Counter-Terrorism Obligations for Electricity Operators

Detailed Explanation With Case Laws

1. Introduction

Electricity infrastructure is considered critical infrastructure because disruption of electricity can affect hospitals, transport, communications, water systems, businesses and public safety. The UK Government defines Critical National Infrastructure (CNI) as infrastructure whose loss or compromise could seriously affect essential services, national security or the functioning of the state. (NPSA)

Therefore, electricity operators have responsibilities to protect generating stations, substations, transmission networks, control centres and related information systems against terrorist threats. These responsibilities include physical security, emergency planning, cybersecurity, incident reporting and cooperation with government authorities.

2. Meaning of Counter-Terrorism Obligations

Counter-terrorism obligations are the legal and regulatory duties imposed on electricity operators to prevent, reduce and respond to terrorism-related risks.

They may include:

protecting critical electricity assets;

assessing security risks;

controlling access to sensitive sites;

protecting operational information;

maintaining emergency plans;

reporting serious incidents;

cooperating with security authorities; and

maintaining continuity of electricity supply.

The precise obligations depend on the operator, the asset involved and the applicable legislation.

3. Protection of Physical Infrastructure

Electricity operators should identify important assets and assess their vulnerability.

Security planning may cover:

power stations;

substations;

transmission lines;

control rooms;

communication facilities;

fuel and storage facilities; and

emergency-control systems.

The government's Protecting Against Terrorism guidance recommends security planning designed to protect staff, property and information and to reduce the consequences of a terrorist attack. (GOV.UK)

The 2025 National Policy Statement for electricity networks also emphasises that electricity infrastructure must be designed with security of supply and public and occupational safety in mind. (GOV.UK)

4. Cybersecurity as a Counter-Terrorism Measure

Modern electricity systems depend heavily on digital technologies such as SCADA, control systems and telecommunications.

A cyberattack may therefore create consequences similar to a physical attack.

Under the UK's Network and Information Systems Regulations 2018, relevant Operators of Essential Services must manage security risks affecting network and information systems and maintain resilience of essential services. Ofgem provides specific cybersecurity guidance for electricity Operators of Essential Services. (GOV.UK)

The legal approach is important because terrorism can involve actions designed to seriously disrupt an electronic system. This is recognised within the statutory definition of terrorism under the Terrorism Act 2000. (Supreme Court)

5. Emergency Planning and Continuity

Electricity operators must also prepare for serious emergencies.

The Electricity Supply Emergency Code (ESEC) sets out steps that electricity companies should plan to take during civil emergencies or electricity supply emergencies. It operates alongside powers under the Electricity Act 1989 and Energy Act 1976. (GOV.UK)

Emergency planning can include:

incident-response procedures;

communication with government agencies;

restoration arrangements;

alternative operational arrangements;

protection of essential personnel; and

coordination with other critical infrastructure operators.

The objective is not only to prevent an attack but also to limit its consequences and restore electricity services quickly.

6. Information Sharing and Cooperation

Electricity operators may need to cooperate with:

Ofgem;

government departments;

security agencies;

police;

emergency services; and

other CNI operators.

This is important because electricity infrastructure is interconnected with other sectors. A disruption to electricity can affect telecommunications, transport, water and healthcare.

The government's recent resilience work also emphasises cooperation between CNI operators and electricity network and system operators concerning resilience and security of energy supplies. (GOV.UK)

7. Relevant Case Laws

R (Miranda) v Secretary of State for the Home Department [2016] EWCA Civ 6

This case concerned counter-terrorism powers and the protection of sensitive security information. The Court considered the relationship between national security measures and individual rights. It is relevant by analogy to electricity operators because security measures involving sensitive infrastructure and information must have an appropriate legal basis. (BAILII)

QX v Secretary of State for the Home Department [2024] UKSC 26

The Supreme Court examined counter-terrorism measures under the Counter-Terrorism and Security Act 2015 and emphasised the legal requirements surrounding measures designed to protect the public from terrorism. The case illustrates the importance of lawful authority and safeguards when counter-terrorism powers are exercised. (Supreme Court)

R v Gul [2013] UKSC 64

This case considered the statutory meaning and scope of terrorism under UK law. It is relevant because electricity operators must understand the legal concept of terrorism when developing security and incident-response frameworks.

8. Conclusion

Counter-terrorism obligations for electricity operators form part of a wider critical-infrastructure protection framework. Operators must consider both physical and cyber threats, protect critical assets, maintain emergency arrangements, report relevant incidents and cooperate with regulators and security authorities.

The modern approach is based on prevention, preparedness, resilience and rapid recovery. NIS cybersecurity requirements, electricity emergency planning and CNI protection therefore work together to reduce the risk that terrorist activity will cause prolonged disruption to electricity supplies.

For electricity operators, counter-terrorism compliance is consequently not merely a security issue. It is also a matter of regulatory compliance, public safety, national resilience and continuity of essential services.