Communications Act 2003 (c. 21)

Part 2 U.K. Networks, services and the radio spectrum

Chapter 1 U.K. Electronic communications networks and services

[F1 Security of public electronic communications networks and services] U.K.

Textual Amendments

F1 Ss. 105A-105D and cross-heading inserted (26.5.2011) by The Electronic Communications and Wireless Telegraphy Regulations 2011 (S.I. 2011/1210), reg. 1(2), Sch. 1 para. 65 (with Sch. 3 para. 2)

[F2 105J Duty to inform users of risk of security compromise U.K.

(1) This section applies where there is a significant risk of a security compromise occurring in relation to a public electronic communications network or a public electronic communications service.

(2) The provider of the network or service must take such steps as are reasonable and proportionate for the purpose of bringing the relevant information, expressed in clear and plain language, to the attention of persons who use the network or service and may be adversely affected by the security compromise.

(3) The relevant information is—

(a) the existence of the risk of the security compromise occurring;

(b) the nature of the security compromise;

(c) the technical measures that it may be reasonably practicable for persons who use the network or service to take for the purposes of—

(i) preventing the security compromise adversely affecting them;

(ii) remedying or mitigating the adverse effect that the security compromise has on them; and

(d) the name and contact details of a person from whom further information may be obtained about the security compromise.]

Textual Amendments

F2 Ss. 105J-105L inserted (1.10.2022) by Telecommunications (Security) Act 2021 (c. 31), ss. 4(2), 28(2)(b); S.I. 2022/931, reg. 2(b)