Permanent roaming rules are divergent. Most European countries permit permanent roaming for IoT and M2M services, relying on commercial agreements between operators. However, Germany only permits it for services that meet the legal definition of M2M communications, excluding general public internet access. Belgium has the most restrictive framework, generally prohibiting permanent roaming except in specific cases such as eCall or certain “nomadic” services authorised by the minister.
Regarding authorisation and notification, most EU member states apply the general authorisation regime under the European Electronic Communications Code. In 22 countries, notification is required if the IoT or M2M service is made available publicly, typically when there is a direct contractual relationship with end users. Five countries (Estonia, Hungary, Ireland, Italy, and Luxembourg) go further and always require notification, even when services are offered only to closed user groups. In contrast, Denmark, France, and the United Kingdom impose no notification at all.
In the area of SIM card registration, 15 out of 31 countries require the registration of IoT and M2M SIMs. Eleven of these require explicit verification mechanisms, such as Austria’s in-person or video identification, Sweden’s use of BankID, and Switzerland’s retailer-led checks.
By contrast, 16 countries, including Estonia, Finland, Latvia, and the United Kingdom, impose no registration at all or explicitly exempt IoT services. Belgium exempts M2M SIMs but still requires registration for other mobile users, while Greece and Hungary allow exemptions for SIMs that are technically limited to machine-only use.
Cullen International’s new research compares the regulatory approach for IoT and M2M connectivity in all EU member states and associated European markets.
For access to our research, click 'Access full content' – or 'Request access' if you are not yet a subscriber to our IoT service.
Interested in other regions? Check these out:
more news
30 October 26
Many governments around the globe rely on legal mechanisms to compel communications apps to cooperate in law enforcement investigations
Cullen International's latest Global Trends benchmark for number-independent communications apps regulation found that nearly all of the 13 surveyed jurisdictions around the world provide some legal mechanism to make these apps assist law enforcement in criminal investigations. There are requirements to verify user identities, compel disclosure of stored content, make encrypted content accessible, and duties to detect illegal content within private communications.
22 October 26
IoT regulation: new operational requirements reshape global connectivity
Cullen International's Quarterly Regulatory Update on IoT and M2M Services (Q3 2026) highlights how national regulators around the globe are shaping the future of IoT and M2M services.
21 October 26
Americas countries require satellite service providers to obtain a spectrum licence
Cullen International’s latest benchmark compares satellite regulation across the Americas, including service and spectrum licensing, registration requirements, spectrum allocations and fees, interference rules, migration between frequency bands and recent regulatory developments.