Ofcom has launched a consultation on proposed updates to its General Statement of Policy under section 105Y of the Communications Act 2003, which provides guidance for communications providers on how Ofcom exercises its functions to support compliance with obligations under the Telecommunications Security Act 2021 (TSA 2021). The guidance sets out Ofcom’s supervisory and enforcement approach and explains its expectations regarding the reporting of security compromises, including the relevant reporting procedures for communications providers. The proposed revisions draw on more than three years of experience overseeing compliance under TSA 2021 and are intended to improve the consistency of security incident reporting, particularly for mobile services. Key proposals include updating the statement to: (1) reflect Ofcom’s evolving supervisory approach and its potential use of a broader range of regulatory powers; (2) recalibrate the thresholds and criteria for reporting security compromises, including the introduction of new cell site-based and rural area thresholds for mobile reporting to reflect the differing impact of outages in urban and rural areas and (3) improve the structure, clarity and usability of the reporting form. The consultation closes on 4 August 2026, with Ofcom intending to publish a statement in autumn 2026.