Short answer: a business is within Ofcom’s general-authorisation regime if the network or service it provides falls within the statutory definitions of an electronic communications network or electronic communications service. Under section 32 of the Communications Act 2003, an electronic communications service is an internet access service, a number-based interpersonal communications service, or another service consisting in, or having as its principal feature, the conveyance of signals. There is no general licence application or provider register: the applicable General Conditions of Entitlement apply when their statutory and provider-specific scope tests are met.

Page updated 18 July 2026.

Trigger situation

A business discovers it may be providing an electronic communications network or service. This arises in several common contexts: a PE investor’s due diligence reveals regulatory status is unclear; a cloud platform or IoT provider is told by a competitor or customer that it needs to comply with Ofcom rules; a managed network operator supporting smart buildings or critical infrastructure begins offering connectivity services; a fintech or logistics platform handles data transmission as a core function and questions whether this triggers regulation; an existing provider expands into a new service category and needs to reassess its scope.

Why it matters now

The Electronic Communications and Wireless Telegraphy (Amendment) (European Electronic Communications Code and EU Exit) Regulations 2020 recast the definition of an electronic communications service in section 32 of the Communications Act 2003 with effect from 21 December 2020, and inserted section 32A, which defines a number-based interpersonal communications service. Section 32A does not itself draw the general boundary between electronic communications services and information society services. The General Conditions apply automatically when the statutory test is met: there is no licence to apply for and no general register to join.

Common ECS classification failures

Under section 32 of the Communications Act 2003, an electronic communications service is an internet access service, a number-based interpersonal communications service, or another service consisting in, or having as its principal feature, the conveyance of signals. Section 32A separately defines a number-based interpersonal communications service.

The analysis turns on what the business provides, not merely on whether it uses connectivity or transmits data in its operations. Managed connectivity, IoT and bundled services require a fact-specific assessment of the customer proposition, technical control and transmission path. A business does not provide an electronic communications service merely because data passes across a network while it delivers another service.

Information society services do not form a freestanding exclusion. The only carve-out in the definition is for a content service, under section 32(2) read with section 32(7). The questions are whether the service falls within one of the section 32 categories and whether it is instead a content service. A cloud or software provider that merely uses connectivity supplied by another provider does not thereby become a communications provider; dedicated connectivity or control of transmission may change the analysis.

The UK operates a general authorisation regime. The General Conditions apply automatically when the statutory test is met, with no licence to apply for and no register to join. A business that falls within scope must comply with the General Conditions from day one of operation, whether or not it has identified itself to Ofcom. The legal test is objective. It turns on whether the business provides an electronic communications network or service, not on what the business believes about itself. Ofcom can determine, independently of a business’s own characterisation, that a service is regulated, and enforcement action can follow.

How a scope question is analysed

A scope analysis applies the statutory definitions to the facts of the business: what is actually provided, to whom, in what form, for what remuneration, and over what infrastructure. Industry labels and the business’s own description of itself do not decide the question. The boundary between signal conveyance and information society services is read against the regulatory history and Ofcom’s guidance. The EECC transposition left genuine ambiguity in some contexts.

Where scope is genuinely uncertain, the business has to weigh the regulatory and commercial risk of each characterisation, the cost of complying if it is regulated, the cost of not complying if it turns out to be, and the likelihood that Ofcom challenges the position it takes. It can then either put a regulatory query to Ofcom or proceed on legal advice without doing so.

A regulated business then needs its provider category settled (public ECN, public ECS, ISP), the applicable General Conditions mapped against it, and any further obligations identified, such as number allocation or emergency services responsibilities. A business outside scope needs the boundary documented, so that an expansion of the service is recognised as the point at which the question is asked again.

When to instruct

Scope questions are sometimes straightforward. A business providing voice services over IP, or operating a broadband network, is regulated.

Many scope questions, however, are genuinely complex. These fall into several categories: (1) businesses providing connectivity as part of a broader service (facilities management, smart building systems, enterprise software); (2) businesses operating private or closed networks on behalf of multiple customers; (3) businesses that have expanded from one service to another and need reassessment; (4) businesses facing enforcement or compliance challenges where Ofcom has questioned their regulatory status.

The cost of getting it wrong (either over-complying unnecessarily or finding that you are non-compliant and subject to enforcement) is material. The facts have to be read against the statutory definitions and Ofcom’s guidance, and the regulatory and commercial risk assessed on that reading. On a genuinely borderline case, Ofcom can be asked for its view.

Working through a scope question

A business that needs certainty about its Ofcom obligations starts from the statutory definitions of an electronic communications network and service, applied to its own business model, products and customer base. The analysis separates public networks from private ones, services the business controls from services it merely uses, and signal conveyance from ancillary functionality. Where the business is in scope, the next step is to map the General Conditions that apply to its service category, together with any exemption or exclusion, and to work out what compliance costs and what a different characterisation would cost instead. Where the business model changes, the scope question is asked again. Where Ofcom opens an enquiry, challenges a scope determination or threatens enforcement, the response is built on that same analysis, and a regulatory query is one route to certainty on a genuinely borderline case.

FAQs

My company operates a private network connecting our regional offices. Are we regulated?

Not necessarily. The Act does not exclude internal networks by name, but a network is only a public electronic communications network where it is provided wholly or mainly to make electronic communications services available to members of the public, and a service is only public where it is available for use by members of the public. If the network is owned and operated by your company exclusively for your own internal use, it falls outside Ofcom’s jurisdiction. But if you offer connectivity services to third parties, or if you outsource the network operation to a service provider (even a wholly owned subsidiary), the analysis changes. You may then be providing an electronic communications service to third parties. The key question is whether you are offering a service to others for remuneration, not whether the network is physically private.

We use a third-party ISP for internet access. Our customers connect to our platform through that ISP. Are we regulated?

Probably not. If you are using ISP services provided by someone else, and merely offering an information service (software, data processing, content delivery) to your end customers, you are not providing an electronic communications service. You are an information society service provider. Your regulation then lies elsewhere: data protection, e-commerce and consumer protection, and, if users generate or share content on your platform, the Online Safety Act 2023, which Ofcom enforces against regulated user-to-user and search services. If, however, you are offering managed network services, virtual private networks, or dedicated connectivity to your customers, the analysis shifts. You may be providing an electronic communications service, even if the underlying internet access is sourced from a third party.

We operate a small managed network for a group of related companies. Are we regulated?

Potentially, if you are offering the service “for remuneration”. The statute does not require that remuneration be direct payment. It can be implicit in a group structure or service agreement. There is no licence or registration required before operating: the General Conditions apply automatically if you fall within scope, and you must comply from day one. If Ofcom determines that your service is an electronic communications service and you are not complying, enforcement action can follow.

Our business was regulated but we have stopped providing the service. Do our obligations continue?

If you have genuinely ceased to provide electronic communications services, your obligations under the General Conditions cease. However, certain record-keeping and data retention obligations may survive cessation for specified periods (for example, communications data retention under the Investigatory Powers Act 2016). If you are subject to any ongoing Ofcom enforcement proceedings or information requests, cessation of service does not terminate those proceedings. If Ofcom has been collecting administrative charges from you, you should notify Ofcom that you have ceased providing relevant activities so that future charges are not assessed.

Ofcom has asked us about our regulatory status. Should we engage a lawyer?

Yes. Ofcom’s enquiries can be routine (data gathering or verification of information already on file) or substantive (questioning whether you should be regulated at all). An Ofcom enquiry is not an enforcement action, but it can lead to one if your response is unsatisfactory. A specialist can ensure your response is legally robust and commercially sound. Where the compliance position turns out to be weaker than expected, a voluntary disclosure to Ofcom is one of the options.

Representative experience

Recent and representative matters include:

• Advised a global managed services provider on regulatory classification of its SD-WAN and cloud connectivity platform, confirming ECS status and mapping General Condition obligations.
• Assessed the boundary between telecoms and payments regulation for a property developer deploying fibre-to-the-premises across a mixed-use estate, distinguishing private network use from public ECN provision.
• Prepared regulatory status advice for a PE acquirer evaluating a target whose IoT platform sat at the ECN/ECS boundary.
• Advised a satellite connectivity provider on the application of the UK regime to its ground segment and gateway operations.
• Supported an MVNO on the regulatory consequences of transitioning from pure resale to full-MVNO architecture, including the shift from ECS-only to combined ECN/ECS status.

Related telecoms regulation pages

The other telecoms regulation pages:

Ofcom General conditions of entitlement
SMP regulation and market reviews
Numbering
Code Powers and access to land
Spectrum
Lawful intercept and the Investigatory Powers Act 2016
Telecoms Security
Ofcom Licence Fees
Ofcom: Advice for Operators, Investors and Platforms
Interconnection regulation
Complaints and investigations
Connected Vehicles and IoT Regulation
EU Digital Networks Act

Frequently asked questions about regulatory scope

How does UK law determine whether a service is an Electronic Communications Service?

A service is an Electronic Communications Service where it is an internet access service, a number-based interpersonal communications service, or another service consisting in, or having as its principal feature, the conveyance of signals, and is provided by means of an Electronic Communications Network. The assessment is functional and depends on the provider’s substantive role in the transmission path, the technical configuration and how end-users understand the service.

What factors indicate that a service is an Information Society Service rather than an Electronic Communications Service?

A service is more likely to be an Information Society Service where the transmission of signals is incidental to its primary purpose and is delivered by a third-party network operator. This applies to most email platforms, content services and SaaS offerings unless the service provider materially controls the conveyance element.

What does the Skype (C-142/18) judgment say about the classification of SkypeOut?

In Skype (C-142/18), the Court of Justice held that SkypeOut was an Electronic Communications Service because users relied on Skype to deliver calls to the public switched telephone network. The Court focused on the substantive responsibility assumed by Skype for the transmission element.

What does the Gmail (C-193/18) judgment say about whether email services are ECS or ISS?

In Gmail (C-193/18), the Court of Justice held that Gmail was not an Electronic Communications Service because Google did not convey signals and the essential transmission component was performed by users’ internet access providers. The Court decided the point on the technical analysis and expressly did not reach the remaining question, on how the service appears to users. Both judgments construe the pre-2020 European definition, so the reasoning on responsibility for transmission transfers to the current section 32 test rather than applying to it directly.

How does the distinction between private and public networks affect regulatory status?

A network or service is treated as public where it is made available to any non-related third party for remuneration. Section 151(9) of the Communications Act 2003 provides that a service is made available to members of the public if members of the public are customers of the provider in respect of it, so the question is who the customers are rather than how large the deployment is. Internal-only networks remain private unless external users are served.

Does a provider need to own the physical network in order to be an ECS provider?

No. Ownership is not required. A provider may be an ECS provider where it resells or otherwise makes available connectivity supplied by another operator, provided it is responsible for the transmission element offered to its customers.

What obligations apply to organisations providing a public ECN or ECS?

Public ECN and ECS providers must comply with Ofcom’s General Conditions of Entitlement, which cover network functioning, numbering, switching, transparency, consumer information and complaints handling. They must also comply with the statutory security duties under the Telecommunications (Security) Act 2021.

Are over-the-top communication platforms regulated as ECS providers?

Over-the-top platforms are assessed according to their functional characteristics. They may fall outside the ECS definition where they rely entirely on third-party internet access providers for connectivity. They are more likely to constitute ECS where the provider assumes responsibility for delivering connectivity, uses numbering resources or interfaces directly with the public network.

How does the use of numbering resources influence whether a service is an ECS?

The use or allocation of public telephone numbers is a strong indicator that a service is an ECS. A service that connects with, or enables communication with, numbers in a national or international numbering plan is a number-based interpersonal communications service and so an electronic communications service. Holding numbers is an indicator rather than a gateway: Ofcom allocates numbers to persons who are not communications providers and regulates them through a separate set of numbering conditions.

Can cloud-based or virtualised networking environments fall within the definition of an ECN?

Yes. The statutory definition is technology-neutral. Virtualised or software-defined environments may constitute an ECN where the operator controls or manages the transmission system or associated facilities.

When does a managed service become an Electronic Communications Service?

A managed service becomes an ECS where its principal characteristic is the conveyance of signals. This includes managed VPN, SD-WAN and similar offerings where the provider is responsible for end-to-end connectivity rather than merely delivering an application-layer function.

How are hybrid or multi-layer services assessed when determining ECS status?

Hybrid services are assessed according to their principal characteristic. If connectivity is decisive, the service is likely to be an ECS. If the application layer dominates and the transmission element is incidental, the service is more likely to be an ISS.

Does providing connectivity to tenants or affiliates make a network a public ECN?

In most cases, yes. Where connectivity is offered to non-related third parties for remuneration, Ofcom generally treats the network as public, irrespective of the number of customers. Internal-only corporate networks usually remain private unless external access is provided.

Does the supply of connectivity to a single customer make a network or service public?

It can. The statutory question under section 151 of the Communications Act 2003 is whether members of the public are customers of the service, not how many of them there are, so a single external customer does not put a service outside the regime by itself. The distinction turns on the nature of the relationship, not the scale of the deployment.

Why does remuneration matter when deciding whether a network or service is public or private?

Remuneration indicates that connectivity is being supplied on a commercial basis to an external party, which brings the activity within Ofcom’s definition of public provision. The concept is used in both the Act and Ofcom’s charging guidelines. Internal, non-commercial communication within an undertaking does not constitute public provision.

Also see

If your service falls within scope of UK telecoms regulation, the next question is which obligations apply to your operation. The General Conditions of Entitlement page sets out the obligations that apply from day one.

Independent directory rankings

Our specialist expertise is recognised in major independent legal directories:

• Chambers & Partners: Rob Bratby is ranked as a Band 2 lawyer in the UK Guide 2026 in the “Telecommunications” category: Chambers
• The Legal 500: Rob Bratby is listed as a Leading Partner for Telecoms in London (TMT: IT and Telecoms). The Legal 500
• Lexology: Rob Bratby is recognised in the Lexology Index as a Global Elite Thought Leader for telecoms and media, and as a Thought Leader for data privacy and protection: Lexology