Data Protection for Telecoms Operators in Iraq

Data Protection for Telecoms Operators in Iraq Telecoms operators occupy a unique position in the data protection landscape: by the nature of their services, they collect, process, and retain vast quantities of sensitive personal data call records, location data, browsing history, messaging data, and financial information. For Iraqi MNOs and ISPs, managing this data responsibly is both a legal obligation and a commercial imperative. Consumers, enterprise clients, and international partners increasingly scrutinise operators’ data governance practices. While Iraq’s data protection legal framework is still developing, operators face a matrix of obligations arising from CMC regulations, constitutional privacy protections, national security requirements, and for operators serving international customers or operating across borders extraterritorial application of foreign data protection laws. This article examines the data protection obligations of Iraqi telecoms operators and the steps needed to build a compliant data governance programme. Iraq’s Developing Data Protection Framework Iraq does not yet have a comprehensive standalone data protection law equivalent to the European Union’s General Data Protection Regulation (GDPR) or similar legislation in other jurisdictions. However, data protection and privacy obligations for Iraqi telecoms operators arise from multiple sources: the Constitution of Iraq (2005) Article 17 protects the right to privacy of correspondence and communications, establishing a constitutional basis for data privacy; CMC licensing conditions CMC licences impose specific data protection and privacy obligations on telecoms operators, including restrictions on the use of subscriber data; sector-specific regulations, CMC regulations address subscriber data management, billing data retention, and consumer privacy; national security laws requiring operators to retain specified communications data and provide access to security authorities; and international standards operators seeking to serve international enterprise customers or maintain international partnerships are expected to meet internationally recognised data governance standards. What Data Iraqi Telecoms Operators Collect MNOs and ISPs in Iraq collect extensive personal data in the course of providing services, including: subscriber registration data, name, national identification number, address, and contact information collected at the time of SIM registration; call data records, records of calls made and received, including calling and called numbers, call duration, time, and the cell sites used; location data, records of the cell sites to which subscribers’ handsets are connected, enabling the operator to track subscribers’ approximate geographic locations continuously; internet usage data, records of websites visited, data volumes, and application usage for broadband subscribers; billing data financial transaction records, payment information, and credit data; device identifiers IMEI numbers and other device identifiers; and in some cases content data where operators provide messaging, email, or other communication services. CMC Data Protection Requirements CMC licence conditions and regulations impose specific data protection obligations on Iraqi telecoms operators, including: subscriber data confidentiality, operators must not disclose subscriber personal data to third parties without the subscriber’s consent or lawful authority; purpose limitation subscriber data collected for one purpose (e.g. billing) must not be used for incompatible purposes (e.g. selling to third-party marketers) without subscriber consent; data security, operators must implement appropriate technical and organisational security measures to protect subscriber data against unauthorised access, loss, or destruction; data retention, operators must retain specified categories of subscriber and call data for defined periods as required by CMC and national security regulations; and consumer rights subscribers must be provided with access to their own data and the right to correct inaccurate information. National Security Data Requirements Iraqi telecoms operators are subject to national security data requirements that represent some of the most sensitive and technically demanding obligations in their compliance frameworks. Key national security data obligations include: lawful interception, operators must implement technical capabilities enabling authorised security agencies to intercept the content of communications in real time pursuant to lawful process; communications data retention, operators must retain records of who communicated with whom, when, for how long, and from where, for periods specified in applicable regulations; expedited response obligations operators must respond to lawful requests for retained data within specified timeframes; and security of retained data retained data must be protected against unauthorised access and must be accessible only to authorised security agency personnel. These requirements require significant technical investment in lawful interception infrastructure and secure data management systems. SIM Registration Requirements Iraq, like most Middle Eastern countries, requires mandatory SIM registration, all mobile subscribers must register their SIM cards with their national identification details before they can receive services. SIM registration creates a large database of subscriber identity information that operators must manage responsibly. Key SIM registration data protection obligations include: accurate identity verification, operators must verify subscriber identity against reliable identification documents; secure database management, SIM registration databases must be secured against unauthorised access and data breach; compliance with retention requirements SIM registration data must be retained for specified periods; and access control, SIM registration data must be accessible only to authorised personnel and to security authorities pursuant to lawful process. Building a Telecoms Data Protection Programme Iraqi telecoms operators should implement a comprehensive data protection programme including: data mapping identifying all personal data collected, processed, and retained across the operator’s systems; legal basis assessment establishing the legal basis for each data processing activity; privacy notices providing subscribers with clear, accessible information about data processing practices; data security measures implementing technical and organisational security controls appropriate to the sensitivity of the data processed; incident response establishing procedures for detecting, containing, and reporting data breaches; vendor management ensuring third-party suppliers that process subscriber data are subject to appropriate contractual data protection obligations; and staff training ensuring all relevant staff understand their data protection obligations. Operators serving enterprise customers or operating internationally should align their programmes with internationally recognised standards including ISO 27001. How Etihad Law Firm Assists Etihad advises Iraqi telecoms operators on data protection and privacy compliance, reviewing CMC licence conditions relating to data protection, advising on lawful interception and data retention compliance, drafting privacy notices and data processing agreements, assisting in data breach response, and representing operators in regulatory proceedings relating to data protection matters.
Joint Ventures in Iraqi Telecoms

Joint Ventures in Iraqi Telecoms Joint ventures between foreign telecoms operators and Iraqi partners are among the most common structures for international market entry in Iraq’s telecoms sector. The combination of a foreign operator’s technology expertise, capital, and international experience with a local partner’s regulatory relationships, market knowledge, and operational presence can create powerful commercial synergies. However, joint ventures also introduce significant legal complexity aligning the interests of partners with different objectives, legal systems, and risk appetites requires careful structuring from the outset. This article examines how to structure joint ventures effectively in the Iraqi telecoms context, addressing the key legal terms, CMC requirements, and dispute resolution considerations that determine whether a JV succeeds or founders. Why Joint Ventures Are Common in Iraqi Telecoms Several factors make joint ventures the preferred structure for many foreign operators entering Iraq. Regulatory navigation local partners with established relationships with the CMC and Ministry of Communications can significantly ease the licensing process. Market knowledge a local partner understands the Iraqi consumer market, commercial environment, and competitive dynamics that a foreign entrant may lack. Operational presence local partners may bring existing infrastructure, distribution networks, and commercial relationships that reduce the foreign operator’s time to market. Political relationships in a market where government relationships are commercially important, a well-connected local partner provides access that would take years for a foreign operator to develop independently. Security management local partners have experience navigating Iraq’s security environment, which is of significant practical importance for a network operating company. Choosing the Right Local Partner The selection of the right local partner is the most consequential decision in any Iraqi JV. Key criteria for evaluating potential local partners include: financial standing the partner must have adequate financial resources to contribute its share of JV capital and fund ongoing operational requirements; regulatory clean record a partner with a history of regulatory violations or CMC disputes creates immediate compliance risk for the JV; beneficial ownership transparency the partner’s ultimate beneficial owners must be identifiable and must not include sanctioned parties or individuals who would trigger AML or reputational concerns; complementary capabilities the partner should bring genuine market value rather than merely satisfying a local ownership requirement; and governance alignment the partner must share the foreign operator’s commitment to transparent, compliant, and commercially disciplined management. Structuring the JV The legal architecture of a telecoms JV in Iraq involves: the JV company typically incorporated in Iraq as a limited liability company, with the CMC licence held in its name; the shareholders’ agreement the foundational document governing the relationship between JV partners, addressing governance, funding, exit, and dispute resolution; the licence and spectrum arrangements whether held directly by the JV or through a licensed subsidiary; infrastructure arrangements ownership and access arrangements for network infrastructure; technology licence if the foreign operator provides technology or systems to the JV, a separate technology licence agreement is required; and management services agreement addressing the provision of management, technical, and commercial expertise by the foreign operator to the JV. Key Terms of the Shareholders’ Agreement The shareholders’ agreement (SHA) is the most critical document in any telecoms JV. Essential terms for Iraqi telecoms JVs include: governance board composition, voting thresholds for ordinary and reserved matters, and management authority; reserved matters decisions requiring supermajority or unanimous shareholder approval (typically including licence-related decisions, significant capital expenditure, financing, and related party transactions); funding obligations — each partner’s obligation to contribute capital and fund the JV’s operational requirements; transfer restrictions lock-up periods during which partners cannot sell their shares, rights of first refusal on proposed share transfers, drag-along and tag-along rights; CMC change of control protections mechanisms to ensure share transfers comply with CMC licensing requirements; and exit provisions buyout mechanisms, compulsory sale triggers, and valuation methodologies. Deadlock and Dispute Resolution Deadlock the inability of JV partners to reach agreement on material decisions is one of the most significant risks in any joint venture, and in Iraqi telecoms it can have immediate operational consequences. The SHA should include carefully considered deadlock resolution mechanisms: escalation deadlocked board decisions are escalated to senior executives of each partner for resolution; expert determination for technical or commercial deadlocks, appointment of an independent expert to determine the appropriate course of action; buyout options either partner may trigger a buy-sell (shoot-out or Russian roulette) mechanism giving one partner the right to buy the other’s stake at a price set by the triggering party; and winding up as a last resort, dissolution of the JV. Dispute resolution for JV disputes typically specifies international arbitration ICC or LCIA with a neutral seat outside Iraq. Protecting the Foreign Operator’s Investment Foreign operators in Iraqi telecoms JVs should implement the following investment protection measures: political risk insurance coverage from MIGA or commercial political risk insurers protecting against expropriation, currency inconvertibility, and political violence; investment treaty protection assessing whether Iraq has a bilateral investment treaty (BIT) with the foreign operator’s home country providing investor protections; robust SHA exit mechanisms ensuring the SHA provides workable exit paths if the JV relationship breaks down; escrow arrangements requiring the local partner to place a portion of its JV funding commitment in escrow to provide security for its obligations; and CMC relationship maintaining the foreign operator’s direct relationship with the CMC rather than relying solely on the local partner to manage regulatory interactions. How Etihad Law Firm Assists Etihad advises foreign operators and Iraqi partners on telecoms JV structuring, SHA drafting and negotiation, CMC regulatory requirements for JV structures, due diligence on potential JV partners, investment protection arrangements, and dispute resolution in JV breakdown situations. We have specific experience in cross-border telecoms joint ventures involving Iraqi entities.
Spectrum Allocation in Iraq

Spectrum Allocation in Iraq Fifth-generation mobile technology 5G represents the most significant technological transition in mobile communications since the introduction of mobile broadband. For Iraqi MNOs, 5G is both a regulatory obligation and a commercial opportunity: an obligation because the CMC is developing a framework for 5G spectrum licensing that will create coverage requirements for the transition; and an opportunity because 5G will enable new services, ultra-fast broadband, Internet of Things connectivity, and enterprise private networks that can drive revenue growth and strengthen operators’ market positions. Preparing for 5G licensing in Iraq requires action now on spectrum strategy, network architecture, regulatory engagement, and investment planning. This article examines the 5G landscape in Iraq and what operators must do to be ready. 5G Licence Requirements Based on international precedents and the CMC’s developing 5G policy, operators should expect 5G licences or spectrum assignments to include: coverage obligations requirements to deploy 5G in specified geographic areas within defined timelines, likely starting with major cities; minimum investment commitments, financial obligations for network rollout; technology requirements, technical standards for 5G network deployment; spectrum efficiency obligations, requirements to utilise assigned spectrum efficiently; neutral host obligations requirements to provide 5G connectivity to enterprise customers on open terms; and annual reporting detailed reporting to the CMC on 5G coverage progress, network performance, and service adoption. The CMC may conduct a competitive spectrum assignment process auction or beauty contest for the primary 5G bands. 5G Infrastructure Requirements 5G deployment requires fundamental changes to network infrastructure that Iraqi MNOs must plan for in advance. Key infrastructure requirements include: densification 5G’s higher frequency bands have shorter range, requiring a denser network of base stations potentially five to ten times more sites than 4G; small cell in addition to macro base stations, 5G requires deployment of small cells on street furniture, buildings, and indoor locations; fibre backhaul 5G’s ultra-high data speeds require fibre backhaul connectivity to base stations, a major infrastructure challenge in Iraq where fibre penetration is limited; core network evolution operators must upgrade their core networks to a cloud-native 5G core architecture; and power solutions each additional base station requires power, exacerbating Iraq’s electricity supply challenges and creating demand for solar and battery solutions. Spectrum Refarming for 5G Before receiving new 5G spectrum assignments, Iraqi MNOs can accelerate 5G readiness by refarming their existing spectrum holdings. Spectrum refarming involves deploying 5G technology in frequency bands currently used for 2G or 3G services, as users migrate to 4G and 5G capable devices. Key bands suitable for refarming in the Iraqi market include: 900 MHz currently used for 2G GSM, refarming for 5G low-band provides excellent coverage; 1800 MHz currently used for 4G LTE in some markets, refarming for 5G mid-band provides urban capacity; and 2100 MHz, currently used for 3G WCDMA and 4G LTE, refarming for 5G improves efficiency. Spectrum refarming in Iraq requires CMC approval, operators must notify the CMC and obtain permission before changing the technology deployed on assigned spectrum. Enterprise 5G: Private Networks and New Revenue One of the most significant commercial opportunities presented by 5G in Iraq is the enterprise private network market. Industries including oil and gas, manufacturing, logistics, and construction can deploy dedicated 5G networks on their premises enabling applications including industrial automation, remote monitoring, and connected machinery. In Iraq, the oil and gas sector presents a particularly significant opportunity given the extensive operations of international energy companies requiring reliable, high-bandwidth connectivity. MNOs should engage with enterprise customers early on 5G private network opportunities and ensure their 5G spectrum licences permit the provision of private network services. How Etihad Law Firm Assists Etihad advises MNOs on 5G spectrum strategy and licensing, assists in engaging with the CMC on 5G policy development, advises on 5G licence conditions and infrastructure obligations, and provides regulatory advice on spectrum refarming requirements. We also advise on the legal structuring of 5G infrastructure sharing and enterprise private network arrangements.
Infrastructure Sharing Contracts in Iraq

Infrastructure Sharing Contracts in Iraq Infrastructure sharing contracts in Iraqi telecoms go beyond simple tower co-location, they span a spectrum of arrangements from basic passive site sharing to sophisticated active network sharing arrangements that can fundamentally reshape operators’ competitive positions. As Iraq’s mobile market matures and as the economics of 5G network deployment become increasingly challenging, deeper forms of infrastructure sharing are attracting growing attention from operators, investors, and CMC. This article examines the full range of infrastructure sharing arrangements available in the Iraqi market, the distinct legal framework applicable to each, and the critical contract terms that operators must get right. Infrastructure Sharing Spectrum Infrastructure sharing in telecoms covers a range from the most basic passive arrangements to deep active network integration. The principal forms, in order of increasing depth, are: site sharing, multiple operators locating equipment on the same physical site, sharing only land and possibly power supply; passive infrastructure sharing, sharing towers, enclosures, power systems, and site access without sharing any electronic network elements; mast head amplifier sharing, sharing the mast-top transmission equipment while each operator retains its own spectrum and radio equipment; radio access network (RAN) sharing, operators share the active RAN components, antennas, radio units, and baseband processing while maintaining separate core networks; spectrum sharing , operators share spectrum assignments, enabling more efficient use of scarce frequency resources; and multi-operator core network (MOCN) sharing the deepest form of active sharing, where operators share both the RAN and elements of the core network. CMC Requirements for Infrastructure Sharing The CMC has developed a regulatory framework for infrastructure sharing that distinguishes between different forms of sharing and their competitive implications. The CMC’s key regulatory requirements include: notification, operators entering into significant infrastructure sharing arrangements must notify the CMC, and in some cases seek prior approval; non-discrimination operators with significant market power in infrastructure must offer sharing on equivalent terms to all requesting operators; competition assessment, CMC assesses infrastructure sharing arrangements for their impact on competition, particularly whether deep active sharing arrangements constitute a merger that requires separate regulatory review; and technical standards, CMC sets technical standards for shared infrastructure to ensure network quality and interoperability are maintained. Passive Sharing Contracts Passive infrastructure sharing contracts in Iraq must address the following essential terms: scope of shared infrastructure precisely defining which passive elements are included; technical specifications, tower loading capacity, power supply specifications, and environmental controls; access rights when and how tenant operators can access the site; maintenance responsibilities and service levels who maintains shared elements and what performance standards apply; interference management, procedures for identifying and resolving interference between operators’ equipment; upgrade and modification rights the process for operators to add or modify their equipment; cost sharing for common infrastructure, how shared costs (power, maintenance, security) are allocated between the parties; and force majeure provisions addressing infrastructure damage from extreme weather, civil unrest, or other events relevant to the Iraqi security environment. Active RAN Sharing Active RAN sharing arrangements introduce significantly greater legal and competitive complexity than passive sharing. Key legal issues in active RAN sharing include: spectrum assignment, each operator in a RAN sharing arrangement typically retains its own spectrum assignment, but the sharing arrangement must ensure spectrum is used in a way that complies with CMC licence conditions for each operator; service differentiation, sharing contract must allow each operator to differentiate its service quality, pricing, and customer experience on the shared network; competitive ring-fencing, information barriers must be established to prevent competitively sensitive operational data from being shared between competing operators; liability, responsibility for network outages and performance failures affecting both operators’ customers must be clearly allocated; and exit provisions, the conditions under which each operator can exit the sharing arrangement and the consequences for the other operator. MVNO Agreements Mobile Virtual Network Operators (MVNOs) access mobile network infrastructure under commercial agreements with licensed MNOs, without holding their own spectrum or operating their own radio access network. MVNO arrangements represent a distinct form of infrastructure access that is governed by both CMC licence requirements and the commercial terms of the host MNO agreement. Key legal issues in Iraqi MVNO arrangements include: CMC licensing requirements for the MVNO, what licence category is required; the host MNO’s obligations to provide wholesale access whether the CMC mandates MVNO access as a regulatory obligation; commercial terms interconnection rates, roaming, and service quality; and the MVNO’s rights in the event of the host MNO’s licence suspension or revocation. Dispute Resolution Infrastructure sharing disputes in Iraq arise most commonly in relation to: fee disputes disagreements about the calculation or adjustment of sharing fees; access disputes, the host operator’s failure to provide the agreed level of access; maintenance failures, disputes about whether the host has met its maintenance obligations; interference disputes, disagreements about the cause and responsibility for radio interference; and termination disputes, challenges to the validity of purported termination notices. Parties should include in their sharing agreements: a multi-tier dispute resolution clause beginning with escalation to senior management; CMC referral explicitly recognising each party’s right to refer access disputes to the CMC; and arbitration as the final tier, specifying the seat, institution, and governing law. How Etihad Law Firm Assists Etihad advises MNOs and infrastructure providers on the full range of infrastructure sharing arrangements in Iraq from passive site sharing agreements to complex active RAN sharing arrangements and MVNO commercial agreements. We advise on CMC notification and approval requirements, draft and negotiate sharing contracts, and represent clients in infrastructure sharing disputes.
Tower Sharing Agreements in Iraq

Tower Sharing Agreements in Iraq Tower sharing the arrangement by which multiple mobile network operators share the same physical telecoms infrastructure is an increasingly important feature of Iraq’s telecoms landscape. By sharing towers, base station equipment enclosures, and power systems, operators can significantly reduce capital expenditure on network rollout, improve coverage in rural and underserved areas, and contribute to the efficient use of Iraq’s limited physical infrastructure resources. For MNOs operating in Iraq, understanding the legal framework for tower sharing, the CMC’s regulatory position, and the key terms of tower sharing agreements is essential knowledge for network development teams and their legal advisers. Why Tower Sharing Matters in the Iraqi Market Iraq’s telecoms infrastructure landscape presents specific characteristics that make tower sharing commercially attractive. The country’s significant geographic size, challenging terrain in certain regions, and the cost of deploying power infrastructure in areas with unreliable electricity supply all increase the cost of network rollout. Iraq’s history of infrastructure damage and ongoing reconstruction means that existing tower infrastructure is unevenly distributed. For MNOs with coverage obligations under their CMC licences particularly for rollout into rural governorates, tower sharing with an established operator or tower company can be the most cost-effective path to meeting regulatory requirements. Tower sharing also reduces the visual and environmental impact of telecoms infrastructure a consideration of increasing importance in urban planning contexts. CMC’s Regulatory Position on Tower Sharing The CMC’s regulatory framework supports infrastructure sharing as a mechanism for improving coverage and reducing network deployment costs. CMC regulations require operators with significant market power in tower infrastructure typically the incumbent operator or major tower company to provide access to their passive infrastructure on fair, reasonable, and non-discriminatory (FRAND) terms. The CMC has authority to: mandate infrastructure sharing where an operator refuses reasonable access requests; set reference access terms where commercial negotiations fail; adjudicate disputes between operators regarding infrastructure access; and impose conditions on tower sharing arrangements to protect competition. Operators should be aware that the CMC’s involvement in tower sharing disputes can be invoked by any party, providing a regulatory backstop to commercial negotiations. Passive vs Active Infrastructure Sharing Tower sharing in Iraq encompasses different forms of infrastructure sharing that must be clearly distinguished in any agreement. Passive infrastructure sharing the most common form involves sharing physical assets including: the tower structure itself; the base station enclosure or shelter; power supply and backup power systems (generators and batteries); security fencing; access roads; and site leases with the underlying landowner. Active infrastructure sharing a more advanced form involves sharing electronic components of the network including: radio access network equipment (RAN sharing); spectrum addressed separately in spectrum sharing arrangements; and backhaul, the transmission links connecting base stations to the core network. The CMC’s regulatory requirements and the commercial terms differ significantly between passive and active sharing, and the distinction must be clearly reflected in any sharing agreement. Key Legal Terms of a Tower Sharing Agreement A well-structured tower sharing agreement in Iraq should address: access rights the precise scope of the infrastructure access being granted, specifying which passive elements are included and the technical parameters; term the duration of the sharing arrangement and renewal provisions; fees, the sharing fees payable by the tenant operator (sharer) to the host operator or tower company, and the basis for fee calculations and escalation; co-location conditions, technical requirements for equipment installation by the sharer, including load specifications and interference management; maintenance responsibilities which party is responsible for maintaining shared passive infrastructure and how costs are allocated; service level agreements, availability and performance commitments for the shared infrastructure; site access procedures, how the sharer’s engineers access the site for installation, maintenance, and emergency response; and termination the circumstances in which either party can terminate the sharing arrangement and the consequences of termination. Underlying Site Lease Every telecoms tower in Iraq is located on land or a building owned by a third party whether a private landowner, a government entity, or a municipality. The underlying site lease between the tower owner and the landowner directly affects the validity and continuity of any tower sharing arrangement. Key issues for sharers to assess include: does the underlying site lease permit sub-licensing of the site to third parties? What is the remaining term of the underlying lease a sharer taking a ten-year sharing arrangement on a site with a two-year lease faces significant exposure; is there a right of renewal in the underlying lease? What are the landowner’s termination rights? These questions require careful due diligence on the underlying site documentation before any sharing arrangement is agreed. Tower Companies in Iraq The Iraqi tower market is in a relatively early stage of development compared to more mature markets where independent tower companies (towercos) own and operate passive infrastructure on a multi-tenant basis. Independent towercos offer significant advantages: professional management of shared infrastructure; standardised sharing terms; and separation of the tower ownership function from network operations. Several tower infrastructure initiatives have been announced in Iraq in recent years, and the model is gaining traction. For MNOs considering tower sharing, the choice between sharing with another MNO and accessing an independent towerco involves different legal, commercial, and competitive considerations. How Etihad Law Firm Assists Etihad advises MNOs, ISPs, and tower companies on tower sharing agreements in Iraq from due diligence on site portfolios and underlying leases to drafting and negotiating sharing agreements, advising on CMC regulatory requirements for infrastructure access, and representing clients in infrastructure access disputes before the CMC.
Telecoms Licence Renewal in Iraq

Telecoms Licence Renewal in Iraq Licence renewal is one of the most strategically significant events in a telecoms operator’s regulatory lifecycle. For Iraqi MNOs and ISPs, approaching licence expiry without careful preparation exposes the operator to the risk of unfavourable renewal conditions, significant licence fee increases, or in the worst case the loss of the licence entirely. The CMC’s renewal process is an opportunity for the regulator to update licence conditions to reflect changes in technology, market conditions, and policy priorities. For operators, it is a moment that demands proactive engagement, robust compliance documentation, and clear negotiating strategy. This article examines the CMC licence renewal process and how operators can best prepare. Why Licence Renewal Matters for Iraqi Operators Telecoms licences in Iraq particularly mobile network operator licences are granted for fixed terms, typically ten to fifteen years. At expiry, the operator must apply for renewal, and the CMC has discretion to: renew the licence on the same terms; renew with modified or additional conditions; impose new financial obligations including revised spectrum fees and licence fees; require additional network investment as a condition of renewal; or decline to renew where the operator has a record of significant non-compliance. The commercial consequences of licence loss or significantly adverse renewal conditions are severe affecting the operator’s ability to serve customers, generate revenue, attract investment, and maintain its market position. Renewal preparation should begin at least two to three years before licence expiry. CMC Renewal Process The CMC licence renewal process typically involves: advance notification, CMC notifies the operator of the approaching licence expiry and the renewal application requirements; renewal application, the operator submits a formal renewal application demonstrating compliance with existing licence conditions and setting out its plans for the renewal period; CMC assessment, CMC conducts a comprehensive review of the operator’s compliance record, technical performance, financial standing, and proposed renewal commitments; negotiation CMC and operator negotiate the conditions for the renewed licence, including any new coverage obligations, quality of service commitments, and financial terms; licence renewal decision, the CMC issues its formal renewal decision, granting or refusing renewal and specifying the conditions of the renewed licence; and renewal fee payment, the operator pays the renewal licence fee. Foundation of Renewal The single most important factor in a successful CMC licence renewal is the operator’s compliance record over the existing licence term. The CMC will scrutinise: coverage obligations whether the operator has met its network rollout commitments under the existing licence; quality of service whether the operator has consistently met CMC quality standards for network availability, call quality, and data performance; regulatory reporting whether all required reports have been submitted to the CMC accurately and on time; consumer complaint performance, the operator’s track record in resolving consumer complaints; financial obligations whether all licence fees, spectrum fees, and regulatory contributions have been paid in full and on time; and cooperation with the CMC, the operator’s responsiveness to CMC enquiries and its conduct in regulatory proceedings. Preparing the Renewal Application A strong renewal application should include: a comprehensive compliance report documenting the operator’s performance against all existing licence conditions throughout the licence term; a technical plan for the renewal period setting out network investment, technology upgrades including 5G roadmap, and coverage expansion; a quality of service improvement plan where performance gaps exist; a consumer protection programme demonstrating commitment to service quality and transparent pricing; a financial plan demonstrating the operator’s capacity to meet renewal licence obligations; and a statement of the operator’s policy commitments for the renewal period. Operators should anticipate CMC scrutiny of their renewal application and prepare supporting documentation for all material claims. Negotiating Renewal Conditions Licence renewal negotiations with the CMC are a critical commercial and legal exercise. Key areas for negotiation include: coverage obligations, new rollout targets for the renewal period, particularly for rural and underserved areas; quality of service standard, updated technical benchmarks reflecting current technology standards; spectrum, the renewal term for any associated spectrum assignments and the spectrum fees applicable; licence fees, the financial terms for the renewal period, including any revenue-based fee adjustments; technology neutrality ensuring the renewed licence permits the operator to deploy current and emerging technologies including 5G without requiring separate regulatory approvals; and transition provisions arrangements for continuity of service during the period between licence expiry and formal renewal completion. Spectrum Renewal For MNOs, spectrum assignments are typically linked to the mobile licence but may have separate renewal processes and timelines. The renewal of spectrum assignments raises distinct issues: spectrum fees for the renewal period, CMC may impose significantly higher spectrum fees at renewal to reflect the scarcity value of spectrum; spectrum refarming; CMC may require changes to spectrum assignments at renewal, including refarming of frequencies to new technologies; spectrum sharing, renewal may create opportunities or obligations to share spectrum with other operators; and new spectrum allocation, renewal negotiations may be linked to the allocation of new spectrum bands including mid-band and high-band 5G frequencies. Operators should address spectrum renewal as an integral part of overall licence renewal strategy. How Etihad Law Firm Assists Etihad advises MNOs and ISPs on all aspects of CMC licence renewal, from early compliance assessment through application preparation, CMC negotiations, and challenge of adverse renewal conditions. We have experience representing operators in renewal negotiations and in administrative and judicial proceedings challenging CMC renewal decisions.
Legal Framework Every Operator Needs to Understand

Legal Framework Every Operator Needs to Understand Operating as a telecoms company in Iraq requires navigating a legal framework that spans primary legislation, regulatory instructions from the CMC, Ministry of Communications policy directives, and national security requirements. For MNOs and ISPs, understanding this framework is not merely an academic exercise, it directly determines what services can be offered, how networks must be built, what data can be collected and retained, and what obligations exist toward regulators, consumers, and security authorities. This article maps the full legal framework governing telecoms operations in Iraq, providing operators with the foundational knowledge needed to operate compliantly and confidently. Primary Legislation: CMC Law No. 65 of 2004 The Communications and Media Commission Law No. 65 of 2004 is the cornerstone of Iraq’s telecoms legal framework. It establishes the CMC as the independent regulatory authority for telecommunications and broadcasting, defines its mandate and powers, and sets out the framework for licensing, spectrum management, and regulatory enforcement. The law grants the CMC authority to: issue, amend, suspend, and revoke licences; manage and assign the radio frequency spectrum; set technical and quality of service standards; resolve disputes between operators and between operators and users; conduct inspections and investigations; and impose penalties for regulatory violations. The CMC Law has been supplemented by numerous CMC regulations and instructions that elaborate the detailed requirements applicable to operators. Ministry of Communications: Policy Role While the CMC exercises independent regulatory authority, the Ministry of Communications retains an important role in Iraqi telecoms governance. The Ministry is responsible for: setting national telecoms policy and strategic objectives; negotiating and implementing international telecoms agreements on behalf of Iraq; representing Iraq in international telecoms organisations including the International Telecommunication Union (ITU); overseeing the state-owned Uruk Telecom and the Iraqi Telecommunications and Post Company; and coordinating with other government ministries on telecoms-related matters. The division of responsibilities between the CMC and the Ministry sometimes creates complexity for operators seeking clarity on regulatory requirements particularly for new or emerging service categories. Iraq’s International Telecoms Obligations Iraq is a member of the International Telecommunication Union (ITU) and is bound by the ITU Constitution, Convention, and Radio Regulations international instruments governing the global management of the radio frequency spectrum and satellite orbits. ITU Radio Regulations govern the use of radio frequencies in Iraq and impose obligations on the CMC regarding frequency coordination with neighbouring countries. Iraq is also party to regional telecoms agreements within the Arab region through membership of the Arab Telecommunication Union. These international obligations shape the CMC’s frequency management decisions and the technical requirements imposed on operators particularly for spectrum bands that require coordination with neighbouring countries. National Security Obligations: Lawful Interception All telecoms operators in Iraq are subject to national security obligations that have significant operational and technical implications. Key requirements include: lawful interception capabilities, operators must implement technical capabilities enabling security and intelligence authorities to intercept communications in accordance with applicable legal authorisations; data retention, operators may be required to retain specified categories of communications data for defined periods to assist law enforcement and national security investigations; security agency access, operators must cooperate with authorised security agencies in accessing communications data pursuant to lawful process; and infrastructure security; operators must implement technical measures to protect their network infrastructure from security threats and unauthorised access. These obligations require significant technical investment and create ongoing compliance responsibilities. Consumer Protection Obligations Iraqi telecoms law and CMC regulations impose a comprehensive set of consumer protection obligations on MNOs and ISPs. Key requirements include: transparent pricing and billing, operators must provide clear, accurate, and transparent information about service pricing and charges; complaint handling, operators must establish effective mechanisms for handling consumer complaints and must resolve complaints within CMC-specified timeframes; service quality, operators must meet minimum quality of service standards set by the CMC for network availability, call quality, and data speeds; number portability; operators must comply with mobile number portability requirements enabling consumers to retain their numbers when switching operators; and fair commercial practices, operators must not engage in misleading or anti-competitive commercial practices. Consumer protection enforcement is an area of increasing CMC focus. Interconnection and Access Obligations CMC regulations impose obligations on telecoms operators particularly those with significant market power to interconnect their networks with other operators and to provide access to their infrastructure on fair and non-discriminatory terms. Key obligations include: interconnection licensed operators must negotiate and conclude interconnection agreements with other licensed operators, enabling calls and data to transit between networks; reference interconnection offer operators with significant market power may be required to publish a reference interconnection offer setting out standard terms and prices; infrastructure access operators with market power in infrastructure may be required to provide wholesale access to their facilities to competing operators; and roaming domestic and international roaming arrangements must comply with CMC requirements. Penalties and Enforcement Under Iraqi Telecoms Law The CMC has broad enforcement powers under CMC Law No. 65 of 2004 and subsequent regulations. Penalties for regulatory violations include: financial penalties, CMC may impose monetary penalties for licence breaches and regulatory violations; licence suspension temporary suspension of the operator’s licence pending remediation; licence revocation permanent revocation of the licence in cases of serious or repeated violations; equipment seizure, seizure of equipment used in unlicensed or non-compliant operations; and criminal referrals, referral of serious violations to the Public Prosecution for criminal proceedings. Operators facing CMC enforcement action have the right to make representations before penalties are imposed and may challenge CMC decisions through administrative and judicial review proceedings. How Etihad Law Firm Assists Etihad advises telecoms operators on their obligations under Iraq’s telecoms legal framework, assists in navigating the division of regulatory responsibilities between the CMC and Ministry of Communications, advises on national security and lawful interception compliance, reviews consumer protection programmes for regulatory compliance, and represents operators in CMC enforcement and dispute resolution proceedings.
What MNOs and ISPs Must Know About CMC Requirements

What MNOs and ISPs Must Know About CMC Requirements Every mobile network operator and internet service provider operating in Iraq must hold a valid licence issued by the Communications and Media Commission (CMC), Iraq’s independent telecoms regulatory authority. Operating without a CMC licence, or in breach of licence conditions, exposes operators to severe regulatory sanctions including suspension and revocation. For MNOs and ISPs already in the Iraqi market, and for new entrants assessing the opportunity, understanding the CMC licensing framework is the essential starting point. This article provides a comprehensive guide to telecoms licensing in Iraq, covering the regulatory framework, licence categories, application requirements, and ongoing compliance obligations. Iraq’s Telecoms Regulator The Communications and Media Commission was established under the Communications and Media Commission Law No. 65 of 2004 as an independent regulatory authority responsible for regulating the telecommunications and broadcasting sectors in Iraq. The CMC operates independently from the Ministry of Communications, which retains a policy-setting role. The CMC’s mandate includes: licensing all operators providing telecoms services in Iraq; managing the radio frequency spectrum; setting and enforcing technical and quality of service standards; resolving disputes between operators and between operators and consumers; and advising the government on telecoms policy. The CMC is governed by a board of commissioners and issues regulatory decisions and instructions binding on all licensed operators. Licence Categories for MNOs and ISPs The CMC issues different categories of licences reflecting the type of service provided. The principal licence categories relevant to MNOs and ISPs include: mobile network operator licence authorising the holder to establish, operate, and provide mobile telecommunications services using assigned spectrum; fixed network operator licence authorising the provision of fixed-line telephony and broadband services; internet service provider licence authorising the provision of internet access services to end users; virtual network operator licence authorising an operator to provide mobile services using a licensed MNO’s network without owning spectrum or infrastructure; and value-added service licence covering specific data, content, and application services delivered over licensed networks. Each licence category carries its own specific conditions, technical requirements, and fee obligations. Licence Application Process Applying for a telecoms licence from the CMC involves a structured process: pre-application engagement, CMC encourages prospective licensees to engage in pre-application discussions to clarify requirements; formal application, submission of a comprehensive application including details of the applicant’s legal structure, ownership, technical plan, business plan, and financial capacity; technical assessment, CMC technical staff assess the applicant’s proposed network architecture, spectrum requirements, and coverage plan; financial assessment, CMC assesses the applicant’s financial capacity to implement the proposed network and meet licence obligations; public consultation for significant new licences, CMC may conduct a public consultation; and licence grant and conditions if approved, CMC issues the licence setting out the conditions applicable to the operator, including coverage obligations, quality of service requirements, and fee obligations. Licence Fees and Financial Obligations CMC licence holders are subject to financial obligations including: initial licence grant fee a one-time fee payable upon grant of the licence, typically a significant amount reflecting the value of the licence; annual licence fee a recurring fee payable throughout the licence term, often calculated as a percentage of the operator’s annual revenue; spectrum fees separate fees payable for the use of assigned spectrum, addressed further in the spectrum articles; universal service fund contributions operators may be required to contribute to a universal service fund financing telecoms infrastructure in underserved areas; and regulatory fees, fees covering the costs of CMC regulatory activities. Non-payment of licence fees constitutes a breach of licence conditions and can result in regulatory enforcement action. Ownership and Foreign Investment Restrictions CMC licensing requirements interact with Iraq’s foreign investment framework. While Iraq’s Investment Law No. 13 of 2006 generally permits foreign investment, the telecoms sector has historically involved specific ownership requirements and government participation considerations. Prospective foreign-owned operators must: comply with any CMC requirements on ownership structure and beneficial ownership disclosure; obtain investment approval from the National Investment Commission where required; ensure that any required local partnership arrangements are properly structured and documented; and comply with national security requirements applicable to communications infrastructure. The specific ownership restrictions applicable to new telecoms licences depend on the licence category and CMC policy at the time of application. Key Licence Conditions for Iraqi MNOs and ISPs CMC licences impose a comprehensive set of conditions on operators, including: network rollout obligations requiring the licensee to build out its network to specified coverage levels within defined timeframes; quality of service standards minimum performance standards for network availability, call quality, and data speeds; interconnection obligations requiring operators to interconnect with other licensed operators on fair and non-discriminatory terms; consumer protection requirements including transparent billing, complaint handling procedures, and service standards; national security obligations including lawful interception capabilities and cooperation with security authorities; reporting obligations periodic technical and financial reporting to the CMC; and compliance with CMC instructions all CMC regulatory decisions and instructions issued during the licence term are binding on the operator. Consequences of Licence Breach Breach of CMC licence conditions exposes operators to a range of regulatory sanctions. The CMC has authority to: issue compliance notices requiring remediation within specified timeframes; impose financial penalties for licence breaches; suspend the operator’s licence preventing it from providing services; revoke the operator’s licence the most severe sanction, effectively ending the operator’s business in Iraq; and refer serious violations to law enforcement authorities. In practice, the CMC typically engages with operators to remedy compliance issues before escalating to formal enforcement action. Operators that identify potential licence breaches should engage proactively with the CMC rather than waiting for regulatory action. How Etihad Law Firm Assists Etihad advises MNOs, ISPs, and prospective new entrants on all aspects of CMC licensing in Iraq. Our services include advising on licence applications, reviewing and negotiating licence conditions, advising on ongoing compliance obligations, assisting in regulatory proceedings before the CMC, and representing operators in licence enforcement matters. We have experience working with both established Iraqi operators and international operators entering the Iraqi market.