{"id":2175,"date":"2026-09-02T08:00:00","date_gmt":"2026-09-02T07:00:00","guid":{"rendered":"https:\/\/ic-services.io\/?p=2175"},"modified":"2026-10-21T14:10:16","modified_gmt":"2026-10-21T13:10:16","slug":"interception-legale-mvno-vs-mno","status":"publish","type":"post","link":"https:\/\/ic-services.io\/fr\/resources\/blog\/mvno-vs-mno-lawful-interception\/","title":{"rendered":"MVNO vs MNO : qui est l\u00e9galement responsable de l'interception l\u00e9gale ?"},"content":{"rendered":"

Il est essentiel de bien comprendre les responsabilit\u00e9s des MVNO en mati\u00e8re d\u2019interception l\u00e9gale avant de p\u00e9n\u00e9trer un march\u00e9. L\u2019une des questions les plus courantes \u2014 et les plus lourdes de cons\u00e9quences \u2014 dans le mod\u00e8le \u00e9conomique des MVNO est de savoir qui assume la responsabilit\u00e9 l\u00e9gale de l\u2019interception l\u00e9gale. La r\u00e9ponse semble simple \u00e0 premi\u00e8re vue, mais dans la pratique, elle rev\u00eat une grande complexit\u00e9. L\u2019obligation l\u00e9gale, la capacit\u00e9 technique, les dispositions contractuelles et la mise en \u0153uvre pratique impliquent souvent \u00e0 la fois l\u2019op\u00e9rateur mobile virtuel (MVNO) et l\u2019op\u00e9rateur de r\u00e9seau mobile h\u00f4te (MNO), et les limites entre leurs responsabilit\u00e9s respectives peuvent \u00eatre floues, contest\u00e9es ou tout simplement non abord\u00e9es dans les accords commerciaux qui r\u00e9gissent leur relation.<\/p>\n\n\n\n

Cet article propose une analyse d\u00e9taill\u00e9e des aspects juridiques, techniques et contractuels de la responsabilit\u00e9 en mati\u00e8re de LI dans le cadre de la relation entre MVNO et MNO, en s'appuyant sur les cadres r\u00e9glementaires des principaux march\u00e9s europ\u00e9ens et sur l'exp\u00e9rience pratique des op\u00e9rateurs confront\u00e9s \u00e0 ces enjeux.<\/p>\n\n\n\n

Responsabilit\u00e9s des op\u00e9rateurs de t\u00e9l\u00e9phonie mobile virtuels (MVNO) en mati\u00e8re d'interception l\u00e9gale<\/h2>\n\n\n\n

Under the European Electronic Communications Code, Member States can make lawful interception a condition of the general authorisation, but national law decides who must do what. Many countries oblige every provider of a public service; others, such as Germany, put the technical obligation on whoever operates the network installation and give pure service providers lighter duties.<\/p>\n\n\n\n

For MVNOs that hold their own regulatory registration \u2014 which is the case for most MVNOs operating in European markets \u2014 this means that the MVNO carries LI duties of its own, which may or may not include the full technical obligation. The fact that the MVNO uses the MNO’s network infrastructure does not make compliance the MNO’s problem alone, but it also does not automatically move every obligation to the MVNO.<\/p>\n\n\n\n

National rules differ on this point. In Germany, \u00a7 170(1) TKG obliges whoever operates the telecommunications installation used to provide the service. A reseller or light MVNO that relies on its host’s installation must, under \u00a7 170(2) TKG, make sure the host can implement interception orders and tell the Bundesnetzagentur who implements them. A full MVNO that runs its own core is itself an operator under \u00a7 170(1). In the Netherlands, the Telecommunicatiewet places the obligation on the provider of the public electronic communications service. In France, the CPCE requires operators declared with ARCEP to maintain interception capabilities. The specific language differs, and so does the outcome: depending on the country and on how much of the network the MVNO operates, the obligation may sit with the MVNO, with the host MNO, or with both.<\/p>\n\n\n\n

Many jurisdictions allow or recognise arrangements where the MNO performs interception on behalf of the MVNO. Where the MVNO is itself the obliged party and the MNO only acts on its behalf, the MVNO stays responsible for the result (in Germany, an obliged party may use a contractor but must remain able to implement orders under its own responsibility, \u00a7 5(3) TK\u00dcV). The MVNO cannot simply point to the MNO and claim that compliance is the MNO’s problem.<\/p>\n\n\n\n

La r\u00e9alit\u00e9 technique : c'est l'op\u00e9rateur de r\u00e9seau mobile qui d\u00e9tient les capacit\u00e9s<\/h2>\n\n\n\n

Whatever the legal split, the technical capability to intercept communications often resides with the host MNO. This is because the MVNO’s subscribers communicate over the MNO’s radio access network, and their traffic traverses the MNO’s core network infrastructure. The interception points \u2014 the network elements where traffic can be captured and duplicated \u2014 are typically within the MNO’s domain.<\/p>\n\n\n\n

This creates a tension: the entity that holds the subscriber relationship (the MVNO) often lacks the capability, while the host MNO that has the capability may itself be obliged for traffic on its network, as in Germany. Resolving this tension requires either the MVNO to acquire its own technical capability (by deploying its own core network elements and interception infrastructure), or the MNO to provide interception services to the MVNO as part of the wholesale arrangement.<\/p>\n\n\n\n

La solution appropri\u00e9e d\u00e9pend de l\u2019architecture de l\u2019op\u00e9rateur mobile virtuel (MVNO). Les MVNO \u00ab complets \u00bb, qui exploitent leur propre r\u00e9seau central, exercent un contr\u00f4le direct sur les points d\u2019interception et peuvent d\u00e9ployer leurs propres syst\u00e8mes de LI. Les MVNO \u00ab all\u00e9g\u00e9s \u00bb et les revendeurs, qui s\u2019appuient enti\u00e8rement sur l\u2019infrastructure de l\u2019op\u00e9rateur de r\u00e9seau mobile (MNO), doivent compter sur ce dernier pour capacit\u00e9 d'interception<\/a>, ce qui n\u00e9cessite des accords officiels et des dispositions techniques.<\/p>\n\n\n\n

La dimension contractuelle<\/h2>\n\n\n\n

Le contrat entre l'op\u00e9rateur mobile virtuel (MVNO) et l'op\u00e9rateur de r\u00e9seau mobile (MNO) constitue le principal m\u00e9canisme permettant de concilier obligations et capacit\u00e9s. Un accord MVNO bien r\u00e9dig\u00e9 comprendra des dispositions sp\u00e9cifiques relatives \u00e0 l\u2019interception l\u00e9gale, couvrant les responsabilit\u00e9s de chaque partie, les services que l\u2019op\u00e9rateur de r\u00e9seau mobile (MNO) fournira, les d\u00e9lais de r\u00e9ponse et les niveaux de service, les interfaces techniques et les formats de donn\u00e9es, la r\u00e9partition des co\u00fbts, ainsi que la responsabilit\u00e9 en cas de non-conformit\u00e9.<\/p>\n\n\n\n

Dans la pratique, de nombreux contrats de MVNO ne mentionnent pas l\u2019interception l\u00e9gale ou n\u2019en parlent qu\u2019en termes g\u00e9n\u00e9raux. Cela repr\u00e9sente un risque important pour le MVNO. Si le contrat n\u2019impose pas explicitement \u00e0 l\u2019op\u00e9rateur de r\u00e9seau mobile (MNO) de fournir des services d\u2019interception, le MVNO pourrait se retrouver dans l\u2019incapacit\u00e9 de respecter ses obligations l\u00e9gales et de contraindre le MNO \u00e0 lui pr\u00eater main-forte. La n\u00e9gociation de dispositions claires et exhaustives en mati\u00e8re d\u2019interception l\u00e9gale devrait constituer une priorit\u00e9 lors de toute n\u00e9gociation d\u2019accord MVNO.<\/p>\n\n\n\n

Les dispositions cl\u00e9s qui devraient figurer dans l'accord concernent le champ d'application des services d'interception fournis par l'op\u00e9rateur de r\u00e9seau mobile (MNO), les d\u00e9lais de mise en service conformes aux exigences r\u00e9glementaires, les formats de donn\u00e9es et les m\u00e9canismes de transmission des informations d'interception (IRI) et des communications capt\u00e9es (CC), les proc\u00e9dures de traitement des demandes d\u2019interception urgentes et d\u2019urgence, les obligations de confidentialit\u00e9 pour toutes les parties, les droits d\u2019audit permettant \u00e0 l\u2019op\u00e9rateur mobile virtuel (MVNO) de v\u00e9rifier la conformit\u00e9, la r\u00e9partition des responsabilit\u00e9s en cas de d\u00e9faillance du processus d\u2019interception, ainsi que les proc\u00e9dures \u00e0 suivre en cas de modifications r\u00e9glementaires n\u00e9cessitant une mise \u00e0 jour de la capacit\u00e9 d\u2019interception (LI).<\/p>\n\n\n\n

Mod\u00e8les de r\u00e9partition des responsabilit\u00e9s en mati\u00e8re de LI<\/h2>\n\n\n\n

Dans la pratique, plusieurs mod\u00e8les de r\u00e9partition des responsabilit\u00e9s en mati\u00e8re d'interception entre l'op\u00e9rateur virtuel (MVNO) et l'op\u00e9rateur de r\u00e9seau mobile (MNO) sont utilis\u00e9s. Le premier est le mod\u00e8le \u00ab pris en charge par l\u2019op\u00e9rateur de r\u00e9seau mobile (MNO) \u00bb, dans lequel ce dernier proc\u00e8de \u00e0 l\u2019interception pour le compte de l\u2019op\u00e9rateur mobile virtuel (MVNO). L\u2019op\u00e9rateur de r\u00e9seau mobile re\u00e7oit l\u2019ordonnance d\u2019interception (soit directement des services de police, soit par l\u2019interm\u00e9diaire de l\u2019op\u00e9rateur mobile virtuel), active l\u2019interception sur son r\u00e9seau et transmet les donn\u00e9es intercept\u00e9es aux services de police. L\u2019op\u00e9rateur mobile virtuel (MVNO) apporte un soutien administratif et assure la coordination avec les services de police. Ce mod\u00e8le est courant chez les MVNO \u00ab l\u00e9gers \u00bb et les revendeurs ; il n\u00e9cessite un accord complet avec l\u2019op\u00e9rateur de r\u00e9seau mobile (MNO) ainsi que des dispositions techniques valid\u00e9es.<\/p>\n\n\n\n

Le deuxi\u00e8me mod\u00e8le est celui mis en \u0153uvre par l\u2019op\u00e9rateur mobile virtuel (MVNO), dans lequel ce dernier d\u00e9ploie sa propre infrastructure d\u2019interception locale (LI) \u2014 comprenant une fonction de m\u00e9diation et des interfaces de transfert \u2014 et effectue l\u2019interception de mani\u00e8re ind\u00e9pendante. Ce mod\u00e8le exige que l\u2019op\u00e9rateur mobile virtuel dispose d\u2019une infrastructure r\u00e9seau suffisante (g\u00e9n\u00e9ralement ses propres \u00e9l\u00e9ments de r\u00e9seau central) pour servir de points d\u2019interception. Il conf\u00e8re \u00e0 l\u2019op\u00e9rateur mobile virtuel un contr\u00f4le total sur le processus d\u2019interception, mais n\u00e9cessite un investissement technique important.<\/p>\n\n\n\n

The third model is a hybrid approach, where certain aspects of interception are handled by the MNO and others by the MVNO. For example, the MNO might capture the content (CC) in its network, while the MVNO’s own core elements (such as its IMS) produce the event data (IRI); both streams must then carry the same correlation number so the agency can match them, and the MVNO delivers them to law enforcement through its own plateforme de m\u00e9diation<\/a>. Ce mod\u00e8le n\u00e9cessite une coordination technique \u00e9troite entre l'op\u00e9rateur mobile virtuel (MVNO) et l'op\u00e9rateur de r\u00e9seau mobile (MNO), mais peut permettre d'atteindre un juste \u00e9quilibre entre capacit\u00e9s et contr\u00f4le.<\/p>\n\n\n\n

Exigences r\u00e9glementaires et application de la r\u00e9glementation<\/h2>\n\n\n\n

Les autorit\u00e9s de r\u00e9gulation \u00e0 travers l'Europe accordent une attention croissante \u00e0 la Conformit\u00e9 LI<\/a> of MVNOs. As the MVNO market has grown and diversified, regulators have recognised that MVNOs cannot be overlooked in the enforcement of interception obligations. Some legislators address this directly: Germany’s TKG, for example, sets specific duties for providers that use another operator’s network (\u00a7 170(2) TKG), making clear that the MVNO’s dependency on the MNO does not remove the MVNO’s own responsibilities.<\/p>\n\n\n\n

Dans le cadre des mesures coercitives, les autorit\u00e9s de r\u00e9gulation et services charg\u00e9s de l'application de la loi<\/a> look at whoever holds the specific duty that was breached. In Germany, failing to maintain interception facilities is an administrative offence with fines of up to EUR 500,000 (\u00a7 228 TKG). Contractual recourse against the MNO does not protect an MVNO from sanctions for its own duties.<\/p>\n\n\n\n

Cela souligne l'importance de veiller \u00e0 ce que l'accord entre l'op\u00e9rateur mobile virtuel (MVNO) et l'op\u00e9rateur de r\u00e9seau mobile (MNO) en mati\u00e8re d'interception l\u00e9gale soit solide, test\u00e9 et document\u00e9. Un accord qui fonctionne sur le papier mais qui n'a pas \u00e9t\u00e9 valid\u00e9 par des tests et l'exp\u00e9rience op\u00e9rationnelle procure un faux sentiment de s\u00e9curit\u00e9.<\/p>\n\n\n\n

Recommandations pratiques<\/h2>\n\n\n\n

For MVNOs, the practical recommendations are clear. Establish which LI duties are yours under national law and your network architecture, and accept that you can outsource the work but not the responsibility. Review your wholesale agreement and ensure that LI is comprehensively addressed, with clear responsibilities, service levels, and technical specifications. If you rely on the MNO for interception, verify its capability before you sign (in Germany this check is a legal duty under \u00a7 170(2) TKG) and test the end-to-end process, including how orders for your subscribers reach the MNO. Maintain your own documentation, audit trails, and operational procedures, even if the MNO performs the technical interception. And invest in understanding the LI landscape in your market, so that you can engage knowledgeably with regulators, law enforcement, and your MNO partner.<\/p>\n\n\n\n

Conclusion<\/h2>\n\n\n\n

The question of MVNO versus MNO responsibility for lawful interception has no single answer: it depends on national law and on which network elements the MVNO operates, and it is rarely as simple as the commercial agreement suggests. Bridging the gap between legal obligation and technical capability requires careful contractual arrangements, validated technical solutions, and proactive engagement with regulators. MVNOs that approach this challenge systematically, with clear agreements and tested infrastructure, will be well positioned to meet their obligations. Those that leave it unaddressed will discover the consequences at the worst possible time \u2014 when a law enforcement agency presents an interception order and expects it to be executed.<\/p>\n\n\n

For MNOs that host MVNOs, the recommendation is equally straightforward: check whether you are yourself obliged for the MVNO traffic on your installation (as in Germany), recognise that your MVNO partners have duties that depend on your technical cooperation, and build this cooperation into your wholesale offering. Providing clear, well-defined LI services to your MVNO partners protects both parties \u2014 the MVNO can meet its legal obligations, and the MNO avoids the reputational and practical complications that arise when an MVNO on its network fails to comply with an interception order. A collaborative approach to LI compliance serves the interests of the entire ecosystem \u2014 operators, regulators, and law enforcement alike.<\/p>\n\n\n\n

La question de la responsabilit\u00e9 des MVNO en mati\u00e8re d'interception l\u00e9gale rel\u00e8ve en fin de compte du droit et varie selon les juridictions. Les op\u00e9rateurs doivent obtenir des conseils juridiques clairs sur leurs obligations en mati\u00e8re d'interception l\u00e9gale en tant que MVNO sur chaque march\u00e9.<\/p>\n\n\n\n

Articles connexes<\/h2>\n\n\n\n

Pour en savoir plus sur des sujets connexes, consultez les articles suivants :<\/p>\n\n\n\n