Commentary on provisions of Act Section 11: Reporting on matters related to security Section 105Z: Ofcom reports on security
Subsection (1) requires Ofcom to send periodic security reports to the Secretary of State as soon as practicable after the end of each reporting period. The reporting period is two years from the day on which the section comes into force and each successive twelve-month period after this date.
	Subsections (2) and (3) provide that a security report must contain information and advice which will assist the Secretary of State to formulate policy regarding the security of public electronic communication networks and services.
	Subsection (4) sets out matters which must be included in a security report, such as information about the extent to which providers have complied with security duties during the reporting period.
	Subsection (5) states that the security report must not include personal data (i.e. any information relating to an identified or identifiable living individual).
	Subsection (6) allows the Secretary of State to publish a security report or disclose it to any person or body discharging functions of a public nature in order to enable or assist the discharge of those functions.
	Subsections (7) and (8) requires the Secretary of State to consider the need to keep confidential matters relating to the affairs of a particular body, the disclosure of which might seriously or prejudicially affect the interests of that body before publishing or disclosing a security report.