The order follows a nine-month investigation and includes broad exemptions for data centers and consumers