Communications Act 2003

[F1 105V Enforcement of security duties: direction to take interim steps U.K.

(1) This section applies where—

(a) the provider of a public electronic communications network or a public electronic communications service has been given a notification under section 105U;

(b) OFCOM have allowed the provider an opportunity to make representations about the matters notified; and

(c) the period allowed for the making of representations has expired.

(2) OFCOM may—

(a) direct the provider to take the interim steps or any of the interim steps specified in the notification; or

(b) inform the provider that a direction under paragraph (a) will not be given.

(3) OFCOM may give a direction under subsection (2)(a) only if (after considering any representations) they are satisfied—

(a) that there are reasonable grounds for believing that the contravention on the basis of which the notification was given occurred;

(b) that there are reasonable grounds for believing that either or both of the following conditions are met—

(i) a security compromise has occurred as a result of the contravention;

(ii) there is an imminent risk of a security compromise or (as the case may be) a further security compromise occurring as a result of the contravention; and

(c) that, having regard to the seriousness or likely seriousness of the security compromise or security compromises mentioned in paragraph (b), it is reasonable to give the direction.

(4) A direction under subsection (2)(a) must include a statement of OFCOM’s reasons for giving the direction.

(5) A direction under subsection (2)(a) must, in relation to each interim step, specify the period within which the step must be taken.

(6) A direction under subsection (2)(a) is ineffective in so far as it would require interim steps to be taken after the completion by OFCOM of enforcement action in connection with the contravention concerned.

(7) Where a direction under subsection (2)(a) has been given and has not been revoked, OFCOM must as soon as reasonably practicable—

(a) commence enforcement action in connection with the contravention concerned (unless enforcement action was commenced by OFCOM before the direction was given); and

(b) complete enforcement action in connection with the contravention concerned.

(8) A direction under subsection (2)(a) may at any time—

(a) be revoked by OFCOM; or

(b) be varied by OFCOM so as to make it less onerous.

(9) A provider of a public electronic communications network or a public electronic communications service who is given a direction under subsection (2)(a) must comply with it.

(10) That duty is enforceable in civil proceedings by OFCOM—

(a) for an injunction;

(b) for specific performance of a statutory duty under section 45 of the Court of Session Act 1988; or

(c) for any other appropriate remedy or relief.]

Textual Amendments

F1 Ss. 105S-105V inserted (1.10.2022) by Telecommunications (Security) Act 2021 (c. 31), ss. 7(2), 28(2)(b); S.I. 2022/931, reg. 2(b)