| Guvnor

Enforced by: Ofcom
Status: In Force
Penalty ceiling: Regulated

Does it bind you?

Business-side roles with duties under this instrument.

Operator13

Other Acts binding the same actors

If a role above is yours, these are the other instruments that most often bind it.

Operator — also bound by 803 other Acts

Regulation (EU) No 965/2012 (Air Operations) 203 duties

Commission Implementing Regulation (EU) 2018/2066 of 19 December 2018 on the monitoring and reporting of greenhouse gas emissions pursuant to Directive 2003/87/EC of the European Parliament and of the Council and amending Commission Regulation (EU) No 601/2012 (Text with EEA relevance) 121 duties

Space Industry Regulations 2021 76 duties

Regulation (EU) 2016/429 of the European Parliament and of the Council of 9 March 2016 on transmissible animal diseases and amending and repealing certain acts in the area of animal health (‘Animal Health Law’) (Text with EEA relevance) 66 duties

Air Navigation Order 2016 65 duties

What it requires

Regulations creating concrete business duties or carrying penalties, grouped as the instrument is structured. Titles link to the source text — blue means you’re leaving for legislation.gov.uk.

s.003 Network architecture Regulated

Design, build and maintain secure networks to reduce security compromise risksOperator

s.004 Protection of data and network functions Regulated

Protect your network data, functions and customer SIM cards from security risksOperator

s.005 Protection of certain tools enabling monitoring or analysis Regulated

Protect monitoring tools from security compromises and Schedule-country accessOperator

s.006 Monitoring and analysis Regulated

Monitor and analyse security-critical network functionsOperator

s.007 Supply chain Regulated

Manage supply chain security risks from third-party suppliersOperator

s.008 Prevention of unauthorised access or interference Regulated

Secure your network or service against unauthorised accessOperator

s.009 Preparing for remediation and recovery Regulated

Prepare for and recover from security compromises affecting your network or serviceOperator

s.010 Governance Regulated

Govern security measures with policy, incident management and board oversightOperator

s.011 Reviews Regulated

Review security measures regularly and produce annual written risk assessmentOperator

s.012 Patches and updates Regulated

Deploy security patches and updates to protect your networkOperator

s.013 Competency Regulated

Ensure staff responsible for network security are competent and resourcedOperator

s.014 Testing Regulated

Carry out regular security tests on your electronic communications network or serviceOperator

s.015 Assistance Regulated

Help other providers if a security compromise could affect themOperator

3 other provisions — procedural and definitional

s.001 Citation, commencement and extent

s.002 Interpretation

s.016 Exemption for micro-entities

Help complying

Guvnor’s practical routes through this instrument.

Set up a telecommunications business

For new telecommunications businesses. Put the employer duties in place for field work at height, near electricity and in ducts and chambers, …

1 more guide that reference this instrument

Meet your telecommunications regulatory duties

Duty extraction and severity labels are Guvnor’s analysis of the instrument, not the instrument itself. Always verify against the linked source text.