Who Controls Satellite Communications: Key Lessons Ukraine Can Learn from the New GSMA Framework

As modern warfare increasingly relies on satellite connectivity, Ukraine’s experience with Starlink verification systems has become a crucial case study for global telecommunications policy. The recent publication of a comprehensive framework document by the GSMA (Global System for Mobile Communications Association) has sparked important discussions about how nations should regulate and manage satellite communication services, particularly in conflict zones. Ukraine’s innovative approach to managing Starlink access through a ‘white list’ verification system offers valuable insights that could shape international standards for years to come.

The GSMA, which represents mobile network operators worldwide with over 750 members across more than 220 countries, has released new guidelines addressing the complex relationship between traditional telecommunications infrastructure and emerging satellite-based communication services. This document arrives at a critical moment when the boundaries between terrestrial and space-based communications are becoming increasingly blurred, and governments worldwide are grappling with questions of sovereignty, security, and access control in the digital domain.

Ukraine’s relationship with Starlink began in the early days of Russia’s full-scale invasion in February 2022, when Elon Musk’s SpaceX rapidly deployed thousands of terminals to support Ukrainian military and civilian communications. The service quickly became indispensable, providing connectivity when traditional infrastructure was destroyed or compromised. However, this dependency also revealed significant vulnerabilities and governance challenges. The Ukrainian government implemented a verification system that requires users to be approved through a centralized ‘white list’ before gaining access to the satellite network, a measure designed to prevent unauthorized use and potential exploitation by hostile forces.

This verification approach represents a significant departure from the typical consumer-oriented model of satellite internet services. Rather than allowing open subscription access, Ukraine’s system ensures that each terminal and user is vetted and approved, creating an additional layer of security that has proven essential in a wartime environment. Military units, government agencies, and critical infrastructure operators receive priority access, while the system helps prevent terminals from falling into enemy hands or being used for reconnaissance purposes. The GSMA’s new document suggests that such verification mechanisms could become standard practice for satellite service deployment in sensitive regions.

The broader implications of the GSMA framework extend well beyond Ukraine’s borders. As satellite internet constellations from companies like SpaceX, Amazon’s Project Kuiper, and OneWeb continue to expand, questions about jurisdiction, liability, and service continuity have become increasingly urgent. Traditional telecommunications regulations were designed for fixed infrastructure within national borders, but satellite services operate across multiple jurisdictions simultaneously. The new guidelines attempt to establish clearer frameworks for cooperation between satellite operators, national regulators, and mobile network operators, recognizing that hybrid connectivity solutions will likely become the norm rather than the exception.

Security experts have noted that Ukraine’s experience highlights both the transformative potential and the risks associated with depending on private satellite infrastructure for critical communications. When SpaceX temporarily restricted Starlink coverage in certain areas during military operations, it demonstrated how a single corporate decision could impact battlefield capabilities. The GSMA document addresses these concerns by recommending clearer contractual frameworks and service level agreements that account for emergency and conflict scenarios. It also emphasizes the importance of transparency in how satellite operators make decisions about service availability, particularly when those decisions may affect national security interests.

The historical context of satellite communications regulation adds important perspective to current debates. Since the launch of the first commercial communications satellites in the 1960s, international frameworks have evolved significantly, from the establishment of Intelsat as an intergovernmental organization to the privatization wave of the 1990s and the current era of commercial mega-constellations. Each transition has required new approaches to governance and oversight. Ukraine’s white list system represents an innovative adaptation to 21st-century realities, where rapid deployment capabilities must be balanced against security requirements and the need for accountability in service provision.

Looking forward, the integration of Ukrainian verification practices into broader international standards could help establish more robust frameworks for satellite communications governance. The GSMA’s recommendations support the development of transparent, simple procedures that can be implemented quickly while maintaining necessary security controls. For Ukraine, this means continued refinement of its existing systems while sharing lessons learned with international partners. For the global telecommunications community, it signals a recognition that the future of connectivity will require new models of cooperation between governments, traditional operators, and satellite service providers, with security and accessibility considerations carefully balanced to serve both civilian and strategic needs.