A company may announce that its cloud uses renewable electricity, that its servers are efficient, and that its next device contains recycled materials. None of those claims yet answers the decisive question: who has real capacity to stop a practice when consumption, exclusion, or waste exceeds an accepted limit? Power appears where someone can say enough and the decision has consequences. In the relationship between planet, repair, and technology, that capacity separates an operational environmental policy from a collection of intentions. A responsible organisation identifies in advance who may pause a computing load, reject an unrepairable purchase, demand evidence from a supplier, respond to an affected community, and order a remedy without waiting for harm to become a scandal.
The cloud seems weightless because it removes objects from sight, yet it rests on buildings, electricity networks, cooling water, minerals, equipment, and labour. The International Energy Agency estimates that data centres accounted for about 1.5 per cent of global electricity consumption in 2024 and expects strong growth associated, among other factors, with artificial intelligence. The global figure matters, although local concentration matters more to a person living beside a constrained grid or a watershed under drought. Accountability does not require attaching automatic blame to every digital service. It requires making its material conditions visible and giving authority to the people expected to govern them.
The difference between recommending and deciding#
Many institutions employ a sustainability officer who prepares inventories, proposes targets, and reviews reports. Nevertheless, procurement signs contracts without consulting that officer, the technical team expands capacity to meet deadlines, and senior management accepts the metrics supplied by the vendor. The officer has nominal responsibility but no effective power. If the system consumes more than forecast, the officer can merely recommend a change. The organisation chart has separated knowledge from decision and can later claim that nobody held the complete picture. Mature governance combines access to evidence, a mandate to intervene, and a duty to explain the outcome.
Many institutions employ a sustainability officer who prepares inventories, proposes targets, and reviews reports.
Saying enough does not mean holding an arbitrary veto or stopping every innovation when a doubt appears. It means working with agreed thresholds, sufficient evidence, and a proportionate procedure. An operations manager may reduce non-essential tasks during a grid alert; a council may condition a permit on seasonal water information; a public buyer may exclude equipment without spare parts; and a school may retain an equivalent route when a platform fails accessibility tests. Legitimate power has a defined scope, controls, deadlines, and review. Those features make it compatible with service continuity and with innovation that learns.
It also needs protection from retaliation and contradictory incentives. If a team's bonus depends solely on shipping a feature on time, stopping it because of a material impact will be treated as failure. If a public authority measures only acquisition price, anyone defending durability appears to make the project more expensive. Indicators should recognise avoided costs, years of service, repair capacity, and reduced risk. Otherwise, the organisation requests caution while rewarding speed, volume, and replacement. Formal authority becomes empty when exercising it systematically harms the person who holds it.
A limit needs evidence, an owner, and an exit#
Every operational limit needs a comprehensible unit of measurement. It might cover electricity use per service and in absolute terms, water withdrawn and consumed during critical periods, minimum service life, spare-part availability, the proportion of devices successfully repaired, or maximum time to restore access. No single indicator is sufficient. Efficiency per operation can improve while total consumption rises; a low footprint during use can hide intensive manufacturing; and a high repair percentage can conceal delays incompatible with education or work. Each metric therefore needs a stated boundary, period, source, uncertainty, and consequence when the threshold is crossed.
A limit also requires a safe exit. Pausing an essential application without an alternative can transfer harm to users. Rejecting a provider without data export can deepen the lock-in that the organisation meant to resist. Halting a facility during a heatwave may be necessary, but critical loads must be protected and the criterion communicated. Responsible planning identifies priority functions, accessible copies, open formats, replacement equipment, and human channels. Saying enough becomes legitimate when it protects the service's purpose instead of abandoning whoever depends on it.
Case 1: a municipality confronts a data centre's demand#
A municipality receives a proposal to expand a data centre. The project promises jobs, revenue, and high energy efficiency. Its documents report annual water use but do not separate seasons or explain what will happen during drought. The environmental assessment recommends monitoring, and the company offers to publish an average. If no authority can require hourly information, set alert levels, or constrain expansion, monitoring will remain descriptive. Power appears when the permit connects each phase to verifiable evidence and allows non-essential loads to be suspended if a previously debated territorial threshold is reached.
A rigorous decision distinguishes water withdrawn, consumed, and returned; identifies whether it comes from drinking-water networks, direct abstraction, or reclaimed sources; and compares cooling technologies alongside their electricity effects. It also hears water services, residents, farmers, facility staff, and independent specialists. They do not hold identical knowledge or bear identical risks, so participation cannot be reduced to collecting opinions. The municipality should publish who decides, on what evidence, and through which appeal. Authority without transparency can be abused; consultation without authority can become a ceremony.
If the summer is drier than predicted, a graduated protocol postpones transferable work, shifts loads where technically possible, protects essential services, and verifies compliance. Remedy may include a permanent demand reduction, reclaimed-water infrastructure, or support for local resilience, but it cannot purchase a right to cause irreversible harm. The case shows that a corporate promise becomes governable only when public institutions can change the course of action. The limit ceases to rely on goodwill and becomes part of technical and contractual design.
Case 2: public procurement of computers that cannot be repaired#
An education authority tenders for thousands of laptops. The cheapest bid meets requirements for performance, weight, and warranty, but uses soldered memory, a battery that is difficult to replace, and spares offered for only a short period. The procurement manager knows that the annual budget favours the lowest initial price. The maintenance service warns that small failures will require complete replacements, yet its report is not binding. In this situation, power resides not with the people who understand the problem but in the award formula. Changing it to value longevity, disassembly, updates, and life-cycle cost transfers authority towards repair.
The 2024 Global E-waste Monitor produced by UNITAR and the International Telecommunication Union recorded 62 million tonnes of electronic waste generated in 2022, with growth far outpacing documented formal recycling. Recycling is necessary, but manufacturing another device to replace a repairable one often preserves avoidable material demand. The European Directive on the repair of goods strengthens a framework intended to facilitate repairs for covered products and comparison between services. Responsible procurement turns those principles into clauses covering manuals, parts, diagnostics, maximum prices, delivery times, and continued functional software.
The authority trials two models in schools with different patterns of use and records failures, time without a device, repair success, and the experience of pupils and technical staff. It then empowers a committee to reject batches that breach the conditions even if they switch on correctly at delivery. The contract also requires an inventory of recovered components and a reuse plan. The result does not guarantee that replacement will never occur; it ensures replacement is a justified decision. Authority to say enough acts before waste exists and keeps technical knowledge within the education network.
Case 3: an engineer pauses a model during an energy alert#
A platform schedules the training of a large model during a week of exceptional electricity demand. The task does not support an urgent service, but delaying it disrupts a commercial timetable. The dashboard shows that the region has issued an alert and that forecast carbon intensity will be high. An operations engineer has the information but needs approval from three managers to cancel the process. By the time a response arrives, much of the consumption will have occurred. The governance failure lies not in the dashboard's accuracy but in a chain of command unable to act at the speed of the impact.
The company corrects the procedure by classifying loads according to criticality and granting the engineer on duty temporary authority to defer transferable tasks under documented conditions. Every pause is logged, reviewed the next day, and prevented from affecting safety or essential support functions. Planning also incorporates windows with less grid stress, absolute energy budgets, and criteria for deciding whether an experiment merits repetition. Hardware efficiency remains valuable, but it no longer substitutes for questions about the need, scale, and timing of each computation.
The arrangement also protects the team from impossible responsibility. No individual engineer should carry a strategic environmental decision alone or need personal courage to avoid a foreseeable cost. Leadership defines boundaries, resources, and priorities; operations executes them; an independent committee reviews trends; and results inform product design. If one pause reveals that many experiments lacked stopping criteria, remedy means changing the portfolio, not praising a heroic intervention. Sustainable power is distributed, traceable, and supported.
Repair restores capacity rather than merely paying compensation#
When a limit fails, repair should respond to the specific consequence. It may require restoring an archive, replacing a battery, reducing demand during a critical period, funding community infrastructure, or changing a contract. Financial compensation alone does not return learning time, available water, or trust. Response begins with containment, continues with recovery, and ends with changes that prevent repetition of the mechanism. There should be an accountable owner, a deadline, and verification with the people who experienced the harm. Closing a ticket is not the same as repairing a relationship.
The capacity to complain is part of the distribution of power. A channel that is hidden, exclusively digital, or written in legal language excludes people with less time and fewer resources. It should be visible, accessible, and safe, accept reasonable evidence, and provide human review. It also needs aggregate data to detect patterns without exposing personal information. If ten failures are handled as independent incidents, the organisation avoids recognising a defective rule. Institutional repair connects cases, publishes lessons, and permits procurement, design, or licensing decisions to be reopened.
How to build governance that can stop#
The first step maps material decisions: who selects the supplier, location, scale, timetable, device, update policy, and final destination. Beside each decision it records available evidence, affected people, and current authority to alter it. The map commonly exposes gaps: the supplier measures, the customer pays, the community bears the burden, and nobody can pause. The organisation then establishes a small number of relevant thresholds, a response ladder, and deputies. The authorised person needs independent information and time to exercise judgement, rather than receiving an alert after action has become irreversible.
The second step stress-tests the mechanism. A simulation covers drought, disappearance of a spare part, provider failure, and an abrupt rise in demand. It asks who receives the signal, how long a decision takes, which alternative protects people, and what record remains. It also checks for possible abuse: an unexplained veto, discriminatory decisions, or pauses that hide underinvestment. Oversight, appeal, and expiry dates for exceptional powers do not weaken a limit; they make it legitimate and correctable.
The third step publishes a clear record with purpose, metrics, thresholds, authority, actions, exceptions, appeal route, and review date. The European Environment Agency notes that digitalisation creates both opportunities and pressures throughout the life cycle. That breadth requires attention to extraction, manufacturing, use, maintenance, and waste as well as data-centre consumption. The record need not disclose trade secrets or personal data, but it should allow an outsider to understand the claim being made and what will happen if it ceases to hold.
The practical right to say enough#
A digital transition compatible with the planet does not depend on discovering a technology with no footprint. It depends on choosing valuable purposes, reducing unnecessary loads, extending the life of objects, and distributing benefits and costs fairly. Above all, it depends on institutions capable of correction. Sustainability loses meaning when everyone may express concern but nobody can change the contract, code, purchase, or pace. Clear authority does not remove conflict; it places conflict in a process where evidence and affected people have consequences for the decision.
The final test can be stated simply. Before approving a system, an organisation should know which boundary it will not cross, who will detect the approach, who can act, how the essential service will be protected, and what repair will be offered if control fails. The three cases show that responsible power is not the power to dominate others. It is the collective capacity to stop a harmful trajectory. When someone can say enough with evidence, support, and accountability, the cloud ceases to appear inevitable and begins to be treated as what it is: material infrastructure that society can govern.
