Part 2

Networks, services and the radio spectrum
Chapter 1

Electronic communications networks and services

Security of public electronic communications networks and services

Duty to inform OFCOM of security compromise
105K
1
The provider of a public electronic communications network or a public electronic communications service must inform OFCOM as soon as reasonably practicable of—
a
any security compromise that has a significant effect on the operation of the network or service;
b
any security compromise within section
105A
(2)(b) that puts any person in a position to be able to bring about a further security compromise that would have a significant effect on the operation of the network or service.
2
In determining for the purposes of this section whether the effect that a security compromise has, or would have, on the operation of a network or service is significant, the following matters in particular are to be taken into account—
a
the length of the period during which the operation of the network or service is or would be affected;
b
the number of persons who use the network or service that are or would be affected by the effect on the operation of the network or service;
c
the size and location of the geographical area within which persons who use the network or service are or would be affected by the effect on the operation of the network or service;
d
the extent to which activities of persons who use the network or service are or would be affected by the effect on the operation of the network or service.
Ss. 105J-105L inserted (1.10.2022) by Telecommunications (Security) Act 2021 (c. 31), ss. 4(2), 28(2)(b); S.I. 2022/931, reg. 2(b)
Ss. 105A-105D and cross-heading inserted (26.5.2011) by The Electronic Communications and Wireless Telegraphy Regulations 2011 (S.I. 2011/1210), reg. 1(2), Sch. 1 para. 65 (with Sch. 3 para. 2)