Virgin Media O2 Business

Communications United Kingdom Website Reviewed Sept. 22, 2026

UK fixed and mobile telecoms operator, a joint venture of Liberty Global and Telefónica, serving enterprise and public sector customers.

Report an issue with this profile

Compliance Frameworks

GDPR 2016/679
Partial
Business and consumer privacy policies published; no public DPA template located.

Assurance position

No public evidence was found that VMED O2 UK Limited itself holds ISO, Cyber Essentials or PCI DSS certification. Its Reporting Criteria 2024 makes no certification claim.

**Watch for a common false positive:** VMO2’s Security Schedule v8.0 (July 2026) *requires* Cyber Essentials, ISO/IEC 27001 and PCI DSS **of its suppliers**. Those are supplier obligations, not VMO2’s own certifications.

No dedicated vulnerability disclosure page found; the nearest route is the general abuse reporting form on virginmedia.com/help/security.

Assess Virgin Media O2 Business in your own vendor risk programme

SnapGRC lets you send security questionnaires, track DPA status, manage sub-processors, and maintain a supplier risk register — all audit-ready.

Supplier Management Free Risk Register