Bills
← Back
UK Parliament · Public Bill · No. 4035

Cyber Security and Resilience (Network and Information Systems) Bill

[As Introduced]
A
BILL
to

This bill updates UK cyber security law by replacing the outdated Network and Information Systems Regulations 2018 with new, stricter requirements for organisations that provide essential services and digital infrastructure. It requires critical sectors, such as energy, water, healthcare, and financial services, to implement stronger security measures, report cyber incidents faster, and comply with regular security audits. The bill also expands protections to cover more businesses in the digital sector and gives regulators stronger enforcement powers to penalise noncompliance, aiming to reduce vulnerability to cyber attacks that could harm public safety and national security.

Presented by Liz Kendall.
PublicLords
Official Ballot · Open Govt

How would you vote on this bill?

Mark one box with a cross.
You will be asked to sign in before your vote is counted.
The people's count563 votes
92% Aye · 5198% No · 44
MPs' vote408 MPs
40% Ayes · 16260% Noes · 246
The democratic gap

52% , a wide gap

Outcome mismatch, the public would pass this bill, but Parliament rejected it.

Bill passage

Commons

  • 1st reading12 Nov 2025
  • 2nd reading6 Jan 2026
  • Committee stage3 Feb 2026
  • Report stage16 Jun 2026
  • 3rd reading16 Jun 2026

Lords

  • 1st reading17 Jun 2026
  • 2nd reading14 Jul 2026