Complex law. Clear action.

Reviewed by Oleksandr Sobovyi, Founder & CEO of CORVUS AI — editorial responsibility statement below.

On 20 October 2026, the European Commission and the High Representative presented Joint Communication JOIN(2026) 100 final, Europe’s Northern Neighbourhood: A New Strategy for the Arctic.

Security is the first of the strategy’s four priorities, alongside climate, economic security and opportunities for Arctic communities. The Maritime Security Hub is one of its flagship security initiatives.

The document should not, however, be read as the announcement of a dedicated procurement programme for maritime autonomous systems. It establishes a political framework for developing a Member State-led information-sharing architecture. It does not define a separate budget, procurement procedure or supplier eligibility regime for the Hub.

What has been adopted, and what is its legal effect?

The Joint Communication is a policy instrument issued by the Commission and the High Representative. It does not itself establish binding obligations for private companies, appropriate funding for each initiative or open calls for proposals.

The strategy builds on the EU’s 2021 Arctic policy and introduces the “Northern Neighbourhood” as a framework for structured cooperation between the EU and like-minded Arctic partners. That cooperation is intended to complement existing structures, including the Arctic Council.

For companies and research organisations, the practical significance lies in the instruments and projects through which future demand may develop. These should be considered separately.

Four points that matter from a legal and commercial perspective

1. The Hub is a Member State-led information-sharing architecture

The strategy provides for the development of a Maritime Security Hub in line with the EU Action Plan on Cable Security. The EU intends to work with interested Member States and partners to facilitate information sharing from national and EU sources, “from seabed to space.”

Implementation is expressly described as Member State-led, with possible coordination with like-minded partners and complementarity with NATO activities.

The first step is an Arctic Cable Hub intended to support the monitoring, protection and repair of submarine cables in the North Atlantic and Arctic. It is expected to draw on the experience of regional cable hubs in the Baltic and Mediterranean and to involve cooperation with the private sector.

The wider Maritime Security Hub would integrate information relating to:

• the security of maritime infrastructure and cable landing sites;

• shadow-fleet vessel tracking;

• illegal, unreported and unregulated fishing;

• marine pollution;

• search and rescue;

• navigational safety; and

• maritime and aerial domain awareness.

The commercial conclusion must remain qualified. The strategy does not identify the contracting authorities, procurement routes or allocation of responsibilities for future Hub-related acquisitions. Opportunities may emerge through national procurement, EU instruments, jointly financed projects or cooperation with infrastructure operators. The document does not yet determine which of these routes will be used.

2. Data governance is one of the most important legal layers

The Hub is expected to draw on existing and future sources and systems, including:

• Copernicus Earth observation data;

• Galileo navigation services;

• the Common Information Sharing Environment;

• MARSUR, supported through a European Defence Agency-led project;

• European Maritime Safety Agency systems and services; and

• Long-Range Identification and Tracking data.

The EU is also developing an Earth Observation Governmental Service for security and defence decision-making. A dedicated Arctic pilot for maritime domain awareness is planned for 2027.

An important distinction should be maintained. General Copernicus data covering the Arctic is freely available. Specialised Copernicus security and operational services are accessible to EU Member States and EEA countries, including Norway and Iceland. They are therefore subject to a different access environment from the ordinary open-data layer.

The strategy does not define the detailed rules that will govern private suppliers’ access to sensitive information, data classification, cybersecurity, onward sharing, data quality or contractual responsibility. These requirements are likely to become material when implementing arrangements, technical specifications and procurement documentation are developed.

3. “Dual-use” is used as a policy concept, not as an export-control classification

The strategy promotes Arctic-ready, dual-use and multi-purpose capabilities. It also refers to strategic dual-use infrastructure in connection with the Critical Entities Resilience Directive and the proposed Military Mobility Regulation.

The Communication does not classify particular technologies under Regulation (EU) 2021/821, which establishes the Union regime for the control of exports, brokering, technical assistance, transit and transfer of dual-use items.

Consequently, the stra ’s use of the term “dual-use” does not determine the export-control status of a product. Arctic autonomous platforms, sensors, navigation systems, communications technology, software and related technical data require a separate classification based on their characteristics, destination, end user and intended end use.

4. 4. Autonomous systems are recognised, but no dedicated call has been announced

The strategy identifies unmanned systems capable of operating in polar conditions as potential tools for:

• access to remote areas;

• research;

• search and rescue;

• real-time monitoring; and

• protection of critical infrastructure.

It proposes using existing instruments and platforms, including the EU Action Plan on Drone and Counter-drone Security and the forthcoming Drone Industrial Forum, to support the development and operational use of such technologies.

The European Defence Fund already supports ten projects addressing Arctic requirements, with approximately EUR 260 million allocated to areas including aircraft capable of operating in severe environments, specialised textiles and over-the-horizon sensing.

For icebreakers, the strategy provides for mapping operational needs, technical specifications and European manufacturing capacity through the EU Industrial Maritime Value Chains Alliance. It also envisages developing options for joint procurement, pooling and sharing. These are planned avenues for further work, rather than adopted procurement decisions.

Limits of this assessment

This analysis is based on JOIN(2026) 100 final and the European Commission’s official Arctic Strategy materials available on 21 October 2026.

The Communication does not determine the final legal form of the Maritime Security Hub. It may be implemented through administrative arrangements, national measures, EU instruments, contractual structures or a combination of these. The reference to Member State-led implementation does not, by itself, establish where future contracts will be awarded or exclude the Commission and EU bodies from operational or financing roles.

The reference to the 2028–2034 Multiannual Financial Framework in the Communication concerns the future development of the EU’s partnership with Greenland. The document does not make an equivalent, dedicated budget commitment for the Maritime Security Hub.

The strategy does not establish a specific participation track for Ukrainian organisations. Their eligibility will depend on the rules of each relevant programme, project, consortium or procurement procedure.

What companies should do now

Companies working in maritime autonomy, cable security, satellite services and Arctic surveillance should consider the following steps:

1. Monitor implementation rather than preparing for a call that has not been announced. Relevant developments include the Drone Industrial Forum, European Defence Fund work programmes, the 2027 Arctic surveillance pilot, implementation of the Arctic Cable Hub and future work on icebreaker procurement.

2. Engage with participating states and institutional stakeholders. Denmark, Finland and Sweden are the EU’s Arctic Member States. Norway and Iceland are closely integrated partners through the EEA. Companies should identify the authorities and infrastructure operators likely to participate and examine their supplier-security, ownership and clearance requirements.

3. Prepare a product data map. Identify what data the system collects, generates and derives; where it is processed; who owns it; how it may be shared; and whether its formats can interoperate with CISE, EMSA systems or other relevant architectures.

4. Complete export-control screening before consortium negotiations. Classification should cover the platform, sensors, communications equipment, software, technical data and possible transfers of technology.

5. Assess eligibility instrument by instrument. Organisations established outside the EU, including Ukrainian organisations, should separately verify eligibility for European Defence Fund projects, space programmes, research instruments and national procurement procedures.

Recommendation

The new Arctic Strategy should be treated as a roadmap for the development of future capabilities and demand. It provides a clear political direction, but it does not yet provide a complete procurement map.

Companies should use the implementation period to establish their regulatory position, data-governance model, export-control classification and relationships with prospective public and private partners. These preparations will be more valuable than attempting to anticipate a procurement procedure whose legal form, financing and timetable have not yet been defined.

Disclaimer

This article has been prepared by CORVUS AI for general informational and educational purposes only. It is intended to make complex legal and regulatory developments easier to understand.

It does not constitute legal advice and does not create a professional adviser–client relationship. The information should not be relied upon as a substitute for advice based on the specific facts, circumstances and applicable law relevant to your organisation or project.

The article reflects our understanding of the law and regulatory framework as of the date of publication. Legislation, case law, regulatory guidance and administrative practice may subsequently change. While reasonable care has been taken in preparing this article, CORVUS AI does not warrant that the information is complete or remains current after the date of publication. We do not undertake to update this content.

To the fullest extent permitted by applicable law, CORVUS AI excludes liability for loss arising from reliance on this article. Nothing in this article constitutes an offer or solicitation to provide regulated legal services in any jurisdiction where doing so would be unlawful.

AI-assisted preparation: This article was prepared with the assistance of AI tools. Its legal analysis, conclusions and final text were subject to human review and editorial control and were reviewed and approved prior to publication by Oleksandr Sobovyi, Founder & CEO of CORVUS AI. CORVUS AI retains editorial responsibility for the published content.

For advice tailored to your organisation, project or specific circumstances, please contact CORVUS AI.

Oleksandr Sobovyi
Founder & CEO, CORVUS AI
PhD in International Law · Honoured Lawyer of Ukraine
Former Director of the Legal Department of the Ministry of Defence of Ukraine
Former Director of the Department of National Security of the Ministry of Justice of Ukraine

CORVUS AI · Rotterdam, the Netherlands · contact@corvusai.eu

Selected official sources

• Joint Communication JOIN(2026) 100 final — Europe’s Northern Neighbourhood: A New Strategy for the Arctic

• European Commission — EU Arctic Strategy: overview and flagship projects

• Joint Communication JOIN(2021) 27 final — A stronger EU engagement for a peaceful, sustainable and prosperous Arctic

• Regulation (EU) 2021/821 — EU dual-use export-control regime