| Guvnor

Enforced by: Ofcom
Status: In Force
Penalty ceiling: Prosecution 2 of 7 obligations carry a fine up to £10,000,000. 5 have no criminal penalty — flagged in the list below.

Does it bind you?

Business-side roles with duties under this instrument.

Any Person6

Plus 1 duty on the regulator, Crown ministers and public bodies — folded into the section list below.

Other Acts binding the same actors

If a role above is yours, these are the other instruments that most often bind it.

Any Person — also bound by 2340 other Acts

Human Medicines Regulations 2012 184 duties

Merchant Shipping Act 1995 144 duties

Insolvency (England and Wales) Rules 2016 104 duties

Communications Act 2003 92 duties

Road Traffic Act 1988 92 duties

What it requires

Sections creating concrete business duties or carrying penalties, grouped as the instrument is structured. Titles link to the source text — blue means you’re leaving for legislation.gov.uk.

s.002 Duty to take measures in response to security compromises Regulated

Take appropriate measures to respond to security compromises in your telecoms network or serviceAny Person

s.005 General duty of OFCOM to ensure compliance with security duties Regulated

Other duties (1) — Crown / regulator

Ofcom must ensure telecoms providers comply with security dutiesStatutory regulator

s.015 Designated vendor directions Regulated

Public communications providers must comply with designated vendor directionsAny Person

s.020 Power of Secretary of State to enforce compliance with designated vendor directions etc Regulated

Comply with confirmation decisions and pay penaltiesAny Person

s.022 Requirement not to disclose Prosecution

Breach of non-disclosure requirementAny Person

Fine up to £10,000,000

s.023 Power of Secretary of State to require information etc Regulated

Comply with Secretary of State's telecom security information requestsAny Person

s.024 Further amendment concerning penalties Prosecution

Fail to provide required telecoms security information to OfcomAny Person

Fine up to £10,000,000

22 other provisions — procedural and definitional

s.001 Duty to take security measures

s.003 Codes of practice about security measures etc

s.004 Informing others of security compromises

s.006 Powers of OFCOM to assess compliance with security duties

s.007 Powers of OFCOM to enforce compliance with security duties

s.008 Civil liability for contravention of security duties

s.009 Relationship between security duties and certain other duties etc

s.010 Statement of policy on ensuring compliance with security duties

s.011 Reporting on matters related to security

s.012 Powers to require and share information related to security

s.013 Appeals against security decisions of OFCOM

s.014 Reviews of sections 1 to 13

s.016 Designation notices

s.017 Laying before Parliament

s.018 Monitoring of designated vendor directions

s.019 Monitoring directions: inspection notices

s.021 Urgent enforcement directions

s.025 Further consequential amendments

s.026 Financial provision

s.027 Extent

s.028 Commencement

s.029 Short title

Help complying

Guvnor’s practical routes through this instrument.

2 more guides that reference this instrument

Meet your telecommunications regulatory duties Telecommunications compliance checklist

Duty extraction and severity labels are Guvnor’s analysis of the instrument, not the instrument itself. Always verify against the linked source text.

Telecommunications (Security) Act 2021

Does it bind you?

Other Acts binding the same actors

What it requires

Help complying