The scope of Ofcom’s regulatory jurisdiction hinges on whether your business provides an electronic communications network or electronic communications service. This determination carries substantial legal and compliance consequences. If you are regulated, you must comply with the General Conditions of Entitlement and potentially other Ofcom requirements. If you are not regulated, these obligations do not apply. Getting the boundary wrong is costly in both directions.

Trigger situation

A business discovers it may be providing an electronic communications network or service. This arises in several common contexts: a PE investor’s due diligence reveals regulatory status is unclear; a cloud platform or IoT provider is told by a competitor or customer that it needs to comply with Ofcom rules; a managed network operator supporting smart buildings or critical infrastructure begins offering connectivity services; a fintech or logistics platform handles data transmission as a core function and questions whether this triggers regulation; an existing provider expands into a new service category and needs to reassess its scope.

Why it matters now

The regulatory position shifted materially from December 2020 when the European Electronic Communications Code was transposed into UK law. Section 32A of the Communications Act 2003 now draws an explicit boundary between electronic communications services and information society services. This distinction did not exist in the same form before. Amendments which took full effect in June 2022 also changed how certain adjacent services (particularly those involving connectivity as an ancillary function) are classified. Businesses working from pre-2020 assumptions about their regulatory status are operating on outdated information. Additionally, Ofcom has become more active in challenging businesses that have assumed they fall outside the regime. An enforcement action or fine can follow where a provider should have been complying with the General Conditions but was not. Ofcom does not require advance notification under section 33 of the CA 2003 (it has never designated any services for that purpose), but it can and does identify non-compliant providers through market monitoring and complaints.

Where clients get it wrong

The scope question under sections 32 and 32A of the Communications Act 2003 is deceptively broad. Electronic communications service covers voice, messaging and internet access. But the boundaries with information society services under section 32A are subtle and frequently misunderstood. Many businesses providing connectivity as an ancillary service (managed network operators, smart building controllers, IoT platforms) assume they fall outside the regime. They are often wrong. They have concluded, incorrectly, that because connectivity is not their primary business, it does not trigger regulation. Conversely, some businesses over-comply, treating themselves as regulated when they are not and imposing unnecessary compliance costs.

The most common error is to read the definitions too narrowly. Section 32 defines an electronic communications service as a service provided “for remuneration” and involving the “conveyance of signals”. Many businesses assume that signals conveyance must be the service itself. In fact, the definition extends to services where signal conveyance is integral to delivery, even if the business does not market itself primarily as a communications provider. A smart grid operator managing utility networks transmits signals. A financial services firm using dedicated data circuits to connect branch offices to headquarters transmits signals. An enterprise resource planning platform that manages connectivity between warehouses in a logistics network transmits signals. In each case, the service is provided “for remuneration” (whether charged directly or built into a broader service offering). These are electronic communications services.

The second common error is to confuse the exclusion for information society services. Section 32A carves out services that merely use electronic communications networks but do not involve the “conveyance of signals”. Content delivery, software as a service, and data processing fall within this exclusion. But the exclusion is narrow. A cloud provider that offers data storage using ordinary internet access is likely an information society service provider. A cloud provider that offers dedicated connectivity, bandwidth management, and transmission of sensitive data using its own network infrastructure is more likely a communications service provider. The distinction lies in whether the business is actually conveying signals (and thereby operating or controlling the conveyance) or merely using conveyance provided by others.

A third error is to assume that the absence of a formal licensing or registration requirement means the question does not matter. The UK operates a general authorisation regime. There is no individual licence to apply for and Ofcom has never exercised its power under section 33 of the CA 2003 to require advance notification. But the obligations are real and immediate. A business that falls within scope must comply with the General Conditions from day one of operation, whether or not it has identified itself to Ofcom. The legal test is objective: does the business provide an electronic communications network or service? The answer does not depend on what the business believes about itself. Ofcom can determine, independently of a business’s own characterisation, that a service is regulated, and enforcement action can follow.

The fourth error is to misunderstand exemptions and exclusions. Certain categories of provider fall outside the General Conditions even if they are technically providing electronic communications services. Private networks operated exclusively for the operator’s own use are excluded. Occasional use of networks for emergency services is excluded. Military networks are excluded. But these exemptions are narrow and fact-dependent. A business providing private network services to multiple end users is not operating for its own use, even if the network is not public.

The Advisor’s Perspective

At Oftel, the scope question was the single most common enquiry. It remains so today. The 2003 Act, as originally drafted, drew the boundary in one place. The 2022 amendments transposing the European Electronic Communications Code drew it in a slightly different place. The European definitions emphasised the role of the provider in controlling signal conveyance, not merely the nature of the underlying technology. Most businesses operate from assumptions about where the line falls that reflect pre-2022 understanding. These assumptions are increasingly out of step with how Ofcom now interprets the regime.

What good looks like

Bratby Law’s approach begins with a rigorous factual and legal analysis of the service in question. The analysis applies the statutory definitions to the specific facts of the business: what is actually provided, to whom, in what form, for what remuneration, and using what infrastructure. We do not rely on industry nomenclature or the business’s own characterisation. We examine the boundary between signal conveyance and information society services through the lens of regulatory history and Ofcom guidance, acknowledging that the EECC transposition introduced genuine ambiguity in some contexts.

Where scope is genuinely uncertain, we advise on the commercial and regulatory risk of different characterisations, the costs of compliance if the business is regulated, the costs of non-compliance if it is not, and the likelihood of Ofcom challenging a particular determination. We then advise on whether to seek Ofcom’s views formally (via a regulatory query) or to proceed on the basis of internal legal advice.

For businesses that are regulated, we then advise on the specific category of provider (public ECN, public ECS, ISP) and map the applicable General Conditions and any additional obligations (such as number allocation requirements or emergency services responsibilities). For businesses that are not regulated, we ensure the boundary is clearly documented and that any expansion of the service scope will trigger a reassessment.

When to instruct

Scope questions are sometimes straightforward. A business providing voice services over IP, or operating a broadband network, is regulated. No external advice is needed. A business using a third-party cloud provider to store data on ordinary internet circuits is not regulated. Again, no issue.

Many scope questions, however, are genuinely complex. These fall into several categories: (1) businesses providing connectivity as part of a broader service (facilities management, smart building systems, enterprise software); (2) businesses operating private or closed networks on behalf of multiple customers; (3) businesses that have expanded from one service to another and need reassessment; (4) businesses facing enforcement or compliance challenges where Ofcom has questioned their regulatory status.

In these contexts, external specialist input is necessary. The cost of getting it wrong (either over-complying unnecessarily or finding that you are non-compliant and subject to enforcement) is material. A specialist can review the facts against the statutory definitions, apply Ofcom guidance, and assess the regulatory and commercial risk. Where appropriate, the specialist can engage with Ofcom to seek clarity on a borderline case.

How Bratby Law helps

We provide regulatory scope opinions for businesses that need certainty about their Ofcom obligations. We analyse the statutory definitions of electronic communications network and service against your specific business model, products and customer base. We distinguish between public and private networks, between services you control and those you merely use, and between signal conveyance and ancillary functionality. We map the General Conditions that apply if you are regulated, and identify any exemptions or exclusions that might apply. We advise on the commercial implications of different characterisations. We advise on the practical steps for compliance if you are regulated, including mapping the applicable General Conditions to your specific service category. We help existing providers reassess their scope when business models change. We respond to Ofcom enquiries about scope and can engage with Ofcom on regulatory queries where scope is genuinely uncertain. We defend scope determinations if Ofcom challenges them and assist with representations if enforcement action is threatened.

FAQs

My company operates a private network connecting our regional offices. Are we regulated?

Not necessarily. Section 32 excludes “a service provided between establishments, or parts thereof, of the same undertaking”. If the network is owned and operated by your company exclusively for your own internal use, it falls outside Ofcom’s jurisdiction. But if you offer connectivity services to third parties, or if you outsource the network operation to a service provider (even a wholly owned subsidiary), the analysis changes. You may then be providing an electronic communications service to third parties. The key question is whether you are offering a service to others for remuneration, not whether the network is physically private.

We use a third-party ISP for internet access. Our customers connect to our platform through that ISP. Are we regulated?

Probably not. If you are using ISP services provided by someone else, and merely offering an information service (software, data processing, content delivery) to your end customers, you are not providing an electronic communications service. You are an information society service provider. Your regulation lies elsewhere (data protection, e-commerce, consumer protection) but not under Ofcom. If, however, you are offering managed network services, virtual private networks, or dedicated connectivity to your customers, the analysis shifts. You may be providing an electronic communications service, even if the underlying internet access is sourced from a third party.

We operate a small managed network for a group of related companies. Are we regulated?

Potentially, if you are offering the service “for remuneration”. The statute does not require that remuneration be direct payment. It can be implicit in a group structure or service agreement. The UK does not require you to notify Ofcom or obtain a licence before operating. But if you fall within scope, you must comply with the General Conditions from day one. If Ofcom determines that your service is an electronic communications service and you are not complying, enforcement action can follow. We advise on whether your managed network arrangement brings you within scope and, if so, which General Conditions apply.

Our business was regulated but we have stopped providing the service. Do our obligations continue?

If you have genuinely ceased to provide electronic communications services, your obligations under the General Conditions cease. However, certain record-keeping and data retention obligations may survive cessation for specified periods (for example, communications data retention under the Investigatory Powers Act 2016). If you are subject to any ongoing Ofcom enforcement proceedings or information requests, cessation of service does not terminate those proceedings. If Ofcom has been collecting administrative charges from you, you should notify Ofcom that you have ceased providing relevant activities so that future charges are not assessed.

Ofcom has asked us about our regulatory status. Should we engage a lawyer?

Yes. Ofcom’s enquiries can be routine (data gathering or verification of information already on file) or substantive (questioning whether you should be regulated at all). An Ofcom enquiry is not an enforcement action, but it can lead to one if your response is unsatisfactory. A specialist can ensure your response is legally robust and commercially sound. We can also advise on whether to offer Ofcom a voluntary disclosure if your compliance position is weaker than you believed.

Representative experience

Recent and representative matters include:

• Advised a global managed services provider on regulatory classification of its SD-WAN and cloud connectivity platform, confirming ECS status and mapping General Condition obligations.
• Assessed the boundary between telecoms and payments regulation for a property developer deploying fibre-to-the-premises across a mixed-use estate, distinguishing private network use from public ECN provision.
• Prepared a regulatory status opinion for a PE acquirer evaluating a target whose IoT platform sat at the ECN/ECS boundary.
• Advised a satellite connectivity provider on the application of the UK regime to its ground segment and gateway operations.
• Supported an MVNO on the regulatory consequences of transitioning from resale to full-MVNO architecture, including the shift from ECS-only to combined ECN/ECS status.

Related telecoms regulation pages

See also our other telecoms regulation pages:

• Interconnection regulation
• Ofcom General conditions of entitlement
• Numbering
• Spectrum
• Lawful intercept and the Investigatory Powers Act 2016
• Ofcom Licence Fees
• Code Powers and access to land
• SMP regulation and market reviews
• Telecoms Security
• Ofcom
• Complaints and investigations
• Connected Vehicles and IoT Regulation

See also: Authorisation and Licensing.

How does UK law determine whether a service is an Electronic Communications Service?

A service is an Electronic Communications Service where it consists wholly or mainly in the conveyance of signals over an Electronic Communications Network. The assessment is functional and depends on the provider’s substantive role in the transmission path, the technical configuration and how end-users understand the service.

What factors indicate that a service is an Information Society Service rather than an Electronic Communications Service?

A service is more likely to be an Information Society Service where the transmission of signals is incidental to its primary purpose and is delivered by a third-party network operator. This applies to most email platforms, content services and SaaS offerings unless the service provider materially controls the conveyance element.

What does the Skype (C-142/18) judgment say about the classification of SkypeOut?

In Skype (C-142/18), the Court of Justice held that SkypeOut was an Electronic Communications Service because users relied on Skype to deliver calls to the public switched telephone network. The Court focused on the substantive responsibility assumed by Skype for the transmission element.

What does the Gmail (C-193/18) judgment say about whether email services are ECS or ISS?

In Gmail (C-193/18), the Court of Justice held that Gmail was not an Electronic Communications Service because Google did not convey signals and the essential transmission component was performed by users’ internet access providers. The Court considered both functionality and the user’s perception of the service.

How does the distinction between private and public networks affect regulatory status?

A network or service is treated as public where it is made available to any non-related third party for remuneration. Ofcom’s Definition of Relevant Activity and Turnover guidelines confirm that public status does not depend on the scale of deployment or the number of customers. Internal-only networks remain private unless external users are served.

Does a provider need to own the physical network in order to be an ECS provider?

No. Ownership is not required. A provider may be an ECS provider where it resells or otherwise makes available connectivity supplied by another operator, provided it is responsible for the transmission element offered to its customers.

What obligations apply to organisations providing a public ECN or ECS?

Public ECN and ECS providers must comply with Ofcom’s General Conditions of Entitlement, which cover network functioning, numbering, switching, transparency, consumer information and complaints handling. They must also comply with the statutory security duties under the Telecommunications (Security) Act 2021.

Are over-the-top communication platforms regulated as ECS providers?

Over-the-top platforms are assessed according to their functional characteristics. They may fall outside the ECS definition where they rely entirely on third-party internet access providers for connectivity. They are more likely to constitute ECS where the provider assumes responsibility for delivering connectivity, uses numbering resources or interfaces directly with the public network.

How does the use of numbering resources influence whether a service is an ECS?

The use or allocation of public telephone numbers is a strong indicator that a service is an ECS. Numbers are issued only to providers subject to the General Conditions, so services using numbers are generally treated as public ECS offerings.

Can cloud-based or virtualised networking environments fall within the definition of an ECN?

Yes. The statutory definition is technology-neutral. Virtualised or software-defined environments may constitute an ECN where the operator controls or manages the transmission system or associated facilities.

When does a managed service become an Electronic Communications Service?

A managed service becomes an ECS where its principal characteristic is the conveyance of signals. This includes managed VPN, SD-WAN and similar offerings where the provider is responsible for end-to-end connectivity rather than merely delivering an application-layer function.

How are hybrid or multi-layer services assessed when determining ECS status?

Hybrid services are assessed according to their principal characteristic. If connectivity is decisive, the service is likely to be an ECS. If the application layer dominates and the transmission element is incidental, the service is more likely to be an ISS.

Does providing connectivity to tenants or affiliates make a network a public ECN?

In most cases, yes. Where connectivity is offered to non-related third parties for remuneration, Ofcom generally treats the network as public, irrespective of the number of customers. Internal-only corporate networks usually remain private unless external access is provided.

Does the supply of connectivity to a single customer make a network or service public?

Yes. Ofcom’s Definition of Relevant Activity and Turnover guidelines confirm that connectivity supplied to any non-related third party for remuneration is treated as a public ECN or ECS, even where the provider serves only one external customer. The distinction turns on the nature of the relationship, not the scale of the deployment.

Why does remuneration matter when deciding whether a network or service is public or private?

Remuneration indicates that connectivity is being supplied on a commercial basis to an external party, which brings the activity within Ofcom’s definition of public provision. The concept is used in both the Act and Ofcom’s charging guidelines. Internal, non-commercial communication within an undertaking does not constitute public provision.

Also see

If your service falls within scope of UK telecoms regulation, the next question is which obligations apply to your operation. See our page on General Conditions of Entitlement for the full framework of obligations that apply from day one.

Independent directory rankings

Our specialist expertise is recognised in major independent legal directories:

• Chambers & Partners: Rob Bratby is ranked as a band 2 lawyer in the UK Guide 2026 in the “Telecommunications” category: Chambers
• The Legal 500: Rob Bratby is listed as a “Leading Partner – Telecoms” in London (TMT – IT & Telecoms): The Legal 500
• Lexology: Rob Bratby is featured on Lexology’s expert profiles as a Global Elite Thought Leader for data: Lexology