Sky is not a frontier of privacy: the space internet race between giant moons and legal loopholes

Satellite Communications: The Battle for Orbits and User Privacy Challenges

The satellite communications sector is undergoing a qualitative transformation as the internet shifts from terrestrial infrastructure to low Earth orbits, with companies such as SpaceX, Amazon, and OneWeb competing to build space-based constellations connecting every corner of the globe to the internet. This article, based on the latest reports and academic research, maps the competitive landscape of the current satellite internet scene and reveals a profound paradox: while this development promises to expand digital access, it creates new dimensions of threats to user privacy that exceed those known in the traditional internet, raising complex legal and ethical questions about data ownership and sovereignty in outer space.

First: The Battle for Orbits — Two Competing Philosophical Approaches

At the heart of the satellite internet race, two radically different engineering philosophies compete to deliver satellite internet service:

The First Model — Megaconstellations: Adopted by SpaceX/Starlink, based on the philosophy of conquering low Earth orbit with tens of thousands of small satellites. SpaceX launched its first satellite in 2019, and has since placed more than 9,000 satellites in orbit, with plans to reach 34,000. Starlink’s user base exceeded ten million by February 2026.

The Second Model — Giant Satellites: Adopted by AST SpaceMobile, which believes better service can be delivered with fewer than 100 giant satellites in orbit.

Technical Comparison Between Different Orbits

To understand the fundamental differences between these systems, orbit classification is an essential factor:

Estimates indicate that the satellite broadband market in India alone will reach $1.9 billion by 2030, explaining the fierce race to control this sector.

Key Competitors

1. Starlink (SpaceX): The leader by a wide margin, with its constellation accounting for more than 65% of all active satellites on Earth. It uses inter-satellite laser links (ISL) and phased array antennas.

2. OneWeb (Eutelsat): Orbits at 1,200 km with 648 satellites in its first constellation, providing pole-to-pole coverage, and is backed by India’s Bharti Airtel.

3. Amazon Leo (formerly Project Kuiper): Plans to deploy 3,236 satellites at altitudes of 590–630 km. It launched its first 27 production satellites in April 2025 and plans commercial launch in mid-2026. Amazon has fallen behind schedule and requested an extension from the Federal Communications Commission (FCC).

4. The Chinese Sector: China plans to deploy two large satellite constellations.

Second: User Privacy — Space as a Legal Grey Zone

When moving from terrestrial to space-based infrastructure, fundamental questions about data privacy emerge, which can be divided into three main dimensions:

1. Dimensions of Privacy Threats

The cybersecurity of satellite internet differs fundamentally from its terrestrial counterpart. The system is more complex, spanning three main segments: the space segment (satellites), the ground segment (ground stations), and the user segment (terminal devices). Threats also include physical security (such as electromagnetic interference), link security (such as eavesdropping and hijacking), network security (such as viruses), data security, and business security.

International laws have also not yet defined mechanisms for protecting privacy in space. Current treaties do not directly regulate privacy in space. Space companies are required to comply with the laws of the countries whose citizens they serve (such as the EU’s General Data Protection Regulation GDPR for any company processing EU citizens’ data, regardless of storage location).

2. “Website Fingerprinting” — The Most Precise Privacy Threat

In a pioneering academic study from the University of Waterloo in 2024, researchers tested whether satellite internet users are more vulnerable to “website fingerprinting” attacks—a technique that allows an attacker to determine which websites a user visits even over encrypted traffic.

The results were concerning: Tor traffic carried over a Starlink connection was as vulnerable to website fingerprinting attacks as traffic over traditional fiber optic connections. The researchers found that deep learning attacks achieved accuracy of up to 87% on Starlink connections versus 89% on fiber.

Among the most important findings were that loading web pages over Starlink was 33% slower than fiber, that TCP packet retransmissions were 23 times more common on Starlink, and that Starlink exchanged 20% more packets than fiber.

3. Starlink’s Privacy Policy and the Use of Data to Train AI

On January 15, 2026, SpaceX updated Starlink’s global privacy policy to include a controversial new clause: unless the user opts out, their data may be used “to train machine learning or artificial intelligence models,” and shared with service providers and “external collaborators.”

The previous version of the policy in November 2025 was completely devoid of this clause. Starlink collects massive amounts of user data, including location and identity data, communications data, and inferences drawn from other data. This step raised serious concerns among privacy protection groups and legal experts, with Professor Anupam Chander of Georgetown University describing it as “raising my eyebrows and making me worried if I were a Starlink user.”

Third: The Regulatory Framework — A Race Against Time

As technological development accelerates, legal systems are struggling to keep pace:

• European Union: In June 2025, the European Commission proposed a draft “EU Space Act” to regulate the safety, resilience, and sustainability of space activities, attempting to unify national laws across 13 member states.

• India: Adopted the “Indian Space Policy 2023,” which allows non-governmental entities to provide satellite internet services. It has granted operating licenses to three operators (OneWeb, Jio-SES, Starlink). It also required that all local traffic pass through Indian gateways and that local monitoring centers be established.

• United States: Lacks a comprehensive data privacy law, relying on sectoral laws such as HIPAA for health and GLBA for finance, in addition to state laws such as CCPA in California. The Federal Communications Commission (FCC) also imposes conditions on satellite licenses.

Fourth: Conclusion and Future Outlook

The comparative analysis indicates that the race toward satellite internet is not limited to technical competition among giant companies but represents an existential challenge to digital privacy. Four key issues stand out for the near future:

1. Physical security vulnerabilities: Satellites are exposed to cyber and physical attacks, jeopardizing data integrity.

2. Legislative vacuum: The absence of a binding international treaty regulating data privacy in space creates a grey zone exploited by service providers.

3. Conflicting commercial interests: Using the data of millions of users to train AI models carries unprecedented risks of exploitation.

4. Geographic bias of laws: Applying laws such as GDPR to data stored in space raises complex enforcement challenges.

Unless an urgent and comprehensive international regulatory framework is developed, space—which was the last frontier of freedom—may become a new arena for privacy violations on a scale never witnessed on Earth.

Sources and References

1. Fast Company. (2026). Is Elon Musk losing the space cellphone war?

2. Legacy IAS Academy. (2026). Space Internet — Satellite Broadband – UPSC Notes.

3. The Verge. (2026). Amazon’s Starlink competitor Leo gets a new date.

4. University of Waterloo, SpaceSec 2024. Connecting the Dots in the Sky: Website Fingerprinting in Low Earth Orbit Satellite Internet. Singh, P., Barradas, D., Elahi, T., & Limam, N.

5. IEEE International Conference on Data Science in Cyberspace. Challenges of Satellite Internet Security. Zhang, X.

6. Bloomberg Law. (2025). With Low-Earth Orbit Data Centers, Privacy Risks Go Beyond Space.

7. Kluwer Law Online. (2026). On-Orbit Data Processing: Application of Data Privacy Laws Beyond Earth.

8. Starlink Global Privacy Policy. (Updated January 15, 2026).

9. Newcastle Herald / Reuters. (2026). Musk’s Starlink to allow consumer data to train AI.

10. Inside Global Tech. (2025). European Commission announces proposal for the first EU Space Act.