What boards of global data centre operators must act on now: AI governance, privacy risk, EU AI Act exposure, sustainability disclosure, and operational resilience obligations across jurisdictions.