ITU's G5 Framework — A Quick Reference for Collaborative Digital Regulation¶
Regulatory systems are categorized into distinct generations. Each generation is indicative of the environment for which it was originally designed. The initial four generations (G1-G4) regulated sectors, namely, telecommunications, banking, energy, and capital markets, as autonomous domains. The fifth generation (G5) oversees the interactions and relationships among these sectors.
"Coherent and forward-looking cross-sector policy and regulation are no longer a choice, but an imperative."
— ITU G5 Benchmark, 2021
G5 applies across all regulatory environments, not only mature ones. It explicitly includes digital inclusion, affordability, and universal access alongside coordination and risk management.
Core G5 Concepts¶
G5 regulation is a system-centric approach for interdependent regulated sectors. It focuses on interactions, couplings, and shared dependencies across sectors, not just individual sector performance. The central observation is –
system behavior ≠ sum of sector behaviors
Synthesized from ITU documentation, the following are some principles characterizing G5's approach to regulation. These are not part of ITU's formal taxonomy. This reference focuses on structural patterns, not case-specific implementations.
- Interdependence: Regulated sectors are no longer operationally independent. Decisions in one sector affect outcomes in others.
- Shared Dependencies: Multiple sectors rely on common layers — networks, platforms, data infrastructure, identity, authentication, and settlement. These dependencies do not fit neatly into a single mandate.
- Risk Propagation: Failures cascade across sectors; a telecom disruption can impact banking, healthcare, and energy, turning localized shocks into system-wide events.
- System-Level Risk: Risks exist within and between sectors. G1–G4 frameworks handle within-sector risk well but are not designed for risks at sector intersections, where optimal choices in one domain can cause suboptimal outcomes in another.
- Coordination as Structure: Coordination should be stable and predictable, not ad hoc, crisis-driven, or personality-dependent.
- Prevention over Reaction: G5 emphasizes early detection of shared vulnerabilities; crisis response is essential but insufficient on its own.
- Overlay, Not Replacement: G5 overlays coordination logic without removing sectoral autonomy.
- Co-regulation and Multi-stakeholder Governance: G5 regulation involves not only public institutions but also industry, civil society, and market players as active participants rather than merely subjects. Collaborative regulation depends on leadership, incentives, and evidence, not just command and control.
Evolution of Regulation - G1 to G5¶
G5 complements G1–G4 rather than replacing them. The G1–G4 progression is genuine and evolutionary. G5 enables cross-sector coordination at any G1–G4 stage, allowing a G3 country to develop G5 structures without first completing G4.
+----------------------------------------------------------+
| G5: COLLABORATIVE (2018/2019 – Present) |
| Focus: System Layer |
| • Cross-sector visibility |
| • Coordination |
| • Shared dependency awareness |
| • Risk propagation management |
+-----------------------------+----------------------------+
↑ | G5 does NOT replace G1-G4. |
| | It sits on top. |
| +----------------------------+
|
+----------------------------------------------------------+
| G4: INTEGRATED (~2008 – 2018) |
| Focus: Principles |
| • Flexibility for innovation |
| • Outcome-focused regulation |
| Role: Partner in social & economic development |
+----------------------------------------------------------+
↑
|
+----------------------------------------------------------+
| G3: LIBERALIZATION (1990s – mid-2000s) |
| Focus: Risk |
| • Risk identification & prioritization |
| • Efficient allocation of oversight |
| Markets opened to competition |
+----------------------------------------------------------+
↑
|
+----------------------------------------------------------+
| G2: PRIVATIZATION (late 1980s – 1990s) |
| Focus: Supervision |
| • Compliance monitoring |
| • Enforcement |
| Regulators act as watchdogs |
+----------------------------------------------------------+
↑
|
+----------------------------------------------------------+
| G1: COMMAND & CONTROL (late 19th c – 1980s) |
| Focus: Rules |
| • Licenses, permissions, prohibitions |
| • Sector-by-sector control |
| State-funded monopolies dominate |
+----------------------------------------------------------+
G5 System Model¶
Sector systems operate separately but depend on shared layers where interactions create system-level outcomes.
+-----------------+ +-----------------+ +-----------------+
| Sector System A | | Sector System B | | Sector System N |
| (G1-G4 inside) | | (G1-G4 inside) | | (G1-G4 inside) |
+-----------------+ +-----------------+ +-----------------+
| | |
+---------+----------+-----------+--------+
|
↓
+------------------------------------------------------------+
| Shared Dependency Layer (critical common services) |
| |
| - connectivity / networks |
| - data platforms / databases |
| - cloud / hosting / data centers |
| - identity & authentication |
| - transaction / settlement rails |
| - software platforms / APIs |
+------------------------------------------------------------+
|
↓
+------------------------------------------------------------+
| System Outcomes / Risk Propagation |
| |
| - cascades across sectors |
| - cross-sector service disruption |
| - systemic impact |
| |
+------------------------------------------------------------+
What G5 Adds — The Coordination Layer¶
G5 overlays a coordination layer to manage cross-sector dependencies, align signals, and reduce systemic risk.
+-----------------+ +-----------------+ +-----------------+
| Sector System A | | Sector System B | | Sector System N |
| (G1-G4 inside) | | (G1-G4 inside) | | (G1-G4 inside) |
+-----------------+ +-----------------+ +-----------------+
| | |
+---------+----------+-----------+--------+
|
v
+------------------------------------------------------------+
| G5 Coordination Layer (system view) |
| |
| - shared risk visibility |
| - dependency mapping (what depends on what) |
| - aligned monitoring (signals, thresholds, incidents) |
| - coordinated response (when failures cut across sectors) |
| - prevention focus (reduce probability of cascades) |
| |
+------------------------------------------------------------+
|
v
+------------------------------------------------------------+
| System Outcomes / Risk Propagation |
| |
| - cascades across sectors |
| - cross-sector service disruption |
| - systemic impact |
| |
+------------------------------------------------------------+
|
v
+------------------------------------------------------------+
| Shared Dependency Layer |
| |
| (same as above) |
| |
+------------------------------------------------------------+
The Three Tracks¶
The G5 Benchmark assesses collaborative regulation on three mandatory tracks, each representing a different aspect of regulatory maturity. ITU clusters these into three pillars: collaborative governance, policy design principles, and the G5 regulatory toolbox.
Track 1 — Collaboration¶
Collaboration is the watermark of G5. It measures cross-sector coordination among the ICT regulator, peer regulators, industry, and stakeholders. In G5, collaboration extends beyond public institutions—market players of all sizes actively participate in governance rather than merely follow it.
- Institutional setup: agencies, mandates, formal coordination structures.
- Formal and informal practices: standing mechanisms, joint working groups, shared risk reviews
- Multi-stakeholder engagement: structured participation of industry, civil society, and market players alongside regulators
- Sector reach: finance, energy, health, transport, education, and beyond
- Cross-border cooperation: regional and international regulatory alignment
Digital regulation happens through multiple expertise centers. No single authority controls the full picture. Instead, it involves multi-stakeholder councils, co-regulation frameworks, and joint policies needing cross-sector approval.
Track 2 — Policy Design Principles¶
G5 evaluates not just what policies exist, but the quality of the process that produces them.
- Evidence-based: policy grounded in data, research, and measurable outcomes, not assumptions.
- Transparent: open processes, published reasoning, accessible decisions.
- Accountable: clear ownership of outcomes, not just compliance with rules.
- Ethical: consumer protection, inclusion, and fairness are embedded at the design stage, not added later.
- Shift: from rules-based compliance to principles-based outcomes. In practice: regulatory sandboxes and cross-regulator innovation pilots.
Track 3 — Digital Toolbox¶
The legal and policy instruments governing a country's digital environment, not intent, but actual tools in place. In G1–G4, competition frameworks focus on the ICT sector. In G5, the scope expands to all sectors where digital is a dependency.
- Cybersecurity Framework: laws, incident response, and critical infrastructure protection. In G5, a breach in one sector can trigger a cascade across all sectors sharing infrastructure.
- Data Governance and Trust: personal data governance, privacy rights, and cross-border data flow rules form the compliance layer. Beneath them, data flows function as an economic layer that G5 relies on. Cross-sector coordination requires regulators, platforms, and industry to share signals and risk information within trust frameworks. Without this, coordination remains aspirational.
- Infrastructure Sharing: rules for shared access to physical and digital infrastructure beyond towers and spectrum to shared platforms, APIs, and interoperability standards.
- Emergency Telecommunications: provisions for continuity and resilience during crises. Disruptions rarely stay within one domain. Emergency frameworks must be designed for cross-sector coordination.
- Platform and Digital Market Regulation: competition frameworks should encompass all sectors that rely on digital infrastructure, such as payment platforms, which are part of financial, telecom, and data systems. Regulating only one leaves others unregulated.
- Digital Inclusion and Universal Access: affordability frameworks, infrastructure obligations, and access policies for underserved populations highlight that, in G5 thinking, unconnected populations are a gap in shared dependency. Inclusion is a systemic issue, not just a development concern.
The Digital Toolbox isn't just a checklist but the foundation for making G5 coordination effective. Tools without a coordination structure only guarantee compliance; with one, they build resilience.
G5 Measurement Logic¶
The G5 Benchmark does not measure sectors in isolation. It evaluates how effectively a regulatory system operates across them.
- Indicator-based scoring: G5 Benchmark measurement has evolved — the 2019 edition used 25 indicators; the 2021 edition expanded to 70, distributed across the three tracks. Each indicator reflects the presence of coordination mechanisms, policy quality, or regulatory tools.
- Cross-sector maturity, not sector performance: the focus is not on how strong telecom or finance regulation is individually, but how well they align, interact, and operate as a system.
- Outcome-oriented assessment: the benchmark evaluates whether frameworks enable real-world outcomes: resilience, coordination, and digital ecosystem stability, rather than just formal compliance.
- In G5, maturity is defined by how well the system behaves, not how well individual sectors perform.
What G5 Does Not Require¶
- No single "super regulator."
- No automatic joint approvals.
- No immediate legal overhaul.
- No erosion of regulatory independence.
- No detailed technical tooling at the policy-framing stage.
Much of G5 can be achieved through executive decisions and inter-agency agreements. The coordination must be institutionalized, standing and predictable, rather than activated only when urgency demands it.
By 2020, only 16 of 193 countries had reached formal G5 collaborative regulation, an early benchmark snapshot; figures have been evolving annually since. Europe led with 10. The gap is not a matter of capability; it is a matter of structure.
Is a Policy G5-Aligned?¶
A policy aligns with G5 if it:
- Moves beyond siloed sector thinking.
- Recognizes shared infrastructure and coupling.
- Treats systemic risk as cross-sectoral.
- Embeds coordination as a standing function.
- Preserves sectoral mandates while aligning oversight.
ITU describes G5 as the desired destination for regulation and the gold standard for digital transformation.
Sources