The Communications Act 2003
The Communications Act 2003 ("the 2003 Act") provides the current regulatory framework for telecommunications security. The responsibility for the management of security and resilience risks for UK telecoms is shared between Government, Ofcom and industry. The 2003 Act, as amended by the Electronic Communications and Wireless Telegraphy Regulations 2011, requires public telecommunications providers to take measures to protect the security and resilience of their networks and services, and gives Ofcom enforcement powers. The relevant provisions are found at sections 105A to 105D of the 2003 Act.