Abstract: This strategic regulatory analysis provides a compliance roadmap for satellite operators, launch service providers, and downstream space companies under the proposed EU Space Act (COM(2025) 335). It analyzes the regulation's three core pillars: operational space safety (space traffic management, collision avoidance, and active debris removal), space infrastructure cyber resilience, and environmental sustainability standards. The analysis details the extraterritorial scope applicable to third-country operators accessing the EU internal market and provides risk-allocation strategies for supply chain procurement and launch authorization.
In the control rooms of Europe’s space agencies and the boardrooms of launch providers from Florida to French Guiana, a quiet but profound regulatory transformation is underway. For decades, space activities in Europe were governed by a patchwork of thirteen national regimes, a fragmentation that increased costs, created legal uncertainty, and hindered the continent’s ability to compete globally. The European Commission’s proposal for a Regulation on the safety, resilience and sustainability of space activities in the Union (the “EU Space Act”), published on 25 June 2025, seeks to replace that patchwork with a single, harmonized framework.
As of June 2026, the proposal remains under negotiation in the ordinary legislative procedure. A Presidency compromise text was released in March 2026, and divergences persist on issues such as cybersecurity requirements, market access, and the treatment of third-country operators. Yet the direction is clear: Europe is building a comprehensive regulatory regime for the space sector that will affect not only EU operators but also international actors whose services reach European users or infrastructure.
For satellite operators managing mega-constellations, launch providers developing reusable systems, and technology companies delivering space-based data or AI services, the stakes are significant. Understanding the emerging rules, and preparing compliance strategies now, is no longer optional.
The EU has identified space as a strategic sector, with the global space economy projected to reach substantial scale by 2035. The Act’s stated objectives are threefold: ensure the safety of space operations, strengthen the resilience of European space infrastructure, and promote environmental sustainability. At the same time, it aims to boost the competitiveness of the EU space sector, particularly for start-ups and SMEs, by creating a true single market and reducing administrative burdens associated with operating across multiple Member States.
Crucially, the proposal applies to both EU and non-EU operators whenever space-based services or data are provided within the EU, regardless of where the operator is established. This extraterritorial reach mirrors the “Brussels effect” seen in the GDPR and the AI Act, but applied to the physical and cyber domains of space.
The proposal is structured around three core pillars, supported by horizontal provisions on authorization, supervision, and enforcement.
Safety
The Act introduces robust requirements for tracking space objects and mitigating space debris. Operators will need to demonstrate measures to preserve secure and uninterrupted access to space, including collision avoidance and end-of-life disposal strategies. These rules build upon and operationalize international commitments under the Outer Space Treaty (particularly Article VI on authorization and supervision) and the Liability Convention, while adding EU-specific granularity and monitoring mechanisms.
Resilience
Tailored cybersecurity requirements will apply throughout the lifecycle of space missions. Operators must conduct risk assessments, implement security protocols, and ensure business continuity. This pillar directly intersects with the Cyber Resilience Act (CRA) for space products and components, and with NIS2 for critical entities. Space-based infrastructure supporting essential services (communications, navigation, Earth observation) will face heightened scrutiny.
Sustainability
Operators will be required to assess and reduce the environmental impact of their activities. The proposal encourages innovation in in-orbit servicing, active debris removal, and other sustainable technologies. This represents a significant evolution: environmental considerations, long discussed in COPUOS and national policies, are now framed as binding EU regulatory obligations with potential market access implications.
Authorization, Registration, and Supervision
Title II of the proposal regulates the authorization and registration of space activities. Operators conducting activities in or affecting the EU must obtain permission under conditions set at EU level, with Member States designating or establishing national competent authorities for day-to-day monitoring and enforcement. Information will flow to the European Union Space Programme Agency (EUSPA), which will maintain a Union Register of Space Objects. This creates a layered system: EU-level harmonization combined with national implementation, a model familiar from other EU sectoral regulations.
Extraterritorial Scope and Proportionality
The Act explicitly applies to third-country operators providing space services in Europe. Requirements are designed to be proportional to company size and risk profile, with targeted support measures (including reduced administrative burdens) for start-ups, SMEs, and small mid-caps during the transition. A national security clause preserves Member States’ prerogatives in this domain.
Enforcement and Penalties
The proposal envisages effective enforcement mechanisms, including the possibility of significant penalties for non-compliance. Market surveillance authorities will have powers to investigate, require corrective action, and restrict or prohibit non-compliant services — again echoing the architecture of the AI Act and product safety regulations.
Interplay with Existing EU Frameworks
The EU Space Act does not operate in isolation. Space-based AI systems may trigger additional obligations under the AI Act (particularly if classified as high-risk). Cybersecurity requirements overlap with the CRA and NIS2. Data protection rules (GDPR) continue to apply to personal data processed via space infrastructure. Operators will need integrated compliance programs rather than siloed approaches.
The relationship with the Outer Space Treaty and other international instruments remains foundational. The EU Space Act can be viewed as an exercise in implementing and giving concrete effect to Article VI obligations at the regional level, while adding layers of safety, cyber, and sustainability governance that the 1967 Treaty left largely to states.
For non-EU launch providers and satellite operators (including those developing reusable systems or large constellations), the Act creates both compliance obligations and market-access considerations. Services delivered to European users or relying on European ground infrastructure will likely require demonstration of conformity with the new standards. Early gap analyses, mapping existing safety, cyber, and sustainability practices against the three pillars will be essential.
For EU and Romanian operators, the Act offers the prospect of simplified cross-border operations and a more predictable regulatory environment. However, it also introduces new authorization and ongoing compliance requirements that will demand investment in technical and legal capabilities. Romanian authorities will play a key role in national implementation, coordination with EUSPA, and supporting domestic industry transition.
Risks include regulatory uncertainty during the remaining negotiation phase, potential cost increases (particularly for smaller operators), and the challenge of aligning EU rules with divergent international approaches (notably U.S. and other major spacefaring nations). Opportunities lie in enhanced credibility, access to European markets and funding, and leadership in sustainable and resilient space technologies - areas where in-orbit servicing, debris removal, and green propulsion could become competitive differentiators.
Operators should begin internal assessments of current safety management systems, cyber resilience postures, environmental impact methodologies, and authorization documentation. Contractual allocation of regulatory risk in launch and service agreements will require careful attention. Engagement with national competent authorities (once designated) and participation in relevant consultations or industry forums can provide early insight into implementation approaches.
The EU Space Act represents one of the most significant developments in space governance since the major international treaties of the 1960s and 1970s. While negotiations continue, the core architecture - three pillars of safety, resilience, and sustainability, combined with harmonized authorization and extraterritorial reach, is already visible. Global space actors who treat this as a strategic compliance and positioning exercise, rather than a mere regulatory burden, will be best placed to thrive in the European space economy of the 2030s and beyond.
At Mararu & Mararu SCA, we combine deep expertise in space law, EU regulatory frameworks, and international transactions to help clients navigate precisely this type of transformation. Whether you require a regulatory gap analysis, assistance designing integrated compliance programs, support with authorization strategies, or strategic advice on contractual risk allocation under the emerging EU Space Act, our team is ready to partner with you.
Contact us to discuss how your operations can be positioned for compliance, resilience, and competitive advantage in Europe’s new space regulatory era.
Key Legal Sources & Primary Instruments
.svg)
Commercial Earth-observation data rights cross UN principles, EU dual-use export rules, GDPR, the Data Act, AI Act, and the EU Space Act. This white paper guides operators, buyers, investors and insurers in mitigating and managing complex licensing, title, and export risks.
Historic space objects already sit under jurisdiction, ownership and due regard. The task is to give operators predictable parameters for working near them, not to freeze exploration. This article maps OST Articles II, VIII and IX, Artemis Accords Section 9, national licensing practice, and the proposed EU Space Act, and sets out steps available now.
Navigating Romania's aerospace, defense, dual use, and space programs requires understanding six overlapping legal regimes. This guide maps these regulatory frameworks and offers practical FDI and procurement compliance scenarios for investors.
