Where Space Data Lands. Ground Stations and the Reach of Data Protection Law
During 2026 the conversation about privacy in outer space has turned toward orbit itself, as proposals for orbital data centres have led scholars, practitioners and the European Parliament’s foresight service to ask whether Article VIII of the Outer Space Treaty, which keeps a space object under the jurisdiction and control of its State of registry, could make that State a digital flag state for the data processed on board. That debate deserves attention, although it overshadows a more immediate fact, which is that almost all personal data collected or relayed by satellites still comes down to Earth through an antenna located in a specific country and subject to a specific data protection law. Under the Ground Station as a Service model, in which operators book antenna passes on demand and receive the data directly in the cloud, a single satellite may land data in several jurisdictions in one day, so the question of which law applies, and to whom, is increasingly answered at the antenna, and Ecuador, whose equatorial position makes it an attractive site for ground infrastructure, offers a useful case study because its law and the GDPR reach different results for the same downlink.
13 October 2026 · HEKA LAW FIRM · Ecuador
