Ongoing Supervision & Reporting for Space Operators
Comprehensive guide to ongoing supervision and reporting obligations for space operators under the EU Space Act. Covers NCA supervision framework, reporting types, inspections, sanctions, and best practices for regulatory compliance.
Obtaining authorization to conduct space activities is only the beginning of the regulatory journey. Once authorized, space operators enter a continuous regime of supervision and reporting that lasts for the entire lifecycle of their mission — and in some cases beyond. National Competent Authorities (NCAs) monitor compliance, require periodic and event-driven reports, conduct inspections, and have the power to impose sanctions up to and including revocation of authorization. This guide explains what operators should expect and how to maintain a productive relationship with their supervisory authority.
Executive Summary
Ongoing supervision under the EU Space Act proposal is designed to ensure that authorized operators continue to meet the safety, resilience and environmental requirements of Title IV throughout their mission (insurance is a matter of national law). The supervisory framework is risk-based, meaning that operators with higher risk profiles or past compliance issues will face more intensive oversight.
Key facts:
- Competent authorities supervise Union space operators: they control the application of the rules, investigate, keep records of infringements, audit and cooperate with other Member States (Art. 29(1))
- They have supervisory, investigatory, corrective and sanctioning powers, including access to premises and data (Art. 30)
- Member States lay down effective, proportionate and dissuasive penalties (Art. 31)
- The proposal itself sets reporting duties for significant incidents (Art. 93) and information to the collision avoidance provider (Art. 64(3)); annual, anomaly or end-of-life reports and change notifications follow from national law and the authorisation
- For third-country operators and Union-owned assets, the Agency and the Commission hold investigation and fining powers (Art. 48-57)
Part 1: The EU Space Act Supervision Framework
Legal Basis (Articles 28-31)
The supervision rules of the proposal sit in Title III, Chapter I (Art. 28-39), not in Art. 17-20 (which concern third-country registration, international organisations, derogations and third-country public entities):
Article 28 — Competent authorities
Each Member State designates or establishes one or more competent authorities.
Article 29 — Supervisory tasks
Competent authorities supervise the space activities of Union space operators and in particular control the application of the requirements, conduct investigations, keep internal records of infringements, cooperate with the authorities of other Member States, carry out audits, may request technical assessments from qualified technical bodies, review the application of the proportionality principle and report to the Commission (Art. 29(1)(a)-(i)).
Article 30 — Supervisory powers
Competent authorities have all supervisory, investigatory, corrective and sanctioning powers needed for these tasks (Art. 30(1)), including requiring data and documents and accessing premises, land, means of transport and data processing equipment (Art. 30(3)); inspectors may examine books and records (Art. 30(4)). For the resilience chapter they coordinate with the NIS2 authorities (Art. 30(2)).
Article 31 — Administrative sanctions
Member States lay down the rules on penalties; penalties must be effective, proportionate and dissuasive, and authorities consider gravity, duration and previous infringements when setting them (Art. 31(1)-(2)).
Supervision Intensity
The proposal does not prescribe a risk-scoring model for supervision. It asks authorities to review how operators apply the proportionality principle (Art. 29(1)(h)). The factors below are practical indicators, not criteria from the text:
| Factor | Higher Scrutiny | Lower Scrutiny |
|---|---|
| Mission complexity | Mega-constellation, novel operations |
Part 2: Reporting Types and Requirements
> The EU Space Act proposal itself sets only significant-incident reporting (Art. 93) and information duties towards the collision avoidance provider (Art. 64(3)). The report types below reflect national practice and typical authorisation conditions; check the national law and your authorisation.
Annual Compliance Reports
Every authorized operator must submit an annual compliance report to their NCA. This is the cornerstone of the ongoing supervision relationship. The report typically covers:
Operational status:
- Current orbital parameters for each spacecraft
- Operational health and performance metrics
- Any deviations from authorized parameters
- Fuel/propellant status and remaining lifetime estimates
Compliance status:
- Status of compliance with each authorization condition
- Updates to debris mitigation plans and end-of-life strategies
- Insurance coverage confirmation (current policy details, coverage amounts, expiry dates)
- Cybersecurity compliance status (if NIS2 applies)
Changes during the reporting period:
- Any changes to corporate structure or ownership
- Changes to key personnel
- Modifications to operational procedures
- New contracts or service agreements affecting compliance
Forward look:
- Planned activities for the upcoming year
- Anticipated changes to mission parameters
- Upcoming end-of-life activities
- Known compliance challenges or risks
Submission deadline: Typically within 90 days of the reporting period end (often aligned with the calendar year or the authorization anniversary). NCAs may specify a different deadline in the authorization conditions.
Anomaly Reports
Anomaly reports must be submitted when unexpected events occur that may affect compliance, safety, or the orbital environment. These are event-driven and must be submitted promptly.
What constitutes a reportable anomaly:
- Spacecraft system failures or degradation affecting mission capability
- Loss of contact with the spacecraft
- Unplanned orbital maneuvers or attitude changes
- Debris release (intentional or unintentional)
- Near-miss conjunction events where the collision probability exceeded thresholds
- Propulsion anomalies or fuel leaks
- Unexpected end-of-life of a spacecraft component
- Ground segment failures affecting spacecraft control
Reporting timeline:
| Severity | Initial Notification | Detailed Report |
|---|---|
| Critical (safety impact) | Within 4 hours |
Report content:
- Date, time, and circumstances of the anomaly
- Affected spacecraft and systems
- Impact on mission and compliance
- Immediate actions taken
- Root cause analysis (preliminary or final)
- Corrective actions planned or implemented
- Impact on other operators or the orbital environment
Incident Reports
Incident reports overlap with anomaly reports but specifically address events with security, safety, or environmental implications that go beyond routine anomalies.
Reportable incidents include:
- Cybersecurity breaches affecting spacecraft or ground systems (also reportable under NIS2)
- Physical security incidents at ground stations or operations centers
- Unauthorized access to command and control systems
- Collision events or debris-generating events
- Re-entry events (controlled or uncontrolled)
- Insurance claims or third-party damage events
- Regulatory violations by the operator or its contractors
For NIS2-classified operators, incident reporting follows the NIS2 timeline:
- 24 hours: Early warning to CSIRT/NCA
- 72 hours: Incident notification with details
- 1 month: Final report with root cause analysis
The EU Space Act and NIS2 reporting requirements should be coordinated to avoid duplication while ensuring all authorities receive the information they need.
End-of-Life Reports
When a spacecraft reaches end of life, operators must report on the decommissioning process:
Pre-disposal report (before end-of-life operations begin):
- Planned disposal method and timeline
- Current orbital status and fuel reserves
- Passivation procedures to be executed
- Expected post-disposal orbital parameters
- Casualty risk assessment (for re-entry)
Post-disposal report (after disposal operations complete):
- Confirmation of disposal execution
- Final orbital parameters achieved
- Passivation steps completed
- Any deviations from the plan
- Confirmation of compliance with 5-year disposal requirement (LEO)
- Evidence of successful graveyard orbit insertion (GEO)
Deregistration request:
- Following successful disposal and passivation, operators should request deregistration from the national and UN registries
Part 3: Inspections and Audits
Types of Inspections
NCAs may conduct several types of inspections:
Scheduled inspections:
- Announced in advance (typically 30 days notice)
- Scope defined in advance
- Focused on systematic compliance review
- May occur annually or at specified intervals per the authorization
Unscheduled inspections:
- May occur at any time with minimal or no notice
- Typically triggered by specific concerns (anomaly, complaint, intelligence)
- Broader scope than scheduled inspections
- Operators must provide immediate access and cooperation
Document-based audits:
- Remote review of operator records and documentation
- May precede or follow physical inspections
- Focus on compliance documentation, procedures, and records
- Operator submits requested documentation by specified deadline
Technical audits:
- Deep-dive into specific technical areas (debris mitigation, cybersecurity, tracking)
- May involve NCA-appointed technical experts
- May include access to operational systems and data
- Focus on verifying technical claims made in authorization application
Inspection Scope
NCA inspectors may examine:
Physical facilities:
- Mission control centers and operations rooms
- Ground station equipment and security
- Data processing and storage facilities
- Office and document storage areas
Systems and data:
- Spacecraft telemetry and command logs
- Conjunction assessment records
- Anomaly and incident logs
- Cybersecurity systems and logs
- Insurance documentation
Personnel and processes:
- Qualifications and training records of key personnel
- Operational procedures and their implementation
- Change management processes
- Emergency response procedures
Documentation:
- Authorization compliance records
- Reporting history and completeness
- Contractual arrangements with subcontractors
- Quality management system records
Operator Rights During Inspections
While operators must cooperate with inspections, they also have rights:
- Right to be informed of the legal basis and scope of the inspection
- Right to legal representation during the inspection
- Right to claim confidentiality for commercially sensitive information (NCA must protect it)
- Right to receive inspection findings in writing
- Right to respond to findings before enforcement action is taken
- Right to appeal enforcement decisions through administrative or judicial review
Part 4: Notification Requirements
> The EU Space Act proposal contains no general duty to notify the competent authority of changes; such duties follow from national law and the authorisation. The proposal requires informing the collision avoidance provider of planned and unplanned changes and of the start of disposal (Art. 64(3)).
Changes Requiring Prior Approval
Certain changes to an authorized operation require NCA approval before they can be implemented:
Ownership or control changes:
- Transfer of the spacecraft or the operating entity
- Change of controlling shareholder
- Merger or acquisition affecting the authorized entity
- Change of the entity's jurisdiction or place of incorporation
Mission parameter changes:
- Significant orbit changes (altitude, inclination, slot)
- New operational capabilities or services
- Extension of mission beyond authorized duration
- Addition of new spacecraft to an authorized constellation
Insurance changes:
- Reduction of insurance coverage below authorization conditions
- Change of insurer
- Material changes to policy terms
Changes Requiring Notification Only
Some changes need only be notified to the NCA (typically within 30 days):
- Change of key personnel (responsible persons, safety officers)
- Change of ground station locations
- Update to contact information
- Non-material changes to operational procedures
- Change of subcontractors (unless affecting critical functions)
Notification Process
Notifications should be made in writing to the designated NCA contact:
- Describe the change clearly and completely
- Explain the rationale for the change
- Assess the impact on compliance with authorization conditions
- Provide updated documentation as needed
- Request approval (for changes requiring it) or confirm notification
- Await NCA response before implementing changes requiring approval
Part 5: Supervision Fees and Costs
> The proposal regulates fees of the Agency (Art. 41); national supervision fees follow national law.
Fee Structures
Most NCAs charge fees to cover the costs of supervision. Fee structures vary by jurisdiction:
Annual supervision fees:
- Fixed annual fee per authorization
- Typically ranges from EUR 1,000 to EUR 50,000 depending on jurisdiction and mission complexity
- May be scaled by number of spacecraft, revenue, or risk profile
- Usually invoiced annually with payment due within 30-60 days
Inspection fees:
- Some NCAs charge separately for inspections
- Scheduled inspections may be included in the annual fee
- Unscheduled inspections triggered by operator non-compliance may incur additional fees
- Technical expert costs may be passed through to the operator
Application and modification fees:
- One-time fees for new authorization applications
- Fees for modification requests
- Fees for transfer of authorization
Cost Management Strategies
Operators can manage supervision costs through:
- Maintaining clean compliance records — reduces risk of unscheduled inspections
- Proactive reporting — addresses concerns before they trigger formal investigation
- Efficient documentation — makes scheduled inspections faster and less costly
- Automation — compliance management platforms reduce manual effort
- Engaging early — discussing planned changes informally before formal notification saves time
Part 6: Sanctions and Enforcement
Graduated Enforcement
NCAs follow a graduated enforcement approach, starting with less severe measures and escalating as needed:
Level 1 — Informal engagement:
- Discussion of concerns during routine supervision
- Informal recommendations for improvement
- Guidance on best practices
- No formal record (unless the operator fails to respond)
Level 2 — Formal warning:
- Written notification of non-compliance
- Specified deadline for corrective action
- Recorded in the operator's compliance file
- May include specific remediation requirements
Level 3 — Conditions and restrictions:
- Imposition of additional authorization conditions
- Operational restrictions (reduced operations, orbit limitations)
- Enhanced reporting requirements
- Mandatory third-party audits at operator expense
Level 4 — Suspension:
- Temporary suspension of authorization
- Operator must cease or limit activities
- Reinstatement conditional on demonstrated compliance
- May be partial (affecting specific activities) or full
Level 5 — Revocation:
- Permanent revocation of authorization
- Most severe sanction, reserved for serious or persistent non-compliance
- Operator must safely terminate operations (end-of-life obligations remain)
- May include referral for administrative penalties
Administrative Penalties
In addition to authorization-related sanctions, NCAs may impose administrative penalties (fines):
- Penalty amounts defined by national implementing legislation
- Must be effective, proportionate, and dissuasive
- May be imposed alongside other enforcement measures
- Subject to appeal and judicial review
Factors Affecting Sanctions
NCAs consider several factors when determining appropriate sanctions:
- Severity of the non-compliance
- Duration of the non-compliance
- Intent (deliberate vs negligent vs accidental)
- Cooperation of the operator in addressing the issue
- Impact on safety, environment, or third parties
- Track record of the operator
- Mitigating actions taken by the operator
- Deterrent effect for the industry
Part 7: NCA Cooperation Across Member States
Cross-Border Supervision
Space activities are inherently cross-border. A satellite authorized by one NCA may:
- Serve customers in multiple member states
- Use ground stations in different countries
- Share orbit with spacecraft authorized by other NCAs
- Be part of a constellation with entities in multiple jurisdictions
EUSPA Coordination Role
Under the EU Space Act proposal (Art. 40(1)), the EU Agency for the Space Programme (EUSPA) would:
- Carry out technical assessments for the Commission on Union-owned assets and third-country operators (point (a)) and, on request, where a Member State has chosen the Agency for technical assessments (point (b); Art. 8(1)(c))
- Set up and manage URSO and issue e-certificates (points (d)-(e))
- Coordinate the Union Space Resilience Network and provide its secretariat (point (i))
- Issue guidelines and recommendations to promote consistent supervisory practices (point (m))
- Cooperate with third-country supervisory authorities and international organisations (point (p))
Mutual Recognition
Under the EU Space Act proposal:
- A Member State recognises authorisations issued by another Member State as regards the Title IV requirements (Art. 6(2))
- Where an operator operates or launches in another Member State, both authorities issue authorisations as applicable and coordinate (Art. 6(3)); the host State may impose objectively necessary stricter requirements (Art. 3(2))
- Competent authorities cooperate to ensure consistent application (Art. 29(1)(d))
Information Sharing
NCAs share information about:
- Authorized operators and their activities
- Supervision findings and enforcement actions
- Best practices and common challenges
- Emerging risks and regulatory developments
- Incident and anomaly data (anonymized where appropriate)
Part 8: Best Practices for Maintaining Good NCA Relations
Building a Productive Relationship
The NCA is not an adversary — it is a partner in ensuring safe and sustainable space operations. Operators who invest in a constructive relationship with their NCA benefit from:
- Faster processing of modification requests
- More predictable supervision outcomes
- Early warning of regulatory changes
- Access to guidance and best practices
- Benefit of the doubt in ambiguous situations
Communication Best Practices
Be proactive:
- Report issues before the NCA discovers them
- Provide context and analysis, not just facts
- Propose solutions alongside problem identification
- Keep the NCA informed of developments (even positive ones)
Be responsive:
- Respond to NCA queries within the requested timeframe
- Acknowledge receipt even if a full response takes time
- Provide complete and accurate information
- Follow up on commitments made to the NCA
Be transparent:
- Do not hide problems or provide misleading information
- Disclose material facts even if not specifically asked
- Explain the reasoning behind operational decisions
- Share lessons learned from anomalies and incidents
Be organized:
- Maintain clear and accessible compliance records
- Designate a primary NCA contact within your organization
- Keep documentation up to date
- Prepare thoroughly for inspections and audits
Compliance Management System
Operators should implement a formal compliance management system that includes:
- Compliance register: Tracking all authorization conditions and their status
- Reporting calendar: Deadlines for all required reports
- Change management: Process for identifying and managing reportable changes
- Audit readiness: Standing preparation for inspections
- Training program: Ensuring all relevant personnel understand supervision obligations
- Continuous improvement: Learning from supervision feedback and industry developments
Preparing for Inspections
Before a scheduled inspection:
- Review the inspection scope and prepare relevant documentation
- Brief key personnel on what to expect
- Ensure facilities are accessible and organized
- Identify any known issues and prepare explanations
- Have legal counsel available if needed
During the inspection:
- Designate a single point of contact for the inspectors
- Be cooperative and professional
- Take notes on inspector questions and observations
- Do not volunteer information beyond what is asked
- Request clarification if questions are ambiguous
After the inspection:
- Review inspection findings promptly
- Develop a corrective action plan for any issues identified
- Implement corrective actions within the specified timeline
- Document all remediation activities
- Confirm completion with the NCA
Part 9: Supervision Under NIS2
Additional Supervision for Essential Entities
Operators classified as essential entities under NIS2 face additional supervision requirements:
- Proactive supervision: NCAs may conduct cybersecurity audits without specific cause
- Regular assessments: Periodic review of cybersecurity measures
- Management accountability: Board-level responsibility for cybersecurity compliance
- Incident supervision: NCA involvement in significant cybersecurity incidents
Coordination Between Space and Cyber Authorities
For NIS2-classified space operators, supervision involves multiple authorities:
- The space NCA (for space activity authorization)
- The NIS2 competent authority (for cybersecurity compliance)
- The national CSIRT (for incident handling)
These authorities should coordinate to avoid:
- Duplicative reporting requirements
- Contradictory supervision expectations
- Gaps in oversight
- Excessive burden on operators
Under the EU Space Act proposal, competent authorities cooperate with the authorities of other Member States to ensure consistency (Art. 29(1)(d)).
Part 10: Practical Reporting Templates
Annual Report Structure
A well-structured annual compliance report should follow this outline:
1. Executive Summary (1 page)
- Overall compliance status
- Key events during the reporting period
- Material changes or concerns
2. Operator Information (1-2 pages)
- Updated corporate information
- Key personnel changes
- Organizational developments
3. Mission Status (3-5 pages per spacecraft)
- Orbital parameters and health
- Operational performance metrics
- Fuel status and lifetime estimates
- Conjunction events and responses
4. Compliance Assessment (5-10 pages)
- Authorization condition-by-condition review
- Debris mitigation compliance
- Insurance status
- Cybersecurity compliance (if applicable)
5. Anomalies and Incidents (2-5 pages)
- Summary of all anomalies during the period
- Status of open investigations
- Corrective actions implemented
6. Forward Look (1-2 pages)
- Planned activities
- Anticipated changes
- Known risks or challenges
7. Appendices
- Insurance certificates
- Updated documentation
- Technical data as required
How Caelex Helps
Caelex provides comprehensive supervision and reporting support:
- Compliance Dashboard: Real-time visibility into your compliance status across all authorization conditions
- Reporting Automation: Pre-built templates for annual, anomaly, incident, and end-of-life reports that align with NCA expectations
- Deadline Management: Automated reminders for reporting deadlines, insurance renewals, and supervisory milestones
- Document Vault: Centralized storage for all compliance documentation, inspection records, and NCA correspondence
- Audit Trail: Complete history of all compliance activities, changes, and communications for inspection readiness
- ASTRA AI Assistant: On-demand guidance on reporting requirements, notification obligations, and best practices
Start your compliance assessment to establish your supervision baseline and ensure you are ready for ongoing NCA oversight.
Conclusion
Ongoing supervision is an inherent part of being an authorized space operator. It is not a burden to be minimized but a framework to be embraced. Operators who invest in robust compliance management, maintain transparent relationships with their NCAs, and treat supervision as a continuous improvement opportunity position themselves for long-term success. As the EU Space Act matures and NCAs gain experience, supervision practices will evolve — and operators who are well-prepared will adapt most smoothly. The key message is simple: compliance does not end at authorization. It is a permanent commitment to safe, sustainable, and responsible space operations.
Next step
Run the structured assessment for a map of obligation clusters. Software is not legal advice. EU Space Act remains proposal COM(2025) 335.