In the second quarter of 2026, authorities continued to refine existing regulatory frameworks for IoT, while also addressing emerging topics such as satellite connectivity, network sunsets and cross-border data governance.
Developments in Europe, North America and Asia-Pacific suggest an increasing focus on the practical application of existing rules rather than the introduction of entirely new regulatory frameworks.
For providers operating internationally, these developments underline the importance of monitoring regulatory changes as they evolve.
Regulators are focusing on a range of different issues
Connectivity governance
Regulators continue to examine the application of roaming frameworks to M2M and IoT services. Recent consultations and updated guidance reflect the ongoing discussion around permanent roaming, wholesale arrangements and the treatment of connected devices operating across borders. At the same time, discussions on future roaming arrangements continue in neighbouring regions and international markets.
Satellite and non-terrestrial connectivity
Satellite and direct-to-device services continue to attract regulatory attention. Recent consultations and spectrum initiatives across several jurisdictions address questions around authorisation models, spectrum access and the interaction between satellite and terrestrial connectivity.
SIM registration and user identification
Authorities continue to refine requirements relating to the identification of mobile subscriptions and connected devices. Recent developments include revised implementation timelines, clarifications regarding enterprise deployments and further guidance on subscriber data management.
Cybersecurity and data regulation
Cross-border data transfers remain an important area of attention for regulators. Recent enforcement activity highlights the continued importance of assessing international data flows and the safeguards applied to personal and operational data generated by connected services.
Technical and device-level regulation
Network modernisation programmes continue to progress globally. Recent announcements regarding 2G and 3G closures highlight the need for providers to assess the long-term compatibility of deployed devices and connectivity solutions.
The above findings are drawn from Cullen International’s latest Quarterly Regulatory Update on IoT and M2M Services – 2Q 2026, which is available to subscribers of Cullen’s IoT service.
Scope
Region: Gobal
Countries covered: 65
Policy area: Internet of Things
Last updated: July 2026
For more information and access to the update, click 'Access full content' – or 'Request access' if you are not yet a subscriber to our IoT service.
more news
27 July 26
Spectrum policy adapts to support new network models in the Americas
Cullen International's latest Americas Spectrum Benchmarks compare regulatory approaches across the Americas for a range of topics, including 5G deployment, spectrum assignments, spectrum refarming and private networks.
27 July 26
Most European countries require 10 Mbps for adequate fixed broadband
Cullen International's latest European benchmark on universal service obligation investigates the minimum download speed required in 33 countries.
27 July 26
What is the state of implementation of the Cyber Resilience Act in the EU?
Cullen International's latest Benchmark analyses how 19 EU countries are preparing to implement the Cyber Resilience Act (CRA). It tracks national laws, designated authorities, incident notification bodies and penalties ahead of the regulation’s application dates.