Risk Management Guide 2024 – until Feb 2025

Target Audience: All interactive media and micropayment providers operating in the UK

This guide is to help members complete a secure, manageable regulatory transition in terms of risk management, when the transfer of regulatory power from the PSA to Ofcom is concluded.

This risk management documentation is provided on an advisory basis and is for guidance only. aimm cannot be held responsible for ensuring that risk management is treated appropriately by your organisation. It is the responsibility of each individual organisation to ensure they comply with Ofcom regulations.

Identifying and managing ongoing risk has long been the responsibility of Intermediary Providers and Network Operators under the Phone-Paid Services Authority’s various Codes of
Practice. This year marks a change in regulatory regime, as the PSA will cease to exist, and Ofcom will take control.

As such, the Code of Practice model of regulation will also come to an end, and instead Industry will be governed by way of a Statutory Instrument –a legal document – laying out the
regulatory responsibilities of all providers.

Once the new guidance comes into play please then refer to the updated Guidance (from February 2025) for the most up to date and correct guidance for Ofcom regulation.