EU Space Act — single-market regulation for space activities (COM(2025) 335)

Mechanism

The Act creates a single EU framework for authorising and supervising space activities. Operators — whether EU-based or third-country — that provide space services in the European market must be authorised under a harmonised regime, with proportionate requirements scaled by company size and risk profile.

Pillar 1 — Safety. Mandatory tracking of space objects, space-debris mitigation rules aligned with international best practice, and the establishment of an EU registry of space objects. This is intended to address the fragmented Member-State approaches to space situational awareness (SSA) and traffic management.

Pillar 2 — Resilience. Cybersecurity requirements for ground systems and satellite payloads, designed to harden European space infrastructure against state-sponsored interference. Requirements are proportional — the largest constellations and critical infrastructure operators face the strictest obligations.

Pillar 3 — Sustainability. Environmental impact assessment for launches and operations, plus support for active debris-removal R&D. The Commission also introduces an EU "space label" to allow operators to differentiate on sustainability performance.

Extraterritorial reach. The Act covers any operator providing space services to users in the EU — including non-EU mega-constellations (Starlink, Kuiper, SatNet/G60). This is structurally analogous to GDPR's extraterritorial scope and is expected to be the most contested element in trilogue negotiations.

Downstream implications

• For US LEO operators (Starlink, Kuiper) the Act creates a new market-access

perimeter: continued European service requires EU authorisation under the harmonised regime, with cybersecurity and debris-mitigation conformity.

• For European launchers (Arianespace, MaiaSpace, RFA, Isar Aerospace) and

satcoms (Eutelsat-OneWeb, SES, Hisdesat) the harmonised regime reduces fragmentation cost and may improve competitiveness vs. US peers operating under a single FCC/FAA stack.

• For Chinese constellations (SatNet, Qianfan/G60) the Act establishes a

formal market-access screen — potentially the first EU instrument creating third-country reciprocity leverage in space services.

• The cybersecurity pillar dovetails with NIS2 and the Cyber Resilience Act,

extending the EU's regulatory perimeter from terrestrial digital infrastructure to orbital infrastructure.

• Likely complement to the IRIS² secure-connectivity programme and the EU

Space Strategy for Security and Defence (2023).

Open questions

• Final scope of extraterritorial application — whether it captures only

retail space services or also wholesale capacity sales to EU resellers.

• Cyber-resilience baseline — whether the Commission will adopt delegated

acts referencing ENISA technical standards or rely on Member-State NCAs.

• Treatment of dual-use military-civil systems — defence-only payloads are

expected to be exempt but the boundary is contested.

• Effective date once adopted — current trilogue trajectory suggests adoption

in 2026 with phased application 2027-2029.

• Whether the EU Space Act provisions will trigger a US Section 301 or WTO

challenge if applied asymmetrically to non-EU operators.