Search Legislation

Telecommunications (Security) Act 2021

 Help about what version

What Version

 Help about advanced features

Advanced Features

 Help about opening options

Opening Options

Changes to legislation:

There are currently no known outstanding effects for the Telecommunications (Security) Act 2021, Section 7. Help about Changes to Legislation

Close

Changes to Legislation

Revised legislation carried on this site may not be fully up to date. At the current time any known changes or effects made by subsequent legislation have been applied to the text of the legislation you are viewing by the editorial team. Please see ‘Frequently Asked Questions’ for details regarding the timescales for which new effects are identified and recorded on this site.

7Powers of OFCOM to enforce compliance with security dutiesU.K.

This section has no associated Explanatory Notes

(1)The Communications Act 2003 is amended as follows.

(2)After section 105R insert—

105SEnforcement of security duties

(1)Sections 96A to 100, 102 and 103 apply in relation to a contravention of a security duty as they apply in relation to a contravention of a condition set under section 45, other than an SMP apparatus condition.

(2)This section is subject to section 105T (enforcement of security duties: amount of penalties).

(3)In this section “security duty” means a duty imposed by or under any of sections 105A to 105D, 105I to 105K, 105L(6), (7)(c) and (8), 105N(2)(a) and 105O.

105TEnforcement of security duties: amount of penalties

(1)In its application in relation to a contravention of a security duty, other than a security duty imposed by section 105I, section 96B(5) has effect as if the maximum penalty specified were £100,000 per day.

(2)In its application in relation to a contravention of a security duty imposed by section 105I, section 96B(5) has effect as if the maximum penalty specified were £50,000 per day.

(3)In its application in relation to a contravention of a security duty imposed by section 105I, section 97(1) has effect as if the maximum penalty specified were £10 million.

(4)The Secretary of State may by regulations amend this section so as to substitute a different amount for the amount for the time being specified in subsection (1), (2) or (3).

(5)No regulations are to be made containing provision authorised by subsection (4) unless a draft of the regulations has been laid before Parliament and approved by a resolution of each House.

(6)In this section “security duty” has the same meaning as in section 105S.

105UEnforcement of security duties: proposal for interim steps

(1)This section applies where—

(a)OFCOM determine that there are reasonable grounds for believing that the provider of a public electronic communications network or a public electronic communications service is contravening or has contravened a duty imposed by or under any of sections 105A to 105D;

(b)OFCOM either have not commenced, or have commenced but not completed, enforcement action in connection with the contravention;

(c)OFCOM determine that there are reasonable grounds for believing that either or both of the following conditions are met—

(i)a security compromise has occurred as a result of the contravention;

(ii)there is an imminent risk of a security compromise or (as the case may be) a further security compromise occurring as a result of the contravention; and

(d)OFCOM determine that, having regard to the seriousness or likely seriousness of the security compromise or security compromises mentioned in paragraph (c), it is reasonable to require the provider to take interim steps pending the completion by OFCOM of enforcement action in connection with the contravention.

(2)OFCOM may give a notification to the provider that—

(a)sets out the determinations mentioned in subsection (1);

(b)specifies the interim steps that OFCOM think the provider should be required to take pending the completion by OFCOM of enforcement action in connection with the contravention; and

(c)specifies the period during which the provider has an opportunity to make representations about the matters notified.

(3)In this section and section 105V

(a)references to the commencement by OFCOM of enforcement action in connection with a contravention are to the giving of a notification under section 96A (as applied by section 105S) in respect of the contravention; and

(b)references to the completion by OFCOM of enforcement action in connection with a contravention are to the taking of action under section 96C(2)(a) or (b) (as applied by section 105S) in connection with the contravention.

(4)In this section “interim steps” means—

(a)in a case where OFCOM determine that there are reasonable grounds for believing that the condition in subsection (1)(c)(i) is met, steps to—

(i)prevent adverse effects (on the network or service or otherwise) arising from the security compromise;

(ii)remedy or mitigate any adverse effects on the network or service arising from the security compromise;

(b)in a case where OFCOM determine that there are reasonable grounds for believing that the condition in subsection (1)(c)(ii) is met, steps to—

(i)eliminate or reduce the risk of the security compromise or (as the case may be) the further security compromise occurring;

(ii)prevent adverse effects (on the network or service or otherwise) arising from the security compromise or (as the case may be) the further security compromise in the event it occurs.

105VEnforcement of security duties: direction to take interim steps

(1)This section applies where—

(a)the provider of a public electronic communications network or a public electronic communications service has been given a notification under section 105U;

(b)OFCOM have allowed the provider an opportunity to make representations about the matters notified; and

(c)the period allowed for the making of representations has expired.

(2)OFCOM may—

(a)direct the provider to take the interim steps or any of the interim steps specified in the notification; or

(b)inform the provider that a direction under paragraph (a) will not be given.

(3)OFCOM may give a direction under subsection (2)(a) only if (after considering any representations) they are satisfied—

(a)that there are reasonable grounds for believing that the contravention on the basis of which the notification was given occurred;

(b)that there are reasonable grounds for believing that either or both of the following conditions are met—

(i)a security compromise has occurred as a result of the contravention;

(ii)there is an imminent risk of a security compromise or (as the case may be) a further security compromise occurring as a result of the contravention; and

(c)that, having regard to the seriousness or likely seriousness of the security compromise or security compromises mentioned in paragraph (b), it is reasonable to give the direction.

(4)A direction under subsection (2)(a) must include a statement of OFCOM’s reasons for giving the direction.

(5)A direction under subsection (2)(a) must, in relation to each interim step, specify the period within which the step must be taken.

(6)A direction under subsection (2)(a) is ineffective in so far as it would require interim steps to be taken after the completion by OFCOM of enforcement action in connection with the contravention concerned.

(7)Where a direction under subsection (2)(a) has been given and has not been revoked, OFCOM must as soon as reasonably practicable—

(a)commence enforcement action in connection with the contravention concerned (unless enforcement action was commenced by OFCOM before the direction was given); and

(b)complete enforcement action in connection with the contravention concerned.

(8)A direction under subsection (2)(a) may at any time—

(a)be revoked by OFCOM; or

(b)be varied by OFCOM so as to make it less onerous.

(9)A provider of a public electronic communications network or a public electronic communications service who is given a direction under subsection (2)(a) must comply with it.

(10)That duty is enforceable in civil proceedings by OFCOM—

(a)for an injunction;

(b)for specific performance of a statutory duty under section 45 of the Court of Session Act 1988; or

(c)for any other appropriate remedy or relief.

(3)In section 113 (suspension of application of the electronic communications code) in subsection (2)(b) for “section 105D” substitute “section 105S.

Commencement Information

I1S. 7 not in force at Royal Assent, see s. 28

I2S. 7 in force at 1.10.2022 by S.I. 2022/931, reg. 2(b)

Back to top

Options/Help

Print Options

Close

Legislation is available in different versions:

Latest Available (revised):The latest available updated version of the legislation incorporating changes made by subsequent legislation and applied by our editorial team. Changes we have not yet applied to the text, can be found in the ‘Changes to Legislation’ area.

Original (As Enacted or Made): The original version of the legislation as it stood when it was enacted or made. No changes have been applied to the text.

Close

See additional information alongside the content

Geographical Extent: Indicates the geographical area that this provision applies to. For further information see ‘Frequently Asked Questions’.

Show Timeline of Changes: See how this legislation has or could change over time. Turning this feature on will show extra navigation options to go to these specific points in time. Return to the latest available version by using the controls above in the What Version box.

Close

Opening Options

Different options to open legislation in order to view more content on screen at once

Close

Explanatory Notes

Text created by the government department responsible for the subject matter of the Act to explain what the Act sets out to achieve and to make the Act accessible to readers who are not legally qualified. Explanatory Notes were introduced in 1999 and accompany all Public Acts except Appropriation, Consolidated Fund, Finance and Consolidation Acts.

Close

More Resources

Access essential accompanying documents and information for this legislation item from this tab. Dependent on the legislation item being viewed this may include:

  • the original print PDF of the as enacted version that was used for the print copy
  • lists of changes made by and/or affecting this legislation item
  • confers power and blanket amendment details
  • all formats of all associated documents
  • correction slips
  • links to related legislation and further information resources
Close

Timeline of Changes

This timeline shows the different points in time where a change occurred. The dates will coincide with the earliest date on which the change (e.g an insertion, a repeal or a substitution) that was applied came into force. The first date in the timeline will usually be the earliest date when the provision came into force. In some cases the first date is 01/02/1991 (or for Northern Ireland legislation 01/01/2006). This date is our basedate. No versions before this date are available. For further information see the Editorial Practice Guide and Glossary under Help.

Close

More Resources

Use this menu to access essential accompanying documents and information for this legislation item. Dependent on the legislation item being viewed this may include:

  • the original print PDF of the as enacted version that was used for the print copy
  • correction slips

Click 'View More' or select 'More Resources' tab for additional information including:

  • lists of changes made by and/or affecting this legislation item
  • confers power and blanket amendment details
  • all formats of all associated documents
  • links to related legislation and further information resources