""

Security Authorization for 5G Radio Stations

30/09/2025

The mobile network known as fifth generation or 5G has given mobile and wireless communications a new dimension by integrating computing into the network, enabling the creation of virtual networks, offering low latency and providing services of enormous added value for society in areas such as medicine, transport and energy. For this reason, the European Union and Spain have promoted the rapid deployment of networks and the implementation of projects demonstrating their usefulness for different sectors.


However, despite the benefits of 5G mobile networks, the safe use of these networks and services requires a high level of protection, as specific risks can arise. The interconnected nature of the 5G network infrastructure, as well as its transnational nature and the cross-border dimension of the threats, means that any vulnerability or security incident can have implications for essential functions for the economy and society, even affecting the European Union as a whole.

These new security risks specific to 5G mobile communications were addressed through Royal Decree-Law 7/2022 of March 29. This Royal Decree-Law establishes that the National Security Scheme for 5G networks and services will carry out a comprehensive and global treatment of the security of 5G networks and services.

In the pursuit of this comprehensive treatment of the security of 5G networks and services, Royal Decree 443/2024 of April 30 was published, approving the National Security Scheme for 5G networks and services (ENS5G) and recognizing the existence of the 5G Security Operations Center, under the Ministry for Digital Transformation and the Civil Service.

As a result of what has been described above, the Ministry for Digital Transformation and the Civil Service has established a 5G Radio Station Security Authorization Procedure, which affects both telecommunications operators and 5G corporate users that have been granted rights to use the public radio domain to install, deploy or operate a private 5G network or provide 5G services for professional purposes or in self-provisioning. This procedure defines a new security authorization, which will need to be requested before putting into service any 5G station in the national territory.

The application will be made telematically in the portal enabled for this purpose:
https://sedediatid.digital.gob.es/es-es/procedimientoselectronicos/Paginas/detalle-procedimientos.aspx?IdProcedimiento=267
and it must include the administrative data and the geographical location of the station, as well as the supplier or suppliers of the 5G equipment.

On the other hand, operators must submit to the Ministry for Digital Transformation and Civil Service, before October 1 of each year, information on the status of implementation of the diversification strategy in the supply chain or when required to do so by the Ministry for Digital Transformation and Civil Service whenever there have been significant changes in the 5G infrastructures used or 5G services provided that lead to believe that the security measures adopted may have lost effectiveness.

In such diversification strategy, the operator shall address the different articles defined in Royal Decree 443/2024 related to the security of 5G stations:

+ Article 16. Determination of locations where equipment from suppliers classified as high risk may not be installed.
+ Article 17. Diversification in the supply chain.
+ Article 22. Common measures for safety management.
+ Article 23. Security management by 5G operators.

Security authorization for 5G radio stations is therefore a regulatory requirement aimed at mitigating risks arising from 5G infrastructure and services.

Discover

our news