When Mobile Virtual Network Operators (MVNOs) are planning their European expansion, there’s a critical factor that’s often undervalued. While technology concerns are often front and centre, the importance of telecoms regulation is frequently overlooked or underestimated.
Driven by technological improvements, like the development of cloud functions and advanced new services like IMS, operators are launching into new markets. Yet, they quickly discover that no two European markets regulate telecoms in the same way. From the UK’s Investigatory Powers Act 2016 (covering data interception, retention, and acquisition) to the EU’s European Electronic Communications Code (EECC) and the broader ePrivacy framework, the landscape is complex, fragmented, dynamic, and increasingly strict. Compliance has become a genuine challenge.
For MVNOs, non-compliance is clearly not an option. Ignoring legal imperatives can lead to operational shutdowns, heavy fines, and significant reputational damage. Recent examples include Ofcom’s £17.5 million fine to a major UK operator for failures in handling emergency calls, and a £2.8 million fine for poor commercial practices regarding customer contracts. Additionally, Ofcom has banned the leasing of Global Titles to combat fraud and interception. This ban on new leases and sub-allocations took effect in April 2024, with existing ones to be phased out by April 2026.
Regarding privacy, the European Data Protection Board (EDPB), while not directly interpreting lawful interception (LI)—which falls under national laws and ePrivacy—has established strict criteria for international transfers and data breach notifications, which directly impact cross-border MVNOs. Examples include the EDPB’s Recommendations 01/2020 following the Schrems II ruling and Guidelines 9/2022 on data breach notification.