The Unstoppable Rise of AI-Powered Government Surveillance

Florida’s new data center rules aim to curb corporate secrecy amid rising global scrutiny over tech transparency

Florida lawmakers have finalized new regulations requiring stricter transparency from data centers operated by major tech companies, marking the first U.S. state-level effort to impose guardrails on how corporations disclose their operations. The rules, set to take effect in January 2027, mandate public disclosure of energy consumption, water usage, and supply chain ties—measures critics say are directly targeted at companies like Microsoft, Google, and Chinese state-linked firms, which have faced growing accusations of exploiting loopholes in data sovereignty laws. According to the Florida Department of Economic Opportunity, the policy stems from concerns that foreign-owned or -backed data centers could pose national security risks while avoiding local oversight.

Why Florida’s move could reshape U.S. tech regulation
The legislation follows a 2025 report by the bipartisan U.S. Senate Intelligence Committee, which found that at least 18% of U.S.-based data centers have direct or indirect ties to Chinese state-owned enterprises, including Huawei and Alibaba. Florida’s rules require operators to annually publish detailed audits of their energy grids, cooling systems, and supply chains—information currently treated as proprietary by most companies. "This isn’t just about transparency; it’s about ensuring these facilities aren’t operating in a regulatory black box," said Rep. Maria Rodriguez (D-FL), the bill’s primary sponsor, in a statement to The Miami Herald. The state’s decision comes as other governments tighten scrutiny: the European Union’s Digital Operational Resilience Act (DORA) took effect in January 2026, imposing similar disclosure requirements on cloud providers, while Canada’s Critical Infrastructure Protection Act now mandates supply chain transparency for data centers exceeding 500 employees.

How the rules compare to existing global standards
Florida’s approach differs from federal proposals in two key ways. First, it targets state-level enforcement rather than relying on federal agencies like the Commerce Department, which has struggled to regulate data centers under existing laws. Second, it explicitly names "high-risk" sectors—such as artificial intelligence training, quantum computing, and state-linked surveillance—requiring pre-approval for new builds. By contrast, the EU’s DORA focuses on financial risk, while China’s 2025 Data Security Law grants its government broad oversight powers without equivalent public disclosure. "Florida is essentially creating a de facto ‘tech sovereignty’ test for foreign investors," said Dr. Elena Vasquez, a cybersecurity policy fellow at the Atlantic Council, in comments to Politico. "The question now is whether other states will follow—or if the feds will preempt them."

What happens next: Enforcement and industry pushback
The Florida rules face immediate challenges. Tech lobby groups, including the Information Technology Industry Council (ITIC), have filed lawsuits arguing the disclosure requirements violate federal preemption under the Communications Act of 1934. Meanwhile, Microsoft and Google have not publicly commented on the legislation, though internal documents obtained by The Wall Street Journal show both companies are reviewing "supply chain diversification" strategies to mitigate compliance costs. Enforcement will begin with audits of existing centers, starting with those owned by foreign entities. The state’s Office of Energy has already flagged three facilities—two in Orlando and one in Tampa—as "priority review" under the new rules.

The bigger picture: A U.S. reckoning over data center secrecy
Florida’s move reflects a broader shift in how governments view data centers, once seen as neutral infrastructure but now recognized as strategic assets. In 2024, the U.S. Department of Defense classified data centers as "critical cyber infrastructure," and last month, the White House ordered a review of all foreign-owned facilities housing AI training workloads. While Florida’s rules are the first of their kind in the U.S., they may not hold. A 2023 study by the RAND Corporation found that 68% of state-level tech regulations are eventually preempted by federal law. Yet the policy’s architects argue the stakes are too high to wait. "If we don’t act now, we’ll wake up in five years with data centers running our elections, our hospitals, and our military—all owned by entities we can’t even audit," Rodriguez told Axios. The debate over transparency is no longer academic; it’s a test of whether corporate secrecy or public oversight will define the next era of tech governance.