# Communications Act 2003, Section 105C: Duty to take measures in response to security compromises


(1) This section applies where a security compromise occurs in relation to a public electronic communications network or a public electronic communications service.
(2) The provider of the network or service must take such measures as are appropriate and proportionate for the purpose of preventing adverse effects (on the network or service or otherwise) arising from the security compromise.
(3) If the security compromise has an adverse effect on the network or service, the provider of the network or service must take such measures as are appropriate and proportionate for the purpose of remedying or mitigating that adverse effect.

---
Source: https://www.legislation.gov.uk/ukpga/2003/21/section/105C (the official version)
Page: https://openlegislation.uk/communications-act-2003/section-105C
Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives.