The Telecommunications (Security) Act 2021 became law on 1 October 2022. As part of its role under the 2021 Act, Ofcom intends to use information notices (issued under the Communications Act 2003) to understand how each provider complies with the new security framework. It expects to issue such notices to public electronic communications network providers and public electronic service providers in scope of the new framework, i.e. those who are identified as Tier 1 or Tier 2 providers in the DCMS’ draft code of practice.

As this regime and its obligations are new to network and service providers, and to Ofcom, the regulator wants to run a trial of its information-gathering processes. The trial will see Ofcom send non-binding information notices to participating providers relating to three measures from the draft code of practice.

Those interested in volunteering for this trial should email networksecurityenquiries@ofcom.org.uk for more information. To access Ofcom’s security guidance for operators on its website, click here.