Part 2Networks, services and the radio spectrum
Chapter 1Electronic communications networks and services
F2Security of public electronic communications networks and services
105JF1Duty to inform users of risk of security compromise
1
This section applies where there is a significant risk of a security compromise occurring in relation to a public electronic communications network or a public electronic communications service.
2
The provider of the network or service must take such steps as are reasonable and proportionate for the purpose of bringing the relevant information, expressed in clear and plain language, to the attention of persons who use the network or service and may be adversely affected by the security compromise.
3
The relevant information is—
a
the existence of the risk of the security compromise occurring;
b
the nature of the security compromise;
c
the technical measures that it may be reasonably practicable for persons who use the network or service to take for the purposes of—
i
preventing the security compromise adversely affecting them;
ii
remedying or mitigating the adverse effect that the security compromise has on them; and
d
the name and contact details of a person from whom further information may be obtained about the security compromise.
Ss. 105A-105D and cross-heading inserted (26.5.2011) by The Electronic Communications and Wireless Telegraphy Regulations 2011 (S.I. 2011/1210), reg. 1(2), Sch. 1 para. 65 (with Sch. 3 para. 2)