Quick answer. Ofcom is the UK regulator for telecoms, broadcasting, spectrum, postal services and online safety. Its powers are wide and discretionary. Day-to-day enforcement runs through several distinct divisions (Consumer Group, Networks and Communications Group, Spectrum Management Group, Online Safety) each with its own institutional culture and resourcing. How Ofcom prioritises in practice often diverges from its published policy. Effective engagement requires understanding the regulator’s internal mechanics, not just reading its guidance documents.

Trigger situation

A business needs to understand how Ofcom operates in practice, not just what its statutory duties are. A provider is facing an Ofcom information request, own-initiative investigation, or policy consultation and needs to understand the regulator’s approach. A PE investor or acquirer needs to assess the regulatory risk profile of a telecoms target, which requires understanding how Ofcom actually exercises its powers.

Why it matters now

Ofcom’s remit and discretionary powers have expanded materially since 2003. It regulates not only telecoms but also broadcasting, spectrum, postal services (under the Postal Services Act 2011), and online safety. The Telecommunications Security Act 2021 added security enforcement powers. The Online Safety Act 2023 extended Ofcom’s remit into platform regulation. Ofcom’s annual budget and resourcing are under pressure, which affects both response times and enforcement prioritisation. At the same time, Ofcom has signalled a shift towards more proactive enforcement and higher financial penalties. This combination of wider powers, tighter resources and an enforcement-focused culture creates a regulatory environment that is harder to predict and faster to escalate. Businesses that understand how Ofcom operates internally, rather than reading its published guidance as gospel, navigate this environment more effectively.

Where clients get it wrong

Businesses treat Ofcom’s published guidance as an accurate reflection of how Ofcom actually operates. It does not always. Ofcom publishes design documents, policy statements and regulatory approaches. These materials are authoritative on policy intent. But Ofcom’s published materials do not reveal the regulator’s internal prioritisation, resource allocation, informal interpretations or the institutional pressures that shape decision-making. Many businesses therefore misallocate their own engagement efforts, responding to what Ofcom says it will do rather than understanding what it is actually equipped to do.

The second widespread mistake is treating Ofcom as a monolithic entity. It is not. Ofcom operates through several distinct divisions, each with its own institutional culture, staffing constraints and decision-making style. The Consumer Group (handling consumer complaints and broadband quality) operates differently from the Networks and Communications Group (handling network access and competition regulation) and the Spectrum Management Group (handling spectrum licensing and enforcement). Knowing which Ofcom team you are dealing with, who the relevant decision-makers are, and what pressures they face, materially affects how you engage. Businesses that do not make this distinction find themselves providing evidence to the wrong team or escalating through the wrong channels.

A third error is underestimating Ofcom’s discretion. The Communications Act 2003 and later legislation grant Ofcom very wide powers, often expressed in permissive language: Ofcom “may” consult, Ofcom “may” investigate, Ofcom “may” impose conditions. This discretion is not a weakness in the legislation. It is a design feature that allows the regulator to respond to changing market conditions. But it means that Ofcom’s actual priorities can diverge materially from its published policy statements. A business that understands Ofcom’s current institutional priorities can anticipate regulatory moves that are not yet telegraphed.

What good looks like

Bratby Law’s approach to Ofcom engagement is grounded in understanding the regulator’s own incentives, constraints and decision-making processes. This means several things in practice.

First, we advise clients on which part of Ofcom is the relevant decision-maker and what that team’s current priorities are. This requires up-to-date market intelligence: recent enforcement decisions, policy statements, resource allocation announcements, leadership changes and Ofcom’s own published strategic priorities. We track Ofcom’s enforcement activity across its several divisions to identify patterns in how the regulator interprets its powers and what types of conduct it prioritises.

Second, we calibrate client engagement with Ofcom to match the regulator’s own institutional approach. Ofcom staff are technically competent but resource-constrained. They respond well to well-evidenced written submissions, particularly submissions that address the regulator’s own concerns proactively rather than defensively. They respond poorly to legal threats or assertions that Ofcom has misunderstood the law. Submissions that acknowledge Ofcom’s remit and constraints, and that propose solutions that work within Ofcom’s own processes, are more likely to be received favourably. We draft client submissions to Ofcom with this understanding: not to win a legal argument, but to answer the question that Ofcom is actually asking.

Third, we advise on the appropriate escalation path within Ofcom. Ofcom has internal appeal procedures, and escalation from one division to another is possible but rarely used. Understanding when escalation is appropriate, and when it is likely to be counterproductive, requires knowledge of Ofcom’s internal decision-making structure. We help clients identify the right juncture to escalate and the right language to use.

Fourth, we explain the realistic timeline and resource implications of Ofcom engagement. An information request under section 135 of the Communications Act 2003 requires a response within a specified period, and non-compliance is a criminal offence. An investigation can run for years. A policy consultation may change direction mid-way through. Clients that understand these timescales upfront can resource their own engagement appropriately.

Finally, we advise on the limits of what Ofcom can do and where legislative change is required. Ofcom’s powers are extensive but not unlimited. Some business problems that look like regulatory issues actually require a legislative fix. Advising clients on this boundary is as important as advising on Ofcom’s actual powers.

When to instruct

You should instruct Bratby Law if you are facing an Ofcom engagement that requires understanding the regulator’s approach: an information request, investigation, consultation, or dispute. You should also instruct if you are making a strategic business decision that depends on your regulatory risk profile with Ofcom, such as an acquisition, investment in new services, or market entry. You should instruct if you are drafting a submission to Ofcom and want to ensure that submission is calibrated to what Ofcom is actually asking for. You should not instruct for routine administrative compliance queries that your in-house team can handle, such as annual returns or standard reporting. You should not instruct for legal analysis of Ofcom’s published guidance if you have no imminent regulatory engagement.

How Bratby Law helps

We advise on Ofcom’s institutional approach and decision-making processes based on inside knowledge of the regulator. We help clients understand which Ofcom division is the relevant decision-maker and what that team’s current priorities are. We draft submissions to Ofcom that are calibrated to the regulator’s own processes and constraints, rather than to generic legal principles. We help clients navigate Ofcom’s dispute resolution procedures and represent clients in disputes with Ofcom. We advise on the realistic timeline and resource implications of Ofcom investigations and enforcement action. We advise on escalation within Ofcom and when escalation is likely to be counterproductive. We identify the legislative vs regulatory boundaries and advise on where regulatory solutions end and legislative change begins.

For our latest analysis on the incoming Ofcom Chair’s profile and what Sir Ian Cheshire’s appointment signals for operators, read our article on the Ofcom Chair 2026 appointment.

Frequently asked questions

What is Ofcom and who does it regulate?

Ofcom is the Office of Communications, the independent regulator for the communications industry in the United Kingdom. It regulates electronic communications networks and services (including fixed and mobile operators, ISPs and VoIP providers), broadcast content and television licensing, radio spectrum, postal services (under the Postal Services Act 2011), and (since 2023) certain video sharing platforms and online services under the Online Safety Act. Ofcom was established by the Office of Communications Act 2002 and has powers under the Communications Act 2003, the Wireless Telegraphy Act 2006, the Broadcasting Acts 1990 and 1996, the Postal Services Act 2011, and the Online Safety Act 2023.

Can Ofcom force a business to provide information?

Yes. Under section 135 of the Communications Act 2003, Ofcom can issue an information notice requiring a person to provide specified information or documents within a specified period. The notice must be in writing and must state the purpose for which the information is required. Failure to comply with an information notice without reasonable excuse is a criminal offence.

How does Ofcom decide whether to investigate?

Ofcom has published its enforcement guidelines, which set out the criteria it uses to prioritise enforcement cases. These include the seriousness of the breach, the impact on citizens and consumers, the length of time the breach has continued, and compliance history. However, Ofcom has material discretion in applying these criteria. Changes in Ofcom’s leadership, budget and strategic priorities can affect enforcement prioritisation. Ofcom is not required to investigate every complaint or suspected breach.

What is the maximum financial penalty Ofcom can impose?

Ofcom’s general power to impose financial penalties is in section 97 of the Communications Act 2003. The maximum penalty is 10 percent of relevant turnover in the preceding business year. For breaches of security requirements under the Telecommunications Security Act 2021, the cap is lower (3 percent of relevant turnover) but the assessment framework is different. Penalties are calculated with reference to Ofcom’s published penalty guidelines.

What is section 135 and why is it important?

Section 135 of the Communications Act 2003 gives Ofcom the power to issue an information notice. This is one of Ofcom’s most frequently used enforcement tools, as it is much faster than a formal investigation. Receiving a section 135 notice is often an early indicator of a deeper regulatory concern. Responding to a section 135 notice without legal advice is a common and costly mistake. The information provided in response can be used in subsequent enforcement proceedings.

How can businesses engage with Ofcom proactively?

Businesses can engage with Ofcom through consultation responses, stakeholder meetings, and requests for guidance on specific questions. Ofcom publishes a consultation calendar. Consultations are an opportunity to provide evidence and argument on topics of regulatory importance. We advise clients on how to structure consultation responses to be heard above the noise, and on whether escalation to senior Ofcom leadership is appropriate on specific topics.

Representative experience

Recent and representative matters include:

• Advised operators on engagement with Ofcom across market reviews, enforcement proceedings, numbering disputes, and General Condition compliance, drawing on direct experience of how the regulator operates.
• Prepared and coordinated submissions to Ofcom consultations on wholesale market regulation, spectrum policy, and consumer protection, including multi-party industry responses.
• Supported a provider through an Ofcom investigation into alleged General Condition breaches, managing the section 96A notification process and negotiating a proportionate outcome.
• Advised on the strategic and regulatory implications of Ofcom’s evolving approach to ex-ante and ex-post regulation in converging communications markets.
• Acted as regulatory counsel on transactions requiring Ofcom engagement, including network sharing arrangements and changes of control involving regulated assets.

Rob Bratby worked at Oftel (Ofcom’s predecessor) and at Ofcom, giving him direct insight into the regulator’s approach, priorities and decision-making. Bratby Law is ranked in Chambers UK (Band 2) for telecoms and recognised as a Legal 500 Leading Partner.

Related telecoms regulation pages

See also our other telecoms regulation pages:

• Interconnection regulation
• Ofcom General conditions of entitlement
• Numbering
• Spectrum
• Lawful intercept and the Investigatory Powers Act 2016
• Ofcom Licence Fees
• Code Powers and access to land
• Am I regulated?
• SMP regulation and market reviews
• Telecoms Security
• Complaints and investigations
• Connected Vehicles and IoT Regulation

Frequently asked questions

What does Ofcom regulate?

Ofcom regulates UK electronic communications, spectrum, numbering, video-sharing platforms, online safety duties under the Online Safety Act and a range of digital services.

Does Ofcom regulate online platforms?

Yes. Under the Online Safety Act 2023 and the video-sharing platform regime, Ofcom regulates user-to-user services, search services, VSPs and online pornography services.

Do telecoms providers need a licence from Ofcom?

No, except for spectrum use. Providers operate under a general authorisation regime and must comply with Ofcom’s General Conditions.

Can Ofcom’s decisions be appealed?

Yes. Appeals are brought to the Competition Appeal Tribunal under CA 2003 s 192, usually on judicial-review grounds.

Does Ofcom enforce net neutrality?

Yes. Ofcom enforces the UK’s net neutrality (open internet) rules, including traffic-management and transparency obligations.

Independent directory rankings

Our specialist expertise is recognised in major independent legal directories:

• Chambers & Partners: Rob Bratby is ranked as a band 2 lawyer in the UK Guide 2026 in the “Telecommunications” category: Chambers
• The Legal 500: Rob Bratby is listed as a “Leading Partner – Telecoms” in London (TMT – IT & Telecoms): The Legal 500
• Lexology: Rob Bratby is featured on Lexology’s expert profiles as a Global Elite Thought Leader for data: Lexology