The Communications Act 2003 established Ofcom as the United Kingdom's converged regulator for telecommunications, broadcasting and spectrum. It governs licensing, competition, universal service and consumer protection across communications markets, and imposes no obligation on an operator to publish network APIs.
UK Communications Act 2003
Ofcom’s remit is broad and its API relevance is entirely indirect, which is itself the finding.
- Converged regulation - Telecoms, broadcast, post and spectrum under a single regulator.
- Competition and access - Significant market power remedies and wholesale access obligations shape carrier-to-carrier terms rather than developer-facing ones.
- Consumer protection - Switching, contract terms and complaint handling.
- No API mandate - Nothing requires network capability to be exposed as a contract.
The State of Telecom APIs found the UK the cleanest example of what voluntary standardisation produces: BT/EE, Virgin Media O2, Three and Vodafone all launched CAMARA KYC Age Verification and Tenure commercially on the same day in September 2025, reachable through Jersey Telecom and TMT ID — and not one of the four exposes an endpoint of its own. Four regulated operators, one coordinated launch, zero first-party developer surfaces.
Referenced in API Evangelist papers
This regulation shows up in my published research. These reports read the machine-readable evidence provider by provider — and put this regulation in the context of a real sector.
The State of Telecom APIs
Ofcom regulates the UK's operators and mandates no network-API exposure — while BT, Vodafone, Virgin Media O2 and Three all launched CAMARA commercially through third-party aggregators rather than their own surfaces.
