EU Space Act Overview
The European Union Space Act (COM(2025) 335) establishes the first comprehensive regulatory framework for commercial space activities in Europe. It introduces mandatory authorization, safety standards, and environmental requirements for all space operators under EU jurisdiction.
Read the full legal textWhy It Matters
Before the EU Space Act
- • Fragmented national regulations across 27 member states
- • No unified authorization process for operators
- • Inconsistent debris mitigation standards
- • Limited liability framework for space activities
- • No mandatory cybersecurity requirements
After the EU Space Act
- • Single market for space services across the EU
- • One authorization valid in all member states
- • Harmonized debris mitigation requirements
- • Clear liability rules and insurance minimums
- • Mandatory cybersecurity and incident reporting
Who Is Affected?
The regulation applies to any space activity conducted from EU territory, by EU-registered entities, or serving EU customers.
Satellite Operators
Any entity operating spacecraft from EU territory or under EU jurisdiction
Launch Service Providers
Companies providing launch services from EU launch sites
Ground Segment Operators
Operators of mission control, TT&C stations, and data processing facilities
In-Orbit Servicing
Spacecraft performing proximity operations, refueling, or debris removal
Space Tourism
Suborbital and orbital human spaceflight operations
Foreign Operators
Non-EU entities operating in EU airspace or serving EU customers
Structure of the Regulation
The EU Space Act is organized into 10 chapters covering all aspects of space operations.
General Provisions
Art. 1-3Scope, definitions, and objectives of the regulation
Authorization Regime
Art. 4-18Licensing requirements, application process, conditions, and transfer procedures
Registry & Tracking
Art. 19-31EU Space Object Registry, orbital data sharing, and tracking obligations
Cybersecurity
Art. 32-38Security requirements, incident reporting, and vulnerability management
Space Debris Mitigation
Art. 39-47Design requirements, collision avoidance, and end-of-life disposal
Environmental Sustainability
Art. 48-56Life-cycle assessment, emissions reporting, and sustainability standards
Insurance & Liability
Art. 57-68Mandatory coverage, third-party liability, and financial security requirements
Supervision & Enforcement
Art. 69-82National competent authorities, inspections, audits, and penalties
International Cooperation
Art. 83-95Coordination with UN COPUOS, bilateral agreements, and mutual recognition
Final Provisions
Art. 96-119Transitional measures, delegated acts, and entry into force
Key Obligations Summary
1. Mandatory Authorization
All space activities require prior authorization from a National Competent Authority (NCA). Applications must include technical specifications, financial viability assessment, debris mitigation plan, and third-party liability insurance. Authorizations are valid across all EU member states under the mutual recognition principle.
2. Registration Requirements
All space objects must be registered in the EU Space Object Registry within 30 days of launch. Operators must provide orbital parameters, mission purpose, and contact information. This data feeds into the EU Space Surveillance and Tracking (SST) system.
3. Debris Mitigation
Spacecraft must be designed with end-of-life disposal capability. LEO satellites must deorbit within 5 years of mission end (stricter than the 25-year guideline). Operators must demonstrate collision avoidance capability and participate in conjunction assessment processes.
4. Cybersecurity
Space systems must implement security-by-design principles. Operators must conduct regular vulnerability assessments, maintain incident response plans, and report security incidents to the EU Agency for Cybersecurity (ENISA) within 24 hours.
5. Environmental Reporting
Operators must conduct Life Cycle Assessments (LCA) for spacecraft and launch vehicles. Annual sustainability reports are required, covering emissions, resource consumption, and debris generation. This aligns with the EU Taxonomy for sustainable activities.
6. Insurance & Liability
Mandatory third-party liability insurance with minimum coverage amounts based on mission risk profile. The regulation clarifies liability for in-orbit collisions and establishes a compensation framework for damage caused by space objects.
Enforcement & Penalties
Non-compliance can result in significant penalties, including:
of annual global turnover for serious violations
fixed penalties for specific breaches
of authorization for repeated non-compliance
Frequently asked questions
What is the EU Space Act?
The EU Space Act (COM(2025) 335) is the European Union's proposed comprehensive regulatory framework for commercial space activities. It introduces mandatory authorization, safety standards, cybersecurity obligations, debris mitigation rules, and environmental requirements for all space operators under EU jurisdiction. It contains 119 articles across 10 annexes and will apply to all 27 EU Member States.
Who does the EU Space Act apply to?
Satellite operators, launch service providers, ground segment operators, in-orbit service providers, space data providers, constellation operators, space resource operators, and foreign operators serving EU customers or operating under EU jurisdiction. The Act distinguishes seven operator categories and applies a standard or light regime based on the risk profile and scale of operations.
When does the EU Space Act enter into force?
The EU Space Act was proposed by the European Commission in 2025 (COM(2025) 335). It is currently in the EU ordinary legislative procedure. Entry into force depends on Council and Parliament agreement; once adopted, typical lead time to entry into force is 24 months with some provisions phased in longer. Operators should plan authorization strategies against the proposed text now rather than waiting for final adoption.
What are the penalties under the EU Space Act?
Administrative fines up to 2% of global annual turnover for serious violations. Lower tiers apply to less serious breaches. The Commission can also suspend or revoke authorizations and impose corrective conditions on continued operations.
What is the difference between the standard and light regime?
The standard regime applies to large-scale and higher-risk operations — mega-constellations, high-throughput services, operations with national-security implications. The light regime applies to smaller-scale operators (typically fewer than a threshold number of satellites, lower orbital tonnage, or limited user-base impact) and has reduced documentation and process requirements. Operator classification is determined by the national competent authority at authorization time.
How does the EU Space Act relate to national space laws?
The EU Space Act harmonizes the core authorization and supervision framework across all 27 Member States, but national space laws continue to apply for matters not explicitly pre-empted — typically licensing detail, insurance thresholds, launch-site authorization, and national registries. In practice, operators in jurisdictions with existing national laws (Germany's SatDSiG, France's LOS 2008, Luxembourg's Space Activities Act 2020, Spain's Royal Decree, Italy's Law, etc.) navigate both layers.
What cybersecurity obligations does the EU Space Act introduce?
The EU Space Act requires operators to implement cybersecurity measures appropriate to their operations, including risk management, incident reporting, and supply-chain security. These obligations are complementary to NIS2 Directive (EU 2022/2555) requirements for Essential and Important Entities in the space sector. Operators falling under both regimes must satisfy both.
Do foreign (non-EU) operators need EU Space Act authorization?
Yes — foreign operators providing services to EU customers, operating under EU jurisdiction (e.g. from EU launch sites or using EU-licensed ground stations), or whose activities have significant effects in the Union are within scope. The extraterritorial reach follows the Brussels-effect pattern established by GDPR and NIS2.
How does Caelex help with EU Space Act compliance?
Caelex maps all 119 EU Space Act articles to your operator classification (satellite operator, launch provider, constellation, ground segment, data provider, in-orbit services, space resource operator), determines whether you fall under the standard or light regime, generates the authorization dossier, and tracks submissions to the competent national authority. The free assessment at caelex.eu/assessment produces a first-pass regulatory profile in minutes.
Understand your obligations
Take our free assessment to identify which requirements apply to your specific operations.