United Kingdom: Department for Science, Innovation and Technology opened consultation on proposed revisions to Telecommunications Security Code of Practice

Description

Department for Science, Innovation and Technology opened consultation on proposed revisions to Telecommunications Security Code of Practice

On 28 August 2025, the Department for Science, Innovation and Technology (DSIT) opened a consultation on amendments to the Telecommunications Security Code of Practice, until 22 October 2025. The proposed revisions to the 2022 edition of the Code address evolving threats and technologies by strengthening security requirements on public telecommunications providers. The changes expand technical measures for eSIM technology, encryption standards, privileged access workstations, and Application Programming Interfaces (APIs), and introduce updated compliance deadlines extending to 2028. The consultation seeks stakeholder information on these adjusted obligations, technical guidance, and phased implementation schedules, structured under the Telecommunications (Security) Act 2021 and the Electronic Communications (Security Measures) Regulations 2022.

Original source

Scope

Policy Area
Data governance
Policy Instrument
Cybersecurity regulation
Regulated Economic Activity
infrastructure provider: internet and telecom services, infrastructure provider: network hardware and equipment
Implementation Level
national
Government Branch
executive
Government Body
central government

Complete timeline of this policy change

Hide details
2025-08-28
in consultation

On 28 August 2025, the Department for Science, Innovation and Technology (DSIT) opened a consultati…

2025-10-22
processing consultation

On 22 October 2025, the Department for Science, Innovation and Technology (DSIT) closes the consult…