Provides telecom services, in Ireland

Act No. 4 of 2023, ss. 11 and 12 (Communications Regulation and Digital Hub Development Agency (Amendment) Act 2023) · Read the law's page

• If you are a provider of public electronic communications networks or of publicly available electronic communications services, notify the Commission for Communications Regulation without undue delay of any security incident that has had or is having a significant impact on the operation of your networks or services; judge significance by the incident's duration, the number and class of users affected, the geographical area, the extent to which the network or service was affected, the impact on economic and societal activities and the cause (section 11(1) and (2)).
• Put in the notification your name, the network or services affected, the date, time and duration of the incident, the information on the section 11(2) matters, the nature and impact of the incident, any likely cross-border impact and any other information the Commission specifies (section 11(3)).
• Once the incident is resolved, tell the Commission as soon as practicable, with the actions you took to remedy it and any actions to reduce the likelihood of a similar incident (section 11(4)).
• If the Commission decides that disclosing a notified incident is in the public interest, inform the public of it when the Commission requires you to (section 11(6)).
• Where there is a particular and significant threat of a security incident, tell the users potentially affected of any possible protective measures or remedies they can take and, where appropriate, of the threat itself (section 12(1)).

Act No. 4 of 2023, ss. 6, 14 and 15 (Communications Regulation and Digital Hub Development Agency (Amendment) Act 2023) · Read the law's page

• If you are a provider of public electronic communications networks or of publicly available electronic communications services, take appropriate and proportionate technical and organisational measures to manage the risks to the security of your networks and services, at a level of security appropriate to the risk having regard to the state of the art (section 6(1) and (2)).
• Take measures, including the use of encryption where appropriate, to prevent security incidents and to minimise the impact of any security incident on users and on other networks and services (section 6(3)).
• When the Commission for Communications Regulation asks, give it the information it needs to assess the security of your networks and services, including your documented security policies (section 14(1)).
• Comply with a security measures direction the Commission serves on you, which may require specified measures within specified time limits, a statement of the measures you have taken, and a security audit by the Commission or a qualified independent person at your cost; you may make written representations within 14 days of service (section 14(2) to (7)).

S.I. No. 444 of 2022, European Union (Electronic Communications Code) Regulations 2022, Regs. 87(4), (5) and (12), 88(1) and (13), 93(6), (9) and (10) and 94, and Schedule 8 · Read the law's page

• If you provide number-based interpersonal communications services that let end-users call numbers, ensure that end-users with disabilities can reach emergency services through emergency communications equivalent to those other end-users have, in accordance with any legal accessibility requirement for products or services and any measures the Commission for Communications Regulation specifies (Reg. 93(6)).
• On request, give a consumer the information the Regulations require before the consumer is bound by a contract in an accessible format for end-users with disabilities, subject to any legal accessibility requirement for products or services, and meet any requirement the Commission for Communications Regulation specifies to ensure this (Reg. 87(4) and (5)).
• If you provide internet access services or publicly available interpersonal communications services subject to terms and conditions, publish the Schedule 8 information pertinent to you, including details of products and services specifically designed for end-users with disabilities, in a clear, comprehensive, machine-readable manner and in an accessible format for end-users with disabilities, and update it regularly (Reg. 88(1) and Schedule 8, point 2.6).
• If you provide publicly available electronic communications services, comply with the requirements the Commission for Communications Regulation specifies so that end-users with disabilities have access to your service, including the related contractual information, equivalent to that enjoyed by the majority of end-users, and benefit from the choice of undertakings and services available to the majority of end-users (Reg. 94(1)).
• Requirements the Commission for Communications Regulation specified for equivalent access and choice for end-users with disabilities under Regulation 17 of the universal service regulations, and in force when Regulation 94 commenced, continue to bind you as requirements under Regulation 94 (Reg. 94(3)).

S.I. No. 636 of 2023, European Union (Accessibility Requirements of Products and Services) Regulations 2023, Regs. 3(2) and (4), 5(1), (3) and (4), 6, 14, 16 and 38 · Read the law's page

• If you provide to consumers on or after 28 June 2025 an electronic communications service, a service providing access to audiovisual media services, the specified elements of an air, bus, rail or waterborne passenger transport service, consumer banking services, e-books and dedicated software, or an e-commerce service, make the service comply with the accessibility requirements of Parts 3 and 4 of Schedule 1, or of Part 4 only for urban, suburban and regional transport services (Regs. 3(2), 5(1) and 5(3)); a publisher or other economic operator involved in distributing e-books and dedicated software is a service provider for them (Reg. 2(4)).
• Make websites, including the related online applications, and mobile device-based services, including mobile applications, accessible in a consistent and adequate way by making them perceivable, operable, understandable and robust (Schedule 1, Part 3, paragraph (c)).
• Make the products you use to provide the service accessible under Part 1 and, where applicable, Part 2 of Schedule 1, and give information on how the service works, including its link to those products and their accessibility characteristics and interoperability with assistive devices, through more than one sensory channel, in an understandable and perceivable way, in text formats that can generate alternative assistive formats, in fonts of adequate size and suitable shape with sufficient contrast and adjustable spacing, with non-textual content supplemented by an alternative presentation (Schedule 1, Part 3, paragraphs (a) and (b)).
• Where you offer support services such as help desks, call centres, technical support, relay services or training, provide information on the accessibility of the service and its compatibility with assistive technologies in accessible modes of communication (Schedule 1, Part 3, paragraph (d)).
• For e-commerce services, provide the information on the accessibility of the products and services being sold when you are the responsible economic operator and it is provided, and make the identification, security and payment functionality, identification methods, electronic signatures and payment services perceivable, operable, understandable and robust (Schedule 1, Part 4, paragraph (g)).
• For consumer banking services, provide identification methods, electronic signatures, security and payment services that are perceivable, operable, understandable and robust, and keep information understandable without exceeding level B2 (upper intermediate) of the Council of Europe's Common European Framework of Reference for Languages (Schedule 1, Part 4, paragraph (e)).
• For e-books, provide synchronised text and audio where an e-book contains audio, do not prevent assistive technology from operating properly, ensure access to the content, navigation and layout, allow alternative renditions interoperable with assistive technologies, make e-books discoverable through accessibility metadata, and do not let digital rights management block accessibility features (Schedule 1, Part 4, paragraph (f)).
• For electronic communications services, provide real time text in addition to voice communication, total conversation where video is provided in addition to voice, and synchronised emergency communications by voice, text and, where video is provided, total conversation, transmitted to the most appropriate public safety answering point (Schedule 1, Part 4, paragraph (a)).
• For services providing access to audiovisual media services, provide electronic programme guides that are perceivable, operable, understandable and robust and show the availability of accessibility, and transmit subtitles, audio description, spoken subtitles and sign language interpretation with adequate quality, synchronised with sound and video and under user control (Schedule 1, Part 4, paragraph (b)).
• For air, bus, rail and waterborne passenger transport services other than urban, suburban and regional transport services, provide information on the accessibility of vehicles, the surrounding infrastructure and the built environment and on assistance for persons with disabilities, and about smart ticketing, real-time travel information and additional service information; for urban, suburban and regional transport services, make the self-service terminals you use accessible under Part 1 of Schedule 1 (Schedule 1, Part 4, paragraphs (c) and (d)).
• Where the requirements of Parts 1 to 6 of Schedule 1 do not address a function of the service, make that function accessible by meeting the functional performance criteria of Part 7 of Schedule 1, such as at least one mode of operation that does not require vision, hearing, vocal input, perception of colour or fine motor control (Schedule 1, Part 7).
• Design and provide the service in accordance with the applicable accessibility requirements (Reg. 14(1)).
• Before providing the service, prepare the information Schedule 3 sets out on how the service meets the applicable accessibility requirements, include it in the general terms and conditions or an equivalent document, make it available to the public in writing and in oral format, including in a manner accessible to persons with disabilities, and keep it for as long as the service is in operation (Reg. 14(2) and Schedule 3).
• Keep procedures in place so that the service stays in conformity with the applicable accessibility requirements, and take into account changes in the characteristics of the service, in the requirements, and in the harmonised standards or technical specifications by which the service is declared to meet them (Reg. 14(3)).
• If the service is not in conformity, take the corrective measures needed and immediately inform the competent national authorities of the Member States where the service is provided, with details of the non-compliance and the corrective measures; on a reasoned notice from the relevant compliance authority, give it all the information needed to show the service conforms, and cooperate with it; the authority may direct you to provide the information if you do not (Reg. 14(4) and (5)).
• Regulation 14 and the service requirements of Regulation 5(3) do not apply to a service provided by a microenterprise, an enterprise which employs fewer than 10 persons and which has an annual turnover not exceeding EUR 2 million or an annual balance sheet total not exceeding EUR 2 million (Regs. 2(1) and 5(4)).
• Until 28 June 2030 you may keep providing your services using products which were lawfully used by you to provide similar services before 28 June 2030; service contracts agreed before 28 June 2025 may continue without alteration until they expire but no longer than 5 years from that date; and self-service terminals lawfully used before 28 June 2025 may stay in use until the end of their economically useful life, but no longer than 20 years after their entry into use (Reg. 38).