A concentration of events in Nicosia and Brussels has clarified how far Europe’s sovereign space architecture has come. The Tech Sovereignty Package, now expected on 3 June, will reveal whether the political will to complete it is real.
Europe has spent years learning, often painfully, that sovereign ambition and infrastructure dependency cannot coexist indefinitely. Ukraine accelerated that lesson. The war demonstrated in real time what happens when critical communications infrastructure sits outside a government’s control and it forced a reckoning that is still working its way through European policy, law and procurement. A concentration of events in recent days brought that reckoning into sharp focus. What those events confirmed, what remains delayed, and what the politics around both reveal, is the clearest picture yet of where Europe’s sovereign space agenda actually stands.
Italy’s experience is the most grounded illustration of the dependency problem in practice. Italian officials spent months negotiating a €1.5 billion deal covering government encryption, military connectivity in the Mediterranean, and direct-to-cell emergency services, all from a foreign commercial constellation. When geopolitical turbulence raised questions about service continuity, the deal stalled. No contract clause resolves that problem. Access to privately-owned foreign infrastructure is ultimately a function of the operator’s situation, not the customer’s legal protections. Italy’s space agency acknowledged the position without ambiguity: “We do not have low-orbit satellites in warehouses.” Most EU member states share that reality. The events of recent days were about changing it.
What Nicosia Confirmed
EU Space Days brought together more than 450 participants in Nicosia on 26 and 27 May. The programme itself was a signal: space for defence, quantum communications and Earth Observation are no longer emerging themes positioned alongside the traditional pillars of Galileo and Copernicus. They are the main agenda. The institutional conversation has caught up with the geopolitical reality.
The most consequential confirmation from Nicosia was the delivery timeline for what Europe is actually building. GOVSATCOM came online in January 2026 and is currently restricted to government and military use, pooling existing national satellite resources across member states. The activation of Ka military frequencies confirmed that the groundwork for IRIS² is substantive, not notional. Commissioner Kubilius committed to a first simplified version of IRIS² by 2029, with the full constellation of 290 satellites across three orbital regimes operational by 2030 and full services from 2031. That distinction, 2029 for initial capability, 2031 for full service, is not a technical footnote. It is the gap inside which procurement decisions made today will either anchor European sovereignty or extend the dependency.
Kubilius also confirmed that the Commission will present a European Space Shield plan before the end of 2026. The Shield is designed to pool and share national capabilities alongside GOVSATCOM, Galileo’s Public Regulated Service and IRIS², with initial elements targeted as early as 2027. Its focus is specific: Galileo-enabled equipment, space domain awareness, and the mitigation of jamming and spoofing in an increasingly contested orbital environment. This is the initiative that most directly connects the space infrastructure being built to the defence readiness agenda. It transforms IRIS² from a communications network into part of an integrated defence architecture. It is the development to watch most closely in the second half of 2026.
Quantum-secured satellite communications also featured prominently. Quantum key distribution for encrypted government and military links is being positioned not as a future aspiration but as an integrated feature of IRIS² from the outset, delivered through the European Quantum Communication Infrastructure. The architecture is being designed to be ahead of the threat environment it will operate in, not catching up to it.
What Ministers Debated in Brussels
At the Competitiveness Council on 29 May, ministers held a dedicated policy debate on space for economic security, how space capabilities bolster Europe’s competitiveness amid growing global risks, and how to integrate civil, commercial and security dimensions of space policy without sacrificing openness or innovation. ESA Director General Josef Aschbacher presented the European Resilience from Space programme: a proposed integration of remote sensing, connectivity, positioning, navigation and timing, spectrum monitoring and IoT systems designed to give governments the most secure, agile and rapid response capabilities possible. If adopted, it embeds IRIS² within a broader multi-domain architecture rather than treating it as a standalone network. Ministers were also briefed on the progress of the EU Space Act, launched in June 2025 to introduce a harmonised framework for space activities across the Union. The International Space Summit in Paris on 9 and 10 September was identified as the next major political milestone, the moment the sector takes stock of where the second half of 2026 is heading.
The Package That Has Not Landed – Tech Sovereignty Package
The Tech Sovereignty Package has now been delayed four times: from 25 March, to 15 April, to 27 May, and now to 3 June. Each delay has carried a similar official explanation. Each has been accompanied by a different political reality. The latest postponement followed direct intervention from US Ambassador to the EU Andrew Puzder, who warned publicly that the package’s sovereignty measures risk breaching the Turnberry trade truce struck between Washington and Brussels last August. The US holds a $30 billion annual surplus in tech services with the EU. The truce faces a sunset clause at the end of 2026. The leverage is real, and Brussels knows it.
The package, when it arrives, is expected to include the Cloud and AI Development Act restricting US cloud providers from sensitive government data across all 27 member states, Chips Act 2.0 targeting semiconductor manufacturing within the EU, an open-source strategy, and a digitalisation and AI roadmap for energy. The Commission’s official position is that it is being finalised carefully. MEP Alexandra Geese offered a different assessment in a parliamentary address: “Once again, the US ambassador resorts to blackmail. Once again the European Commission kowtows. You don’t build sovereignty by kissing the ring.”
The legal case for the package has not weakened during the delays. Shortly before its latest scheduled publication date, a contractor working for US cybersecurity firm, Nightwing, left 844 megabytes of AWS GovCloud credentials and internal CISA passwords on a public GitHub repository for six months. A researcher confirmed full administrative access to three government cloud accounts. This was not an adversary attack. It was a process failure inside America’s most hardened government cloud environment. For European governments evaluating foreign infrastructure for defence-adjacent communications, the CISA incident makes the argument more plainly than any legislative preamble: jurisdictional risk and operational risk are two distinct problems. Solving one does not touch the other.
The Netherlands provided the sharpest legal precedent before the package even arrives. The Dutch Investment Screening Bureau issued the first acquisition prohibition in its history, blocking Kyndryl from acquiring Solvinity, which hosts DigiD, the Netherlands’ national digital identity system because US corporate ownership would expose citizens’ data to CLOUD Act jurisdiction regardless of contractual commitments. This was a national security ruling, not a competition one. Every investment screening body in the EU now has a live prohibition to cite. Member states do not need to wait for the package to act.
One tension inside the expected package deserves transparency. The Commission’s own €180 million sovereign cloud tender awarded one of four contracts to a consortium using S3NS, a joint venture where Thales holds a controlling stake but Google Cloud provides the underlying infrastructure. Industry critics called it sovereignty washing at the highest level. The Commission’s position is that a strict governance framework meets the minimum sovereignty threshold. That position has not been tested in court. When the package arrives on 3 June, it will need to resolve whether arrangements of that kind satisfy its own definitions or whether the Commission has set a standard it has already quietly compromised.
The Political Fault Line
On 26 May, the same day Nicosia opened, Italy’s Prime Minister Meloni addressed Confindustria, Italy’s main industrial lobby representing 150,000 companies, in Rome. She described the EU as a short-sighted bureaucratic giant sacrificing growth on the altar of ideological approaches, and called for the Union to do less and do it better. Six months earlier, at her party’s annual rally, she had told Europe that for eighty years it had outsourced its security to the United States, pretending it was free and calling for a sovereign European defence structure capable of engaging global powers as an equal.
Both speeches represent a genuine position. The tension between them is not a contradiction to explain away. It is the central political risk to the sovereign space agenda: the member states most motivated to build sovereign infrastructure are often the same governments most resistant to the regulatory frameworks that would make that infrastructure genuinely sovereign rather than commercially convenient. Italy experienced the satellite dependency problem directly and is now moving toward a national constellation. Italy also has a Prime Minister who, in the same days the solution was being legislated, warned Brussels that it governs too much.
The architecture is moving. GOVSATCOM is live. IRIS² has a confirmed and accelerated timeline. The Space Shield is coming before year’s end. The Space Act is advancing through the Parliament and the Council. Paris in September is the next moment of political reckoning. But the legislative framework that locks in procurement preferences, defines what sovereign actually means in law, and makes the investment case clear for every company deciding where to build that framework remains pending. What lands on 3 June, and how much of it survives the trade pressure that has already moved it four times, will reveal more about Europe’s real ambitions in space than anything confirmed in Nicosia or Brussels in recent days. An orbit, like sovereignty, cannot be outsourced in parts.
