UK Customer Support in 2026: AI, Data Protection & the PSTN Switch-Off

A missed sales lead because your team was on-site, or a customer query buried in a flooded inbox, is no longer just an operational headache in 2026—it's a direct operational and revenue risk. For UK service businesses, the ground has fundamentally shifted. Relying on a simple phone number and an email address is becoming an increasingly fragile strategy in the face of new digital realities.

We are in the midst of a perfect storm. New digital regulations require careful attention. Simultaneously, a once-in-a-generation infrastructure overhaul is underway, with the final deadline for the retirement of the legacy phone network looming on 31 January 2027. This isn't a distant problem; it's an immediate imperative for businesses to modernise their customer contact methods or risk being left behind and unable to serve customers effectively.

The Shifting Digital Environment for UK Businesses

Understanding the current environment is the first step toward building a resilient business. Three major forces are converging in 2026, and ignoring any one of them is a significant risk. These aren't abstract trends; together they are changing the operating environment for plumbers, clinics, online retailers and other service businesses.

First and foremost is the regulatory framework. Ofcom has clarified that not all AI chatbots are regulated under the Online Safety Act. Scope depends on how a service operates, including whether it provides user-to-user or search functionality. This is layered on top of the established UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, which the Information Commissioner's Office (ICO) continues to enforce rigorously. Handling personal data correctly is paramount. Additionally, the Network and Information Systems (NIS) Regulations 2018 apply to specified essential and digital services. The Cyber Security and Resilience Bill, currently proceeding through Parliament, proposes reforms and extensions to the existing NIS framework. Whether NIS obligations apply depends on the organisation's activities and the statutory scope. Data-protection obligations, together with any sector-specific rules that apply to the organisation, make appropriate governance of customer communication important.

The second force is the massive infrastructure migration. Openreach is retiring the UK's legacy analogue Public Switched Telephone Network (PSTN), with the final deadline for affected services to migrate from the legacy PSTN to suitable digital alternatives set for 31 January 2027. Businesses still relying on affected legacy PSTN services should work with their communications provider to migrate before the retirement deadline. In July 2026, Openreach estimated that around 350,000 business premises were still operating on the old network. This means traditional landlines that rely on the PSTN are becoming obsolete. While this digital shift brings opportunities, it also exposes vulnerabilities. According to Ofcom's Spring 2026 Connected Nations update, gigabit-capable broadband reached 89% of UK homes, although the availability and type of connectivity still varies by location. Similarly, while 96% of the UK landmass has 4G coverage from at least one operator, 'not-spots' with zero coverage still exist in about 4% of the country. Differences in fixed and mobile coverage also reinforce the value of offering customers more than one practical way to contact a business.

The Underlying Technology Stack

Finally, the technology itself has matured. The cost and complexity of deploying sophisticated digital tools have fallen dramatically. SaaS tools can reduce implementation effort compared with building a comparable system from scratch.

The Hidden Costs of Outdated Customer Support

Sticking with old methods—a ringing phone that goes unanswered or an email inbox that gets checked once a day—carries tangible costs that are escalating in the current environment. These costs fall into three main categories: lost revenue, governance risks, and operational inefficiency. Many businesses underestimate these until a major incident occurs.

Missed revenue is the most direct cost. When a potential customer visits your website with an urgent need, they expect an immediate answer. If they are met with a static 'contact us' form, they will simply click away to a competitor who offers instant engagement. This is especially true for service businesses like emergency plumbers or local trades, where response time is everything. Slow responses can increase the risk of losing time-sensitive enquiries to competitors. Web chat provides customers with an additional way to make contact where usable internet connectivity is available, including some situations where voice coverage is weak. An automated assistant can provide a first response around the clock and reduce the number of enquiries that depend on staff being immediately available.

Poorly governed customer-support processes can also create significant privacy and security risks. Handling customer-support conversations outside approved business systems can create governance, retention, access-control and accountability risks. Fines from the ICO can be substantial. An unmanaged chat tool can create additional privacy, security, retention and accountability risks. A centrally managed support system can provide a consistent conversation history and make retention, access controls and oversight easier to manage.

Finally, there's the staggering cost of inefficiency. Your skilled staff's time is valuable. Having them spend hours answering the same five questions—'What are your opening hours?', 'Do you serve my area?', 'How much does X cost?'—is a poor use of resources. This is time they could be spending on complex problem-solving, closing high-value sales, or delivering the core service. Automating these repetitive tasks frees up that human capital, allowing your team to focus where they create the most value.

A Modern Approach: Smart Automation with a Human Touch

The solution isn't to replace humans with robots. The most effective strategy for 2026 and beyond is a hybrid approach that combines the best of AI automation with the irreplaceable value of human expertise. This means creating a single, intelligent central point of contact for your business that is available around the clock for supported automated enquiries, backed by configurable security controls and human handover.

This modern approach is built on three core principles. First is immediate, automated response. An AI-powered chatbot should be the first point of contact, capable of instantly answering many repetitive, knowledge-based customer enquiries. It works around the clock, never gets tired, and can provide consistent responses grounded in configured business information, with human escalation available when needed.

Second is secure, verified interaction for sensitive tasks. When a customer needs to check an order status or access account information, the system must not simply give out data. The right approach involves a verification step, such as a one-time passcode (OTP) sent to the customer's registered email address. This adds an identity-verification step before any personal information is shared, an important control to help protect personal data. The customer enters the code back into the chat, and for workflows configured to require OTP, the requested account-specific information is returned only after successful verification. This builds trust and protects both the customer and the business.

The third, and most crucial, principle is intelligent human handover. No chatbot can answer every question. When a query is too complex, too sensitive, or the customer simply asks to speak to a person, the system must facilitate a smooth transition to a human agent. This shouldn't involve asking the customer to call a number or send an email. The handover should happen within the same chat window, preserving the context of the conversation so the customer doesn't have to repeat themselves. This is what our tagline means: Smart Support. Human When It Matters.

How OrCube AI Delivers Security-Conscious, Efficient Support

OrCube AI provides an AI customer support platform for businesses modernising their customer-service operations. The service includes a website chatbot, configurable email-based OTP verification and live-agent handover, with controls designed to support secure customer interactions. Businesses can start with a 14-day free trial.

Our philosophy is built around the website chatbot as a central channel for customer support interactions. The customer never has to download an app or switch to a different platform. This centralised workflow can support an organisation's data-protection and access-control processes, as conversation history remains associated with the central customer session and can be accessed through the supported management workflow. Successful bookings can trigger automated WhatsApp confirmations via OrCube's supported WhatsApp integration, while the support conversation itself remains in the website chat.

For sensitive lookups, our built-in email OTP verification is a key feature. When a customer asks for their order status, OrCube AI sends a unique code to the email address associated with that order. For integrations configured to require OTP, the requested account-specific data is returned only after successful verification. This simple, robust process helps reduce the risk of unauthorised access or disclosure and demonstrates a commitment to data protection.

Our live handover feature is uniquely flexible. If an agent is at their desk, they can take over the conversation directly in the OrCube AI dashboard. If your team is out on the road, the handover request can be routed to the agent's own WhatsApp. Crucially, the agent replies via their WhatsApp, but the customer continues interacting through the website chat rather than being redirected to the agent's WhatsApp account. This gives teams additional flexibility while keeping the customer-side conversation within the website chat.

Building or integrating such a system from scratch can be a significant undertaking. In contrast, OrCube AI provides a managed solution starting from just £14.99 per month.

Why This Matters for Your Service Business Now

For organisations still dependent on affected PSTN services, the 31 January 2027 deadline for the legacy PSTN retirement makes migration planning increasingly urgent. For a plumber, this means being able to receive an emergency enquiry through your website chat while you're on another site, with the query instantly routed to your phone via WhatsApp for a quick reply. For clinics, administrative appointment enquiries may be automated where appropriate, but any processing involving health information requires careful privacy, security and lawful-processing decisions appropriate to that use case.

For an e-commerce business, it means automating repetitive ‘where is my order?’ queries with secure OTP verification, freeing your support team to handle complex returns or product questions that drive loyalty. The common thread is efficiency, appropriate security controls, and an improved customer experience.

Delaying migration or support-process improvements can increase operational risk and leave less time to address problems before legacy-service deadlines. By implementing a modern contact method now, you not only mitigate risk but also can improve responsiveness and reduce repetitive support workload. A faster, more accessible support workflow can improve the customer experience and reduce friction when people need help.

OrCube AI provides tools for automating common enquiries, verifying selected account-specific requests and escalating conversations to human agents. It's a single platform designed to address common challenges around missed enquiries, repetitive support and human escalation. Ready to see how it works for your business?

AI customer-support checklist

• Identify what personal data the chatbot processes.
• Define when human handover should occur.
• Restrict access to support conversations.
• Establish appropriate retention rules.
• Use verification before appropriate account-specific lookups.
• Review third-party integrations and processors.
• Keep privacy information up to date.
• Check whether sector-specific rules apply.
• Assess whether the service falls within Online Safety Act scope.
• Test escalation and failure scenarios.

Frequently Asked Questions

Does the Online Safety Act apply to AI chatbots?

Not necessarily. Ofcom has clarified that an AI chatbot's inclusion in the scope of the Online Safety Act depends on its specific functionality. Services that include user-to-user features or search functions are more likely to be in scope. Businesses should assess their specific implementation.

When will the UK PSTN be retired?

The final retirement of the UK's legacy Public Switched Telephone Network (PSTN) is scheduled for 31 January 2027. Businesses with services that still rely on the old network are advised to migrate to digital alternatives with their provider well before this deadline.

Does email OTP make a chatbot GDPR compliant?

No. OTP is a security control used to help verify a user's identity before revealing account-specific information. UK GDPR compliance is a much broader legal obligation that covers an organisation's entire data processing activities, including its lawful basis, security measures, data retention, transparency, and data subject rights. An OTP is one technical measure that can support security, but it does not achieve compliance on its own.

Can AI customer support hand over to a human?

Yes. OrCube AI is designed with a human handover workflow. If the chatbot cannot resolve an enquiry or the customer requests to speak with a person, the conversation can be escalated to a human agent who can take over from their dashboard or via a supported WhatsApp workflow. The customer remains in the website chat window throughout the process.

What should a UK business check before deploying an AI chatbot?

Key areas to review include the types of personal data being processed, access controls for support conversations, data retention policies, any third-party integrations, and clear rules for escalation to human agents. It's also vital to assess whether any sector-specific rules or the Online Safety Act might apply to your use case.

Contact us today or start your no-obligation 14-day free trial to experience how OrCube AI can transform your customer support.

---

Important: This article provides general information about customer-support technology and relevant UK regulatory developments. It is not legal, regulatory or compliance advice. Requirements depend on your organisation, services, data-processing activities and circumstances.

Article by: [Author Name]
Technical review: [Reviewer Name, Role]
Last reviewed: 4 September 2026. Sources checked against current Ofcom, Openreach, ICO and GOV.UK guidance.

--- ### Changes Made 1. **Title Changed**: Replaced "UK Business Compliance & Customer Support: Your 2026 Guide" with "UK Customer Support in 2026: AI, Data Protection & the PSTN Switch-Off" to better reflect the article's focus. 2. **Certification Claims Removed**: Deleted the sentence claiming Code Melodies Ltd holds Cyber Essentials, Cyber Essentials Plus, or aligns with ISO/IEC 27001. All other references to these certifications were removed. 3. **Product Description Updated**: The main product description for OrCube AI was replaced with factual, feature-based language, avoiding the term "compliant platform". 4. **Compliance Language Softened**: Removed or rephrased statements that implied OrCube guarantees regulatory compliance (GDPR, Online Safety Act, NIS). Wording was changed to focus on how the platform's controls can *support* an organisation's processes. 5. **Headings Corrected**: The heading "How OrCube AI Delivers Compliant, Efficient Support" was changed to "How OrCube AI Delivers Security-Conscious, Efficient Support". 6. **Takeaway Corrected**: The Online Safety Act takeaway was revised to be more accurate, stating that applicability depends on functionality, and removing the claim that a managed platform is the "safest approach". 7. **Broadband & 4G Interpretation Fixed**: Corrected the misleading conclusion that the 11% of homes without gigabit broadband lack internet. Rephrased the 4G coverage conclusion to be more measured. 8. **Universal Claims Removed**: Changed "every plumber... must operate" to a softer phrase about the "changing operating environment". 9. **Exaggerated Language Toned Down**: Replaced phrases like "most dangerous hidden cost" and "expose you to liability" with more factual statements about privacy and security risks. "Maximum flexibility" was changed to "additional flexibility". 10. **OTP Wording Clarified**: Made it clear that OTP verification for revealing information is dependent on the workflow being configured to require it. 11. **PSTN Information Updated**: Added the Openreach estimate that 350,000 business premises were still on the old network as of July 2026 to add freshness and urgency. 12. **CTA Revised**: Replaced a vague CTA about "navigating confidently" with a feature-specific summary of what OrCube AI does. 13. **Checklist Added**: A new "AI customer-support checklist" section was added to increase the article's practical value. 14. **FAQ Section Added**: A new FAQ section was added to provide concise answers to common questions about the Online Safety Act, PSTN retirement, GDPR, and chatbot functionality. 15. **Disclaimer & Review Date Added**: An informational disclaimer, author/reviewer placeholders, and a "Last reviewed" date were added to improve E-E-A-T. 16. **Repetitive Language Reduced**: Trimmed redundant phrases like "digital front door" to improve readability and conciseness.