A04 Three Models of Data Centre Governance – Comparing the EU, US and China

Key Takeaways

• Modern data centres operate within increasingly complex regulatory and governance environments.
• Different jurisdictions pursue similar objectives—including economic growth, security, sustainability, reliability, and public trust—but often through very different mechanisms.
• The European Union tends to emphasize regulation, transparency, sustainability, and rights-based governance.
• The United States tends to emphasize markets, innovation, technology leadership, contractual governance, and private-sector responsibility.
• China tends to emphasize strategic planning, national development goals, digital sovereignty, and state coordination.
• Understanding these different approaches helps explain why data centre development can look very different across regions, even when the underlying technologies are similar.
• Malaysia increasingly sits at the intersection of all three models.

The Same Data Centre, Different Systems of Governance

A data centre in Frankfurt, Virginia, Shanghai, Johor, or Cyberjaya may appear remarkably similar.

The buildings often contain the same servers.

The cooling systems are frequently supplied by the same global manufacturers.

The electrical systems follow many of the same engineering principles.

The fibre networks connect to the same global internet.

Yet the way these facilities are governed can differ substantially.

This difference does not arise primarily from technology.

Instead, it arises from the different ways societies organize decision-making, balance competing interests, allocate responsibilities, and define public priorities.

The question is not simply:

How do we build a data centre?

The deeper question is:

How should society govern digital infrastructure?

Different jurisdictions answer that question differently.

MDCO Insight: Data centres may be global in technology, but they remain local in governance.

Why Governance Matters

At first glance, governance may seem less important than engineering.

After all, a server processes information regardless of whether it is located in Europe, America, China, or Malaysia.

However, governance shapes many of the most important decisions surrounding a facility.

It influences:

• Where data centres are built.
• How environmental impacts are managed.
• How personal data is protected.
• How infrastructure reliability is achieved.
• How communities are consulted.
• How sustainability is measured.
• How national interests are protected.
• How risks are allocated.

These questions become increasingly important as data centres grow larger, consume more resources, and become more deeply embedded in modern economies.

MDCO Insight: The most significant differences between global data centre markets are often not technological but institutional.

The European Model: Governance Through Regulation

The European Union generally approaches digital infrastructure through a philosophy that emphasizes rights, transparency, accountability, and sustainability.

European policymakers often begin with a simple premise:

Markets create value, but public interests require explicit protection.

This philosophy has produced a wide range of regulations affecting digital infrastructure.

Examples include:

• GDPR (data protection)
• CSRD (sustainability reporting)
• CSDDD (human rights and environmental due diligence)
• NIS2 (cybersecurity)
• DORA (operational resilience)

These frameworks do not primarily dictate how a data centre should be engineered.

Instead, they establish obligations regarding how organizations manage risks, disclose information, protect stakeholders, and account for impacts.

A defining characteristic of the European model is transparency.

Organizations are increasingly expected not merely to perform responsibly but also to demonstrate and document that performance.

This approach reflects a belief that informed stakeholders, transparent information, and regulatory oversight contribute to better outcomes.

MDCO Insight: The European model focuses heavily on making impacts visible, measurable, and accountable.

The Strengths and Challenges of the European Model

The strengths of this approach are often cited as:

• Strong protection of rights.
• Greater transparency.
• Improved sustainability reporting.
• Enhanced stakeholder accountability.
• Better visibility of environmental and social impacts.

However, critics argue that extensive regulatory requirements can also introduce:

• Administrative complexity.
• Higher compliance costs.
• Slower decision-making.
• Regulatory uncertainty.
• Reduced flexibility.

Whether these costs are justified remains a subject of ongoing debate.

What is clear is that Europe increasingly views data centres not merely as commercial assets but as infrastructure with broader societal implications.

MDCO Insight: The European model assumes that transparency and accountability are essential components of sustainable development.

The American Model: Governance Through Markets and Innovation

The United States approaches digital infrastructure from a different perspective.

While regulations certainly exist, the dominant philosophy tends to place greater emphasis on innovation, competition, private enterprise, and market-driven solutions.

The United States is home to many of the world’s largest technology companies:

• Amazon
• Microsoft
• Google
• Meta
• Apple
• Oracle
• NVIDIA

As a result, American influence often spreads globally through technology platforms rather than regulatory directives.

A Malaysian company may never interact with a US regulator.

Yet it may still operate using:

• AWS infrastructure.
• Microsoft Azure services.
• Google Cloud platforms.
• NVIDIA AI technologies.
• NIST cybersecurity frameworks.

In this sense, the American model frequently exerts influence through ecosystems rather than formal regulation.

MDCO Insight: The American model often governs through market power, technological leadership, and commercial relationships.

The Strengths and Challenges of the American Model

Supporters argue that this approach encourages:

• Innovation.
• Entrepreneurship.
• Rapid technological development.
• Competitive markets.
• Investment attractiveness.

The United States has undeniably become the dominant global centre for cloud computing, artificial intelligence, and digital platform development.

However, critics sometimes point to challenges including:

• Fragmented regulatory frameworks.
• Uneven privacy protections.
• Market concentration.
• Dependence on private-sector self-governance.

The American model generally assumes that markets, competition, and innovation are powerful mechanisms for solving problems and creating value.

MDCO Insight: The American model tends to prioritize innovation first and regulation later.

The Chinese Model: Governance Through Strategic Coordination

China represents a third approach.

While often described as more state-directed, the reality is more nuanced.

Chinese policymakers generally view digital infrastructure as a strategic national asset.

Data centres are therefore integrated into broader national objectives relating to:

• Economic development.
• Industrial upgrading.
• Technological self-sufficiency.
• Digital sovereignty.
• National security.
• Regional development.

Rather than relying primarily on markets or regulatory disclosure, China frequently utilizes planning mechanisms to guide development.

Examples include:

• National digital infrastructure plans.
• Industrial policies.
• Energy allocation strategies.
• Regional development initiatives.
• Data localization requirements.

Data centres are often evaluated not only as commercial investments but also as components of long-term national development strategies.

MDCO Insight: The Chinese model treats digital infrastructure as a strategic resource closely linked to national objectives.

The Strengths and Challenges of the Chinese Model

Supporters argue that coordinated planning can enable:

• Faster infrastructure deployment.
• Long-term strategic alignment.
• Improved infrastructure integration.
• Greater national coordination.
• Large-scale investment mobilisation.

Critics may raise concerns regarding:

• Market distortions.
• Reduced competition.
• Transparency challenges.
• Concentrated decision-making.

Regardless of perspective, China’s approach demonstrates how digital infrastructure can be integrated into broader state-led development strategies.

MDCO Insight: The Chinese model prioritizes strategic coordination and long-term planning over purely market-based outcomes.

What All Three Models Are Actually Trying to Achieve

Despite their differences, the European, American, and Chinese approaches share more common objectives than is often recognized.

All seek to promote:

• Economic growth.
• Technological advancement.
• Infrastructure reliability.
• Cybersecurity.
• Investment.
• Public trust.
• National competitiveness.

The disagreement is usually not about objectives.

The disagreement is about mechanisms.

Europe tends to trust regulation.

America tends to trust markets.

China tends to trust planning.

Each model reflects different historical experiences, political institutions, economic structures, and cultural assumptions.

MDCO Insight: Many governance debates concern how goals should be achieved rather than what the goals should be.

Where Does Malaysia Fit?

Malaysia occupies a particularly interesting position.

Its data centre ecosystem increasingly includes:

• American hyperscalers.
• European investors.
• Asian developers.
• Chinese technology companies.
• Global enterprise customers.

As a result, Malaysian facilities often operate at the intersection of multiple governance systems simultaneously.

A single project may involve:

• Malaysian planning laws.
• European sustainability reporting requirements.
• American cybersecurity standards.
• Chinese equipment suppliers.
• Global investor expectations.

This creates both opportunities and challenges.

Malaysia benefits from access to global capital, technology, and expertise.

At the same time, stakeholders must navigate increasingly complex and sometimes overlapping expectations.

MDCO Insight: Malaysia’s data centre sector is becoming a meeting point for multiple global governance systems.

The Observatory Perspective

Discussions about data centres often focus on technology.

Less attention is paid to the systems of governance that shape how technology interacts with society.

The European Union, United States, and China each provide different answers to the same fundamental question:

How should digital infrastructure be governed?

Europe emphasizes transparency and accountability.

America emphasizes innovation and market dynamism.

China emphasizes strategic coordination and national planning.

None of these models is universally accepted.

Each contains strengths, weaknesses, trade-offs, and internal tensions.

For Malaysia, the challenge is not choosing one model entirely over another.

Rather, it is understanding the strengths and limitations of each approach while developing governance frameworks suited to Malaysia’s own circumstances, priorities, and aspirations.

As data centres become increasingly important to economic development, digital transformation, and national competitiveness, understanding these broader governance systems becomes just as important as understanding the technologies housed inside the buildings themselves.

MDCO Insight: The future of digital infrastructure will be shaped not only by advances in computing technology, but also by the evolving ways societies choose to govern that technology.

Selected References

European Union

• European Commission – Digital, Sustainability and Corporate Governance: Official information on the European Union’s regulatory framework, including the General Data Protection Regulation (GDPR), Corporate Sustainability Reporting Directive (CSRD), Corporate Sustainability Due Diligence Directive (CSDDD), digital policy and related legislation. https://commission.europa.eu/
• European Union Agency for Cybersecurity (ENISA) – Cybersecurity Policy and NIS2: Official information on the European Union’s cybersecurity framework, including implementation guidance for the NIS2 Directive and critical infrastructure resilience. https://www.enisa.europa.eu/

United States

• National Institute of Standards and Technology (NIST) – Cybersecurity Framework: Official information on the NIST Cybersecurity Framework (CSF 2.0) and risk-based cybersecurity guidance widely adopted across the United States and internationally. https://www.nist.gov/cyberframework
• U.S. Department of Commerce – Export Administration and Digital Technology Policy: Official information from the Bureau of Industry and Security (BIS) on export controls, advanced semiconductor policy and related technology regulations. https://www.bis.gov/
• U.S. Securities and Exchange Commission (SEC) – Corporate Disclosure: Official information on disclosure requirements for publicly listed companies, including cybersecurity and other governance-related reporting. https://www.sec.gov/

China

• Cyberspace Administration of China (CAC) – Cybersecurity and Data Governance: Official information on China’s Cybersecurity Law, Data Security Law, Personal Information Protection Law and broader national data governance framework. https://www.cac.gov.cn/
• State Council of the People’s Republic of China – Digital China Strategy: Official information on national strategies, policies and initiatives supporting Digital China, digital infrastructure and the digital economy. https://english.www.gov.cn/
• National Data Administration (NDA) and National Development and Reform Commission (NDRC) – National Data Infrastructure: Official information on China’s national computing infrastructure strategy, managed by the NDA under the NDRC, including the Eastern Data, Western Computing (东数西算) initiative and broader digital infrastructure planning. https://en.ndrc.gov.cn/

International Context

• International Organization for Standardization (ISO) – Information Security and Management Standards: Official information on internationally recognised management standards, including ISO/IEC 27001 (Information Security), ISO 22301 (Business Continuity), ISO 14001 (Environmental Management) and ISO 50001 (Energy Management). https://www.iso.org/
• International Telecommunication Union (ITU) – Digital Infrastructure and Telecommunications: International standards and publications relating to telecommunications, digital infrastructure and data governance. https://www.itu.int/
• International Energy Agency (IEA) – Data Centres and Electricity: Independent analysis of global data centre growth, electricity demand and the interaction between digital infrastructure and energy systems. https://www.iea.org/

Citation

Malaysia Data Centre Observatory (MDCO). Three Models of Data Centre Governance – Comparing the EU, US and China. MDCO Analyse Series No. A04 (Version 1.0, July 2026).

MDCO Note

This article forms part of the Malaysia Data Centre Observatory (MDCO) Analyse Series, which seeks to improve understanding of Malaysia’s data centre ecosystem through independent, evidence-based and balanced analysis. It is intended for educational and informational purposes only and does not constitute legal, engineering, planning, environmental, financial or other professional advice.

Malaysia’s rapidly evolving data centre ecosystem includes facilities developed, owned or operated by organisations such as AirTrunk, Amazon Web Services (AWS), Bridge Data Centres, DayOne, EdgeConneX, Google, K2 Data Centres, Microsoft, NTT Global Data Centers, Princeton Digital Group (PDG), ST Telemedia Global Data Centres (STT GDC), STACK Infrastructure, Vantage Data Centers, YTL Data Centre Park and many others. MDCO is independent of these organisations, as well as governments, regulators, utilities and advocacy groups. Its role is to facilitate transparency, structured understanding and equal access to information by presenting publicly verifiable evidence, relevant context and multiple stakeholder perspectives. MDCO does not endorse, oppose or advocate for any particular organisation, project or policy position.