Ongoing Supervision & Reporting for Space Operators

Obtaining authorization to conduct space activities is only the beginning of the regulatory journey. Once authorized, space operators enter a continuous regime of supervision and reporting that lasts for the entire lifecycle of their mission — and in some cases beyond. National Competent Authorities (NCAs) monitor compliance, require periodic and event-driven reports, conduct inspections, and have the power to impose sanctions up to and including revocation of authorization. This guide explains what operators should expect and how to maintain a productive relationship with their supervisory authority.

Executive Summary

Ongoing supervision under the EU Space Act is designed to ensure that authorized operators continue to meet safety, sustainability, cybersecurity, and insurance requirements throughout their mission. The supervisory framework is risk-based, meaning that operators with higher risk profiles or past compliance issues will face more intensive oversight.

Key facts:

• Supervision begins immediately upon authorization and continues through end-of-life

• Operators must submit annual compliance reports, anomaly reports, incident reports, and end-of-life reports

• NCAs have inspection rights including access to premises, records, and operational data

• Notification is required for material changes including ownership transfer, orbit changes, and anomalies

• Sanctions range from formal warnings to authorization revocation

• Supervision fees are typically borne by the operator

• NCA cooperation mechanisms ensure consistent oversight across member states

Part 1: The EU Space Act Supervision Framework

Legal Basis (Articles 17-20)

The EU Space Act establishes a comprehensive supervision framework through several key articles:

Article 17 — General Supervision Powers

NCAs are empowered to monitor the ongoing compliance of authorized operators with the conditions of their authorization and the requirements of the Act. This includes the power to:

• Request information and documentation from operators

• Access operational data and telemetry records

• Conduct scheduled and unscheduled inspections

• Require corrective action when non-compliance is identified

• Coordinate with other NCAs and EUSPA for cross-border matters

Article 18 — Reporting Obligations

Operators must submit regular and event-driven reports to their NCA. The Article specifies minimum reporting requirements while allowing NCAs to impose additional obligations through authorization conditions.

Article 19 — Inspections and Audits

NCAs may conduct inspections of operator facilities, systems, and records. The scope of inspection authority covers both physical premises and digital systems. Operators must cooperate fully with inspections.

Article 20 — Enforcement and Sanctions

When non-compliance is identified, NCAs have a graduated enforcement toolkit. The principle of proportionality governs enforcement action — sanctions should be appropriate to the severity and nature of the non-compliance.

Risk-Based Supervision

The EU Space Act adopts a risk-based approach to supervision intensity. Factors that influence the level of supervisory attention include:

Factor	Higher Scrutiny | Lower Scrutiny
Mission complexity	Mega-constellation, novel operations

Standard LEO mission | | Operator track record | New entrant, past issues | Established, clean record | | Orbital regime | Congested orbits, GEO | Low-traffic orbits | | Payload type | Dual-use, sensitive | Commercial, standard | | Entity classification | Essential entity (NIS2) | Light regime operator | | Insurance status | Minimum coverage, claims history | Substantial coverage, no claims |

Operators with a strong compliance history and low-risk profile may benefit from lighter supervision, while those with compliance concerns or complex missions should expect more frequent engagement.

Part 2: Reporting Types and Requirements

Annual Compliance Reports

Every authorized operator must submit an annual compliance report to their NCA. This is the cornerstone of the ongoing supervision relationship. The report typically covers:

Operational status:

• Current orbital parameters for each spacecraft

• Operational health and performance metrics

• Any deviations from authorized parameters

• Fuel/propellant status and remaining lifetime estimates

Compliance status:

• Status of compliance with each authorization condition

• Updates to debris mitigation plans and end-of-life strategies

• Insurance coverage confirmation (current policy details, coverage amounts, expiry dates)

• Cybersecurity compliance status (if NIS2 applies)

Changes during the reporting period:

• Any changes to corporate structure or ownership

• Changes to key personnel

• Modifications to operational procedures

• New contracts or service agreements affecting compliance

Forward look:

• Planned activities for the upcoming year

• Anticipated changes to mission parameters

• Upcoming end-of-life activities

• Known compliance challenges or risks

Submission deadline: Typically within 90 days of the reporting period end (often aligned with the calendar year or the authorization anniversary). NCAs may specify a different deadline in the authorization conditions.

Anomaly Reports

Anomaly reports must be submitted when unexpected events occur that may affect compliance, safety, or the orbital environment. These are event-driven and must be submitted promptly.

What constitutes a reportable anomaly:

• Spacecraft system failures or degradation affecting mission capability

• Loss of contact with the spacecraft

• Unplanned orbital maneuvers or attitude changes

• Debris release (intentional or unintentional)

• Near-miss conjunction events where the collision probability exceeded thresholds

• Propulsion anomalies or fuel leaks

• Unexpected end-of-life of a spacecraft component

• Ground segment failures affecting spacecraft control

Reporting timeline:

Severity	Initial Notification | Detailed Report
Critical (safety impact)	Within 4 hours

Within 48 hours | | Significant (compliance impact) | Within 24 hours | Within 7 days | | Minor (informational) | Within 72 hours | In next annual report |

Report content:

• Date, time, and circumstances of the anomaly

• Affected spacecraft and systems

• Impact on mission and compliance

• Immediate actions taken

• Root cause analysis (preliminary or final)

• Corrective actions planned or implemented

• Impact on other operators or the orbital environment

Incident Reports

Incident reports overlap with anomaly reports but specifically address events with security, safety, or environmental implications that go beyond routine anomalies.

Reportable incidents include:

• Cybersecurity breaches affecting spacecraft or ground systems (also reportable under NIS2)

• Physical security incidents at ground stations or operations centers

• Unauthorized access to command and control systems

• Collision events or debris-generating events

• Re-entry events (controlled or uncontrolled)

• Insurance claims or third-party damage events

• Regulatory violations by the operator or its contractors

For NIS2-classified operators, incident reporting follows the NIS2 timeline:

• 24 hours: Early warning to CSIRT/NCA

• 72 hours: Incident notification with details

• 1 month: Final report with root cause analysis

The EU Space Act and NIS2 reporting requirements should be coordinated to avoid duplication while ensuring all authorities receive the information they need.

End-of-Life Reports

When a spacecraft reaches end of life, operators must report on the decommissioning process:

Pre-disposal report (before end-of-life operations begin):

• Planned disposal method and timeline

• Current orbital status and fuel reserves

• Passivation procedures to be executed

• Expected post-disposal orbital parameters

• Casualty risk assessment (for re-entry)

Post-disposal report (after disposal operations complete):

• Confirmation of disposal execution

• Final orbital parameters achieved

• Passivation steps completed

• Any deviations from the plan

• Confirmation of compliance with 5-year disposal requirement (LEO)

• Evidence of successful graveyard orbit insertion (GEO)

Deregistration request:

• Following successful disposal and passivation, operators should request deregistration from the national and UN registries

Part 3: Inspections and Audits

Types of Inspections

NCAs may conduct several types of inspections:

Scheduled inspections:

• Announced in advance (typically 30 days notice)

• Scope defined in advance

• Focused on systematic compliance review

• May occur annually or at specified intervals per the authorization

Unscheduled inspections:

• May occur at any time with minimal or no notice

• Typically triggered by specific concerns (anomaly, complaint, intelligence)

• Broader scope than scheduled inspections

• Operators must provide immediate access and cooperation

Document-based audits:

• Remote review of operator records and documentation

• May precede or follow physical inspections

• Focus on compliance documentation, procedures, and records

• Operator submits requested documentation by specified deadline

Technical audits:

• Deep-dive into specific technical areas (debris mitigation, cybersecurity, tracking)

• May involve NCA-appointed technical experts

• May include access to operational systems and data

• Focus on verifying technical claims made in authorization application

Inspection Scope

NCA inspectors may examine:

Physical facilities:

• Mission control centers and operations rooms

• Ground station equipment and security

• Data processing and storage facilities

• Office and document storage areas

Systems and data:

• Spacecraft telemetry and command logs

• Conjunction assessment records

• Anomaly and incident logs

• Cybersecurity systems and logs

• Insurance documentation

Personnel and processes:

• Qualifications and training records of key personnel

• Operational procedures and their implementation

• Change management processes

• Emergency response procedures

Documentation:

• Authorization compliance records

• Reporting history and completeness

• Contractual arrangements with subcontractors

• Quality management system records

Operator Rights During Inspections

While operators must cooperate with inspections, they also have rights:

• Right to be informed of the legal basis and scope of the inspection

• Right to legal representation during the inspection

• Right to claim confidentiality for commercially sensitive information (NCA must protect it)

• Right to receive inspection findings in writing

• Right to respond to findings before enforcement action is taken

• Right to appeal enforcement decisions through administrative or judicial review

Part 4: Notification Requirements

Changes Requiring Prior Approval

Certain changes to an authorized operation require NCA approval before they can be implemented:

Ownership or control changes:

• Transfer of the spacecraft or the operating entity

• Change of controlling shareholder

• Merger or acquisition affecting the authorized entity

• Change of the entity's jurisdiction or place of incorporation

Mission parameter changes:

• Significant orbit changes (altitude, inclination, slot)

• New operational capabilities or services

• Extension of mission beyond authorized duration

• Addition of new spacecraft to an authorized constellation

Insurance changes:

• Reduction of insurance coverage below authorization conditions

• Change of insurer

• Material changes to policy terms

Changes Requiring Notification Only

Some changes need only be notified to the NCA (typically within 30 days):

• Change of key personnel (responsible persons, safety officers)

• Change of ground station locations

• Update to contact information

• Non-material changes to operational procedures

• Change of subcontractors (unless affecting critical functions)

Notification Process

Notifications should be made in writing to the designated NCA contact:

1. Describe the change clearly and completely

1. Explain the rationale for the change

1. Assess the impact on compliance with authorization conditions

1. Provide updated documentation as needed

1. Request approval (for changes requiring it) or confirm notification

1. Await NCA response before implementing changes requiring approval

Part 5: Supervision Fees and Costs

Fee Structures

Most NCAs charge fees to cover the costs of supervision. Fee structures vary by jurisdiction:

Annual supervision fees:

• Fixed annual fee per authorization

• Typically ranges from EUR 1,000 to EUR 50,000 depending on jurisdiction and mission complexity

• May be scaled by number of spacecraft, revenue, or risk profile

• Usually invoiced annually with payment due within 30-60 days

Inspection fees:

• Some NCAs charge separately for inspections

• Scheduled inspections may be included in the annual fee

• Unscheduled inspections triggered by operator non-compliance may incur additional fees

• Technical expert costs may be passed through to the operator

Application and modification fees:

• One-time fees for new authorization applications

• Fees for modification requests

• Fees for transfer of authorization

Cost Management Strategies

Operators can manage supervision costs through:

1. Maintaining clean compliance records — reduces risk of unscheduled inspections

1. Proactive reporting — addresses concerns before they trigger formal investigation

1. Efficient documentation — makes scheduled inspections faster and less costly

1. Automation — compliance management platforms reduce manual effort

1. Engaging early — discussing planned changes informally before formal notification saves time

Part 6: Sanctions and Enforcement

Graduated Enforcement

NCAs follow a graduated enforcement approach, starting with less severe measures and escalating as needed:

Level 1 — Informal engagement:

• Discussion of concerns during routine supervision

• Informal recommendations for improvement

• Guidance on best practices

• No formal record (unless the operator fails to respond)

Level 2 — Formal warning:

• Written notification of non-compliance

• Specified deadline for corrective action

• Recorded in the operator's compliance file

• May include specific remediation requirements

Level 3 — Conditions and restrictions:

• Imposition of additional authorization conditions

• Operational restrictions (reduced operations, orbit limitations)

• Enhanced reporting requirements

• Mandatory third-party audits at operator expense

Level 4 — Suspension:

• Temporary suspension of authorization

• Operator must cease or limit activities

• Reinstatement conditional on demonstrated compliance

• May be partial (affecting specific activities) or full

Level 5 — Revocation:

• Permanent revocation of authorization

• Most severe sanction, reserved for serious or persistent non-compliance

• Operator must safely terminate operations (end-of-life obligations remain)

• May include referral for administrative penalties

Administrative Penalties

In addition to authorization-related sanctions, NCAs may impose administrative penalties (fines):

• Penalty amounts defined by national implementing legislation

• Must be effective, proportionate, and dissuasive

• May be imposed alongside other enforcement measures

• Subject to appeal and judicial review

Factors Affecting Sanctions

NCAs consider several factors when determining appropriate sanctions:

• Severity of the non-compliance

• Duration of the non-compliance

• Intent (deliberate vs negligent vs accidental)

• Cooperation of the operator in addressing the issue

• Impact on safety, environment, or third parties

• Track record of the operator

• Mitigating actions taken by the operator

• Deterrent effect for the industry

Part 7: NCA Cooperation Across Member States

Cross-Border Supervision

Space activities are inherently cross-border. A satellite authorized by one NCA may:

• Serve customers in multiple member states

• Use ground stations in different countries

• Share orbit with spacecraft authorized by other NCAs

• Be part of a constellation with entities in multiple jurisdictions

EUSPA Coordination Role

The EU Agency for the Space Programme (EUSPA) plays a coordination role in supervision:

• Facilitating information exchange between NCAs

• Developing common supervision practices and standards

• Providing technical support and guidance

• Maintaining the EU Space Registry

• Coordinating with ESA on technical matters

Mutual Recognition

Under the EU Space Act's mutual recognition principle:

• Authorization by one NCA is recognized across all member states

• The authorizing NCA remains the primary supervisor

• Other NCAs may raise concerns through coordination mechanisms

• Disputes between NCAs are resolved through EUSPA or Commission processes

Information Sharing

NCAs share information about:

• Authorized operators and their activities

• Supervision findings and enforcement actions

• Best practices and common challenges

• Emerging risks and regulatory developments

• Incident and anomaly data (anonymized where appropriate)

Part 8: Best Practices for Maintaining Good NCA Relations

Building a Productive Relationship

The NCA is not an adversary — it is a partner in ensuring safe and sustainable space operations. Operators who invest in a constructive relationship with their NCA benefit from:

• Faster processing of modification requests

• More predictable supervision outcomes

• Early warning of regulatory changes

• Access to guidance and best practices

• Benefit of the doubt in ambiguous situations

Communication Best Practices

Be proactive:

• Report issues before the NCA discovers them

• Provide context and analysis, not just facts

• Propose solutions alongside problem identification

• Keep the NCA informed of developments (even positive ones)

Be responsive:

• Respond to NCA queries within the requested timeframe

• Acknowledge receipt even if a full response takes time

• Provide complete and accurate information

• Follow up on commitments made to the NCA

Be transparent:

• Do not hide problems or provide misleading information

• Disclose material facts even if not specifically asked

• Explain the reasoning behind operational decisions

• Share lessons learned from anomalies and incidents

Be organized:

• Maintain clear and accessible compliance records

• Designate a primary NCA contact within your organization

• Keep documentation up to date

• Prepare thoroughly for inspections and audits

Compliance Management System

Operators should implement a formal compliance management system that includes:

1. Compliance register: Tracking all authorization conditions and their status

1. Reporting calendar: Deadlines for all required reports

1. Change management: Process for identifying and managing reportable changes

1. Audit readiness: Standing preparation for inspections

1. Training program: Ensuring all relevant personnel understand supervision obligations

1. Continuous improvement: Learning from supervision feedback and industry developments

Preparing for Inspections

Before a scheduled inspection:

• Review the inspection scope and prepare relevant documentation

• Brief key personnel on what to expect

• Ensure facilities are accessible and organized

• Identify any known issues and prepare explanations

• Have legal counsel available if needed

During the inspection:

• Designate a single point of contact for the inspectors

• Be cooperative and professional

• Take notes on inspector questions and observations

• Do not volunteer information beyond what is asked

• Request clarification if questions are ambiguous

After the inspection:

• Review inspection findings promptly

• Develop a corrective action plan for any issues identified

• Implement corrective actions within the specified timeline

• Document all remediation activities

• Confirm completion with the NCA

Part 9: Supervision Under NIS2

Additional Supervision for Essential Entities

Operators classified as essential entities under NIS2 face additional supervision requirements:

• Proactive supervision: NCAs may conduct cybersecurity audits without specific cause

• Regular assessments: Periodic review of cybersecurity measures

• Management accountability: Board-level responsibility for cybersecurity compliance

• Incident supervision: NCA involvement in significant cybersecurity incidents

Coordination Between Space and Cyber Authorities

For NIS2-classified space operators, supervision involves multiple authorities:

• The space NCA (for space activity authorization)

• The NIS2 competent authority (for cybersecurity compliance)

• The national CSIRT (for incident handling)

These authorities should coordinate to avoid:

• Duplicative reporting requirements

• Contradictory supervision expectations

• Gaps in oversight

• Excessive burden on operators

The EU Space Act's Art. 16 encourages such coordination and the European Commission may issue guidance on supervisory cooperation.

Part 10: Practical Reporting Templates

Annual Report Structure

A well-structured annual compliance report should follow this outline:

1. Executive Summary (1 page)

• Overall compliance status

• Key events during the reporting period

• Material changes or concerns

2. Operator Information (1-2 pages)

• Updated corporate information

• Key personnel changes

• Organizational developments

3. Mission Status (3-5 pages per spacecraft)

• Orbital parameters and health

• Operational performance metrics

• Fuel status and lifetime estimates

• Conjunction events and responses

4. Compliance Assessment (5-10 pages)

• Authorization condition-by-condition review

• Debris mitigation compliance

• Insurance status

• Cybersecurity compliance (if applicable)

5. Anomalies and Incidents (2-5 pages)

• Summary of all anomalies during the period

• Status of open investigations

• Corrective actions implemented

6. Forward Look (1-2 pages)

• Planned activities

• Anticipated changes

• Known risks or challenges

7. Appendices

• Insurance certificates

• Updated documentation

• Technical data as required

How Caelex Helps

Caelex provides comprehensive supervision and reporting support:

• Compliance Dashboard: Real-time visibility into your compliance status across all authorization conditions

• Reporting Automation: Pre-built templates for annual, anomaly, incident, and end-of-life reports that align with NCA expectations

• Deadline Management: Automated reminders for reporting deadlines, insurance renewals, and supervisory milestones

• Document Vault: Centralized storage for all compliance documentation, inspection records, and NCA correspondence

• Audit Trail: Complete history of all compliance activities, changes, and communications for inspection readiness

• ASTRA AI Assistant: On-demand guidance on reporting requirements, notification obligations, and best practices

Start your compliance assessment to establish your supervision baseline and ensure you are ready for ongoing NCA oversight.

Conclusion

Ongoing supervision is an inherent part of being an authorized space operator. It is not a burden to be minimized but a framework to be embraced. Operators who invest in robust compliance management, maintain transparent relationships with their NCAs, and treat supervision as a continuous improvement opportunity position themselves for long-term success. As the EU Space Act matures and NCAs gain experience, supervision practices will evolve — and operators who are well-prepared will adapt most smoothly. The key message is simple: compliance does not end at authorization. It is a permanent commitment to safe, sustainable, and responsible space operations.