CFIUS. Southeast Asia (Singapore, Malaysia, etc.) is actively attracting foreign investment in data centers, but some countries are tightening controls on data security and foreign ownership.
4. Guidelines for Chinese Companies Expanding Overseas in the Data Center Sector
To reduce risks in this complex regulatory environment, lawyers offer the following advice:
- Choose Passive Investments: Forcing a minority stakeholdings can lower risk.
- Avoid Sensitive Assets: If the data center does not serve critical sectors like defense or healthcare and does not store highly sensitive data, the review risk is reduced.
- Localize Operations: Partnering with local, trustworthy companies and having local teams manage the facility can make regulatory approvals more straightforward.
- Be Cautious about New Projects: While new (greenfield) investments were once considered lower-risk, they may no longer be safe under EU regulations, so thorough evaluation is necessary.
- Acquire Non-Sensitive Assets: The simplest way to minimize risk is to purchase non-sensitive assets.
5. A Critical Reminder: No Absolute Security Pathway
Lawyers emphasize that there is no one-size-fits-all approach to ensuring investment safety, as regulatory standards vary across countries. However, maintaining open and transparent communication with authorities early on can significantly reduce risks. For instance, if you plan to invest in a data center, informing the authorities in advance about your intentions (e.g., not accessing sensitive data and using local personnel for operations) can increase the likelihood of approval. Even for greenfield investments in highly sensitive areas, preparedness for rigorous reviews is essential.
By breaking down these points, it becomes clear to non-experts how data center investments have evolved and what Chinese companies need to consider when expanding overseas.