Simultaneously, the plan formalizes a tiered, \"class-based\" access model. By explicitly exempting state filtering from neutrality rules, it creates a legal basis to grant privileged, unrestricted access\u2014via whitelists and \"white SIM cards\"\u2014to specific groups such as researchers and journalists, while leaving the general public under heavy censorship.<\/span><\/p>\n These regulatory shifts directly reflected on the physical network throughout August. Technical telemetry from Kentik, Cloudflare, and IODA indicates that the network\u2019s post-January recovery stalled, culminating in multiple BGP routing disruptions and a sharp 50% to 70% drop in international traffic volume during the final week of the month.<\/span><\/p>\n The release of the second version of the <\/span>Cyberspace Regulation Plan<\/span><\/a> marks the most significant development in Iranian internet policy this month. While framing itself around user rights and net neutrality, the plan builds a legal framework for heightened control, reduced anonymity, and unequal access.<\/span><\/p>\n The plan provides an enforcement mechanism for the 2019 National Cyberspace Identity Validation System, formally legalizes filtering exemptions for select groups, and shifts oversight away from the Ministry of ICT toward the Supreme Council of Cyberspace. Ultimately, it signals a model where the state tightly regulates who is online, what they can access, and which institution holds power over the network.<\/span><\/p>\n To understand the significance of the <\/span>Cyberspace Regulation Plan<\/span><\/a>, it must be viewed alongside a September 2019 <\/span>resolution<\/span><\/a> by the Supreme Council of Cyberspace: the <\/span>National Cyberspace Identity Validation System<\/span><\/i>. The primary goal of the new plan is to establish the legal and enforcement mechanisms required to fully implement this validation framework, effectively eliminating true online anonymity.<\/span><\/p>\n The central premise of the 2019 identity system is that every interaction across the country\u2019s cyberspace, direct or indirect, must ultimately lead to a unique physical person. While pseudonyms and temporary identifiers remain permissible at the service level, the underlying infrastructure must link these identifiers back to a real-world entity. This applies not just to individuals, but to devices, organizations, specific content, and physical locations.<\/span><\/p>\n The system introduces two key verification layers:<\/span><\/p>\n Article 5 of the new plan penalizes service providers that fail to enforce these identity validation requirements. Additionally, by prohibiting any \"concealment or falsification of identity,\" the document creates a legal basis to criminalize privacy-preserving tools, such as VPNs. Because these multi-layer identities must be mapped together across communication, service, and application levels, implementing authorities gain the technical capability to build comprehensive, integrated activity profiles for every user.<\/span><\/p>\n Article 6 outlines user rights\u2014such as guaranteed internet access\u2014that initially appear designed to protect consumers, but are severely limited by structural exceptions.<\/span><\/p>\n While Paragraph (a) prevents ISPs from arbitrarily disconnecting or throttling users, it explicitly carves out exemptions for orders issued by judicial bodies or other authorized state agencies. Consequently, this provision offers no protection against localized or nationwide internet blackouts.<\/span><\/p>\n Paragraph (b) introduces net neutrality principles for the first time, prohibiting operators from prioritizing or throttling traffic based on content, source, device, or provider identity. On paper, this prevents anti-competitive bandwidth allocation.<\/span><\/p>\n In practice, this conflicts directly with existing pricing regulations. Under <\/span>Regulation No. 266 <\/span><\/a>of the Communications Regulatory Authority (CRA), internet traffic in Iran has been split into \"domestic\" and \"international\" tiers since 2017, offering significantly lower rates for state-approved domestic services. Operators also utilize \"fair usage thresholds\" to throttle service once international data caps are hit. This price-and-volume manipulation inherently contradicts the core premise of equal traffic treatment.<\/span><\/p>\n Exemptions from Internet Filtering: A Legal Basis for Tiered Internet Access<\/span><\/p>\n The policy further undermines net neutrality by explicitly excluding state censorship from its rules. Note 1 specifies that filtering ordered by the <\/span>Committee for Determining Instances of Criminal Content<\/span><\/i> remains completely exempt, meaning \"neutrality\" only applies to the narrow subset of traffic the state permits.<\/span><\/p>\n Furthermore, Note 2 authorizes filtering exemptions for select user groups in educational, technological, research, and media sectors. This establishes the formal legal groundwork for a <\/span>tiered (\"class-based\") internet<\/b>:<\/span><\/p>\n Beyond user-facing impacts, the Cyberspace Regulation Plan reshapes the balance of institutional power in Iranian tech governance.<\/span><\/p>\n The plan reduces the government and the Ministry of Information and Communications Technology (MICT) to managing basic infrastructure. Policy oversight, enforcement, violation monitoring, and direct command over cybersecurity operations are concentrated within non-elected bodies\u2014primarily the <\/span>Supreme Council of Cyberspace<\/b> and the <\/span>National Cyberspace Center<\/b>. This institutional shift removes democratic oversight and centralizes network control within security-oriented institutions.<\/span><\/p>\n The latest data from Kentik shows that Iran\u2019s internet traffic rose steadily between May 26 and August 1. But throughout August, this recovery did not continue at the same stable pace, and traffic levels experienced significant ups and downs. <\/span>Although traffic began to rise again in the final days of the month, Doug Madory, Director of Internet Analysis at Kentik,<\/span> noted<\/span><\/a> that Iran\u2019s traffic levels still remained far below those recorded before January 8.<\/span><\/p>\n Cloudflare Radar<\/span><\/a> data, alongside Kentik\u2019s figures, further reinforces the picture of network instability in the second half of August.<\/span><\/p>\n Cloudflare Radar also shows a clear turning point during the month. Its traffic volume data indicates that until around August 24, Iran\u2019s traffic, despite daily fluctuations, remained broadly close to levels seen during the previous comparison period. <\/span>From August 25, however, both <\/span>Total Bytes and HTTP Bytes dropped sharply and remained at significantly lower levels through the end of the month.<\/p>\n Cloudflare\u2019s Traffic Trends chart makes the scale of this decline even clearer. From August 25 onward, Total Bytes and HTTP Bytes were around 50% to 70% lower than during the previous comparison period for much of the day. HTTP Requests also fell by roughly 40% to 55% during most periods.<\/p>\n By the end of the month, there was still no clear sign of a full return to the levels seen before the decline.<\/span><\/p>\n IODA<\/span><\/a> data also shows clear signs of instability in Iran\u2019s internet connectivity over the past month. Between August 5 and August 17, IODA recorded four drops in Iran\u2019s <\/span>BGP signal. This indicator reflects how many of Iran\u2019s network routes remain visible in the global internet routing system.<\/p>\n The longest disruption occurred on August 15 and lasted for around 16 hours, while the sharpest drop was recorded on August 17.<\/span><\/p>\n Around August 15 and 16, IODA\u2019s <\/span>Active Probing signal also declined noticeably, falling to around 86%.<\/span><\/p>\n A drop in this indicator suggests that users may experience disruptions such as intermittent connectivity, some websites failing to load, or slower and less stable internet access.<\/span><\/p>\n Taken together, these technical indicators show that Iran\u2019s internet has still not returned to the conditions seen before January 8.<\/span><\/p>\n","protected":false},"excerpt":{"rendered":" Executive Summary August marked a significant structural pivot in Iran\u2019s digital architecture as the newly released Cyberspace Regulation Plan consolidated internet governance away from the Ministry of ICT and into hardline, non-elected bodies like the Supreme Council of Cyberspace. Beneath nominal language invoking \"net neutrality\" and \"user rights,\" the policy codifies a system of totalContinue reading \"From Mandatory Identity Verification to the Promise of Net Neutrality: Iran\u2019s Blueprint for Internet Control\"<\/span><\/a><\/p>\n","protected":false},"author":44,"featured_media":6030,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"footnotes":""},"categories":[4],"tags":[389,388,387,385,386,390,392,391],"class_list":["post-6028","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-network-monitor","tag-digital-identity-in-iran","tag-internet-regulation-in-iran","tag-iran-cyberspace-regulation-plan","tag-iran-internet-censorship","tag-iran-internet-policy","tag-mandatory-identity-verification-iran","tag-net-neutrality-in-iran","tag-online-anonymity-in-iran","entry"],"acf":[],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\tIntroduction<\/b><\/h4>\n
Part One: Internet Policy<\/b><\/h4>\n
The Cyberspace Regulation Plan: A Piece of the Puzzle for Building a Complete User Profile<\/b><\/h5>\n
\n
User Rights: Guarantees with Major Exceptions<\/b><\/h5>\n
Net Neutrality vs. Iran\u2019s Internet Pricing System<\/b><\/h5>\n
\n
Who Holds the Keys to Iran\u2019s Internet?<\/b><\/h5>\n
Part Two: Internet Network<\/b><\/h4>\n
August: Recovery Stalls as Instability Returns to Iran\u2019s Internet<\/b><\/h5>\n
![\"\"](\"https:\/\/filter.watch\/wp-content\/uploads\/sites\/2\/2026\/09\/kentik-1024x576.jpeg\")
<\/a>![\"\"](\"https:\/\/filter.watch\/wp-content\/uploads\/sites\/2\/2026\/09\/Traffic-Volume-1024x408.png\")
<\/a>![\"\"](\"https:\/\/filter.watch\/wp-content\/uploads\/sites\/2\/2026\/09\/Traffic-Trends-1024x562.png\")
<\/a>![\"\"](\"https:\/\/filter.watch\/wp-content\/uploads\/sites\/2\/2026\/09\/ioda-1024x573.png\")
<\/a>