Technology & Digital UK-wide

Set up and run a safe telecommunications business

Every telecommunications operator — whether you run mobile networks, fixed-line infrastructure, broadband services, satellite systems or wholesale connectivity — must meet the same workplace health and safety, fire safety, insurance, equality and data protection duties before you begin operating. This guide walks you through each one.

Guide summary

You must meet workplace safety, fire safety, insurance, equality and data protection duties before running your telecoms business. Carry out written risk assessments for working at height, electrical hazards, confined spaces, lone working and manual handling. Hold employers’ liability insurance if you employ anyone. Complete a fire risk assessment for your premises.

  • Carry out risk assessments for height, electrical, confined spaces, lone work and manual handling
  • Record risk assessments in writing if you employ 5 or more people
  • Complete a fire risk assessment for your premises
  • Hold employers’ liability insurance with at least £5 million cover
  • Display or make available your insurance certificate
  • Meet equality and data protection duties before operating
  • Follow HSE rules for mast and tower work – falls, RF exposure, weather
  • Train staff on fire safety and emergency procedures
  • Check fire detection, escape routes and equipment are in place
On this page

Related guides in Compliance & Legal

Telecommunications businesses expose staff to working at height (mast and tower work), electrical hazards, confined spaces (ducting and chambers), lone working at remote sites and manual handling of heavy equipment. Every employer and self-employed person has duties under the Health and Safety at Work etc. Act 1974 (HASWA). The Health and Safety Executive (HSE) enforces in Great Britain; the Health and Safety Executive for Northern Ireland (HSENI) enforces in Northern Ireland.

A. Health and safety at work

HASWA requires you to ensure, so far as is reasonably practicable, the health, safety and welfare of your employees and anyone else affected by your work. You must carry out a suitable and sufficient risk assessment covering working at height, electrical safety, confined-space entry, lone working and manual handling. If you employ five or more people you must record the risk assessment in writing. Telecoms mast and tower work carries particular risks from falls, RF exposure and adverse weather.

B. Fire safety

The Regulatory Reform (Fire Safety) Order 2005 applies in England and Wales. Scotland has the Fire (Scotland) Act 2005 and the Fire Safety (Scotland) Regulations 2006. Northern Ireland has the Fire and Rescue Services (Northern Ireland) Order 2006 and the Fire Safety Regulations (Northern Ireland) 2010. You are the 'responsible person' for the premises and must carry out a fire risk assessment, maintain escape routes, install fire detection and provide staff training. Data centres, equipment rooms and battery-storage areas may present specific fire risks from lithium-ion batteries and electrical equipment.

C. Employers' liability insurance

If you employ anyone — including part-time staff, contractors or agency workers under your direction — you must hold employers' liability insurance with a minimum cover of £5 million and display the certificate (or make it available electronically). The Employers' Liability (Compulsory Insurance) Act 1969 applies in Great Britain. In Northern Ireland, the equivalent duty is under the Employers' Liability (Defective Equipment and Compulsory Insurance) (Northern Ireland) Order 1972.

D. Equality

The Equality Act 2010 applies in England, Scotland and Wales. It protects employees, job applicants and service users from discrimination based on nine protected characteristics. In Northern Ireland, the Disability Discrimination Act 1995, the Sex Discrimination (Northern Ireland) Order 1976 and the Fair Employment and Treatment (Northern Ireland) Order 1998 provide equivalent protections enforced by the Equality Commission for Northern Ireland (ECNI).

E. Data protection

If you hold customer records, employee data, billing information, CCTV footage or network-traffic metadata, you process personal data. The UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 apply UK-wide. You must register with the Information Commissioner's Office (ICO) unless exempt, identify a lawful basis for each processing activity, keep data secure and respond to subject access requests within one calendar month. Telecoms operators also have additional privacy duties under PECR — see the sector-specific guide.

  1. 1

    What to do next

    If you provide a public electronic communications network or service, hold spectrum licences, or need to meet security and lawful-intercept duties, follow "Meet your telecommunications regulatory duties" for the Ofcom, security, lawful-intercept and PECR duties that sit on top of this universal foundation.

Official sources

Authoritative guidance for telecommunications workplace duties.