The datacenter boom – is it AI, or collecting information against us?

We recently wrote about the data centers coming to Missouri. This post goes inside the building. A data center is not an abstraction. It is the physical place where your digital life actually lives, and where two of the most powerful forces in technology meet under one roof: the artificial intelligence everyone is talking about, and the collection of personal data almost no one is watching. Here is what a data center really is, what happens inside it, and why Missouri law gives you far less control over your own information than you probably assume.

When people picture “the cloud,” they tend to imagine something weightless. In reality, the cloud is a building, or thousands of them. A data center is a warehouse filled with rows of computers, called servers, that store information and run software around the clock. Your email lives in one. So do your photos, your bank records, your streaming history, the documents in your work accounts, and the constant stream of signals your phone sends every time you open an app. When you save a file or scroll a feed, you are reaching into a data center somewhere and asking it to do work on your behalf.

The two things happening under one roof

It is fair to ask what is really driving the enormous, expensive buildout of new data centers, and the honest answer is that artificial intelligence is a major part of it. Training and running modern AI models requires specialized, power-hungry hardware at a scale the industry did not need a few years ago, which is why technology companies are spending hundreds of billions of dollars on new facilities and straining local power and water supplies to do it. That much is not in dispute, and it would be misleading to suggest otherwise.

But AI is only half of what these buildings do, and the two halves are connected in a way that deserves more attention than it gets. The same infrastructure that trains AI also stores and processes staggering amounts of information about ordinary people. These are not competing purposes. They reinforce each other. AI systems are built by learning from data, and much of that data is generated by us: our searches, our locations, our purchases, our messages, our faces. The rise of AI has not replaced the business of collecting personal information. It has made that information more valuable than ever, because data that once sat unused is now the raw material that trains the models. Seen that way, the data center is where surveillance and artificial intelligence quietly become the same enterprise.

Your data is the product

For a large share of the technology economy, the service you use for free is not the product. You are, or more precisely, the detailed profile built from your behavior is. Much of what happens inside a data center is the assembly of that profile: logging what you click, where you go, what you buy, how long you linger, and who you know, then combining it with data purchased from brokers you have never heard of. The result is a remarkably complete portrait, and it is bought, sold, and used to predict and influence what you do next.

Artificial intelligence intensifies every part of this. Patterns that a human analyst would never find, an AI model can surface in seconds, which means information that seemed harmless in isolation can become revealing in aggregate. This is the legitimate core of the concern many people feel about data centers. The worry is not really about the concrete and cooling fans. It is about how much of your life is recorded inside those walls, how little you were told about it, and how few tools you have to do anything about it. That last point is not a matter of technology. It is a matter of law.

How little the law actually protects you

Most Americans assume that some baseline federal law protects their personal data the way one protects their bank deposits. There is no such law. The United States has never enacted a comprehensive federal privacy statute. Proposals have been introduced in Congress, including the American Privacy Rights Act, but as of 2026 none has become law. What exists instead is a patchwork. Federal statutes cover specific sectors, such as HIPAA for medical records, the Gramm-Leach-Bliley Act for financial institutions, the Fair Credit Reporting Act for credit data, and COPPA for children under thirteen. Everything outside those silos is largely unregulated at the federal level.

States have begun filling the gap, but unevenly. Roughly twenty states now have comprehensive consumer privacy laws in effect, with more enacted and phasing in. In those states, led by California and followed by Colorado, Virginia, Connecticut, Texas, and others, residents have real rights: to know what data a company holds about them, to correct it, to delete it, and to opt out of its sale. Illinois goes further on biometrics, and its Biometric Information Privacy Act lets individuals sue companies directly for collecting fingerprints or facial scans without consent.

Missouri is not one of those states. As of 2026, Missouri has no comprehensive consumer privacy law. A Missourian generally has no statutory right to see the data a company has collected, to demand its deletion, or to opt out of its sale, at least under state law. What Missouri does have is narrower. The state’s data breach notification statute, Section 407.1500 of the Revised Statutes of Missouri, requires companies to notify residents when their personal information has been exposed in a breach. And the Missouri Merchandising Practices Act, Section 407.020, prohibits deceptive and unfair business practices, which can reach a company that lies about how it handles your data. Those are meaningful, but they are reactive. They tell you after something has gone wrong. They do not give you control before it does.

The data center is where the modern economy keeps its memory of you. The unsettling part is not that the building exists. It is how little say the law currently gives you over what is stored inside it.

What you can actually do

The legal gap does not leave you powerless, and a few practical steps make a real difference. You can exercise the sector-specific rights you do have, such as requesting your file from the credit bureaus under the Fair Credit Reporting Act or your medical records under HIPAA. You can take advantage of the fact that many national companies, rather than build separate systems for each state, extend California-style privacy controls to everyone, so it is worth looking for a “Do Not Sell or Share My Personal Information” link even as a Missourian. You can be deliberate about app permissions, location tracking, and the data you hand over in exchange for convenience. And if you believe a company misrepresented how it uses your information, the Missouri Merchandising Practices Act may give you a path to hold it accountable.

For business owners, the same landscape is a compliance question rather than a consumer one. If you collect customer data and serve customers in other states, you may already be subject to privacy laws well beyond Missouri’s borders, and a privacy policy that overpromises or misleads can create exposure under Missouri’s own consumer protection law. Understanding which rules reach your business, before a complaint or a breach forces the issue, is far cheaper than learning it afterward.

Data centers are not villains, and artificial intelligence is not going away. But it is worth being clear-eyed about what these facilities hold and how thinly the law protects it. The buildings are being constructed at record speed. The rules that govern what happens inside them are lagging far behind, and in Missouri, much of that gap is still yours to navigate on your own.

Related on this site: $25 Billion – that is what big data is investing in Missouri, and this is what you need to know. · Technology & AI Law · Civil Rights & §1983

This article is provided for general educational purposes only and is not legal advice, and reading it does not create an attorney-client relationship. Privacy law is changing quickly at both the state and federal level, and the status of laws described here is based on public sources as of August 2026 and may change. Statute references are to the Revised Statutes of Missouri, including Sections 407.1500 and 407.020; consult those sources and a licensed Missouri attorney about how any law applies to your specific situation.