Net Neutrality Regulation: A Complete Guide to EU Rules, Enforcement, and Global Perspectives
- , by Paul Waite
- 24 min reading time
Net neutrality ensures that internet service providers treat all internet traffic equally, without discriminating based on content, application, or source. In the European Union, this principle is codified in Regulation (EU) 2015/2120, adopted on 25 November 2015. The regulation represents the cornerstone of open internet access policy across all EU and EEA member states.
The regulation entered into force on 30 April 2016, establishing both the framework for safeguarding the open internet and reforming roaming charges. Rather than exploring abstract theory, this guide focuses on the concrete EU rules, national enforcement cases, and ongoing debates that shape how network operators and service providers must operate. The regulation applies specifically to internet access services and roaming within the European Union, with implementation handled through national regulatory authorities coordinated by the Body of European Regulators for Electronic Communications (BEREC).
Legal Basis: Regulation (EU) 2015/2120 and Related Instruments
Regulation (EU) 2015/2120 carries the official title “laying down measures concerning open internet access and amending Directive 2002/22/EC and Regulation (EU) No 531/2012.” This dual-purpose instrument addresses two major policy objectives:
-
Establishing net neutrality rules for the open internet
-
Abolishing retail roaming charges through the “roam like at home” principle, effective 15 June 2017
The regulation’s core provisions appear in Article 3, which safeguards open internet access, and Article 5, which establishes supervision and enforcement mechanisms including the BEREC Guidelines. Article 3(3) sets the foundational requirement for how broadband providers must handle data traffic:
“Providers of internet access services shall treat all traffic equally, when providing internet access services, without discrimination, restriction or interference, and irrespective of the sender and receiver, the content accessed or distributed, the applications or services used or provided, or the terminal equipment used.”
The connection to Regulation (EU) No 531/2012 on roaming is significant. Regulation 2015/2120 amends key definitions such as “domestic retail price” and introduces fair use policies that govern how roaming providers can manage cross-border usage.
A critical feature of this EU regulation is its direct applicability in all member states. Unlike directives, which require national transposition, this regulation takes immediate effect. However, penalties and certain procedural rules remain subject to national law, creating some variation in enforcement approaches across the European Union.
Core Net Neutrality Obligations Under EU Law
The net neutrality rules under EU law create a comprehensive framework of rights and obligations. Understanding these provisions is essential for anyone operating electronic communications networks or offering online services in the EU market.
End-User Rights Under Article 3(1)
Article 3(1) establishes fundamental end users rights to:
-
Access and distribute information and content
-
Use applications and services of their choice
-
Use terminal equipment of their choice
-
Exercise these rights regardless of the location of the end user, content, application, or service
These rights apply to all lawful content and represent the demand-side foundation of the open internet. The regulation protects end users choice without qualification based on commercial arrangements between content providers and network operators.
Equal Treatment Obligation in Article 3(3)
The equal treatment requirement forms the heart of net neutrality. Internet service providers must handle all network traffic without discrimination based on:
-
Content type or source
-
Application or service category
-
Sender or receiver identity
-
Terminal equipment used
This means that major internet service providers cannot favor their own streaming services over competitors, nor can they slow innovation by throttling newer online companies trying to reach customers.
Reasonable Traffic Management Measures
Not all network management constitutes a violation. The regulation permits reasonable traffic management when measures are:
-
Transparent and clearly communicated
-
Non-discriminatory in application
-
Proportionate to the objective
-
Based on objectively different technical quality of service requirements
For example, managing latency-sensitive applications (like video calls) differently from bulk data transfers (like software updates) can be acceptable if done for genuine technical reasons rather than commercial advantage.
Three Permitted Exceptions
Article 3(3) allows more intrusive traffic management measures in three specific circumstances:
|
Exception |
Description |
Example |
|---|---|---|
|
Legal compliance |
Complying with EU or national law, or court orders |
Blocking illegal content as ordered by public authorities |
|
Network integrity |
Preserving network security and integrity |
Filtering DDoS attacks or malware |
|
Congestion management |
Preventing or mitigating temporary network congestion or impending network congestion |
Temporary throttling during exceptional demand spikes |
These exceptions require that measures be applied only as long as necessary and must not constitute ongoing commercial discrimination.
Specialised Services
The regulation recognizes that some applications require guaranteed quality of service that the best-effort internet cannot provide. Such services—including remote surgery, connected autonomous vehicles, and managed IPTV—can receive traffic prioritization under strict conditions:
-
They must be technically necessary for specific service requirements
-
They must not impair the general quality of internet access services
-
Sufficient capacity must remain for the continued functioning of the open internet
National regulatory authorities monitor whether specialised services genuinely require such optimization or merely serve as vehicles for commercial discrimination.
Transparency, Contracts, and Quality of Service Requirements
Article 4 establishes detailed transparency requirements that govern how internet service providers communicate with customers about their services. These obligations serve both consumer protection and competition goals.
Contract Disclosure Requirements
Internet access service contracts must clearly specify:
-
Minimum speed levels the provider guarantees
-
Normally available speeds under typical conditions
-
Maximum speeds the connection can achieve
-
Advertised speeds used in marketing materials
-
Latency characteristics where relevant
For mobile services, the disclosure must explain how network conditions and location affect these metrics.
Traffic Management Transparency
Contracts and pre-contractual documents must describe:
-
Traffic management practices applied by the provider
-
How these practices may affect service quality and user experience
-
Any potential impact on privacy and data protection
-
Interaction with any specialised services the customer subscribes to
All information must be published on provider websites in clear, comprehensible language accessible to average consumers, not buried in technical annexes.
Speed Monitoring and Verification
Many national regulatory authorities endorse or provide speed measurement tools allowing customers to verify whether actual performance matches advertised claims. When certified NRA measurements reveal significant, recurring discrepancies between promised and delivered speeds, this constitutes non-conformity of the service.
Such non-conformity triggers remedies under national contract and consumer law, which may include:
-
Right to reduce payments
-
Right to terminate the contract without penalty
-
Claims for damages where applicable
These transparency measures function as practical tools for both consumer protection and market supervision, enabling regulators to identify patterns of non-compliance.
Supervision, Enforcement, and Penalties in the EU and UK
Article 5 assigns national regulatory authorities responsibility for monitoring and enforcing compliance with the net neutrality rules. This decentralized enforcement model operates within a coordination framework led by BEREC.
NRA Powers and Duties
National regulators such as Bundesnetzagentur in Germany, ACM in the Netherlands, and (historically within the EU framework and now under UK-specific rules) Ofcom can:
-
Require ISPs to provide detailed information on traffic management practices
-
Obtain data on network capacity and actual performance
-
Investigate complaints from end users and competitors
-
Issue binding decisions requiring changes to practices
-
Impose penalties for violations
BEREC Guidelines
Under Article 5(3), BEREC must issue Guidelines to ensure consistent application of the net neutrality rules across member states. The Guidelines have been updated multiple times:
-
2016: Initial Guidelines establishing interpretive framework
-
2020: First major revision addressing emerging practices
-
2022: Significant update responding to European Court of Justice zero-rating rulings
These Guidelines have particular importance for complex cases involving zero rating practices, specialised services, and the boundaries of reasonable traffic management.
Penalty Frameworks
Member states must establish penalties that are “effective, proportionate and dissuasive.” The specific amounts vary:
|
Country |
Maximum Fine |
Notes |
|---|---|---|
|
Germany |
Up to €1 million |
For serious breaches of net neutrality provisions |
|
Netherlands |
Percentage of turnover |
Based on competition law models |
|
Other EU states |
Varies |
Set by national telecommunications law |
Monitoring and Reporting
BEREC publishes annual reports on open internet implementation, aggregating data from national regulators. Individual NRAs also publish national reports—for example, Bundesnetzagentur’s Net Neutrality Report 2024/2025 covering May 2024 to April 2025 provides detailed analysis of German market compliance and enforcement actions.
National Approaches and Case Studies in the EU
While the EU regulation establishes common rules, implementation reflects national regulatory traditions and prior legislation. Understanding these variations helps companies ensure compliance across multiple markets.
The Netherlands: Early Adopter
The Netherlands historically maintained some of Europe’s strongest net neutrality protections, predating the EU framework. The Dutch Telecommunications Act explicitly prohibited:
-
Blocking or throttling applications or services
-
Hindering specific internet traffic for commercial reasons
-
Discriminating based on content or service type
These provisions influenced the EU regulation’s development and remain in force alongside it, demonstrating how national legislation can complement EU rules where compatible with the single market.
Germany: Active Enforcement
Bundesnetzagentur has been particularly active in monitoring and enforcing net neutrality. German enforcement practice emphasizes:
-
Regular market monitoring of mobile and fixed offerings
-
Investigation of consumer complaints about throttling
-
Scrutiny of zero-rating and bundled service offerings
-
Publication of detailed annual compliance reports
German national law elaborates on non-discriminatory treatment requirements, including practical specifications for minimum quality of service and bandwidth guarantees.
Cross-Border Consistency
The EU framework discourages uncoordinated national rules that might fragment the Digital Single Market. Where member states adopt stricter consumer protection measures, these must be compatible with the regulation’s objectives. BEREC coordination ensures that major internet service providers operating across multiple countries face reasonably consistent expectations, while allowing for national enforcement priorities.
Zero-Rating, Traffic Management, and Landmark Enforcement Decisions
Zero-rating—the practice of exempting specific applications or content categories from data caps—has generated the most significant enforcement activity under the net neutrality rules. These cases illustrate how european regulators interpret the equal treatment obligation.
What Is Zero-Rating?
Zero-rating occurs when a provider allows customers to use certain services (typically streaming services, social media, or messaging apps) without counting the data toward monthly allowances. While superficially consumer-friendly, such practices raise concerns because they:
-
Favor established platforms over newer online companies
-
Create incentives for content providers to pay for preferential treatment
-
May constitute non discriminatory treatment violations when applied selectively
ECJ Rulings (2020-2021)
The European Court of Justice issued pivotal rulings establishing that zero-rating based on application or service categories violates Article 3(3)’s requirement that traffic be treated equally. The Court found that:
-
Commercial differentiation by application type inherently discriminates between traffic categories
-
The regulation prohibits such discrimination regardless of whether speeds are technically identical
-
End users right to access all content equally is undermined when some services are financially advantaged
These rulings fundamentally shaped how european regulators across the European Union approach zero-rating enforcement.
Germany: StreamOn and Vodafone Pass
German enforcement provides the most detailed case study:
Telekom StreamOn:
-
Launched as a zero-rating offer exempting partner music and video services from data caps
-
Bundesnetzagentur issued its first decision on 15 December 2017, finding violations related to video throttling and roaming limitations
-
The offer required video partners to accept reduced resolution, raising traffic management concerns
-
Following ECJ case law, on 28 April 2022, Bundesnetzagentur prohibited continued marketing and required termination of existing contracts
Vodafone Pass:
-
Similar zero-rating structure covering social media, chat, and streaming categories
-
Subject to parallel regulatory scrutiny
-
Also prohibited following the 28 April 2022 decision
-
Existing customers had to be transitioned to compliant offerings
These decisions demonstrate that even popular consumer offers violate net neutrality when they technically and commercially discriminate between types of network traffic.
Historical Context
Enforcement has evolved significantly. Earlier cases focused on transparency concerns—such as the 2007 Plusnet deep packet inspection case in the UK—while current enforcement addresses the fundamental compatibility of commercial differentiation with equal treatment requirements.
Net Neutrality Regulation in the UK and the Role of Ofcom
The United Kingdom implemented EU net neutrality rules through the Open Internet Regulation while a member state. Following Brexit, these rules were retained in domestic law with Ofcom continuing as the competent regulator.
Ofcom’s Regulatory Role
Ofcom monitors UK compliance with net neutrality principles through:
-
Annual reports on open internet implementation
-
Investigation of consumer and competitor complaints
-
Review of traffic management practices by major providers
-
Assessment of whether the framework supports consumer choice and innovation
October 2023 Framework Review
Ofcom’s October 2023 review of the UK net neutrality framework reached several conclusions:
-
The existing regime broadly works to protect consumers
-
Clearer guidance on innovation and network management would benefit the market
-
Revisions to guidance for mobile and broadband ISPs on acceptable traffic management
-
Updated approach to assessing specialised services offerings
The review maintained the core non-discrimination principles while seeking to provide greater regulatory certainty for legitimate network optimization.
Voluntary Self-Regulation
Complementing statutory obligations, major UK ISPs including EE, Virgin Media, and Vodafone have signed a voluntary Open Internet Code. This self-regulatory instrument commits signatories to:
-
Refrain from blocking or throttling lawful content
-
Maintain transparency about network management
-
Respond to consumer complaints about internet service quality
Ofcom’s approach favors combining statutory obligations with self-regulatory tools rather than heavy-handed ex ante controls, while retaining authority to intervene when practices risk consumer harm.
International Perspective: United States vs Europe
The contrast between EU and US approaches to net neutrality illustrates fundamentally different regulatory philosophies, though the underlying policy debates remain remarkably similar.
US Regulatory Oscillation
The United States has experienced repeated policy reversals:
|
Year |
Administration |
Action |
|---|---|---|
|
2015 |
Obama |
Open Internet Order classifying broadband as Title II telecommunications service |
|
2017 |
Trump |
Restoring Internet Freedom Order reclassifying as Title I information service |
|
2024 |
Biden |
FCC action to restore Title II classification and net neutrality protections |
This oscillation creates uncertainty for network operators and content providers operating in the US market.
State-Level Responses
During periods without strong federal rules, several US states adopted their own net neutrality laws. California’s SB-822, enacted in 2018, established state-level prohibitions on:
-
Blocking lawful content
-
Impairing or degrading specific internet traffic
-
Engaging in paid prioritization
-
Zero-rating that harms competition
Legal disputes between states and the federal government over regulatory authority have created a complex patchwork, contrasting sharply with the EU’s unified approach.
Comparing Frameworks
|
Aspect |
European Union |
United States |
|---|---|---|
|
Legal basis |
Directly applicable regulation |
Agency orders subject to reversal |
|
Coordination |
BEREC across member states |
Federal-state conflicts |
|
Stability |
Core rules unchanged since 2015 |
Major changes with each administration |
|
Zero-rating |
Prohibited by ECJ rulings |
Varies by period and state |
Despite legal differences, the policy debate on fast lanes, zero rating practices, and specialised services is remarkably similar on both sides of the Atlantic. Net neutrality advocates in both jurisdictions raise similar concerns about allowing ISPs to favor their own services or demanding payment from content providers for faster access.
Best Effort Principle, Specialised Services, and Network Management
Understanding the technical foundations of internet traffic management helps explain why the net neutrality rules take their current form.
The Best Effort Principle
Traditional internet architecture operates on a “best effort” basis: packets are transmitted without guarantees, and actual performance depends on current network load. This approach:
-
Enables efficient use of network resources
-
Avoids complex reservation systems
-
Has supported massive internet ecosystem growth
-
Treats all traffic equally by default
Regulation (EU) 2015/2120 effectively embeds best effort as the default for internet access services while creating limited exceptions.
Specialised Services Requirements
Certain applications genuinely require guaranteed quality of service that best-effort delivery cannot provide. Examples include:
-
Remote surgery: Requires minimal latency and zero packet loss
-
Autonomous vehicles: Safety-critical communications need guaranteed delivery
-
Managed IPTV: Linear broadcast requires consistent bandwidth
-
Industrial IoT: Factory automation may require deterministic timing
These specialised services can receive prioritization only when:
-
Optimization is objectively necessary for specific technical quality requirements
-
Network capacity is sufficient for the continued functioning of general internet access
-
The specialized offering is not used as a pretext for commercial discrimination
BEREC’s 2020 and 2022 Guidelines provide detailed criteria helping national regulatory authorities distinguish acceptable technical measures from prohibited commercial practices.
Permitted vs. Prohibited Practices
The line between reasonable traffic management and prohibited discrimination can be subtle:
|
Permitted |
Prohibited |
|---|---|
|
Temporary measures to prevent impending network congestion |
Permanent throttling of competitor services |
|
Filtering malware and DDoS attacks |
Blocking VoIP to protect legacy telephone revenue |
|
Prioritizing emergency communications |
Allowing isps to charge content providers for non-degraded access |
|
Optimizing latency for real-time applications generically |
Favoring specific applications within a category |
Roaming, Fair Use Policies, and Consumer Protection
The same regulation establishing net neutrality rules also abolished retail roaming charges within the EU, demonstrating how traffic and pricing non-discrimination interact in the broader regulatory framework.
Roam Like at Home
Since 15 June 2017, EU consumers pay domestic retail prices when using mobile services in other member states. This means:
-
Calls, texts, and data are charged as if at home
-
No separate roaming charges for periodic travel
-
Seamless cross-border digital experience
The reform removed what had been a significant barrier to cross-border communication and the digital single market.
Fair Use Policies
To prevent abuse and ensure sustainability, roaming providers can apply fair use policies:
-
Reasonable limits on roaming data volumes
-
Requirements for genuine travel rather than permanent roaming
-
Potential surcharges in exceptional cases (subject to NRA approval)
The european commission has issued detailed implementing acts and guidelines defining acceptable fair use parameters.
Transparency Duties
Consumer protection requires timely, clear communications:
-
Welcome SMS messages upon entering another member state
-
Information about fair use thresholds
-
Warnings as limits approach
-
Clear explanation of any potential surcharges
Periodic Reviews
The european commission and BEREC conduct regular reviews of wholesale roaming markets and the overall functioning of roaming rules. These reviews, conducted biennially, assess whether the framework continues to serve its objectives and whether adjustments are needed.
This roaming framework illustrates the broader consumer protection philosophy underlying EU electronic communications regulation: transparent pricing, non-discriminatory treatment, and meaningful end user rights.
Monitoring, Reporting, and the Role of BEREC
Effective enforcement of net neutrality rules requires systematic monitoring and transparent reporting. BEREC coordinates this process across the European Union.
BEREC’s Coordination Functions
BEREC ensures consistent application of net neutrality rules by:
-
Facilitating information exchange among national regulatory authorities
-
Developing common methodologies for monitoring and enforcement
-
Publishing interpretive guidelines based on collective experience
-
Responding to emerging issues with coordinated positions
Published Reports and Guidelines
BEREC maintains a comprehensive reporting regime:
|
Publication Type |
Frequency |
Purpose |
|---|---|---|
|
Open Internet Annual Report |
Yearly |
Aggregate EU-wide compliance data |
|
Net Neutrality Guidelines |
As needed (2016, 2020, 2022) |
Interpretive guidance for NRAs |
|
Thematic reports |
Periodic |
Deep dives on specific issues like 5G slicing |
|
Opinions |
On request |
Responses to european parliament or european commission queries |
National Reporting Examples
Individual NRAs complement BEREC’s aggregate reporting with detailed national analysis:
Germany: Bundesnetzagentur’s annual net neutrality reports provide granular data on German market conditions. The 2024/2025 report covering May 2024 to April 2025 examines:
-
Enforcement actions taken
-
Consumer complaint patterns
-
Technical quality measurements
-
Emerging practices requiring attention
United Kingdom: Ofcom’s annual UK open internet monitoring reports assess:
-
Compliance with retained net neutrality obligations
-
Traffic management practices in the market
-
Consumer experience and complaints
-
Need for regulatory intervention
These reports make the monitoring process transparent to stakeholders including industry, civil society, and policymakers, supporting both regulatory oversight and public accountability.
Recent Developments, Covid-19 Experience, and Future Challenges
The net neutrality framework has faced significant tests and continues evolving in response to technology changes and new business models.
Covid-19 Stress Test
The 2020-2021 pandemic created unprecedented demand on electronic communications networks. Lockdowns drove massive increases in:
-
Video conferencing for remote work
-
Streaming services consumption
-
Online gaming
-
E-commerce and digital services
BEREC and national regulators including Bundesnetzagentur closely monitored network performance throughout. Their findings confirmed:
-
No systemic network overload occurred in the EU
-
Networks proved resilient to sustained high demand
-
NRAs issued guidance on permissible traffic management during the crisis
-
Large-scale restrictive measures were ultimately not required
This experience validated the internet ecosystem’s capacity to handle exceptional demand without abandoning net neutrality principles.
Impact of ECJ Rulings and BEREC 2022 Guidelines
Recent European Court of Justice rulings and the subsequent BEREC 2022 Guidelines update have significantly narrowed acceptable commercial differentiation. Zero-rating as previously practiced by cable companies and mobile operators is now effectively prohibited, requiring:
-
Unwinding existing offers
-
Redesigning product portfolios
-
Greater focus on overall data allowances rather than category exemptions
Emerging Challenges
Several developments test the boundaries of current net neutrality rules:
5G Network Slicing: 5G technology enables “slices”—virtual network partitions with guaranteed characteristics. Whether differentiated quality for industrial or IoT services can coexist with net neutrality remains actively debated. BEREC has issued opinions on close cooperation between slicing implementations and open internet requirements.
Edge Computing: Content delivery optimization increasingly relies on edge infrastructure closer to end points. Ensuring such optimization does not discriminate against smaller content providers lacking resources to deploy edge presence raises new questions about equal treatment.
“Fair Share” Debates: Some network operators argue that large content platforms should contribute to network costs proportionally to the traffic they generate. Net neutrality advocates warn that such schemes risk indirect discrimination and could slow innovation by newer online companies unable to afford such payments. The european commission has examined this issue without reaching definitive conclusions.
Looking Forward
While the core EU net neutrality framework from 2015 remains intact, its interpretation continues evolving through:
-
Case law from national courts and the ECJ
-
Updated BEREC Guidelines
-
NRA enforcement decisions
-
Technology developments requiring new analysis
The balance between enabling innovation and ensuring net neutrality as non discriminatory treatment of traffic will define regulatory priorities for the coming decade. The framework has proven adaptable, but continued close cooperation among regulators, industry, and civil society remains essential to safeguard equal and open access to the internet.
Key Takeaways
-
EU Regulation 2015/2120 establishes directly applicable net neutrality rules across all member states
-
Internet service providers must treat all traffic equally, with limited exceptions for legal compliance, security, and temporary network congestion
-
Zero-rating based on application categories violates equal treatment requirements following ECJ rulings
-
National regulatory authorities enforce rules with BEREC coordination ensuring consistent application
-
The UK retains similar rules post-Brexit with Ofcom as regulator
-
The US approach has oscillated significantly, contrasting with EU regulatory stability
-
Emerging issues like 5G slicing and fair share debates will shape future interpretation
Understanding these rules is essential for anyone operating internet access services, deploying electronic communications networks, or building online services in the EU market. Regular monitoring of BEREC Guidelines and national NRA decisions helps ensure ongoing compliance as interpretation evolves.