Federal Data Center Enhancement Act Expires Without Replacement Legislation
The FDCEA expired in mid-2026 with no replacement legislation underway.
Why it matters: Legal and IT compliance professionals face uncertainty about federal data center security and sustainability standards without a clear regulatory framework.
- The FDCEA established mandatory standards for federal data centers including energy efficiency, water conservation, and cybersecurity oversight.
- Implemented in 2023, the FDCEA expired in mid-2026 with no current legislative replacement or extension.
- The Congressional Budget Office found the FDCEA would not significantly increase federal costs from 2023-2028.
- No new measures have been proposed, risking gaps in data center protections against cyber threats and natural disasters.
The Federal Data Center Enhancement Act (FDCEA) of 2023 mandated minimum requirements for federal data centers focused on energy efficiency, water conservation, and cybersecurity oversight. Congress passed it to build on previous federal efforts that consolidated more than 6,000 data centers since 2010, saving billions. The Congressional Budget Office estimated the Act's implementation would not materially increase federal spending through 2028.
Despite these benefits, the FDCEA expired in mid-2026 without a replacement or extension. As of June 15, 2026, no new legislative proposals have been introduced to continue or update the regulatory framework, raising concerns about potential lapses in standards.
A GSA employee highlighted the unusual situation, noting, "Never in the history of data center policies has a policy expired without another one having been painstakingly worked on for three years behind the scenes." Senator Jacky Rosen emphasized the risks, stating, "Data centers across the country house critical and sensitive information, and we need to ensure they are protected from increased cyber threats and natural disasters." Clare Martorana, Federal Chief Information Officer, praised the past work, saying, "An enormous amount of this ecosystem was cleaned up, and the government saved billions of dollars." However, without current legislation, the regulatory oversight that supported these achievements is at risk.
With no clear interim measures or plans disclosed, legal and IT compliance professionals should prepare for uncertainty around federal data center operational standards until new laws or guidance emerge.
By the numbers:
- Mid-2026 — FDCEA expiration date
- 6,000+ — Federal data centers consolidated since 2010
- $5.8 billion — Estimated cost savings from data center consolidation efforts
Yes, but: While no replacement legislation is currently proposed, agencies may implement their own interim policies to manage risks, though details remain unavailable.
What's next: Congress may consider reintroducing or revising data center legislation, but no formal proposals or timelines have been announced.