Ofcom doesn't issue one blanket licence covering every internet service provider. Your obligations depend on how you actually deliver service: network type, customer base, whether you touch spectrum, voice services, or shared infrastructure. Get the classification wrong, and you risk delayed launches, consumer-protection gaps, or falling foul of rules you didn't know applied.
This guide walks through the real UK ISP operating models, the setup sequence from business formation to customer onboarding, the documents and permissions you'll likely need, common mistakes, and alternative routes if building a full network isn't the right fit.
Key Takeaways
- Ofcom issues no single ISP licence—map the General Conditions, notifications, and permissions to your model.
- WISPs, network owners, resellers, community operators, and voice providers face different requirements.
- Budget for spectrum, planning consent, wayleaves, and supplier agreements beyond basic business registration.
- Confirm current requirements directly with Ofcom, the ICO, GOV.UK, and your local authority before launch.
What Is an ISP Licence in the UK?
An internet service provider, in UK regulatory terms, is any business supplying internet access or related electronic communications services to customers. It can own the network end-to-end or resell wholesale capacity bought from someone else.
Here's the part that trips people up: there's no single "ISP licence" issued by Ofcom. Instead, providers fall under Ofcom's General Conditions of Entitlement, a set of rules that apply automatically based on what you actually do, not on a certificate you apply for.
Separately, the Communications Act 2003 includes a notification mechanism under Section 33. This only applies to a network, service, or facility that Ofcom has specifically designated for that purpose. It isn't a blanket registration requirement for every ISP, so check Ofcom's current designated activities before assuming you need to notify.
Permission categories that may apply to your business:
- Ofcom telecoms obligations under the General Conditions, plus any current notification requirement
- A radio spectrum licence, or confirmation your equipment qualifies for a valid exemption
- Planning permission, street works consent, site access rights, and wayleaves
- Additional conditions for public voice services, telephone numbering, or premium-rate services
How compliance focus differs by model
| Model | Typical compliance focus |
|---|---|
| Wholesale reseller | Customer-facing General Conditions: contracts, complaints, switching |
| Facilities-based ISP | All of the above, plus site access, wayleaves, planning |
| WISP | All of the above, plus spectrum and interference rules |
| Community network | All of the above, plus governance and funding structures |
This isn't an exhaustive comparison, and it shouldn't replace case-specific advice. But it shows why "do I need an ISP licence" rarely has a one-line answer.
How to Get Set Up as an ISP in the UK
Step 1: Define the proposed ISP model
Before contacting anyone, nail down the basics. Will the service be residential, business, wholesale, community, or mixed? Fixed, mobile, or resale-based? Wired, wireless, or a hybrid?
Then decide whether the business will:
- Own network infrastructure
- Sell access over someone else's network
- Provide public voice services or allocate telephone numbers
- Run a purely private internal network
Map the intended customer base, geographic coverage, expected scale, service levels, and target launch date before approaching regulators or suppliers.
Step 2: Establish the business and financial foundations
Internet infrastructure sits on top of ordinary business fundamentals. You'll need to settle:
- Ownership structure and company registration
- Funding plan, insurance, and VAT position
- Supplier agreements and pricing model
- A realistic budget for backhaul or transit, equipment, site access, and support
- Budget lines for billing, cyber-security, maintenance, complaints handling, and regulatory administration
This is where company formation specialists can support the groundwork. VJM Global's UK formation service, for instance, covers Companies House registration, Corporation Tax registration with HMRC, UTR allocation, and the ongoing Confirmation Statement and annual accounts filings.
That said, forming a company is table stakes, not a finish line; it doesn't itself authorise telecoms activity.
Step 3: Confirm the Ofcom position
Use the model defined in Step 1 to work out which General Conditions apply, and whether the proposed activity falls under a current Section 33 notification requirement. Check Ofcom's current guidance directly rather than relying on a checklist that might already be out of date; administrative charges, turnover thresholds, and designated activities change.
Ofcom's 2026/27 tariff applies a Networks and Services charge of 0.1014% of relevant turnover, but only once turnover reaches £5 million or more in the relevant reference year. Below that threshold, no charge applies under that tariff.
That's an administrative fee, not proof of a licence. Contacting Ofcom or submitting a notification isn't the same as receiving a universal ISP licence.
Step 4: Secure network, site, and spectrum permissions
This is usually the most time-consuming step for facilities-based and wireless operators.
- Arrange wholesale connectivity, backhaul, IP transit, and upstream supplier contracts sized for your projected capacity and resilience needs.
- Secure landlord consent, leases, wayleaves, planning permissions, street works approvals, and access rights for poles, ducts, cabinets, rooftops, fibre routes, or relay sites.
- For wireless deployments, confirm your radio band, equipment, power level, and location meet a valid licence exemption, such as Ofcom's arrangement for the 5725–5850 MHz band supporting fixed wireless access, or apply for the appropriate spectrum licence.
- Test coverage, capacity, resilience, customer-premises equipment, and outage response before onboarding a single customer.
Using radio spectrum without a valid licence or exemption can be a criminal offence. This step deserves more scrutiny than many new operators give it.
Step 5: Prepare customer and operational compliance
Before accepting a paying customer, put these customer-facing documents in place:
- Terms and conditions, pricing information, and contract summaries
- Acceptable-use rules and service-level commitments
- Complaints procedures and outage communications
You also need operational and data controls:
- Privacy notices, data-handling procedures, and retention rules
- Security controls, incident-response plans, and supplier due-diligence records
- Billing, support, ticketing, network monitoring, and escalation processes
Finish with a documented pre-launch review that matches every identified legal or regulatory obligation to a named owner, a control, and an evidence record. If nobody can say who owns a given obligation, the business isn't ready to launch.
What You Need Before Launching
The exact evidence pack depends on your operating model. Assemble corporate, technical, commercial, site, and compliance information before you apply or go live.
Company and commercial documentation:
- Incorporation and ownership details, business-plan assumptions, funding evidence
- Insurance and VAT analysis
- Supplier contracts, pricing schedules, customer-contract templates
Network and infrastructure documentation:
- Network diagram, technology description, coverage plan
- Capacity assumptions, IP addressing, DNS and IPv6 plans, resilience design
- Records of backhaul, transit, colocation, landlord, wayleave, planning, and street works arrangements
Customer, privacy, and security documentation:
- Contract summaries, complaints and ADR procedures, switching processes
- Acceptable-use policy, privacy notice, data-retention approach
- Breach-response plan and network-security controls
Reporting timelines matter here. The ICO's current guidance requires public communications providers to report a qualifying personal-data breach within 72 hours of becoming aware of it, not the longer window some older guidance still references.
Research current Ofcom, ICO, PECR, UK GDPR, and Telecommunications (Security) Act requirements for your service before finalising these documents.
Technical and operational readiness
Test these areas in real conditions before launch, not after the first complaint lands:
- Coverage, throughput, latency, and capacity
- Failover and equipment compatibility
- Billing, support, and outage communications
- Incident escalation paths
Confirm radio equipment meets applicable conformity requirements. Staff and contractors should understand safety, site-access, and maintenance procedures.
Key Compliance Parameters, Common Mistakes and Troubleshooting
An ISP's risk profile comes down to a handful of controllable variables: infrastructure ownership, technology choice, customer type, service scope, scale, and geography. Get these right early, and most compliance questions answer themselves.
Operating model and service scope
Resale, facilities-based, community, WISP, and voice-enabled models trigger different Ofcom, infrastructure, spectrum, and consumer obligations. Check whether the business directly sells communications services, operates a public network, provides voice or numbering services, or only delivers a private managed network. Each answer changes what applies.
Spectrum, site rights, and infrastructure
A licence-exempt band still carries technical operating conditions; it isn't a free pass. No network operates reliably or lawfully without matching planning, wayleave, landlord, and street-access rights, however well it's planned. Check band, power, equipment, and interference controls alongside site permissions, maintenance access, route ownership, and any national or local approval.
Consumer, privacy, and security controls
Customer-facing obligations don't end at launch. They continue through transparent pre-contract information, switching, complaints, alternative dispute resolution, data protection, traffic-data handling, breach response, and proportionate cyber-security. Keep documented processes, assign responsible staff, track response times, and maintain audit trails for supplier controls too.
Common mistakes worth avoiding:
- Treating company incorporation, an Ofcom contact, or a wholesale agreement as proof the business is fully authorised
- Assuming every wireless deployment is licence-exempt, or quoting coverage claims that were never actually tested
- Launching before site rights and wayleaves are secured
- Skipping complaints, switching, privacy, security, or record-keeping procedures because the business is small
If something's unresolved, work through these steps before launch:
- Go back to the service classification
- Check current official guidance
- Get written confirmation where it matters
- Pause customer onboarding until the gap is closed
A delayed launch is cheaper than a regulatory problem after one.
Alternatives and Model-Specific Routes
Building a full facilities-based network isn't always the smartest route. The right structure depends on available capital, technical capability, target customers, coverage ambitions, and appetite for infrastructure obligations.
Wholesale reseller or managed connectivity provider
This route suits businesses that want to sell connectivity without building fibre, radio, or access infrastructure. Most of the infrastructure workload disappears.
You still carry full responsibility for:
- Customer contracts and complaints
- Privacy, security, and service communications
- Supplier oversight
Community or cooperative broadband network
A strong fit for residents, businesses, or local organisations seeking shared ownership or better connectivity in an underserved area. Bodies such as INCA represent independent UK telecoms networks, including community operators.
Local control and pooled funding are genuine advantages. You still need careful handling of:
- Governance and funding
- Site access and maintenance
- Customer support and regulatory classification
WISP or other fixed-wireless model
Useful where fibre deployment is impractical but suitable sites and line of sight exist. Ofcom's licence-exempt arrangement for fixed wireless access supports WISP-style deployments, subject to published technical conditions.
Unlike a pure reseller model, you also face:
- Spectrum rules and interference management
- Planning, equipment, and weather constraints
- Coverage testing and site-access obligations
Infrastructure partnership or network-as-a-service model
Best when you want to focus on customer acquisition and service management while a specialist partner owns or operates much of the network. Lower capital outlay is the draw.
The trade-off is less control over:
- Capacity and resilience
- Pricing and service quality
- Customer-data responsibilities
Weigh that balance carefully before committing.
Conclusion
Getting an ISP licence in the UK is less about finding one form to fill out and more about identifying the correct regulatory category. From there, you assemble the Ofcom, spectrum, infrastructure, consumer, privacy, and security requirements that actually apply.
The safest route is to:
- Define the business model first
- Verify current requirements directly with Ofcom, the ICO, and GOV.UK
- Secure the permissions the model requires
- Build documented compliance controls before onboarding a single customer
Incorporation or a wholesale access agreement doesn't complete the regulatory process on its own. For the business and financial groundwork, VJM Global supports UK company formation and VAT assessment work. Complex wireless, voice, or infrastructure-led projects will usually also need specialist UK telecoms and legal advice.
Frequently Asked Questions
What is an ISP in the UK?
An internet service provider is a business that supplies internet access or related communications services to UK customers, either through its own infrastructure or by reselling wholesale network capacity.
Do I need an ISP licence in the UK?
There's generally no single universal ISP licence. Ofcom's General Conditions apply automatically, and spectrum, planning, infrastructure, or service-specific requirements may stack on top depending on your model.
How do I apply for an ISP licence in the UK?
There's no generic application route for every ISP. Start by defining your service model, confirm which Ofcom rules apply, then obtain any additional permissions your specific setup requires.
Which regulator oversees ISPs in the UK?
Ofcom is the principal communications regulator, covering spectrum and the General Conditions. The ICO oversees data protection, and planning or highway authorities handle site-specific development and street works.
Do WISPs need a licence for wireless broadband in the UK?
It depends on the spectrum band, equipment, power, and location. Some bands, such as 5725–5850 MHz for fixed wireless access, are licence-exempt but still carry technical operating conditions.
What documents are needed to start an ISP in the UK?
Typically company details, network plans, supplier and site agreements, spectrum or planning evidence, customer terms, complaints processes, privacy documentation, and security procedures. The exact mix depends on your model.
