UK Business Phone System: VoIP and Compliance Guide

The UK Business Telephony Landscape in 2026

The United Kingdom is in the midst of the largest telecommunications infrastructure change in a generation. BT's planned Public Switched Telephone Network (PSTN) switch-off, originally targeted for December 2025 and now being executed in phases through 2027, is compelling every UK business to migrate from traditional analogue phone lines to IP-based communications. Openreach has already stopped selling new PSTN lines, and the migration of existing lines to Digital Voice and all-IP infrastructure is well underway.

This transition is not merely a technology upgrade — it fundamentally changes how businesses must think about compliance, data handling, emergency calling, and service reliability. For CTOs and IT directors at UK organisations, understanding the regulatory framework is as important as selecting the right VoIP platform.

UK Telecom Regulatory Framework

Ofcom (Office of Communications) is the UK's independent communications regulator, responsible for overseeing telecommunications, broadcasting, and postal services. Key regulations affecting business VoIP deployments include:

• Communications Act 2003: The primary legislation governing electronic communications networks and services in the UK. VoIP providers offering PSTN connectivity must hold a General Authorisation under the General Conditions of Entitlement
• General Conditions of Entitlement (GCs): A set of regulatory conditions that all communications providers must meet, covering areas such as number portability (GC C1), emergency call access (GC A3), and quality of service (GC C5)
• Ofcom Numbering Plan: Governs the allocation and use of UK telephone numbers, including geographic numbers (01/02), non-geographic numbers (03), and freephone numbers (0800/0808)
• Telephone Preference Service (TPS) Regulations: Businesses making outbound calls must screen against the TPS register maintained by the Information Commissioner's Office (ICO). Calling registered numbers without consent is a breach under the Privacy and Electronic Communications Regulations (PECR) 2003

UK GDPR and Call Recording Compliance

The UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 impose strict requirements on how businesses handle personal data, including voice communications:

Lawful Basis for Call Recording

Businesses must establish a lawful basis under Article 6 of UK GDPR before recording calls:

1. Consent: The caller explicitly agrees to recording (most common for customer service)
2. Legitimate Interest: The business has a demonstrable need (quality assurance, training, dispute resolution) that does not override the individual's rights
3. Legal Obligation: Recording is required by law (e.g., FCA-regulated financial services under MiFID II)
4. Contract Performance: Recording is necessary to fulfil a contractual obligation

Key Compliance Requirements

• Pre-recording notification: Callers must be informed that the call may be recorded before recording begins
• Data minimisation: Only record calls where there is a genuine business need; do not record all calls by default without justification
• Retention policies: Define and enforce retention periods. The ICO recommends keeping recordings only as long as necessary for the stated purpose
• Subject Access Requests (SARs): Individuals have the right to request copies of their call recordings under UK GDPR Article 15. Businesses must be able to locate and provide recordings within one calendar month
• Data Protection Impact Assessment (DPIA): Required when call recording involves large-scale processing or systematic monitoring of individuals

Financial Services-Specific Requirements

For UK businesses in financial services, additional regulations apply:

• FCA Handbook SYSC 10A (MiFID II Recording Requirements): Investment firms must record telephone conversations and electronic communications relating to client orders, transactions, and activities. Recordings must be retained for a minimum of five years, extendable to seven years at FCA request
• PSD2 (Payment Services Directive): Payment service providers handling telephone payments must comply with PCI DSS requirements, ensuring that card details captured during calls are protected through pause-and-resume recording, DTMF suppression, or secure payment IVR

The PSTN Switch-Off: What Businesses Must Do

The migration from PSTN to all-IP infrastructure has several implications:

flowchart TD
    CENTER(("Strategy"))
    CENTER --> N0["Consent: The caller explicitly agrees t…"]
    CENTER --> N1["Contract Performance: Recording is nece…"]
    CENTER --> N2["Openreach has ceased selling new WLR Wh…"]
    CENTER --> N3["Stop-sell on PSTN-based services means …"]
    CENTER --> N4["ISDN30 and ISDN2 circuits will no longe…"]
    CENTER --> N5["The provider must hold a valid General …"]
    style CENTER fill:#4f46e5,stroke:#4338ca,color:#fff

Timeline and Impact

• Openreach has ceased selling new WLR (Wholesale Line Rental) products
• Stop-sell on PSTN-based services means new business premises can only get IP-based connectivity
• Existing PSTN lines are being migrated exchange by exchange, with full completion targeted for January 2027
• ISDN30 and ISDN2 circuits will no longer be available

Migration Considerations

1. Audit existing lines: Identify all PSTN lines, ISDN circuits, and analogue devices (fax machines, alarm systems, payment terminals, lift phones) that need migration
2. Emergency services: VoIP systems must support 999/112 emergency calling with accurate location information under Ofcom GC A3. Unlike PSTN, where location is tied to the physical line, VoIP requires registered address information to be passed to emergency services
3. Power resilience: PSTN lines are powered by the exchange, functioning during power cuts. VoIP requires local power and internet connectivity. Businesses must plan for UPS (uninterruptible power supply) or mobile network failover
4. Number porting: UK number portability regulations (GC C1) allow businesses to retain their existing geographic and non-geographic numbers when migrating to VoIP

Choosing a UK VoIP Platform: Essential Criteria

Regulatory Compliance

• The provider must hold a valid General Authorisation from Ofcom
• Support for 999/112 emergency calling with location data
• TPS/CTPS screening integration for outbound calling operations
• UK GDPR-compliant data processing, with a Data Processing Agreement (DPA) in place
• UK-based data centres or adequacy-confirmed international transfers

Technical Requirements

• SIP trunking with UK geographic number support (01/02 ranges)
• Support for 03 non-geographic numbers (charged at local rate)
• 0800/0808 freephone number hosting
• Codec support appropriate for UK internet infrastructure (G.711 for LAN, G.729/Opus for WAN)
• Quality of Service (QoS) monitoring with Mean Opinion Score (MOS) reporting

Business Features

• Microsoft Teams Direct Routing or Operator Connect integration (Teams is the dominant UCaaS platform in UK enterprises)
• CRM integrations with UK-popular platforms (Salesforce, HubSpot, Bullhorn for recruitment, Reapit for estate agents)
• Call analytics with UK-format reporting (date formats, currency, working hour patterns)
• Multi-site support for businesses with offices across England, Scotland, Wales, and Northern Ireland

Cost Comparison: UK VoIP Market in 2026

Feature	BT Cloud Work	8x8 X Series	RingCentral UK	CallSphere
Per-User/Month	From GBP 10.99	From GBP 12.00	From GBP 12.99	Usage-based
UK Landline Calling	Included	Included	Included	Included
UK Mobile Calling	Included	Included	Add-on	Included
International Calling	Add-on	14 countries	Add-on	Per-minute
Call Recording	Add-on	Included	Included	Included
Teams Integration	Limited	Yes	Yes	Yes
Minimum Commitment	12 months	12 months	12 months	Monthly

For UK businesses processing high call volumes — particularly in recruitment, estate agency, insurance, and financial services — the total cost of VoIP is typically 30-50% lower than equivalent ISDN-based systems, even before factoring in the forced PSTN migration.

CallSphere for UK Business Operations

CallSphere's UK deployment operates through Ofcom-authorised carrier interconnections, with call data processed in UK-based data centres to maintain UK GDPR compliance. The platform includes built-in TPS screening for outbound campaigns, automated call recording with configurable retention policies, and native Microsoft Teams integration through Direct Routing.

For businesses managing the PSTN switch-off transition, CallSphere offers a migration assessment tool that audits existing telephony infrastructure and provides a phased migration plan, minimising disruption to business operations.

Implementation Roadmap for UK Businesses

Phase 1: Assessment (Weeks 1-2)

• Audit all existing PSTN/ISDN lines and connected devices
• Map current call flows and IVR structures
• Assess internet connectivity at all sites (minimum 100 Kbps per concurrent call)
• Review regulatory requirements specific to your industry

Phase 2: Planning (Weeks 3-4)

• Select VoIP provider and negotiate terms
• Plan number porting schedule with existing carrier
• Design new call flows and IVR menus
• Configure CRM and business tool integrations

Phase 3: Deployment (Weeks 5-8)

• Deploy SIP trunks and configure endpoints
• Port numbers in batches to minimise risk
• Conduct user acceptance testing across all sites
• Train staff on new handsets and softphone applications

Phase 4: Optimisation (Ongoing)

• Monitor call quality metrics and MOS scores
• Refine IVR routing based on call analytics
• Implement advanced features (AI transcription, sentiment analysis)
• Review and optimise costs based on usage patterns

FAQ

Do I have to switch from PSTN to VoIP in the UK?

Yes. Openreach is decommissioning the PSTN, with full switch-off planned by January 2027. All businesses currently using analogue phone lines or ISDN circuits must migrate to IP-based communications. This is not optional — once your local exchange is migrated, PSTN lines will cease to function.

Is call recording legal in the UK without consent?

Call recording is legal in the UK, but the lawful basis depends on the context. Under UK GDPR, businesses must have a legitimate basis for recording — typically consent or legitimate interest. The Regulation of Investigatory Powers Act 2000 (RIPA) permits businesses to record calls without consent for specific purposes such as regulatory compliance, crime prevention, or ensuring the effective operation of the telecommunications system. However, best practice is to always inform callers that recording may take place.

What happens to my 999 emergency calling with VoIP?

Ofcom General Condition A3 requires all VoIP providers offering PSTN-connected services to provide access to 999 and 112 emergency services. The provider must pass your registered address to emergency services. However, unlike PSTN, if your internet connection fails, you cannot make emergency calls from your VoIP phone unless your system has mobile network failover configured.

Can I use my existing phone numbers with a new VoIP system?

Yes. UK number portability regulations under Ofcom General Condition C1 allow you to port geographic numbers (01/02), non-geographic numbers (03), freephone numbers (0800/0808), and mobile numbers to a new provider. The losing provider must complete the port within one business day for single lines, or within an agreed timeframe for complex multi-line ports.

How does TPS compliance work with VoIP outbound calling?

The Telephone Preference Service (TPS) is a legal opt-out register under the Privacy and Electronic Communications Regulations (PECR) 2003. Businesses making unsolicited marketing calls must screen their call lists against the TPS register at least every 28 days. The ICO can issue fines of up to GBP 500,000 for serious PECR breaches. Your VoIP platform should integrate TPS screening directly into the outbound dialling workflow to ensure compliance.