Operate

The ‘Operate’ phase focuses on maintaining efficient, reliable operations through continuous management and optimisation to ensure the data centre meets performance standards and business objectives.

Illustration representing the operate phase of the data centre lifecycle, focusing on system performance, cybersecurity, maintenance and optimisation, and ongoing regulatory compliance.

Typical objectives

1

Capacity management, maintenance & incident response

Prioritise capacity management, preventive and predictive maintenance, and prompt incident response to minimise downtime.

2

Cybersecurity, cyber resilience & physical security

Implement advanced cybersecurity, with patching, access controls, monitoring and regular exercises to prevent breaches and cyberattacks.

3

Audits & security standards

Sustain first, second and third‑party audits to demonstrate continuous adherence to applicable security standards.

4

Contracts, supply chains & cost-effective operations

Manage providers and supply chains, ensure cost‑effective operations, deliver quality services and maintain real estate.

5

Workforce capability & readiness

Provide training, clear procedures and post‑incident reviews to maintain consistent standards and improve future responses.

6

Compliance & reporting

Meet energy, sustainability and data requirements. Provide timely reporting to customers and stakeholders to underpin trust.

“Reliability is sustained through disciplined maintenance, resilience measures and rapid incident response.”

Matthew Sharkey

Associate Director, Osborne Clarke UK

A futuristic data centre

Key regulations

The regulations outlined set expectations for cybersecurity, operational resilience, data protection, incident response and assurance, and must be addressed during the ‘Operate’ phase.

Last updated 31 October 2025

These may be subject to change.

European Union

NIS2 Directive (EU) 2022/2555
Risk management, supplier assurance, monitoring, continuity, incident reporting
DORA (EU) 2022/2554
For ICT third‑party providers to financial entities
EU Cybersecurity Act (EU) 2019/881
Emerging EUCS scheme
GDPR (EU) 2016/679
Security of processing, DPIAs, 72‑hour breach notification, processor duties, cross‑border transfers
e‑Privacy rules
Electronic communications/monitoring
Data Act (EU) 2023/2854
Switching/portability, interoperability, cloud exit

National level

National telecoms and electronic communications rules
e.g. UK: Communications Act 2003; Ofcom’s General Conditions of Entitlement; Privacy and Electronic Communications Regulations 2003
National NIS/cyber resilience regulations and incident reporting
e.g. UK: Network and Information Systems Regulations 2018
National data protection laws and guidance
e.g. UK: Data Protection Act 2018; UK GDPR
National data use and access regimes, where applicable
e.g. UK: Data (Use and Access) Act 2025

How we can help

We help you navigate the ‘Operate’ phase with ongoing legal and regulatory support to maintain resilient, compliant and efficient operations:

IT and data management

Commercial contracts and SLAs

Real estate optimisation support

Employment law compliance

Regulatory standards and reporting

AI solutions integration support

Sustainability and ESG practices

Operational resilience and reliability

our Experience
Dell
Dell on a variety of data centre services including managed services, physical infrastructure and strategic data centre builds.

Our experts

Our team of specialists can guide you through every aspect of the ‘Operate’ phase.

Headshot of Matthew Sharkey, Associate Director at Osborne Clarke UK
Matthew Sharkey
Associate Director
Osborne Clarke UK
A headshot of Xavier Pican, Partner IP/IT at Osborne Clarke in France.
Xavier Pican
Partner, IP/ IT
Osborne Clarke France
A headshot of Rupa Lakha, Partner at Osborne Clarke UK.
Rupa Lakha
Partner
Osborne Clarke UK
A headshot of Romeo Szejnmann, Counsel at Osborne Clarke Spain
Mario Gras
Counsel
Osborne Clarke Spain
A headshot of Eleanor Williams, Partner at Osborne Clarke UK.
Eleanor Williams
Partner
Osborne Clarke UK
A headshot of Szymon Ciach, Counsel at Osborne Clarke Poland
Szymon Ciach
Counsel
Osborne Clarke Poland
A headshot of Helen Waddell, Partner at Osborne Clarke UK.
Helen Waddell
Partner
Osborne Clarke UK
A headshot of Piotr Kaniewski, Counsel at Osborne Clarke Poland
Piotr Kaniewski
Counsel
Osborne Clarke Poland