European integration presents the Ukrainian telecommunications market with a complex challenge: enhancing the security of mobile networks without compromising their continuous operation. In a country where telecommunications support critical infrastructure, businesses, and government services, security cannot be separated from service continuity. Following the launch of negotiations on clusters 2 and 3—including the chapter on digital transformation—the European regulatory experience serves as a strategic benchmark for adapting Ukrainian standards.

European Integration and Network Security Requirements

The official dialogue between Ukraine and the European Union entered a practical phase following the opening of cluster negotiations in October 2026. The third cluster, dedicated to competitiveness and inclusive growth, covers digital transformation and media. The European Commission's Ukraine 2025 Report explicitly recommends aligning Ukrainian legislation with the provisions of the EU 5G Security Toolbox, which was adopted in January 2020 and combines strategic and technical measures.

This toolkit involves supplier risk assessments, restrictions on critical assets, network management protection, and supply chain diversification. However, European practice never assumed a rigid, one-size-fits-all approach or simultaneous equipment removal. As the European Court of Auditors noted, EU member states varied in the scope of their restrictions—ranging from the network core to individual radio access parts—based on national legal instruments and architecture specifics.

Experiences of Germany, France, and Italy

German authorities agreed on a phased implementation plan with operators. According to the schedule, critical components from certain vendors in the 5G core will be phased out by the end of 2026, while critical management functions in radio access and transmission networks will be replaced by the end of 2029. This practical differentiation helps avoid sudden disruptions in communication services while strengthening network security.

France introduced a preliminary authorization regime for 5G equipment back in 2019. Operators submit detailed applications specifying models and versions, and authorizations are granted for up to eight years, directly linking security to network continuity and confidentiality. Meanwhile, Italy utilizes the Golden Power mechanism, allowing the government to review strategic 5G transactions, impose requirements, or exercise veto rights regarding risky operations.

Prospects for Pan-European Regulatory Updates

The European Union's regulatory framework continues to evolve, as demonstrated by the European Commission's January initiative to revise the Cybersecurity Act, known as CSA2. This legislative proposal aims to strengthen pan-European risk management mechanisms for critical ICT assets and introduce mandatory requirements for specific vendors' equipment. As of October 2026, this proposal remains under discussion among EU institutions, meaning its final parameters may still shift.

The diversity of European models demonstrates that even stringent security regulations require precise asset definitions, transparent procedures, and feasible timelines. For the Ukrainian telecommunication sector, this means comprehensive planning that encompasses design, integration, and compatibility testing alongside equipment procurement.

Significance of European Experience for Ukraine

Successful integration of the Ukrainian telecom market into the European digital space depends on the state's ability to implement EU 5G Security Toolbox standards while accounting for infrastructure realities. The experiences of Germany, France, and Italy prove that security and continuity can coexist through balanced regulation. Future steps in Ukraine's digital transformation will require coordinated efforts among regulators, operators, and international partners.