Asked by: Lord Inglewood (Crossbench - Excepted Hereditary)
Question to the Department for Science, Innovation & Technology:
To ask His Majesty's Government what assessment they have made of how aware organisations purchasing telecommunications services are of provider obligations under the Telecommunications Security Act 2021.
Answered by Baroness Lloyd of Effra - Baroness in Waiting (HM Household) (Whip)
The Telecommunications (Security) Act 2021 (TSA) established a robust security framework for UK public telecoms networks and services, placing new legal duties on public telecoms providers to identify and mitigate security risks. The framework is designed to ensure that security is embedded within the networks and services, so those using them can have confidence in their security.
DSIT works with Ofcom and the National Cyber Security Centre (NCSC) to ensure providers are aware of their obligations. Ofcom produces annual security reports for the Secretary of State on providers’ compliance with their obligations in the Act, and their progress against the guidance measures set out in the accompanying Telecommunications Security Code of Practice. These measures have staggered implementation timeframes based on factors such as their complexity and cost.
The first report was published on GOV.UK in January 2025, and is available to organisations purchasing telecommunications services. The report helps the Government monitor compliance approaches across the sector, including progress against guidance measures in the Code of Practice as they fall due.
Asked by: Lord Inglewood (Crossbench - Excepted Hereditary)
Question to the Department for Science, Innovation & Technology:
To ask His Majesty's Government what assessment they have made of the guidance available for organisations purchasing telecommunications services about the due diligence they should undertake.
Answered by Baroness Lloyd of Effra - Baroness in Waiting (HM Household) (Whip)
The Government is committed to ensuring the security and resilience of the UK’s telecommunications networks and services, including supporting informed purchasing decisions by businesses and other organisations.
The Telecommunications (Security) Act 2021 (TSA) amended the Communications Act 2003 to establish a robust security framework for UK public telecoms networks and services. Ofcom provides guidance to businesses purchasing telecommunications services and enforces protections for business customers through the General Conditions of Entitlement, which all telecommunications operators must meet to provide services in the UK.
The Government will continue to keep the security of telecoms networks under review.
Asked by: Lord Inglewood (Crossbench - Excepted Hereditary)
Question to the Department for Science, Innovation & Technology:
To ask His Majesty's Government what assessment they have made of security risks resulting from critical public services provided with telecommunications by organisations that are not in the scope of the Telecommunications Security Act 2021, and which are instead regulated by other countries.
Answered by Baroness Lloyd of Effra - Baroness in Waiting (HM Household) (Whip)
The Government is committed to ensuring the security and resilience of the UK’s telecommunications networks and services. This includes regular assessment of security and resilience risks relating to such networks and services.
The Telecommunications (Security) Act 2021 (TSA) amended the Communications Act 2003 to establish a robust security framework for UK public telecoms networks and services, placing new legal duties on public telecoms providers to identify and mitigate security risks.
Some essential services may use private telecoms networks outside the scope of the TSA. However, under the Network and Information Systems (NIS) Regulations 2018, operators of essential services are required to manage risks to those services resulting from their use of such networks. In addition, the National Security and Investment Act 2021 includes powers to scrutinise and, if necessary, intervene in foreign acquisitions or investments in the UK telecoms sector that may pose national security risks.
The UK government also works closely to promote the adoption of appropriate and proportionate telecoms security regulations by other countries.
Asked by: Lord Inglewood (Crossbench - Excepted Hereditary)
Question to the Department for Science, Innovation & Technology:
To ask His Majesty's Government what assessment they have made of the adequacy of the current framework for Ofcom in promoting economic growth under (1) the general duties of Ofcom under section 3 of the Communications Act 2003, (2) its interpretation through the Government's statements of strategic priorities, and (3) the growth duty extended to Ofcom.
Answered by Baroness Jones of Whitchurch
Ofcom’s central duty is to further the interests of citizens and consumers, where appropriate by promoting competition, and having regard, amongst other things, to encouraging investment and innovation. Resultantly, Ofcom’s regulatory regime supports the drivers of economic growth in the markets they regulate, and the impact of this on these sectors can be seen, for example, in how the telecoms market has grown 25% in the last ten years.
The current statement of Strategic Priorities for Telecommunications, Spectrum Management and Postal Services was designated in 2019. The digital landscape and market conditions have changed significantly since then, and we are currently updating the Statement to respond to these changes and set out the Government’s key priorities for these sectors that support Government’s mission to kickstart economic growth.