UK Planning Reforms Could Shield Large Data Centres From Judicial Review
#Regulation

UK Planning Reforms Could Shield Large Data Centres From Judicial Review

Privacy Reporter
4 min read

A proposed overhaul of UK planning law would allow the government to label big data‑centre projects as “critical national infrastructure”, removing them from local planning control and insulating them from judicial review. The move raises questions about accountability, community rights and compliance with data‑protection rules such as the GDPR.

UK Planning Reforms Could Shield Large Data Centres From Judicial Review

Featured image Featured image

The Treasury is preparing a package of planning reforms that would let Parliament designate certain projects as of critical national importance. Once a project receives that label, it would be exempt from the normal local‑authority planning process and, crucially, from judicial review – the legal mechanism that lets citizens challenge planning decisions in the courts.


What the proposal entails

  • Critical National Infrastructure (CNI) status – Already used for power plants, wind farms and grid upgrades, the government plans to extend CNI to large data‑centre builds.
  • Nationally Significant Infrastructure Projects (NSIP) route – By moving decisions to the national level, the reforms would bypass local councils, removing the ability of residents to object through planning appeals.
  • Statutory shield from judicial review – The draft legislation would insert language similar to that used for defence and energy projects, stating that “decisions made under this provision shall not be subject to judicial review”.

The Treasury’s statement argues that “vital infrastructure delivery has been delayed by judicial reviews of projects”. The reforms are framed as a way to cut red tape, lower energy costs and boost economic growth.


Domestic law

  • Planning Act 2008 – Currently governs NSIPs and gives the Secretary of State the power to call in major projects, but still allows for judicial review of the decision‑making process.
  • Enterprise Act 2002 – Provides limited powers for the government to limit judicial review in matters of national security, but the proposed reforms would broaden that scope to commercial infrastructure.

European and international standards

  • EU Charter of Fundamental Rights (Article 47) – Guarantees the right to an effective remedy and a fair trial, which includes access to judicial review. Although the UK is no longer bound by EU law, the charter influences domestic human‑rights jurisprudence.
  • International Covenant on Civil and Political Rights (ICCPR, Art. 14) – The UK is a party and must ensure that any limitation on judicial review is lawful, necessary and proportionate.

If the reforms proceed, they could be challenged on the basis that they breach these human‑rights obligations by removing a core avenue of public oversight.


Impact on users, companies and local communities

Data‑centre operators

  • Faster approvals – Companies such as Oracle, Microsoft and OpenAI could secure land and grid connections in months rather than years, accelerating the rollout of AI‑compute capacity.
  • Reduced cost uncertainty – By eliminating the risk of a court‑ordered halt, investors can model cash flows with greater confidence, potentially lowering financing costs.

Local residents and councils

  • Loss of democratic input – Communities that have historically used planning appeals to protect local environments, heritage sites or traffic safety will no longer have that lever.
  • Potential for increased environmental and social impacts – Large data centres consume significant electricity and water; without local scrutiny, mitigation measures may be weaker.

Data‑protection considerations

Data centres are the physical backbone of the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA) because they store and process personal data for EU and US companies. While the planning reforms do not directly alter data‑protection law, they could affect compliance in several ways:

  1. Location choice – Faster siting may push operators to select sites with cheaper power but poorer security, raising the risk of data breaches.
  2. Cross‑border data flows – If a data centre is built without robust local oversight, regulators may question whether the operator can meet GDPR’s “security of processing” requirement (Art. 32).
  3. Accountability – The inability of affected individuals to challenge a planning decision could be seen as weakening the overall accountability framework that underpins data‑protection regimes.

What changes are likely if the reforms pass

  1. Legislative amendment – Parliament will need to amend the Planning Act 2008 and the Enterprise Act to insert the judicial‑review exemption clause.
  2. Designation process – A new statutory instrument will outline criteria for “critical national importance”. Expect a focus on energy consumption, AI compute demand and contribution to national security.
  3. Oversight mechanisms – The Treasury’s Public Accounts Committee has called for stronger governance. We may see a new independent board tasked with reviewing each designation, but its powers will likely be limited.
  4. Potential legal challenges – Civil‑society groups, local authorities and privacy NGOs are expected to mount pre‑emptive claims in the High Court, arguing that the reforms breach the UK’s Human Rights Act 1998.

Bottom line

The proposed planning reforms could dramatically accelerate the construction of massive data‑centre campuses, helping the UK meet its AI and cloud‑computing ambitions. However, shielding those projects from judicial review raises serious concerns about democratic accountability, environmental stewardship and even data‑protection compliance. Stakeholders—from local residents to privacy watchdogs—should monitor the legislative process closely and be prepared to challenge any over‑broad use of the “critical national importance” label.


For further reading on the UK’s planning framework and its interaction with data‑protection law, see the Planning Act 2008 and the European Commission’s guidance on GDPR compliance for cloud services.

Comments

Loading comments...