Ofcom’s strategic approach to AI

This article was written by Anthony Rosen and Tom McHugh.

On 6 June 2025, the UK’s converged communications regulator, Ofcom, published a statement outlining its approach to the use of artificial intelligence (AI). It details Ofcom’s approach to the use and adoption of AI in its regulated sectors (Telecoms, Broadcasting & Media, Post, Online Safety and Spectrum) and also how it can use AI as part of its regulatory enforcement.

Ofcom recognises that as technologies continue to evolve through the use of AI, new opportunities for businesses and consumers emerge. However, with this comes risks. For example, from a telecoms security and resilience perspective, advanced forms of AI such as Generative AI (GenAI) can be used to develop more virulent malware, identify vulnerabilities in networks and/or provide instructions to users on how to breach network security. On the online safety side, Ofcom also recognises the risks with regards to AI personalisation and synthetic media in the context of online exposure to harmful content (e.g., deepfakes and synthetic child sexual abuse material (CSAM)). 

The communications regulator is seeking to mitigate against such risks by continuing to track developments in how GenAI could be used to develop malicious tools that threaten network security. It is also engaging with online platforms to explain the scope of the online safety duties, the requirements to carry out risk assessments and making it clear that content created by AI can also be captured by the UK online safety regime.

Ofcom explains that it follows a technology-neutral approach to regulation; meaning it focuses more on regulating outcomes for consumers and citizens and not on whether certain technologies should be used to deliver them. Furthermore, the regulator outlines that it regularly assesses the impact that the technological developments such as AI are having in its sectors and the implications this might have on its ability to deliver the desired regulatory outcomes and to ensure regulation is fit for the future.

This approach taken by Ofcom, coupled with its understanding of AI, is aimed at helping industry unlock the current and future benefits of AI. 

For the telecoms industry, Ofcom has recognised that the current benefits of AI include:

• helping keep networks secure by identifying and mitigating security threats in real-time;
• predicting telecoms network maintenance needs;
• detecting network anomalies; and
• preventing network congestion.

Further, Ofcom has acknowledged the following as future benefits of AI for the telecoms industry:

• enhancing network management leading to better service quality and reliability;
• improving sustainability; and
• optimising spectrum allocation, helping reduce congestion on networks and enhancing network efficiency.

In relation to the other sectors, Ofcom has also noted a range of benefits. For the Broadcasting & Media sector, the benefits of AI include improving accessibility features and tools, alongside assisting the creative process more generally. For online platforms, AI-driven content moderation can improve online safety by identifying and mitigating harmful content at scale with increasing automation. On the Spectrum side, AI can also offer more dynamic spectrum management. Finally, in relation to Post, AI can assist with address recognition and letter sequencing leading to improved spectrum management and increased efficiency in postal services respectively.

In order to capitalise on such benefits, Ofcom is taking forward a number of initiatives to support AI innovation, including:

• investing in hands-on and technical AI research, including through sandboxes and technical labs;
• providing large data sets to help train and develop AI models;
• collaborating with other institutions to provide regulatory alignment, including working with other regulators as part of the Digital Regulation Cooperation Forum (DRCF) to provide more practical cross-sectoral support for businesses looking to innovate with AI; and
• building relationships and providing active support to stakeholders to increase regulatory clarity.

The regulatory authority also provides specific examples of work that it will undertake in 2025/26. For example, Ofcom will issue further guidance to broadcasters as necessary to ensure understanding of their responsibilities and accountabilities regarding AI. Within the online safety space, Ofcom’s internal Online Safety Technology Lab will continue to support practical research into safety technologies.

The following are some examples of the work that the authority will undertake in the next year within the telecoms industry specifically:

• SONIC Labs collaboration between Ofcom and Digital Catapult on a technical study to understand the use of AI in mobile networks;
• Ofcom’s representation on the oversight board of UK Telecoms Lab, which provides a space for the testing of security, resilience and interoperability on near-representative test networks;
• Participating in the European Telecommunication Standards Institute (ETSI)’s Technical Committee: CYBER, where the telecoms aspects of AI security are formalised;
• Continuing to monitor how developers of AI systems and those deploying them in telecoms are prioritising explainability, interpretability and transparency to build trust and accountability; and
• Commitment to using technology, including AI, in a way that reduces the regulatory burden on stakeholders in line with Ofcom’s general approach to regulation.