Investigation into Telefónica UK Limited’s compliance with section 105A(4) of the Communications Act 2003

22 February 2019

Closed

Investigation into Telefónica UK Limited (O2)
Case opened 22 February 2019
Case closed 01 November 2019
Summary

We are examining whether O2 has complied with its obligations under section 105A(4) of the Communications Act 2003 with regards to the network outage experienced on 6 December 2018. Specifically, this investigation is examining whether O2 has met the expected requirements of network and service providers to:

  • take all appropriate steps to protect, so far as possible, the availability of its public electronic communications network.
Relevant legal provision(s)

Section 105A(4) of the Communications Act 2003

We have concluded our investigation into Telefónica UK Limited’s compliance with section 105A(4) of the Communications Act 2003.

After reviewing a substantial body of evidence gathered in our investigation, we did not find that O2 had contravened its obligations. We have concluded that, in the specific circumstances of the case, O2 had taken all appropriate steps to protect the availability of its network; and it acted appropriately to restore it.

However, this incident highlights that risks to, and vulnerabilities of, communications networks continue to evolve. While we have not found a breach in this particular case, it is important that providers keep pace and continue to develop and ensure availability of their services.

A document setting out a summary of our conclusions, and lessons that the industry can learn from the nature of the incident is available.

We will continue to engage with providers through our Security and Resilience Assurance Scheme and we intend to update our guidance to reflect industry learnings in due course.


Case leader

Stuart McFadyen (email: stuart.mcfadyen@ofcom.org.uk)

Case reference CW/01235/12/18