This paper addresses the main aspects of implementing U-Space in Europe according to its regulatory framework. We analyse the reasons for the delay in its roadmap and the challenges to resolve. In turn, we discuss the importance of addressing data interconnectivity and information exchange and aspects related to cybersecurity and resilience in the field of U-Space, which are not analysed by the doctrine. We also discuss the applicability of the AI Act to U-Space as a critical digital infrastructure and whether some of its services could somehow fit within the “high-risk AI systems” intended to be used as security components in their management and operation, with the important consequences that such qualification entails.