AI infrastructure regulation

TOPIC HUB · AI INFRASTRUCTURE REGULATION

AI infrastructure regulation

The reference on regulatory frameworks shaping AI infrastructure buildout: FERC + ISO grid reform, state PUCs, EPA environmental permitting, local zoning, CFIUS + international FDI, AI-chip export controls, EU AI Act + CRA + DORA, safety standards, and workforce constraints.

01Direct answer

AI infrastructure regulation is the specific set of regulatory workstreams that AI infrastructure investment + operation requires: (1) grid + electricity: FERC + ISO queue processes, state PUC rate cases; (2) environmental + siting: EPA permitting, local zoning, community engagement; (3) capital + transaction: CFIUS + Outbound Investment + UK NSI + EU FDI + APAC review; (4) technology + export: BIS AI chip export controls + Entity List; (5) product + service: EU AI Act + Cyber Resilience Act + DORA; (6) safety + code: NEC + UL + NFPA electrical safety; (7) workforce: H-1B + skilled trades + immigration. Ten essays cover each workstream in practitioner detail. The combined regulatory perimeter shapes deal structuring, siting, technology selection, and capital sourcing for every AI infrastructure decision at scale.

02Key concepts

FERC

Federal Energy Regulatory Commission; wholesale transmission + Order 2023 queue reform.

CFIUS

Committee on Foreign Investment in the United States; inbound investment review.

BIS Entity List

Bureau of Industry and Security controlled-party list for export restrictions.

EU AI Act

Regulation 2024/1689; risk-tiered AI product regulation with up to 7% turnover fines.

CRA

EU Cyber Resilience Act; product cybersecurity requirements.

DORA

EU Digital Operational Resilience Act; ICT + third-party operational risk.

NEC / UL / NFPA

US electrical safety standards; NEC 2026 adds partial 1500V DC coverage.

State PUC

State-level public utility commissions; rate case + special-contract authority.

04Deep-dive research

Regulatory I. FERC + ISO reformOrder 2023 implementation across seven US ISOs.
Regulatory II. State PUCs + rate casesVirginia, Texas, California, Arizona, Georgia rate-case posture.
Regulatory III. EPA + environmentalNEPA + EIS + air + water permitting.
Regulatory IV. Local zoningLoudoun VA + PWC + Ohio + Georgia + Reno + Phoenix.
Regulatory V. CFIUS + OutboundInbound review + Outbound Investment Rule.
Regulatory VI. UK NSI + EU FDI + APACNon-US inbound investment review regimes.
Regulatory VII. Export controlsBIS EAR + AI chip perimeter.
Regulatory VIII. EU AI Act + CRA + DORAEU compliance stack.
Regulatory IX. NEC + UL + NFPAElectrical safety standards.
Regulatory X. Labour + immigrationH-1B + skilled-trades + workforce.

06Commercial + investment implications

For deal architects + operators

Regulatory sequencing is a specific DD workstream. See DD XI: Regulatory + CFIUS + Environmental + Cyber for the M&A-context playbook. For sponsors evaluating cross-border deals: Regulatory V is the primary reference.

07Frequently asked

Which regulatory workstream matters most for AI infrastructure DD?

Depends on the deal shape. For domestic-US strategic deals: FERC + state PUC + EPA + local zoning. For cross-border sponsor deals: CFIUS + Outbound + destination-country FDI. For technology-heavy deals: export controls + EU AI Act. Practitioner DD sequences based on transaction structure.

How does the Outbound Investment Rule affect US investors in AI infra?

For US persons investing in certain covered technologies (advanced computing, quantum, AI) in specific countries of concern (China + adjacent), notification + prohibition + due-diligence obligations apply. Rule launched 2025; specific covered-technology list continues to evolve. Sponsors need US persons + covered-transaction analysis at deal entry.

When does the EU AI Act apply to AI infrastructure?

AI Act primarily regulates AI systems + models, not the underlying data centre infrastructure. But operators + integrators providing AI systems into EU markets are subject to it. Data centre operators supporting EU-serving AI training + inference need to understand model-provider obligations for their customers.

Is NEC 2026 the standard for 800V DC data centres?

It is the current + emerging US electrical safety code. Adds partial 1500V DC coverage in 2026 edition; state adoption rolling through 2026-2028. But NEC is a minimum; specific data centre installations often exceed NEC requirements for insurance + operational reasons.

Where is the biggest regulatory risk for cross-border sponsors?

CFIUS blocking or forcing structural changes on Chinese-source capital deals. UK NSI + Germany FDI + Italy Golden Power increasingly active for AI + data + critical-infra. See Regulatory V + VI.

08Further reading

See also: M&A (regulatory DD), Financing. Full series: The Regulatory Layer (10 essays).

Definition AI infrastructure regulation covers the rule-sets that shape the AI data centre buildout across jurisdictions. FERC and ISO reforms govern grid interconnection queues. State PUCs govern retail tariff design and hyperscaler-utility contracts. EPA governs environmental permitting for large facilities. CFIUS governs foreign investment screening. Export controls govern accelerator and toolchain movement. In the EU, the AI Act and DORA govern software risk classification and operational resilience for financial-services users of AI infrastructure.