Massachusetts is putting environmental and community requirements directly into the permitting path for large data centers. Gov. Maura Healey signed Executive Order 658 on September 8. It directs state permitting agencies not to issue permits or authorizations for new or expanded data center projects exceeding 25 megawatts of peak electricity demand unless developers meet the state's responsible-development framework and submit a community benefits agreement. The order applies to the Massachusetts Department of Environmental Protection (MassDEP), the Massachusetts Environmental Policy Act Office, the Energy Facilities Siting Board, and other relevant permitting agencies. It covers projects built after the order took effect and expansions adding more than 25 MW of peak demand. The EEA and the Executive Office of Economic Development may jointly waive the threshold for a facility tied to an accredited college, hospital, or state-sponsored program.

Water and Air Requirements Move Into Permitting

The state first set expectations for responsible data center development on June 25. That is when the Healey administration paused applications for the state's data center sales and use tax exemption and released a framework covering electricity costs, water, air quality, noise, public health, and community impacts. The new order gives those expectations considerably more weight by tying them to permitting decisions. MassDEP must develop protocols requiring covered projects to protect water quality and quantity. Projects must demonstrate compliance with applicable state water, wastewater, and stormwater requirements, an obligation that echoes the thermal-discharge and aquatic-impact standards data centers already face under federal Clean Water Act permits. For EHS and facilities teams, environmental planning can no longer be treated as a set of individual permits handled late in development.

Electricity Demand Gets Its Own Compliance Track

MassDEP must also set rules requiring covered data centers to procure enough incremental new clean electricity generation to meet their annual consumption, qualifying under the state's Clean Energy Standard. Developers that fall short face an alternative compliance payment instead, with MassDEP required to establish that mechanism by December 31, 2026, and the proceeds directed to a new Ratepayer Protection Fund. The Department of Public Utilities is separately continuing work on large-load rate schedules. Those schedules are meant to keep other ratepayers from covering distribution upgrades data centers require. The order also calls for fees or deposits to clear speculative projects out of utility interconnection queues, a cost-allocation approach similar to what Vermont has proposed through its own large-load service contracts.

Communities Get a Formal Role Before Permits Move

Covered data centers must submit a community benefits agreement aligned with standards from the Massachusetts Office of Environmental Justice and Equity before state permits can be issued. Developers must consult the office before filing the agreement and share it for review and comment, and the office's written feedback must accompany the agreement when it reaches permitting agencies. The order also bars state permitting agencies from using nondisclosure agreements with data center projects except where otherwise permitted by law. Without local approval, state permitting agencies will not advance a project.

The order puts Massachusetts on a growing list of states connecting electricity, water, and community impacts through a single development framework. Most states have addressed each of those separately, a pattern already breaking down as power, water, and permitting converge into a single site-selection constraint nationally. Implementation details remain unsettled. MassDEP must still build the clean energy and water protocols, and the state must publish municipal guidance for evaluating data center proposals by December 31. But the September 8 order changes the starting point. A site with available land and a grid connection may no longer be enough on its own.