|Investigation into||Telefónica UK Limited (O2)|
|Case opened||22 February 2019|
|Case closed||01 November 2019|
We are examining whether O2 has complied with its obligations under section 105A(4) of the Communications Act 2003 with regards to the network outage experienced on 6 December 2018. Specifically, this investigation is examining whether O2 has met the expected requirements of network and service providers to:
|Relevant legal provision(s)||
Section 105A(4) of the Communications Act 2003
We have concluded our investigation into Telefónica UK Limited’s compliance with section 105A(4) of the Communications Act 2003.
After reviewing a substantial body of evidence gathered in our investigation, we did not find that O2 had contravened its obligations. We have concluded that, in the specific circumstances of the case, O2 had taken all appropriate steps to protect the availability of its network; and it acted appropriately to restore it.
However, this incident highlights that risks to, and vulnerabilities of, communications networks continue to evolve. While we have not found a breach in this particular case, it is important that providers keep pace and continue to develop and ensure availability of their services.
A document setting out a summary of our conclusions, and lessons that the industry can learn from the nature of the incident is available.
We will continue to engage with providers through our Security and Resilience Assurance Scheme and we intend to update our guidance to reflect industry learnings in due course.
Stuart McFadyen (email: firstname.lastname@example.org)