Quick answer. The General Conditions of Entitlement are Ofcom’s core regulatory rules for providers of electronic communications networks and services. They set binding standards on network security, emergency services access, consumer protection, transparency, switching and numbering. The conditions apply automatically by virtue of providing a regulated service; there is no licence to apply for. Which specific conditions bind a provider depends on its category, .

A provider of an electronic communications network or service must comply with the General Conditions of Entitlement from the day it begins providing the network or service. Ofcom makes the conditions under section 45 of the Communications Act 2003. They set minimum standards for network security, consumer protection, emergency services, transparency, and access obligations. Compliance is mandatory for all providers that fall within scope. Not every condition applies to every provider. Which conditions a provider must meet depends on its category, so the category has to be settled before the obligations can be.

Trigger situation

A provider has confirmed it falls within Ofcom’s scope and now needs to understand what the General Conditions require. A business expands into a new service category and needs to reassess which conditions apply. An existing provider faces a compliance gap following an Ofcom policy change or business model shift. A potential acquirer needs to understand the compliance obligations that transfer with a telecoms business. Ofcom identifies deficiencies in an investigation and requires the provider to put them right.

Why it matters now

The General Conditions were substantially restructured in October 2018 when Ofcom introduced the current lettered format, superseding the previous numbered conditions. Amendments implementing the European Electronic Communications Code followed in 2020 and 2021. The current structure groups conditions by function (network security, emergency services, numbering and portability, switching, consumer protection, transparency and contract requirements) rather than by provider type. A provider’s obligations depend on whether it provides an electronic communications service (ECS) or an electronic communications network (ECN), whether that service or network is public or private, and which customers it serves (consumers, small businesses or enterprise). The same condition number may apply differently to different provider types, or may not apply at all. An MVNO (mobile virtual network operator) and a fibre network operator both provide electronic communications services but have materially different compliance obligations.

Its typical enforcement pattern is to open an investigation and then use its information-gathering powers under section 135 of the Communications Act 2003 to require providers to produce documents and information. Enforcement notices can follow quickly where deficiencies are identified, Security is a separate route: the duties are in sections 105A to 105Z of the Communications Act 2003, inserted and substituted by the Telecommunications (Security) Act 2021, and they are enforced under that Act’s own procedure rather than as General Conditions. Compliance is a continuing operational requirement.

Common General Conditions compliance failures

The conditions are segmented by provider type. Public ECN providers have obligations around network design, interoperability, and open access that do not apply to ECS providers. ECS providers (such as VoIP providers) have obligations around number management and call quality that may not apply to network operators. Consumer-facing providers have additional consumer protection obligations (transparency, contract terms, quality of service reporting) whose scope depends on whether the provider serves consumers, SMEs, or enterprise customers.

The 2018 restructure changed how conditions are identified and grouped. A provider working from compliance documentation prepared before 2022 may be following conditions that have been renumbered or merged with others. Emergency services obligations sit in General Condition A3, which applies to any person providing a voice communications service or an internet access service, and separately to providers of VoIP outbound call services and of number-based interpersonal communications services.

An existing compliance programme designed for one service category does not automatically apply when the provider expands to another. A managed network operator providing private network services to enterprise customers has one set of obligations. If that operator begins offering broadband internet access to the same customers, additional obligations apply. The existing compliance structure does not necessarily cover the new service. A reassessment is required.

Ofcom’s guidance and enforcement precedents matter alongside the condition text. Ofcom publishes guidance on each condition. The guidance explains how Ofcom interprets the condition, what evidence of compliance looks like, and what Ofcom regards as a material breach. Ofcom enforces the condition, not the guidance, but the guidance shows how Ofcom reads the condition, so a provider that departs from it should be able to explain how it still meets the condition. Ofcom’s enforcement decisions also establish how it interprets conditions in practice. Ofcom publishes those decisions.

Ofcom amends conditions, publishes new guidance and issues enforcement decisions that change how a condition is read, so the conditions that applied to a provider in 2024 are not necessarily those that apply to it in 2026. A provider therefore checks its position against the current text and the current guidance, not against the version it first complied with.

The Advisor’s Perspective

The General Conditions determine in detail how a communications provider may operate and what it must do to comply. Different provider types carry different obligations, and a provider that has not mapped its own category cannot know which conditions it must meet.

The mapping is best done at the outset and then kept current against Ofcom’s guidance and enforcement decisions. A provider that reads the conditions without that context will not know how Ofcom applies them.

General Conditions compliance in practice

The analysis starts with the provider’s category. A provider may supply an electronic communications network, an electronic communications service, or both; the network or service may be public or private; and the customers may be consumers, small businesses or enterprises. A provider can fall into more than one category, and each category it falls into brings its own conditions. Those conditions are then mapped, one by one, against what the provider actually supplies.

Each applicable condition is read for what Ofcom requires and for the evidence Ofcom expects the provider to hold. Ofcom’s published guidance on the condition, and its enforcement decisions, set out how it reads the condition in practice. The provider’s existing compliance programme is then measured against that reading.

Remedying a gap may mean a change to operational procedures, documentation, systems or contract terms. Ofcom’s enforcement record sets the order in which the gaps are closed: a condition Ofcom enforces comes before one it has not.

A provider that changes its service offering settles its category again, because the change may bring new conditions with it.

When to instruct

A provider that knows it is regulated, has compliance processes in place, is not changing its service offering and has seen no new Ofcom guidance affecting its sector needs no specialist input.

A newly regulated provider building a compliance programme for the first time needs specialist input, as does an existing provider expanding into a new service category, where the question is whether new conditions apply. So does a provider under investigation or holding a section 135 information request, where the response has to be read against the condition Ofcom is enforcing. The same is true where it is materially uncertain how a condition applies to a particular business model, where a change to operations or commercial terms has to be assessed for compliance consequences before it is made, and where an acquisition of or investment in a regulated entity requires the target’s compliance status to be established in due diligence.

What a General Conditions review covers

A General Conditions review maps the conditions that apply to the provider’s category and service offering, states what Ofcom requires under each of them, and identifies the evidence Ofcom expects the provider to hold. Ofcom’s current guidance and its enforcement decisions set out how it reads those conditions in practice, and the provider’s existing compliance programme is measured against that reading, gap by gap, in the order Ofcom’s enforcement record sets. The rest follows from the gaps: compliance documentation, policies and procedures; responses to Ofcom investigations, section 135 information requests and enforcement notices; the compliance consequences of a proposed change to a service offering or to operational practice; and, on an acquisition, the compliance status of the target and the remediation it needs.

Related telecoms regulation pages

Other telecoms regulation pages on this site:

Am I regulated?
SMP regulation and market reviews
Numbering
Code Powers and access to land
Spectrum
Lawful intercept and the Investigatory Powers Act 2016
Telecoms Security
Ofcom Licence Fees
Ofcom: Advice for Operators, Investors and Platforms
Interconnection regulation
Complaints and investigations
Connected Vehicles and IoT Regulation
EU Digital Networks Act

Why Choose Bratby Law?

Independent directory rankings

Our specialist expertise is recognised in major independent legal directories:

• Chambers & Partners: Rob Bratby is ranked as a Band 2 lawyer in the UK Guide 2026 in the “Telecommunications” category: Chambers
• The Legal 500: Rob Bratby is listed as a Leading Partner for Telecoms in London (TMT: IT and Telecoms). The Legal 500
• Lexology: Rob Bratby is recognised in the Lexology Index as a Global Elite Thought Leader for telecoms and media, and as a Thought Leader for data privacy and protection: Lexology

What clients say about Bratby Law:

If you are uncertain whether your service falls within scope, the starting point is our Am I regulated? page. If you are facing an Ofcom investigation into General Conditions compliance, see Complaints and Investigations.

Also see

• Why Bratby Law? Specialist telecoms, data protection, payments, transactions and digital regulation lawyers
• Services
• Telecoms Regulation Overview
• Am I regulated?
• Interconnection and Access
• Numbering
• Code Powers
• Security
• Licence fees
• Transactions
• Co-counsel
• Fractional General Counsel

See also: MVNOs and MVNEs.

Frequently asked questions

Does the Ofcom General Conditions regime apply to my organisation?

It applies if you provide an electronic communications network or an electronic communications service. Most of the conditions that carry consumer protection and emergency access obligations turn on the network or service being public, but not all of them do: the numbering conditions in Part B apply to all communications providers, whether or not the network or service is public.

Do the Ofcom General Conditions apply if I only provide services to enterprises?

Yes, in most cases. A network is public where it is provided wholly or mainly to make electronic communications services available to members of the public, so the test is who the network or service is held out to rather than whether a particular customer is inside or outside your group.

Do the General Conditions apply to wholesale services?

Yes. Wholesale providers of capacity, IP transit, interconnection, MVNO hosting and related services are public ECS providers and must comply with relevant Conditions.

Do the General Conditions apply to cloud-based or virtualised connectivity?

Yes where the core feature is connectivity. SD-WAN, SASE and virtual switching services may constitute ECS provision.

How do the General Conditions interact with the Telecommunications (Security) Act?

Public ECN/ECS providers must comply with the statutory security duties. These obligations sit alongside, and do not replace, the General Conditions.

Which Conditions apply to numbering and porting?

The numbering conditions are in Part B and apply to all communications providers. Porting straddles both Parts: Condition B3 carries the network-side duty not to delay number portability, and Condition C7.6 carries the duty on a regulated provider to provide number portability on reasonable terms, for at least a month after the customer terminates, and without direct charge. The gaining-provider-led switching requirements are in Part C, at Conditions C7.21 to C7.24.

Which Conditions apply to consumers and small businesses?

Part C includes contract information, switching, complaints handling and other protections for consumers and small enterprises placed on providers to those groups.

What happens if I breach the General Conditions?

Ofcom may issue directions, require remedial steps, impose penalties and publish enforcement outcomes.

The Core Communication and TelXL case studies show this work in practice.