Toulouse: The Space Act negotiations have exposed a three-way disagreement over how far European rules should reach into orbit, and the biggest split concerns cybersecurity. An International Bar Association briefing dated 15 July 2026 found that Parliament had not yet adopted its first-reading position, while the Council still had no final stance on the proposal that the Commission published on 25 June 2025.
The Space Act negotiations cover a broad proposal that would set common safety, resilience and sustainability rules for satellite operators across the Union. The Commission proposed that the Space Act would apply from 1 January 2030, with assets launched after that date covered from 1 January 2032. The Council prefers application 36 months after entry into force, and Parliament aligns with that period. The Space Act negotiations therefore agree on a longer lead time, even where they differ on almost everything else.
Cybersecurity shows the widest gap. The Commission wants the Space Act to prevail over the NIS 2 Directive on cyber risk in space. The Council wants the two laws to work side by side, leaving large or critical operators under NIS 2. Parliament would delete the resilience chapter and bring space activities into NIS 2 through a new article.
Scope is another dispute. The Commission would cover international organisations directly, but the Council and Parliament would make that depend on an international agreement with the Union. Parliament also wants a wider defence exemption that reaches space-based data and services.
Authorisation timing separates the institutions too. The Commission and Council keep a 12-month decision period, while Parliament proposes a six-month limit and a deemed authorisation if the authority stays silent. Law firm Gleiss Lutz notes that it is unclear whether such a deemed approval would have legal effect.
On penalties, Parliament would limit fines to operators of Union-owned assets, third-country operators and international organisations, and it would remove the cap. The Council would allow fines on any person who infringes or obstructs. Parliament also makes the environmental footprint an estimate and not a certificate.
The Space Act negotiations are far from finished. The sources stop in July, and no autumn 2026 position is confirmed, so readers should check the Parliament Legislative Observatory for the current stage. The compromise texts from the Danish and Cyprus presidencies show the Council still searching for common ground.
Operators now face a long wait, and satellite builders in Toulouse and elsewhere are watching closely. Until the Space Act negotiations settle scope, cyber duties and penalties, satellite companies cannot plan compliance, and the 36-month runway means rules would bite well after 2029.





