Technology & Digital Technology and digital platforms UK-wide

Tech Sector Licensing and Authorisations

Comprehensive guide to licences and regulatory authorisations required for technology businesses - telecommunications, financial services, intellectual property, export controls, and product safety.

Guide summary

Check if your tech business needs licences from the FCA, Ofcom, ECJU, or ICO. Apply for FCA authorisation if you handle payments or e-money – fees range from £500 to £25,000. Notify Ofcom if you provide telecoms services, and get an export licence from ECJU for controlled technology or cryptography over 56-bit (penalty up to 10 years in prison).

  • Register with ICO and do a Data Protection Impact Assessment for high-risk processing
  • Apply for FCA authorisation for payment services – fees £500 to £25,000, timeline 3–12 months
  • Use FCA’s Small Payment Service registration if processing under €3m per month
  • Notify Ofcom as a Communications Provider – no fee but annual charge based on turnover
  • Get an Ofcom spectrum licence to transmit radio signals – fee £50 to £100,000s
  • Check ECJU export licences for dual-use, cryptography over 56-bit, or technical assistance
  • Apply for OFSI sanction licence if providing tech to designated persons or sanctioned countries
  • Ensure MHRA registration for medical or health technology products
  • Comply with enhanced data protection rules for EdTech processing children’s data
  • Keep records of all licences and renewals to avoid penalties
On this page

Related guides in Digital & Technology

Software licensing compliance

Understand your legal obligations when using, developing, or distributing software - including open source licensing, commercial agreements, and …

Understanding licensing requirements

Technology businesses may require multiple licences and authorisations depending on their activities. The requirements you face depend on what your business does:

  • Payment or financial services: FCA authorisation or registration (see Financial Services below)
  • Telecommunications provider: Ofcom notification and possible spectrum licensing
  • Export controlled technology: ECJU export licence for dual-use items or cryptography
  • Medical or health technology: MHRA device registration
  • EdTech processing children's data: Enhanced data protection requirements

Data protection registration and assessments

Before processing personal data, you may need to conduct a Data Protection Impact Assessment (DPIA) for high-risk processing activities.

Financial services authorisations

If your tech business provides payment services, issues e-money, or offers other financial services, you need FCA authorisation or registration. The route depends on your activities and scale.

Telecommunications authorisations

Businesses providing electronic communications networks or services need Ofcom authorisation.

Export controls and sanctions

Tech businesses exporting controlled technology, software, or cryptography may need export licences.

Intellectual property protection

Protecting your software and brand through IP registration.

Sector-specific registrations

Some tech sub-sectors have additional registration requirements beyond the general obligations above.