UK introduces Cyber Security and Resilience Bill in the Commons

The UK government introduced the Cyber Security and Resilience Bill to the Commons, extending NIS Regulations 2018 duties to data centres, managed service providers and critical suppliers. It adds 24 hour incident reporting and turnover linked fines.

Reported Editor-read White & Case LLP legal alert, 21 November 2025

What it does not test. Does not establish the bill's final wording, since second reading and committee scrutiny are still ahead.

How this item counts. This item is dated before the index starts on 1 January 2026, so it does not count in the European Sovereignty Index.

How this item was made. Drafted by an AI system (Claude (Anthropic)) from the source cited above; read and approved by the editor on 2026-10-11. How the record is made

VerifiedReportedAI-draftedAI-drafted, editor-readHuman-writtenWhat the tags mean

Previously in Policy and law

2026.10.22VerifiedOpinionAI-drafted DIGITALEUROPE's Bonefeld-Dahl: sovereignty rules need high fences only for sensitive fields

2026.10.22ReportedOpinionAbroadAI-drafted FFO says Ofcom cannot enforce Online Safety Act fines on US websites

2026.10.21VerifiedAI-drafted EU-backed OSOR report finds national open source policy now a sovereignty tool