UK Cyber Security and Resilience Bill
The Bill updates the UK NIS Regulations 2018: it brings managed service providers, data centres and designated critical suppliers into scope, shortens incident reporting to 24 hours, adds near-miss reporting and raises penalties. It was introduced on 12 November 2025, passed the Commons in June 2026 and is in the House of Lords. Royal Assent is expected around the turn of 2026 and 2027, with obligations following through regulations.
UK Parliament · gov.uk Date reported, not yet checked against the official text.
Ticks are kept in this browser only. Sign in to the client portal to share them with your team.