Skip to content

UK Telecommunications Security Act

In force United Kingdom · In force Oct 1, 2022 · no upcoming deadlines

Deadlines

DateWhat happens
Oct 1, 20223 years agoSecurity measures regulations in force
Nov 17, 20214 years agoRoyal Assent

Summaries for reference, not legal advice. Check the official text.

What it does

Imposes strengthened security duties on UK public telecoms providers, backed by detailed security measures regulations and a code of practice. It also gives the government powers to restrict the use of high-risk vendors' equipment through designated vendor directions.

Who it applies to
Public electronic communications network and service providers in the UK.
Penalties
Ofcom penalties up to 10% of relevant turnover, or up to GBP 100,000 per day for continuing contraventions.
Enforced by
Ofcom; Secretary of State for designated vendor directions.
Official name
Telecommunications (Security) Act 2021 and the Electronic Communications (Security Measures) Regulations 2022
Citation
2021 c. 31; SI 2022/933
Topics
cybersecurity, breach-notification
Verified 2026-09-25 legislation.gov.uk
Research notes

Tiered implementation timeframes for specific measures are set in the government's Telecommunications Security Code of Practice; those dates were not verified from an official page here and are left out.

Related

Questions about UK Telecommunications Security Act
What are the UK Telecommunications Security Act compliance deadlines?
Nov 17, 2021: Royal Assent. Oct 1, 2022: Security measures regulations in force.
When does UK Telecommunications Security Act take effect?
UK Telecommunications Security Act took effect on Oct 1, 2022.
Who does UK Telecommunications Security Act apply to?
Public electronic communications network and service providers in the UK.
What are the penalties under UK Telecommunications Security Act?
Ofcom penalties up to 10% of relevant turnover, or up to GBP 100,000 per day for continuing contraventions.

Rule changes by email

The morning after a new data, privacy or AI law, or a deadline change; nothing in quiet weeks.

Double opt-in. Unsubscribe any time.