Data centers in the UK as critical infrastructure: challenges and opportunities.
What does the status of Critical National Infrastructure imply for data centers?
The recent decision by the UK Government to classify data centers as Critical National Infrastructure (CNI) reflects the recognition of their fundamental importance in today's economy and society, much like energy and water systems. Although there are no official records on the number of data centers in the country, some reports suggest that it reaches 514 facilities, placing the UK third globally, behind the United States and Germany.
Data centers greatly impact various aspects of modern life, from our methods of communication to interactions with businesses and essential public services, such as the NHS. Without these centers, everyday functioning would be unfeasible. Despite the appropriate signal this government initiative sends, its practical impact may be uncertain.
A data center is a building equipped with power, cooling, and network access, but what is truly critically important are the data and systems within it. The responsibility for safeguarding this information rests with the data center client, although the physical provider can implement appropriate security measures that reflect cybersecurity defenses. Other relevant aspects, such as cyber resilience and the challenges of energy consumption and sustainability, must also be considered.
In the realm of cybersecurity, one could argue that the government is trying to catch up with this CNI initiative, especially in comparison to recent regulations in other countries. The initiative is greatly valued as it communicates to data center operators that they must prepare for potential cyberattacks and have robust recovery plans in place. However, despite having high-level cyber defenses, some attacks remain effective, as evidenced by the record figures of ransomware and cyberattacks reported in 2023 by the UK's Information Commissioner.
In addition to the cybersecurity challenges, the CNI designation could also increase the burden on data center operators, who must now implement additional systems and software to protect data, which in turn could raise energy consumption and generate more electronic waste, running counter to sustainability goals. The push for efficiency is crucial, and clients must evaluate energy consumption based on their efficiency.
Regarding energy consumption challenges, a 2022 study by National Grid indicates that data centers in the UK currently consume between 2 and 3 terawatt-hours annually, enough to supply 800,000 households, with a significant increase expected over the next decade. With the rise of artificial intelligence usage, which demands more processing power, electrical consumption has become the main limiting factor for the expansion of these centers. Implementing high-density flash storage technologies could be a viable solution to reduce energy consumption, as the storage infrastructure currently accounts for 20-25% of energy use in a data center.
On the other hand, there is a need to differentiate which data is considered critical in this infrastructure. Not all data has equal relevance, with priority given to those that ensure national security, such as NHS records and the security of telecommunications networks, above less critical information. Addressing this issue will require the implementation of data classification frameworks, where regulations such as GDPR could provide guidance.
The government's recent initiative recognizes the need to better protect the personal and institutional data of the country, in addition to incentivizing the data center sector in the UK, fostering an investment that is expected to increase significantly in the coming years. A study predicts the creation of over 40,000 new jobs in this sector by 2035. However, to ensure the effectiveness of this CNI designation, it will be essential to develop a data classification framework, enhance cyber resilience, and adopt more robust sustainability practices.
