EU-Iceland Agreement on Govsatcom and IRIS² Satellites: What Changes for Governments and Security in 2026

Key data

Iceland becomes the first European Economic Area (EEA) country to formalize its access to the two major secure satellite communications platforms of the European Union: Govsatcom and IRIS². Council Decision (EU) 2026/2351, approved on October 9, 2026 and published in the Official Journal on October 22, establishes the complete legal framework for this integration.

For those responsible for security, operational continuity and critical infrastructure in public bodies, this agreement opens access to satellite capabilities that until now were exclusively reserved for EU member states.

What does this regulation establish?

The Council Decision formally approves the bilateral agreement between the European Union and Iceland. The content of the agreement is structured around three main pillars:

Govsatcom is the component of the EU Space Program that provides secure satellite communication capabilities for government use. It is specifically designed for public authorities, security forces and crisis management operations, where communication confidentiality and resilience are critical.

IRIS² (Infrastructure for Resilience, Interconnectivity and Security by Satellite) is the European constellation of low-orbit satellites (LEO) currently under development. Its objective is to provide secure connectivity for both government use and commercial applications, with special emphasis on resilience against cyberattacks and coverage in remote areas or emergency situations.

Iceland accesses this framework as an EEA country and as a state already associated with other European space programs, which facilitates its technical and legal integration.

Economic and operational impact

The agreement has direct implications in four operational areas for affected organizations:

• National security: Access to encrypted and resilient satellite communication channels, independent of terrestrial infrastructure that may be compromised in crisis situations.
• Defense and security forces: Ability to operate with secure communications in degraded environments or in missions outside national territory.
• Crisis management: Govsatcom is specifically designed to maintain operational communications during natural disasters, cyberattacks or conflicts that disable conventional networks.
• Critical infrastructure resilience: Operators of critical infrastructure under government supervision can benefit from alternative and secure communication channels.

From a financial perspective, the agreement establishes that Iceland assumes economic participation conditions proportional to its use and access to services. The specific amounts of Iceland's contribution are not detailed in the published Decision, as they are regulated in the text of the bilateral agreement.

Who does it affect?

• Public administrations of EU member states and Iceland with secure communication needs.
• Security forces and bodies (police, coast guard, intelligence services) operating in environments requiring encrypted and resilient communications.
• Emergency management and civil protection bodies that coordinate responses to national or cross-border crises.
• Critical infrastructure operators under government supervision or mandate (energy, transport, telecommunications) that may access Govsatcom services through their competent authorities.
• Defense and national security bodies of member states that use or plan to use capabilities of the EU Space Program.
• Icelandic entities equivalent to the above, which as of October 9, 2026 have a legal basis to access these services.

Practical example

Imagine a crisis management scenario: a natural disaster in the North Atlantic disables terrestrial telecommunications networks in a coastal area of Iceland. Before this agreement, Icelandic authorities relied on their own satellite capabilities or ad hoc bilateral agreements with EU member states.

As of October 9, 2026, the Icelandic Coast Guard or Iceland's Emergency Coordination Center can activate Govsatcom services directly, accessing secure satellite communication channels managed by European infrastructure. Coordination with EU counterparts (for example, the European Border and Coast Guard Agency, Frontex) is carried out on the same technical platform, eliminating interoperability friction.

This same principle applies to joint EU-Iceland security operations within the Schengen Area framework, where Iceland already participates as an associated state.

What should organizations do now?

1. Identify if your organization has a mandate to use secure government communications. If you manage critical infrastructure, security forces or emergency services, assess whether Govsatcom or IRIS² are relevant to your operational continuity plan.
2. Review communication resilience plans. Access to Govsatcom requires coordination with the national competent authority. Identify who is the point of contact in your member state for the EU Space Program.
3. For Icelandic bodies: verify access conditions. The agreement establishes the rules for financial, technical and governance participation. Icelandic bodies should contact their designated national authority to formalize access to services.
4. Incorporate IRIS² into medium-term planning. The IRIS² constellation is under development. Critical infrastructure managers should monitor its evolution to anticipate integration opportunities when services become operational.
5. Consult the full text of the agreement to understand the specific governance conditions and confidentiality obligations associated with the use of Govsatcom services.

Official source

Consult full regulation in official source

Disclaimer: This article is for informational purposes only and does not constitute legal advice. For specific decisions, consult a qualified professional. Source: https://eur-lex.europa.eu/./legal-content/AUTO/?uri=OJ:L_202602351