Compliance checklist for Ofcom's TAR 2026 wholesale market review and new regulatory requirements.
Quick answer: Ofcom's Telecoms Access Review sets the rules for wholesale access, including Openreach. This 2026 checklist summarises what providers should check and which deadlines to plan around.
What You Learn
- ✓ Telecoms Access Review timeline
- ✓ Market reform impacts
- ✓ Wholesale access changes
- ✓ Preparation steps
Who It's For
- • Network operators
- • Service providers
- • Infrastructure planners
- • Strategy teams
TAR 2026 sets wholesale market rules for 2026-2031. Key deadlines: STIR/SHAKEN for large providers from 1 Jan 2026, new wholesale pricing from 1 Apr 2026, copper stop-sell in Exchange Area 1 from Jul 2026. Resellers must review upstream contracts by Q1 2026 and prepare for CLI authentication passthrough requirements.
Implementation Timeline
TAR 2026 Final Statement Published
Ofcom published final market review conclusions and implementation guidance.
STIR/SHAKEN Phase 1
CLI authentication mandatory for providers with >1 million subscribers.
New Wholesale Pricing
Updated Openreach pricing for FTTP, Ethernet and legacy products takes effect.
Exchange Area 1 Copper Stop-Sell
No new copper-based orders in areas with >75% FTTP availability.
STIR/SHAKEN Phase 2
CLI authentication extends to providers with >100,000 subscribers.
PSTN Switch-Off Complete
Openreach completes migration of all services to IP-based network.
Compliance Checklist
Q1 2026: Immediate Actions
-
☐
Review Upstream Contract Pricing SchedulesCheck wholesale pricing changes effective 1 April 2026. Update customer pricing where pass-through applies.
-
☐
Assess CLI Authentication CapabilityConfirm your SIP infrastructure can pass STIR/SHAKEN attestation headers. Contact vendor if unsure.
-
☐
Audit Copper Service BaseIdentify customers on PSTN/ISDN in Exchange Area 1 (high FTTP coverage). Plan migration conversations.
-
☐
Update Customer ContractsEnsure contracts permit technology migration and reflect updated Openreach SLA terms.
Q2 2026: Implementation
-
☐
Implement CLI PassthroughConfigure SIP headers to pass attestation data from upstream to customer endpoints.
-
☐
Begin Exchange Area 1 MigrationsProactively migrate copper customers before July stop-sell deadline.
-
☐
Update Fraud Detection for CLI VerificationIncorporate attestation levels into fraud scoring. Flag calls with failed/missing attestation.
Ongoing Requirements
-
☐
Monitor Ofcom Market ReviewsTAR 2026 may be amended. Subscribe to Ofcom consultations for updates.
-
☐
PSTN Switch-Off PlanningMaintain customer migration roadmap for full PSTN retirement by 2030.
Key Changes Summary
| Area | TAR 2021 (Previous) | TAR 2026 (New) | Status |
|---|---|---|---|
| FTTP Wholesale Pricing | Volume-based discounts only | CPI-X price caps, anchor pricing | Apr 2026 |
| CLI Authentication | Voluntary adoption | Mandatory STIR/SHAKEN (phased) | Live |
| Copper Stop-Sell | Voluntary exchange closure | Mandatory in high-fibre areas | Jul 2026 |
| Openreach SLAs | 5-day provision target | 3-day provision target (FTTP) | Apr 2026 |
| Equivalence Reporting | Annual reports | Quarterly KPI publication | Q2 2026 |
Impact by Provider Type
📞 Voice Resellers
- CLI authentication passthrough required
- Update fraud detection for attestation
- Customer display of verification status
- PSTN customer migration planning
🌐 Broadband ISPs
- New Openreach FTTP pricing from April
- Exchange Area 1 copper stop-sell
- Updated provision SLA commitments
- Altnet parity pricing considerations
🏢 Business Providers
- Ethernet pricing adjustments
- ISDN30 migration acceleration
- SIP trunk CLI compliance
- Enterprise contract updates
📱 MVNOs
- CLI authentication for outbound voice
- Wholesale mobile access unchanged
- Fixed-mobile convergence planning
- Number portability improvements
STIR/SHAKEN Requirements
Phase 1 Now Live (January 2026)
Providers with >1 million voice subscribers must implement STIR/SHAKEN. Smaller providers should prepare for Phase 2 (2028) now to avoid rushed implementation.
| Attestation Level | Meaning | Action Required |
|---|---|---|
| A (Full) | Provider verified caller identity and authorised CLI use | Display as "Verified Caller" |
| B (Partial) | Provider authenticated call origin but not CLI ownership | Display as "Authenticated" |
| C (Gateway) | Provider is entry point but cannot verify origin | No verification badge |
| None/Failed | Attestation missing or invalid | Flag in fraud detection, warn user |
Technical Implementation
STIR/SHAKEN passes attestation in the SIP Identity header. Your SIP platform must:
- Parse incoming Identity headers (verification)
- Display verification status on customer endpoints
- For originating calls: obtain certificate from approved CA and sign outbound calls
- Log attestation data for fraud analysis and regulatory evidence
Related Guides
Need help with this?
Book a free 15-minute compliance audit call and we'll tell you exactly where you're exposed.
Book Your Free Audit →What is the Telecoms Access Review 2026?
The Telecoms Access Review 2026 (TAR 2026) is Ofcom's periodic review of wholesale telecoms markets in the UK. It sets price controls, access obligations and quality standards for Openreach and other network operators for the 2026-2031 regulatory period. Key changes include updated fibre access pricing, expanded equivalence requirements and new CLI authentication mandates.
When do TAR 2026 requirements come into effect?
TAR 2026 implementation is phased: wholesale pricing changes take effect 1 April 2026, CLI authentication (STIR/SHAKEN) requirements for large providers from 1 January 2026, equivalence of inputs reporting from Q2 2026, and full fibre transition milestones run through 2030.
Does TAR 2026 affect telecom resellers?
Yes. Resellers will see changes to wholesale pricing from upstream providers, new requirements for CLI authentication passthrough, updated contract terms reflecting Openreach SLAs, and potential service migration as copper services are withdrawn. Resellers should review upstream contracts by Q1 2026.
What are the STIR/SHAKEN requirements in TAR 2026?
TAR 2026 mandates STIR/SHAKEN CLI authentication for providers with >1 million subscribers from January 2026, with phased rollout to smaller providers by 2028. Requirements include: signing outbound calls with attestation level, verifying inbound attestation, displaying verification status to customers, and reporting spoofing incidents.