UK-POP Population Online Polling

Parliamentary Bill

Cyber Security and Resilience (Network and Information Systems) Bill

Live

Consideration of Lords amendments · Commons · Updated 5 November 2026

What the Bill would do

The Cyber Security and Resilience (Network and Information Systems) Bill (“the Bill”) makes updates to the UK’s only cross-sector cyber regulations, the Network and Information Systems Regulations 2018 (S.I. 2018/506) (NIS Regulations), as well as delivering new powers to ensure government can respond to new and emerging cyber threats. The Bill will update the NIS Regulations by bringing more entities into their scope and equipping regulators with proportionate powers to better fulfil their duties. The Bill will provide the Government with powers to amend and add to the NIS Regulations in the future and respond to imminent and actual threats to United Kingdom (UK) national security. These reforms are intended to better protect the services and other activities that are essential to the day-to-day functioning of society in the UK, and the economy, through safeguarding relevant network and information systems (the systems that allow computers and other devices to communicate with each other) and their surrounding environment.

Key measures

4 identified
  1. 01

    In the previous Parliamentary session, the Bill completed Committee stage in the House of Commons before it was carried over. Structure of the Bill

    Changes

    Policy framework · General legislative change

    Changes the legal framework; its practical operation depends on the detailed provisions.

    Method and source

    45% rule coverage · matched: no controlled phrase · semantic-rules-v2.1

  2. 02

    Part 2 of the Bill makes amendments to the NIS Regulations to bring new services (data centres, load control and managed services) into their scope, enable regulators to designate “critical suppliers”, update the incident reporting regime, and make changes relating to recovery of costs, the sharing and gathering of information and enforcement.

    Shifts financial responsibility

    Public finance · Delegated power

    Allows detailed rules to be set later; the practical scope depends on subsequent regulations.

    Watch: the distribution of costs, exemptions and actual fiscal effect.

    Method and source

    90% rule coverage · matched: recovery of cost, Regulations, cost, data · semantic-rules-v2.1

  3. 03

    Part 4 of the Bill provides the Secretary of State with powers to issue directions to regulators and regulated entities, where it is necessary and proportionate for national security.

    Changes

    Policy framework · General legislative change

    Changes the legal framework; its practical operation depends on the detailed provisions.

    Method and source

    45% rule coverage · matched: no controlled phrase · semantic-rules-v2.1

  4. 04

    These Explanatory Notes relate to the Cyber Security and Resilience (Network and Information Systems) Bill [HL] as introduced in the House of Lords on 17 June 2026 (HL Bill 32).

    Creates

    Policy framework · General legislative change

    Changes the legal framework; its practical operation depends on the detailed provisions.

    Method and source

    65% rule coverage · matched: introduc · semantic-rules-v2.1

From the official Explanatory Notes. Read the notes

Amendments

460 available

Most active

  1. 4 Clause 42, page 68, line 26, after “section 30(2)” insert “(and see also section 30(5))”2 Nov 2026 · 3rd reading · Agreed Vote
  2. 3 Clause 36, page 65, line 13, at end insert “(and see also section 30(5))”2 Nov 2026 · 3rd reading · Agreed Vote
  3. 2 Clause 24, page 53, line 39, at end insert “and (5)”2 Nov 2026 · 3rd reading · Agreed Vote
Recently published
  1. 1 Clause 2, page 1, line 10, leave out “centres” and insert “centre services”2 Nov 2026 · 3rd reading · Agreed Vote
  2. 69 After Clause 30, insert the following new Clause— “Board oversight of security and resilience of network and information systems26 Oct 2026 · Report stage · NotMoved Vote
  3. — [Withdrawn] After Clause 29, insert the following new Clause—26 Oct 2026 · Report stage · WithdrawnBeforeDebate Vote
  4. — After Clause 58, insert the following new Clause— “Register of foreign powers for the purposes of Part 426 Oct 2026 · Report stage · Agreed Vote
  5. — After Clause 39, insert the following new Clause— “Cyber security resilience and professional competence: regulations26 Oct 2026 · Report stage · NotMoved Vote
Complete amendment register
  1. — [Withdrawn] After Clause 29, insert the following new Clause—26 Oct 2026 · Report stage · WithdrawnBeforeDebate Vote
  2. — After Clause 12, insert the following new Clause— “Duty to protect against adversarial data manipulation (data poisoning)26 Oct 2026 · Report stage · NotMoved Vote
  3. — After Clause 39, insert the following new Clause— “Cyber security resilience and professional competence: regulations26 Oct 2026 · Report stage · NotMoved Vote
  4. — Clause 28, page 55, line 9, at end insert— “(1A) A report under subsection (1) must also set out the progress made during the reporting period against the prio…26 Oct 2026 · Report stage · NotMoved Vote
  5. — Clause 25, page 53, line 20, at end insert— “(2A) The statement must set out the strategic priorities of His Majesty’s Government for securing that the cryptog…26 Oct 2026 · Report stage · NotMoved Vote
  6. — Clause 25, page 53, line 12, at end insert— “(1A) The Secretary of State must designate a first statement under subsection (1) before the end of the period of…26 Oct 2026 · Report stage · NotMoved Vote
  7. — Clause 12, page 12, line 33, at end insert— “Restrictions on designation: systemic risk26 Oct 2026 · Report stage · NotMoved Vote
  8. — After Clause 58, insert the following new Clause— “Register of foreign powers for the purposes of Part 426 Oct 2026 · Report stage · Agreed Vote
  9. — After Clause 58, insert the following new Clause— “Review of the effectiveness of the NIS regime26 Oct 2026 · Report stage · Agreed Vote
  10. — Clause 15, page 23, line 29, at end insert— “(3A) In determining for the purposes of paragraph (3) whether an impact is or would be significant, the factors to…26 Oct 2026 · Report stage · NotMoved Vote
  11. — Clause 60, page 86, line 19, at end insert— “(5A) Regulations under subsection (3) may not bring section 43 into force unless the following provisions are in f…26 Oct 2026 · Report stage · NotMoved Vote
  12. — After Clause 54, insert the following new Clause— “Supplier-related directions: annual report26 Oct 2026 · Report stage · NotMoved Vote
  13. — Clause 43, page 68, line 25, at end insert— “(8A) Before approving a skilled person under subsection (7)(a), the Secretary of State must be satisfied that the…26 Oct 2026 · Report stage · NotMoved Vote
  14. — After Clause 54, insert the following new Clause— “Supplier-related directions: oversight and proceedings26 Oct 2026 · Report stage · NotMoved Vote
  15. — After Clause 54, insert the following new Clause— “Supplier-related directions: review, renewal and remedies26 Oct 2026 · Report stage · NotMoved Vote
  16. — After Clause 44, insert the following new Clause— “Supplier-related directions: judicial authorisation26 Oct 2026 · Report stage · NotMoved Vote
  17. — After Clause 44, insert the following new Clause— “Supplier-related directions: notice and representations26 Oct 2026 · Report stage · NotMoved Vote
  18. — After Clause 44, insert the following new Clause— “Supplier-related directions: safeguards26 Oct 2026 · Report stage · NotMoved Vote
  19. — Clause 42, page 66, line 15, at end insert— “(ca) regulations under section (Functions of the Secretary of State: loss of control of artificial intelligence…26 Oct 2026 · Report stage · Agreed Vote
  20. — Clause 15, page 23, line 29, at end insert— “(3A) A network and information system falls within this paragraph if—26 Oct 2026 · Report stage · Agreed Vote
  21. — Clause 15, page 23, line 26, leave out “on the continuity” and insert “, by virtue of its effect on network and information systems falling within paragraph (3…26 Oct 2026 · Report stage · Agreed Vote
  22. — Clause 42, page 66, line 27, after “33(1)(a)” insert “or (1A)(a)”26 Oct 2026 · Report stage · Agreed Vote
  23. — Clause 42, page 66, line 24, at end insert— “(ca) section (Functions of the Secretary of State: loss of control of artificial intelligence agent)(1) (fu…26 Oct 2026 · Report stage · Agreed Vote
  24. — Clause 15, page 23, leave out lines 28 and 2926 Oct 2026 · Report stage · Agreed Vote
  25. — Clause 40, page 64, line 27, leave out “5” and insert “3”26 Oct 2026 · Report stage · Agreed Vote
  26. — Clause 29, page 56, line 10, leave out “relevant”26 Oct 2026 · Report stage · Agreed Vote
  27. — Clause 15, page 23, line 39, leave out “could have had,”26 Oct 2026 · Report stage · Agreed Vote
  28. — Clause 15, page 23, line 21, leave out “could have had,”26 Oct 2026 · Report stage · Agreed Vote
  29. — Schedule 2, page 93, line 10, at end insert— “10A In regulation 18(2) (penalties), for “regulation (3A)” substitute “regulation 17(3A)”26 Oct 2026 · Report stage · Agreed Vote
  30. — Clause 32, page 59, line 10, leave out “a regulatory authority” and insert “the person by whom the penalty is imposed”26 Oct 2026 · Report stage · Agreed Vote
  31. — Clause 32, page 59, line 8, leave out “a regulatory authority” and insert “the person by whom the penalty is imposed”26 Oct 2026 · Report stage · Agreed Vote
  32. — Clause 17, page 36, line 38, leave out “14H(1)” and insert “14H”26 Oct 2026 · Report stage · Agreed Vote
  33. — Clause 21, page 51, line 24, at end insert— “(e) regulation 17(3A) (failure to comply with requirements of enforcement notice)26 Oct 2026 · Report stage · Agreed Vote
  34. — Clause 17, page 36, line 43, leave out “14H(1)” and insert “14H”26 Oct 2026 · Report stage · Agreed Vote
  35. — Clause 12, page 13, line 19, leave out “paragraph (2)(b)” and insert “paragraph (2)”26 Oct 2026 · Report stage · Agreed Vote
  36. — Clause 35, page 62, line 9, at end insert “or the Secretary of State”26 Oct 2026 · Report stage · Agreed Vote
  37. — Clause 33, page 60, line 19, after “(1)(a)” insert “or (1A)(a)”26 Oct 2026 · Report stage · Agreed Vote
  38. — Clause 33, page 60, line 18, at end insert— “(1A) Where regulations under section 29(1) make provision by virtue of section (Functions of the Secretary of S…26 Oct 2026 · Report stage · Agreed Vote
  39. — Clause 32, page 59, line 3, after “authorities” insert “or the Secretary of State”26 Oct 2026 · Report stage · Agreed Vote
  40. — After Clause 31, insert the following new Clause— “Functions of the Secretary of State: loss of control of artificial intelligence agent26 Oct 2026 · Report stage · Agreed Vote
  41. — Clause 30, page 57, line 17, after “regulatory authorities” insert “, the Secretary of State”26 Oct 2026 · Report stage · Agreed Vote
  42. — Schedule 1, page 89, line 11, at end insert— “(ia) the duty in regulation 14G(4);”26 Oct 2026 · Report stage · Agreed Vote
  43. — Schedule 1, page 88, line 32, at end insert— “(dzba) comply with regulation 12C(4);”26 Oct 2026 · Report stage · Agreed Vote
  44. — Schedule 1, page 88, line 15, at end insert— “(ch) comply with regulation 11C(5); or”26 Oct 2026 · Report stage · Agreed Vote
  45. — Clause 21, page 50, line 17, at end insert— “(v) sub-paragraph (ia) (failure to comply with regulation 14G(4))26 Oct 2026 · Report stage · Agreed Vote
  46. — Clause 21, page 50, line 5, at end insert— “(iia) sub-paragraph (dzba) (failure to comply with regulation 12C(4));”26 Oct 2026 · Report stage · Agreed Vote
  47. — Clause 21, page 49, line 41, at end insert— “(vii) sub-paragraph (ch) (failure to comply with regulation 11C(5));”26 Oct 2026 · Report stage · Agreed Vote
  48. — Clause 16, page 34, line 29, at end insert— “(4) After the RMSP has notified customers under paragraph (1)(b), the RMSP must provide them with such updates abo…26 Oct 2026 · Report stage · Agreed Vote
  49. — Clause 16, page 34, line 9, at end insert— “(4) After the RDSP has notified customers under paragraph (1)(b), the RDSP must provide them with such updates abou…26 Oct 2026 · Report stage · Agreed Vote
  50. — Clause 16, page 33, line 26, at end insert— “(5) After the OES has notified customers under paragraph (2)(b), the OES must provide them with such updates about…26 Oct 2026 · Report stage · Agreed Vote
  51. — Clause 15, page 21, line 25, leave out paragraph (a)26 Oct 2026 · Report stage · Agreed Vote
  52. — Clause 15, page 22, line 21, at end insert— “(f) whether there has been, is or is likely to be any impact as a result of the incident on network and informatio…26 Oct 2026 · Report stage · Agreed Vote
  53. — Clause 18, page 41, line 19, at end insert— “(3A) But relevant information may be disclosed under paragraph (2)(b) by a NIS enforcement authority to a relevant…26 Oct 2026 · Report stage · Agreed Vote
  54. — Clause 18, page 40, line 30, leave out “in any country or territory outside the United Kingdom” and insert “established in a country or territory listed in par…26 Oct 2026 · Report stage · Agreed Vote
  55. — Clause 18, page 39, line 36, at end insert— “(2A) But a NIS enforcement authority may disclose information under paragraph (1) to a relevant law-enforcement au…26 Oct 2026 · Report stage · Agreed Vote
  56. — Clause 18, page 41, line 24, at end insert— “(4A) But relevant information may be disclosed under paragraph (4) by a NIS enforcement authority to a person esta…26 Oct 2026 · Report stage · Agreed Vote
  57. — Before Clause 43, insert the following new Clause— “Power to establish mandatory referral scheme26 Oct 2026 · Report stage · Agreed Vote
  58. — Clause 58, page 85, line 35, at end insert— “(2) For the purposes of this Part—26 Oct 2026 · Report stage · Agreed Vote
  59. — Clause 58, page 85, leave out lines 32 and 3326 Oct 2026 · Report stage · Agreed Vote
  60. — Clause 58, page 85, line 34, leave out from “compromise”” to end of line 35 and insert “, in relation to a network and information system, means— (a) anything…26 Oct 2026 · Report stage · Agreed Vote
  61. — Clause 58, page 85, line 26, at end insert— ““Part 4 NIS” , in relation to a person, means a network and information system that is—26 Oct 2026 · Report stage · Agreed Vote
  62. — Clause 58, page 85, line 26, at end insert— ““Part 4 essential activity” means an activity the carrying on of which the Secretary of State considers to be ess…26 Oct 2026 · Report stage · Agreed Vote
  63. — Clause 58, page 85, line 23, at end insert— ““essential goods or services” means goods or services without the provision of which the carrying on of a Part 4…26 Oct 2026 · Report stage · Agreed Vote
  64. — Clause 58, page 85, leave out lines 21 to 2326 Oct 2026 · Report stage · Agreed Vote
  65. — Clause 58, page 85, leave out lines 19 and 2026 Oct 2026 · Report stage · Agreed Vote
  66. — Clause 55, page 82, line 26, at end insert “in respect of a direction under section 43 or 5326 Oct 2026 · Report stage · Agreed Vote
  67. — After Clause 54, insert the following new Clause— “Annual report in relation to directions under section (Vendor-related directions)26 Oct 2026 · Report stage · Agreed Vote
  68. — After Clause 54, insert the following new Clause— “Publication of notice of direction under section (Vendor-related directions) etc26 Oct 2026 · Report stage · Agreed Vote
  69. — Clause 54, page 82, line 5, after “section” insert “(Vendor-related directions) or”26 Oct 2026 · Report stage · Agreed Vote
  70. — Clause 54, page 81, line 26, after second “section” insert “(Vendor-related directions),”26 Oct 2026 · Report stage · Agreed Vote
  71. — Clause 52, page 79, line 24, after “section” insert “(Further provision about giving of vendor-related directions)(8),”26 Oct 2026 · Report stage · Agreed Vote
  72. — Clause 49, page 76, line 26, leave out “regulated”26 Oct 2026 · Report stage · Agreed Vote
  73. — Clause 49, page 76, line 25, after second “section” insert “(Further provision about giving of vendor-related directions)(4)(a) or”26 Oct 2026 · Report stage · Agreed Vote
  74. — Clause 49, page 76, line 25, after first “section” insert “(Vendor-related directions) or”26 Oct 2026 · Report stage · Agreed Vote
  75. — Clause 49, page 76, line 18, leave out “regulated”26 Oct 2026 · Report stage · Agreed Vote
  76. — Clause 49, page 76, line 8, after second “section” insert “(Further provision about giving of vendor-related directions)(4)(a) or”26 Oct 2026 · Report stage · Agreed Vote
  77. — Clause 49, page 76, line 8, after first “section” insert “(Vendor-related directions) or”26 Oct 2026 · Report stage · Agreed Vote
  78. — Clause 48, page 74, line 24, after “section” insert “(Further provision about giving of vendor-related directions)(4)(a) or”26 Oct 2026 · Report stage · Agreed Vote
  79. — Clause 48, page 74, line 23, after “section” insert “(Vendor-related directions) or”26 Oct 2026 · Report stage · Agreed Vote
  80. — Clause 47, page 73, line 36, leave out “regulated” and insert “affected”26 Oct 2026 · Report stage · Agreed Vote
  81. — Clause 47, page 74, line 1, leave out “regulated” and insert “affected”26 Oct 2026 · Report stage · Agreed Vote
  82. — Clause 47, page 73, line 33, leave out “regulated” and insert “affected”26 Oct 2026 · Report stage · Agreed Vote
  83. — Clause 47, page 73, line 23, leave out “a regulated” and insert “the affected”26 Oct 2026 · Report stage · Agreed Vote
  84. — Clause 47, page 73, line 20, leave out “regulated person to which the inspection relates” and insert “affected person”26 Oct 2026 · Report stage · Agreed Vote
  85. — Clause 47, page 73, line 3, leave out “regulated” and insert “affected”26 Oct 2026 · Report stage · Agreed Vote
  86. — Clause 47, page 73, line 1, leave out “a regulated” and insert “the affected”26 Oct 2026 · Report stage · Agreed Vote
  87. — Clause 47, page 72, line 33, leave out “a regulated” and insert “the affected”26 Oct 2026 · Report stage · Agreed Vote
  88. — Clause 47, page 72, line 27, at end insert— ““the affected person” means—26 Oct 2026 · Report stage · Agreed Vote
  89. — Clause 47, page 72, line 24, after “section” insert “(Vendor-related directions) or”26 Oct 2026 · Report stage · Agreed Vote
  90. — Clause 45, page 70, line 8, after “section” insert “(Vendor-related directions) or”26 Oct 2026 · Report stage · Agreed Vote
  91. — Clause 45, page 69, line 38, after “section” insert “(Vendor-related directions) or”26 Oct 2026 · Report stage · Agreed Vote
  92. — Clause 44, page 69, line 33, at end insert— ““relevant direction” means a direction under section (Vendor-related directions) or 4326 Oct 2026 · Report stage · Agreed Vote
  93. — Clause 44, page 69, line 29, leave out “the regulated person” and insert “— (i) the person to which the relevant direction has been given,”26 Oct 2026 · Report stage · Agreed Vote
  94. — Clause 44, page 69, line 26, after “the” insert “relevant”26 Oct 2026 · Report stage · Agreed Vote
  95. — Clause 44, page 69, line 24, after “varies the” insert “relevant”26 Oct 2026 · Report stage · Agreed Vote
  96. — Clause 44, page 69, line 18, leave out “regulated person” and insert “person to which the relevant direction has been given”26 Oct 2026 · Report stage · Agreed Vote
  97. — Clause 44, page 69, line 14, leave out “regulated”26 Oct 2026 · Report stage · Agreed Vote
  98. — Clause 44, page 69, line 10, leave out “duty of the regulated person” and insert “person’s duty”26 Oct 2026 · Report stage · Agreed Vote
  99. — Clause 44, page 69, line 5, leave out “direction given to the person under section 43” and insert “relevant direction given to the person”26 Oct 2026 · Report stage · Agreed Vote
  100. — Clause 44, page 69, line 4, leave out “regulated person” and insert “person to which a relevant direction has been given”26 Oct 2026 · Report stage · Agreed Vote
  101. — Clause 43, page 68, line 42, at end insert— “(13) Regulations under subsection (1A)(b) may make different provision for different purposes26 Oct 2026 · Report stage · Agreed Vote
  102. — Clause 43, page 68, line 3, leave out “an activity-critical supply” and insert “essential goods or services”26 Oct 2026 · Report stage · Agreed Vote
  103. — Clause 43, page 68, line 2, leave out “an” and insert “a Part 4”26 Oct 2026 · Report stage · Agreed Vote
  104. — Clause 43, page 67, line 38, at end insert— “(3A) Before making regulations under subsection (1A)(b), the Secretary of State must consult such persons as the S…26 Oct 2026 · Report stage · Agreed Vote
  105. — Clause 43, page 67, line 23, leave out “an activity-critical supply” and insert “essential goods or services”26 Oct 2026 · Report stage · Agreed Vote
  106. — Clause 43, page 67, line 22, leave out “an” and insert “a Part 4”26 Oct 2026 · Report stage · Agreed Vote
  107. — Clause 43, page 67, line 19, leave out “relevant network and information systems” and insert “a system that is a Part 4 NIS in relation to the person to which…26 Oct 2026 · Report stage · Agreed Vote
  108. — Clause 40, page 65, line 18, leave out subsection (5) and insert— “(5) The Secretary of State may by regulations—26 Oct 2026 · Report stage · Agreed Vote
  109. — Clause 43, page 67, line 11, leave out “relevant network and information system” and insert “system that is a Part 4 NIS in relation to the person”26 Oct 2026 · Report stage · Agreed Vote
  110. — Clause 43, page 67, line 8, leave out “regulated person” and insert “person within subsection (1A)”26 Oct 2026 · Report stage · Agreed Vote
  111. — Clause 43, page 67, line 14, at end insert— “(1A) A person is within this subsection if the person—26 Oct 2026 · Report stage · Agreed Vote
  112. — Clause 43, page 67, line 16, at end insert “with a view to eliminating, reducing or mitigating the risk referred to in subsection (1)(a)”26 Oct 2026 · Report stage · Agreed Vote
  113. — Before Clause 43, insert the following new Clause— “Power to make regulations about time frame for giving vendor-related directions26 Oct 2026 · Report stage · Agreed Vote
  114. — Before Clause 43, insert the following new Clause— “Further provision about giving of vendor-related directions26 Oct 2026 · Report stage · Agreed Vote
  115. — Before Clause 43, insert the following new Clause— “Chapter 126 Oct 2026 · Report stage · Agreed Vote
  116. — Clause 2, page 2, line 13, leave out from “directions” to end of line 15 and insert “in particular circumstances involving a risk to national security interests26 Oct 2026 · Report stage · Agreed Vote
  117. — Clause 37, page 63, line 24, leave out subsection (7)26 Oct 2026 · Report stage · Agreed Vote
  118. — Clause 58, page 85, line 28, after “30(2)” insert “and (5)”26 Oct 2026 · Report stage · Agreed Vote
  119. — Clause 24, page 52, line 30, at end insert— “(ia) a service which is deemed by regulation 8(2A) of those Regulations to be an essential service;”26 Oct 2026 · Report stage · Agreed Vote
  120. — After Clause 35, insert the following new Clause— “AI Security Institute: standards, inspection and enforcement powers26 Oct 2026 · Report stage · NotMoved Vote
  121. — After Clause 58, insert the following new Clause— “Increasing resilience by reducing data retention26 Oct 2026 · Report stage · NotMoved Vote
  122. — Clause 60, page 86, line 2, leave out subsections (1) and (2) and insert— “(1) Section (Publication of relevant elements of the National Cyber Action Plan26 Oct 2026 · Report stage · NotMoved Vote
  123. — After Clause 58, insert the following new Clause— “Publication of relevant elements of the National Cyber Action Plan26 Oct 2026 · Report stage · NotMoved Vote
  124. — After Clause 40, insert the following new Clause— “Consultation on amnesty-based reporting of ransomware attacks26 Oct 2026 · Report stage · NotMoved Vote
  125. — After Clause 58, insert the following new Clause— “Review of effect of information sharing and analysis centres26 Oct 2026 · Report stage · NotMoved Vote
  126. — After Clause 35, insert the following new Clause— “Requirement for large businesses to report on cyber security and resilience plans26 Oct 2026 · Report stage · NotMoved Vote
  127. — After Clause 35, insert the following new Clause— “Assessment of need for further strategically important entities to be brought within scope26 Oct 2026 · Report stage · Withdrawn Vote
  128. — After Clause 29, insert the following new Clause— “AI products and services: red lines on capabilities with regard to relevant network and information syste…26 Oct 2026 · Report stage · NotMoved Vote
  129. — Clause 15, page 24, line 9, at end insert— “(c) in the case of a final report, before the end of the period of 28 days beginning with that time26 Oct 2026 · Report stage · NotMoved Vote
  130. — Clause 15, page 24, line 4, after “notifications” insert “and report”26 Oct 2026 · Report stage · NotMoved Vote
  131. — Clause 15, page 23, line 20, at end insert— “(c) a final report containing, so far as known to the OES at the time the report is given—26 Oct 2026 · Report stage · NotMoved Vote
  132. — Clause 15, page 31, line 5, at end insert— “(c) in the case of a final report, before the end of the period of 28 days beginning with that time26 Oct 2026 · Report stage · NotMoved Vote
  133. — Clause 15, page 30, line 42, after “notifications” insert “and report”26 Oct 2026 · Report stage · NotMoved Vote
  134. — Clause 15, page 30, line 2, at end insert— “(c) a final report containing, so far as known to the RMSP at the time the report is given—26 Oct 2026 · Report stage · NotMoved Vote
  135. — Clause 15, page 27, line 28, at end insert— “(c) in the case of a final report, before the end of the period of 28 days beginning with that time26 Oct 2026 · Report stage · NotMoved Vote
  136. — Clause 15, page 27, line 23, after “notifications” insert “and report”26 Oct 2026 · Report stage · NotMoved Vote
  137. — Clause 15, page 26, line 22, at end insert— “(c) a final report containing, so far as known to the RDSP at the time the report is given—26 Oct 2026 · Report stage · NotMoved Vote
  138. — Clause 15, page 22, line 40, at end insert— “(c) in the case of a final report, before the end of the period of 28 days beginning with that time26 Oct 2026 · Report stage · NotMoved Vote
  139. — Clause 15, page 22, line 35, after “notifications” insert “and report”26 Oct 2026 · Report stage · NotMoved Vote
  140. — Clause 15, page 22, line 2, at end insert— “(c) a final report containing, so far as known to the OES at the time the report is given—26 Oct 2026 · Report stage · NotMoved Vote
  141. — Clause 16, page 34, line 29, at end insert— “(c) advise on any measures or remedies that customers are able to take in response to the incident26 Oct 2026 · Report stage · NotMoved Vote
  142. — Clause 16, page 34, line 26, after “(1)(b)” insert “or an update under paragraph (1)(c)”26 Oct 2026 · Report stage · NotMoved Vote
  143. — Clause 16, page 34, line 18, at end insert— “(c) keep those customers informed by providing updates without undue delay whenever there is a material change in…26 Oct 2026 · Report stage · NotMoved Vote
  144. — Clause 16, page 34, line 12, leave out from “given” to end of line 13 and insert “an initial notification under regulation 14E(1)(a), the RMSP must, without un…26 Oct 2026 · Report stage · NotMoved Vote
  145. — Clause 16, page 34, line 9, at end insert— “(c) advise on any measures or remedies that customers are able to take in response to the incident26 Oct 2026 · Report stage · NotMoved Vote
  146. — Clause 16, page 34, line 6, after “(1)(b)” insert “or an update under paragraph (1)(c)”26 Oct 2026 · Report stage · NotMoved Vote
  147. — Clause 16, page 33, line 35, at end insert— “(c) keep those customers informed by providing updates without undue delay whenever there is a material change in…26 Oct 2026 · Report stage · NotMoved Vote
  148. — Clause 16, page 33, line 29, leave out from “given” to end of line 30 and insert “an initial notification under regulation 12A(1)(a), the RDSP must, without un…26 Oct 2026 · Report stage · NotMoved Vote
  149. — Clause 16, page 33, line 26, at end insert— “(c) advise on any measures or remedies that customers are able to take in response to the incident26 Oct 2026 · Report stage · NotMoved Vote
  150. — Clause 16, page 33, line 23, after “(2)(b)” insert “or an update under paragraph (2)(c)”26 Oct 2026 · Report stage · NotMoved Vote
  151. — Clause 16, page 33, line 15, at end insert— “(c) keep those customers informed by providing updates without undue delay whenever there is a material change in…26 Oct 2026 · Report stage · NotMoved Vote
  152. — Clause 16, page 33, line 9, leave out from “given” to end of line 10 and insert “an initial notification under regulation 11A(2)(a), the OES must, without undu…26 Oct 2026 · Report stage · NotMoved Vote
  153. — After Clause 16, insert the following new Clause— “Voluntary notification of incidents, cyber threats and near misses26 Oct 2026 · Report stage · NotMoved Vote
  154. — After Clause 16, insert the following new Clause— “Reporting of incidents involving frontier AI models26 Oct 2026 · Report stage · Disagreed Vote
  155. — Clause 29, page 55, line 37, at end insert— “(2A) In making regulations for the purposes of or in connection with the objectives mentioned in subsection (1), t…26 Oct 2026 · Report stage · NotMoved Vote
  156. — Clause 40, page 64, line 27, leave out “5” and insert “2”26 Oct 2026 · Report stage · NotMoved Vote
  157. — After Clause 29, insert the following new Clause— “AI Security Institute: pre-deployment audit of frontier AI products and services26 Oct 2026 · Report stage · NotMoved Vote
  158. — After Clause 28, insert the following new Clause— “Digital Sovereignty Strategy (relevant network and information systems)26 Oct 2026 · Report stage · Withdrawn Vote
  159. — Clause 40, page 65, line 17, at end insert— “(f) assess the extent to which duties imposed by or under this Act or the NIS Regulations duplicate, or diverge fr…26 Oct 2026 · Report stage · NotMoved Vote
  160. — After Clause 42, insert the following new Clause— “Cyber security support for small and medium-sized enterprises26 Oct 2026 · Report stage · NotMoved Vote
  161. — Clause 29, page 56, line 24, insert— “(7) Regulations made under this section must include provisions requiring covered entities to ensure that any individual…26 Oct 2026 · Report stage · NotMoved Vote
  162. — Clause 43, page 68, line 42, at end insert— “(13) For the purposes of this section, a “skilled person” is defined as an individual who—26 Oct 2026 · Report stage · NotMoved Vote
  163. — After Clause 58, insert the following new Clause— “Annual report on incident volumes26 Oct 2026 · Report stage · NotMoved Vote
  164. — After Clause 58, insert the following new Clause— “Computer Misuse Act 1990: statutory defence for cyber security activities26 Oct 2026 · Report stage · NotMoved Vote
  165. — After Clause 29, insert the following new Clause— ““Last-resort” powers in respect of data centres and AI models26 Oct 2026 · Report stage · NotMoved Vote
  166. — Clause 9, page 9, line 20, at end insert— “(3E) A person does not provide a managed service for the purposes of paragraph (3B) where the service provided consi…26 Oct 2026 · Report stage · Withdrawn Vote
  167. 175 Clause 60, page 85, line 2, leave out subsections (1) and (2) and insert— (1) Section (Publication of relevant elements of the National Cyber Action Plan7 Sep 2026 · Committee stage · NotMoved Vote
  168. 174E After Clause 58, insert the following new Clause— “Increasing resilience by reducing data retention7 Sep 2026 · Committee stage · Withdrawn Vote
  169. 174D After Clause 58, insert the following new Clause— “Strategy for developing cyber-security and resilience capability across regulated sectors under this Act<…7 Sep 2026 · Committee stage · NotMoved Vote
  170. 174C After Clause 58, insert the following new Clause— “Guidance: skills and competency requirements7 Sep 2026 · Committee stage · NotMoved Vote
  171. 174B After Clause 58, insert the following new Clause— “Register of foreign powers for the purposes of Part 4: review of nature of risk7 Sep 2026 · Committee stage · NotMoved Selected
  172. 174A After Clause 58, insert the following new Clause— “Register of foreign powers for the purposes of Part 47 Sep 2026 · Committee stage · NotMoved Vote
  173. 174 After Clause 58, insert the following new Clause— “Funding of regulatory authorities: statement7 Sep 2026 · Committee stage · NotMoved Vote
  174. 173 After Clause 58, insert the following new Clause— “Publication of relevant elements of the National Cyber Action Plan7 Sep 2026 · Committee stage · NotMoved Vote
  175. 172 After Clause 58, insert the following new Clause— “Impact of reporting requirements on relevant bodies7 Sep 2026 · Committee stage · NotMoved Vote
  176. 171 After Clause 58, insert the following new Clause— “Consultation on amnesty-based reporting of relevant ransomware attacks7 Sep 2026 · Committee stage · NotMoved Vote
  177. 170 After Clause 58, insert the following new Clause— “Duty on Secretary of State to report on the meeting of existing recommendations and implementation deadli…7 Sep 2026 · Committee stage · NotMoved Vote
  178. 169 After Clause 58, insert the following new Clause— “Review of effect of information sharing and analysis centres7 Sep 2026 · Committee stage · NotMoved Vote
  179. 168 After Clause 58, insert the following new Clause— “Review of the regulation of data-storing sectors7 Sep 2026 · Committee stage · NotMoved Vote
  180. 167 After Clause 58, insert the following new Clause— “Board oversight and accountability: security and resilience of network and information systems7 Sep 2026 · Committee stage · NotMoved Vote
  181. 166 After Clause 58, insert the following new Clause— “Digital Sovereignty Strategy7 Sep 2026 · Committee stage · NotMoved Vote
  182. 165 After Clause 58, insert the following new Clause— “Annual report on incident volumes7 Sep 2026 · Committee stage · NotMoved Vote
  183. 164 After Clause 58, insert the following new Clause— “Computer Misuse Act 1990: statutory defence for cyber security activities7 Sep 2026 · Committee stage · Withdrawn Vote
  184. 163 Clause 58, page 84, line 35, at end insert— “(2) For the purposes of this Part—7 Sep 2026 · Committee stage · NotMoved Vote
  185. 162 Clause 58, page 84, line 34, leave out from “compromise”” to end of line 35 and insert “, in relation to a network and information system, means— (a) anything…7 Sep 2026 · Committee stage · NotMoved Vote
  186. 161 Clause 58, page 84, leave out lines 32 and 337 Sep 2026 · Committee stage · NotMoved Vote
  187. 160 Clause 58, page 84, line 28, after “30(2)” insert “and (5)”7 Sep 2026 · Committee stage · NotMoved Vote
  188. 159 Clause 58, page 84, line 26, at end insert— ““Part 4 NIS” , in relation to a person, means a network and information system that is—7 Sep 2026 · Committee stage · NotMoved Vote
  189. 158 Clause 58, page 84, line 26, at end insert— ““Part 4 essential activity” means an activity the carrying on of which the Secretary of State considers to be ess…7 Sep 2026 · Committee stage · NotMoved Vote
  190. 157 Clause 58, page 84, line 23, at end insert— ““essential goods or services” means goods or services without the provision of which the carrying on of a Part 4…7 Sep 2026 · Committee stage · NotMoved Vote
  191. 156 Clause 58, page 84, leave out lines 21 to 237 Sep 2026 · Committee stage · NotMoved Vote
  192. 155 Clause 58, page 84, leave out lines 19 and 207 Sep 2026 · Committee stage · NotMoved Vote
  193. 154 Clause 55, page 81, line 26, at end insert “in respect of a direction under section 43 or 53”7 Sep 2026 · Committee stage · NotMoved Vote
  194. 153 After subsection (2)(d) insert— “(e) how many, and which, directions under section (Vendor-related directions) were the result of mandatory referral sch…7 Sep 2026 · Committee stage · NotMoved Vote
  195. 152 After Clause 54, insert the following new Clause— “Annual report in relation to directions under section (Vendor-related directions)7 Sep 2026 · Committee stage · NotMoved Vote
  196. 151 After Clause 54, insert the following new Clause— “Publication of notice of direction under section (Vendor-related directions) etc7 Sep 2026 · Committee stage · NotMoved Vote
  197. 150 Clause 54, page 81, line 5, after “section” insert “(Vendor-related directions) or”7 Sep 2026 · Committee stage · NotMoved Vote
  198. 149 Clause 54, page 80, line 26, after “section” insert “(Vendor-related directions),”7 Sep 2026 · Committee stage · NotMoved Vote
  199. 148A After Clause 52, insert the following new Clause— “Appeals against decisions under section 507 Sep 2026 · Committee stage · Withdrawn Vote
  200. 148 Clause 52, page 78, line 24, after “section” insert “(Further provision about giving of vendor-related directions)(8),”7 Sep 2026 · Committee stage · NotMoved Vote
  201. 147 Clause 49, page 75, line 26, leave out “regulated”7 Sep 2026 · Committee stage · NotMoved Vote
  202. 146 Clause 49, page 75, line 25, after second “section” insert “(Further provision about giving of vendor-related directions)(4)(a) or”7 Sep 2026 · Committee stage · NotMoved Vote
  203. 145 Clause 49, page 75, line 25, after first “section” insert “(Vendor-related directions) or”7 Sep 2026 · Committee stage · NotMoved Vote
  204. 144 Clause 49, page 75, line 18, leave out “regulated”7 Sep 2026 · Committee stage · NotMoved Vote
  205. 143 Clause 49, page 75, line 8, after second “section” insert “(Further provision about giving of vendor-related directions)(4)(a) or”7 Sep 2026 · Committee stage · NotMoved Vote
  206. 142 Clause 49, page 75, line 8, after first “section” insert “(Vendor-related directions) or”7 Sep 2026 · Committee stage · NotMoved Vote
  207. 141 Clause 48, page 73, line 24, after “section” insert “(Further provision about giving of vendor-related directions)(4)(a) or”7 Sep 2026 · Committee stage · NotMoved Vote
  208. 140 Clause 48, page 73, line 23, after “section” insert “(Vendor-related directions) or”7 Sep 2026 · Committee stage · NotMoved Vote
  209. 139 Clause 47, page 73, line 1, leave out “regulated” and insert “affected”7 Sep 2026 · Committee stage · NotMoved Vote
  210. 138 Clause 47, page 72, line 36, leave out “regulated” and insert “affected”7 Sep 2026 · Committee stage · NotMoved Vote
  211. 137 Clause 47, page 72, line 33, leave out “regulated” and insert “affected”7 Sep 2026 · Committee stage · NotMoved Vote
  212. 136 Clause 47, page 72, line 23, leave out “a regulated” and insert “the affected”7 Sep 2026 · Committee stage · NotMoved Vote
  213. 135 Clause 47, page 72, line 20, leave out “regulated person to which the inspection relates” and insert “ affected person”7 Sep 2026 · Committee stage · NotMoved Vote
  214. 134 Clause 47, page 72, line 3, leave out “regulated” and insert “affected”7 Sep 2026 · Committee stage · NotMoved Vote
  215. 133 Clause 47, page 72, line 1, leave out “a regulated” and insert “the affected”7 Sep 2026 · Committee stage · NotMoved Vote
  216. 132 Clause 47, page 71, line 33, leave out “a regulated” and insert “the affected”7 Sep 2026 · Committee stage · NotMoved Vote
  217. 131 Clause 47, page 71, line 27, at end insert— ““the affected person” means—7 Sep 2026 · Committee stage · NotMoved Vote
  218. 130 Clause 47, page 71, line 24, after “section” insert “(Vendor-related directions) or”7 Sep 2026 · Committee stage · NotMoved Vote
  219. 129 Clause 45, page 69, line 8, after “section” insert “(Vendor-related directions) or”7 Sep 2026 · Committee stage · NotMoved Vote
  220. 128 Clause 45, page 68, line 38, after “section” insert “(Vendor-related directions) or”7 Sep 2026 · Committee stage · NotMoved Vote
  221. 127 After Clause 44, insert the following new Clause— “Regulations under section (Vendor-related directions)(1)(a)or 43(1A)(b): procedure in urgent cases…7 Sep 2026 · Committee stage · NotMoved Vote
  222. 126 Clause 44, page 68, line 33, at end insert— ““relevant direction” means a direction under section (Vendor-related directions) or 437 Sep 2026 · Committee stage · NotMoved Vote
  223. 125 Clause 44, page 68, line 29, leave out “the regulated person” and insert “— (i) the person to which the relevant direction has been given,”7 Sep 2026 · Committee stage · NotMoved Vote
  224. 124 Clause 44, page 68, line 26, after “the” insert “relevant”7 Sep 2026 · Committee stage · NotMoved Vote
  225. 123 Clause 44, page 68, line 24, after “varies the” insert “relevant”7 Sep 2026 · Committee stage · NotMoved Vote
  226. 122 Clause 44, page 68, line 18, leave out “regulated person” and insert “person to which the relevant direction has been given”7 Sep 2026 · Committee stage · NotMoved Vote
  227. 121 Clause 44, page 68, line 14, leave out “regulated”7 Sep 2026 · Committee stage · NotMoved Vote
  228. 120 Clause 44, page 68, line 10, leave out “duty of the regulated person” and insert “person’s duty”7 Sep 2026 · Committee stage · NotMoved Vote
  229. 119 Clause 44, page 68, line 5, leave out “direction given to the person under section 43” and insert “relevant direction given to the person”7 Sep 2026 · Committee stage · NotMoved Vote
  230. 118 Clause 44, page 68, line 4, leave out “regulated person” and insert “person to which a relevant direction has been given”7 Sep 2026 · Committee stage · NotMoved Vote
  231. 117 Clause 43, page 67, line 42, at end insert— “(13) Regulations under subsection (1A)(b) may make different provision for different purposes7 Sep 2026 · Committee stage · NotMoved Vote
  232. 116 Clause 43, page 67, line 3, leave out “an activity-critical supply” and insert “essential goods or services”7 Sep 2026 · Committee stage · NotMoved Vote
  233. 115 Clause 43, page 67, line 2, leave out “an” and insert “a Part 4”7 Sep 2026 · Committee stage · NotMoved Vote
  234. 114 Clause 43, page 66, line 38, at end insert— “(3A) The Secretary of State must by regulations made by statutory instrument define what conditions must be met fo…7 Sep 2026 · Committee stage · NotMoved Vote
  235. 113 Clause 43, page 66, line 38, at end insert— “(3A) Before making regulations under subsection (1A)(b), the Secretary of State must consult such persons as the S…7 Sep 2026 · Committee stage · NotMoved Vote
  236. 112 Clause 43, page 66, line 23, leave out “an activity-critical supply” and insert “essential goods or services”7 Sep 2026 · Committee stage · NotMoved Vote
  237. 111 Clause 43, page 66, line 22, leave out “an” and insert “a Part 4”7 Sep 2026 · Committee stage · NotMoved Vote
  238. 110 Clause 43, page 66, line 19, leave out “relevant network and information systems” and insert “a system that is a Part 4 NIS in relation to the person to which…7 Sep 2026 · Committee stage · NotMoved Vote
  239. 109 Clause 43, page 66, line 16, at end insert “with a view to eliminating, reducing or mitigating the risk to national security referred to in subsection (1)(a)”7 Sep 2026 · Committee stage · NotMoved Vote
  240. 108 Clause 43, page 66, line 14, at end insert— “(1A) A person is within this subsection if the person—7 Sep 2026 · Committee stage · NotMoved Vote
  241. 107 Clause 43, page 66, line 11, leave out “relevant network and information system” and insert “system that is a Part 4 NIS in relation to the person”7 Sep 2026 · Committee stage · NotMoved Vote
  242. 106 Clause 43, page 66, line 8, leave out “regulated person” and insert “person within subsection (1A)”7 Sep 2026 · Committee stage · NotMoved Vote
  243. 105 Before Clause 43, insert the following new Clause— “Power to establish mandatory referral scheme7 Sep 2026 · Committee stage · NotMoved Vote
  244. 104 Before Clause 43, insert the following new Clause— “Power to make regulations about time frame for giving vendor-related directions7 Sep 2026 · Committee stage · NotMoved Vote
  245. 103 Before Clause 43, insert the following new Clause— “Further provision about giving of vendor-related directions7 Sep 2026 · Committee stage · NotMoved Vote
  246. 102 Before Clause 43, insert the following new Clause— “Chapter 27 Sep 2026 · Committee stage · NotMoved Vote
  247. 101 Before Clause 43, insert the following new Clause— “Chapter 17 Sep 2026 · Committee stage · NotMoved Vote
  248. 100 After Clause 42, insert the following new Clause— “National cyber security support service for small and medium-sized enterprises7 Sep 2026 · Committee stage · Withdrawn Vote
  249. 99 After Clause 42, insert the following new Clause— “Cyber security competence: functions of the UK Cyber Security Council7 Sep 2026 · Committee stage · Withdrawn Vote
  250. 98 Clause 42, page 65, line 36, at end insert— “(aa) which is made under section (AI Security Institute: standards, inspection and enforcement powers), or”7 Sep 2026 · Committee stage · NotMoved Vote
  251. 97 Clause 42, page 65, line 36, at end insert— “(aa) which is made under section (Presumption of conformity with recognised standards), or”7 Sep 2026 · Committee stage · NotMoved Vote
  252. 96 Clause 42, page 65, line 36, at end insert— “(aa) which is made under section (Office for Cyber Resilience), or”7 Sep 2026 · Committee stage · NotMoved Vote
  253. 95C Clause 40, page 64, line 18, leave out subsection (5)7 Sep 2026 · Committee stage · NotMoved Vote
  254. 95B Clause 40, page 64, line 17, at end insert— “(f) assess the impact of supply chain and third-party dependencies on the resilience of regulated persons, includi…7 Sep 2026 · Committee stage · NotMoved Vote
  255. 95A Clause 40, page 63, line 27, leave out “5” and insert “2”7 Sep 2026 · Committee stage · NotMoved Vote
  256. 95 Clause 40, page 63, line 27, leave out “5” and insert “3”7 Sep 2026 · Committee stage · NotMoved Vote
  257. 94 After Clause 39, insert the following new Clause— “Presumption of conformity with recognised standards7 Sep 2026 · Committee stage · NotMoved Vote
  258. 93 After Clause 37, insert the following new Clause— “Consultation before issue of codes of practice and regulations7 Sep 2026 · Committee stage · NotMoved Vote
  259. 92C Clause 37, page 62, line 24, leave out subsection (7)7 Sep 2026 · Committee stage · Withdrawn Vote
  260. 92B After Clause 35, insert the following new Clause— “Requirement for relevant large businesses to report on cyber security and resilience plans7 Sep 2026 · Committee stage · NotMoved Vote
  261. 92A After Clause 35, insert the following new Clause— “Assessment of need for further strategically important entities to be brought within scope7 Sep 2026 · Committee stage · NotMoved Vote
  262. 92 After Clause 35, insert the following new Clause— AI Security Institute: standards, inspection and enforcement powers7 Sep 2026 · Committee stage · NotMoved Vote
  263. 91 After Clause 35, insert the following new Clause— “Office for Cyber Resilience: cyber resilience audit7 Sep 2026 · Committee stage · NotMoved Vote
  264. 90 After Clause 35, insert the following new Clause— “Office for Cyber Resilience: cyber resilience professionals7 Sep 2026 · Committee stage · NotMoved Vote
  265. 89 After Clause 35, insert the following new Clause— “Office for Cyber Resilience: software and platform providers7 Sep 2026 · Committee stage · NotMoved Vote
  266. 88 After Clause 35, insert the following new Clause— “Office for Cyber Resilience (No7 Sep 2026 · Committee stage · NotMoved Vote
  267. 87 After Clause 35, insert the following new Clause— “Office for Cyber Resilience (No7 Sep 2026 · Committee stage · NotMoved Vote
  268. 86 Clause 31, page 56, line 29, at end insert— “and must do in relation to regulations meeting the requirements in section (AI Security I…7 Sep 2026 · Committee stage · NotMoved Vote
  269. 85 After Clause 29, insert the following new Clause— “AI Security Institute: statutory functions and pre-deployment assessment of frontier artificial intellige…7 Sep 2026 · Committee stage · NotMoved Vote
  270. 84 After Clause 29, insert the following new Clause— ““Last-resort” powers in respect of data centres and AI models7 Sep 2026 · Committee stage · NotMoved Vote
  271. 83 After Clause 28, insert the following new Clause— “Digital Sovereignty Strategy (relevant network and information systems)7 Sep 2026 · Committee stage · Withdrawn Vote
  272. 82 Clause 25, page 52, line 20, at end insert— “(2A) In preparing a statement under this section, the Secretary of State must have regard to any timelines publish…7 Sep 2026 · Committee stage · NotMoved Vote
  273. 81D After Clause 24, insert the following new Clause— “Electoral infrastructure to be specified as an essential activity7 Sep 2026 · Committee stage · NotMoved Vote
  274. 81C After Clause 24, insert the following new Clause— “Local authority functions to be specified as essential activities7 Sep 2026 · Committee stage · NotMoved Vote
  275. 81B After Clause 24, insert the following new Clause— “Public authority activities to be specified as essential activities7 Sep 2026 · Committee stage · NotMoved Vote
  276. 81A After Clause 24, insert the following new Clause— “Education sector to be specified as essential activity7 Sep 2026 · Committee stage · NotMoved Vote
  277. 81 After Clause 24, insert the following new Clause— “Space sector to be specified as an essential activity7 Sep 2026 · Committee stage · NotMoved Vote
  278. 80 After Clause 24, insert the following new Clause— “Critical manufacturing and retail to be specified as essential activities7 Sep 2026 · Committee stage · NotMoved Vote
  279. 79 After Clause 24, insert the following new Clause— “Services to support political parties to be specified as essential activities7 Sep 2026 · Committee stage · Withdrawn Vote
  280. 78 Clause 24, page 51, line 30, at end insert— “(ia) a service which is deemed by regulation 8(2A) of those Regulations to be an essential service;”7 Sep 2026 · Committee stage · NotMoved Vote
  281. 77 Clause 24, page 51, line 17, leave out from “essential” to end of line 22 and insert “because it has— (a) a material economic impact,7 Sep 2026 · Committee stage · NotMoved Vote
  282. 76 Clause 24, page 51, line 15, at end insert— “(3A) In specifying an activity for the purposes of subsection (3), the Secretary of State must consider any recomm…7 Sep 2026 · Committee stage · NotMoved Vote
  283. 75 After Clause 23, insert the following new Clause— “Red lines on AI products and services7 Sep 2026 · Committee stage · Withdrawn Vote
  284. 74 After Clause 21, insert the following new Clause— “Liability of senior executives7 Sep 2026 · Committee stage · Withdrawn Vote
  285. 73 Clause 18, page 41, line 7, at end insert— “Exemption from disclosure: right to a fair trial7 Sep 2026 · Committee stage · Withdrawn Vote
  286. 72 After Clause 16, insert the following new Clause— “Notification of near misses, cyber threats and sub-threshold incidents7 Sep 2026 · Committee stage · Withdrawn Vote
  287. 71 Clause 16, page 34, line 13, at end insert— “(c) advise on any measures or remedies that customers are able to take in response to the incident7 Sep 2026 · Committee stage · NotMoved Vote
  288. 70 Clause 16, page 34, line 13, leave out “adversely”7 Sep 2026 · Committee stage · NotMoved Vote
  289. 69 After Clause 30, insert the following new Clause— “Board oversight of security and resilience of network and information systems26 Oct 2026 · Report stage · NotMoved Vote
  290. 69 Clause 16, page 34, line 8, at end insert— “(ba) if the incident has caused or is capable of causing severe operational disruption of the services or financial…7 Sep 2026 · Committee stage · NotMoved Vote
  291. 68 Clause 16, page 34, line 3, leave out “adversely”7 Sep 2026 · Committee stage · NotMoved Vote
  292. 67 Clause 16, page 34, line 2, at end insert— “(c) update customers regularly until the incident is fully resolved7 Sep 2026 · Committee stage · NotMoved Vote
  293. 66 Clause 16, page 33, line 37, leave out “adversely”7 Sep 2026 · Committee stage · NotMoved Vote
  294. 65 Clause 16, page 33, line 35, leave out “as soon as reasonably practicable” and insert “without delay and in any event within 24 hours of becoming aware of the…7 Sep 2026 · Committee stage · NotMoved Vote
  295. 64 Clause 16, page 33, line 31, at end insert— “(c) advise on any measures or remedies that customers are able to take in response to the incident7 Sep 2026 · Committee stage · NotMoved Vote
  296. 63 Clause 16, page 33, line 31, leave out “adversely”7 Sep 2026 · Committee stage · NotMoved Vote
  297. 62 Clause 16, page 33, line 26, at end insert— “(ba) if the incident has caused or is capable of causing severe operational disruption of the services or financia…7 Sep 2026 · Committee stage · NotMoved Vote
  298. 61 Clause 16, page 33, line 21, leave out “adversely”7 Sep 2026 · Committee stage · NotMoved Vote
  299. 60 Clause 16, page 33, line 20, at end insert— “(c) update customers regularly until the incident is fully resolved7 Sep 2026 · Committee stage · NotMoved Vote
  300. 59 Clause 16, page 33, line 17, leave out “adversely”7 Sep 2026 · Committee stage · NotMoved Vote
  301. 58 Clause 16, page 33, line 15, leave out “as soon as reasonably practicable” and insert “without delay and in any event within 24 hours of becoming aware of the…7 Sep 2026 · Committee stage · NotMoved Vote
  302. 57 Clause 16, page 33, line 11, at end insert— “(c) advise on any measures or remedies that customers are able to take in response to the incident7 Sep 2026 · Committee stage · NotMoved Vote
  303. 56 Clause 16, page 33, line 11, leave out “adversely”7 Sep 2026 · Committee stage · NotMoved Vote
  304. 55 Clause 16, page 33, line 6, at end insert— “(ba) if the incident has caused or is capable of causing severe operational disruption of the services or financial…7 Sep 2026 · Committee stage · NotMoved Vote
  305. 54 Clause 16, page 33, line 1, leave out “adversely”7 Sep 2026 · Committee stage · NotMoved Vote
  306. 53 Clause 16, page 32, line 39, at end insert— “(c) update customers regularly until the incident is fully resolved7 Sep 2026 · Committee stage · NotMoved Vote
  307. 52 Clause 16, page 32, line 36, leave out “adversely”7 Sep 2026 · Committee stage · NotMoved Vote
  308. 51 Clause 16, page 32, line 34, leave out “as soon as reasonably practicable” and insert “without delay and in any event within 24 hours of becoming aware of the…7 Sep 2026 · Committee stage · Withdrawn Vote
  309. 50 Clause 15, page 30, line 30, at end insert— “(5A) Where the RMSP incident is still occurring at the time a final report would otherwise fall to be given under…7 Sep 2026 · Committee stage · NotMoved Vote
  310. 49 Clause 15, page 30, line 30, at end insert— “(c) in the case of an intermediate report, before the end of such period as the designated competent authority may…7 Sep 2026 · Committee stage · NotMoved Vote
  311. 48 Clause 15, page 30, line 29, leave out “72 hours” and insert “30 days”7 Sep 2026 · Committee stage · NotMoved Vote
  312. 47 Clause 15, page 30, line 29, after “notification” insert “without undue delay and in any event”7 Sep 2026 · Committee stage · NotMoved Vote
  313. 46 Clause 15, page 30, line 26, after “notification” insert “without undue delay and in any event”7 Sep 2026 · Committee stage · NotMoved Vote
  314. 45 Clause 15, page 30, line 24, at end insert— “(4A) The information referred to in paragraph (1)(d) is—7 Sep 2026 · Committee stage · NotMoved Vote
  315. 44 Clause 15, page 30, line 4, leave out “users of”7 Sep 2026 · Committee stage · Agreed Vote
  316. 43 Clause 15, page 29, line 24, at end insert— “(c) if requested by the Information Commission following the full notification, an intermediate report containing…7 Sep 2026 · Committee stage · NotMoved Vote
  317. 42 Clause 15, page 27, line 16, at end insert— “(5A) Where the RDSP incident is still occurring at the time a final report would otherwise fall to be given under…7 Sep 2026 · Committee stage · NotMoved Vote
  318. 41 Clause 15, page 27, line 16, at end insert— “(c) in the case of an intermediate report, before the end of such period as the designated competent authority may…7 Sep 2026 · Committee stage · NotMoved Vote
  319. 40 Clause 15, page 27, line 15, leave out “72 hours” and insert “30 days”7 Sep 2026 · Committee stage · NotMoved Vote
  320. 39 Clause 15, page 27, line 15, after “notification” insert “without undue delay and in any event”7 Sep 2026 · Committee stage · NotMoved Vote
  321. 38 Clause 15, page 27, line 12, after “notification” insert “without undue delay and in any event”7 Sep 2026 · Committee stage · NotMoved Vote
  322. 37 Clause 15, page 27, line 10, at end insert— “(4A) The information referred to in paragraph (1)(d) is—7 Sep 2026 · Committee stage · NotMoved Vote
  323. 36 Clause 15, page 26, line 31, leave out “users of”7 Sep 2026 · Committee stage · Agreed Vote
  324. 35 Clause 15, page 26, line 12, at end insert— “(c) if requested by the Information Commission or Artificial Intelligence Security Institute following the full no…7 Sep 2026 · Committee stage · NotMoved Vote
  325. 34 Clause 15, page 23, line 41, at end insert— “(5A) Where the data centre incident is still occurring at the time a final report would otherwise fall to be given…7 Sep 2026 · Committee stage · NotMoved Vote
  326. 33 Clause 15, page 23, line 41, at end insert— “(c) in the case of an intermediate report, before the end of such period as the designated competent authority may…7 Sep 2026 · Committee stage · NotMoved Vote
  327. 32 Clause 15, page 23, line 40, leave out “72 hours” and insert “30 days”7 Sep 2026 · Committee stage · NotMoved Vote
  328. 31 Clause 15, page 23, line 40, after “notification” insert “without undue delay and in any event”7 Sep 2026 · Committee stage · NotMoved Vote
  329. 30 Clause 15, page 23, line 37, after “notification” insert “without undue delay and in any event”7 Sep 2026 · Committee stage · NotMoved Vote
  330. 29 Clause 15, page 23, line 35, at end insert— “(4A) The information referred to in paragraph (2)(d) is—7 Sep 2026 · Committee stage · NotMoved Vote
  331. 28 Clause 15, page 23, line 13, leave out “could have had”7 Sep 2026 · Committee stage · NotMoved Vote
  332. 28 Clause 10, page 9, line 33, at end insert— “(2A) The measures taken by an RMSP under paragraph (1) must ensure that the number of customers to whom the RMSP pr…16 Jun 2026 · Report stage · NotCalled Vote
  333. 28 Clause 8, page 8, line 4, at end insert— “(4) After paragraph (2) insert—26 Feb 2026 · Committee stage · NotCalled Vote
  334. 27 Clause 15, page 23, line 12, at end insert— “(c) if requested by the designated competent authority following the full notification, an intermediate report con…7 Sep 2026 · Committee stage · NotMoved Vote
  335. 27 Schedule 1, page 90, line 3, after “sub-paragraph (e)” insert “(including the “or” at the end)”16 Jun 2026 · Report stage · Agreed Vote
  336. 27 Clause 43, page 66, line 11, at end insert— “(fa) a requirement to remove, disable or modify hardware, software or other facilities;”26 Feb 2026 · Committee stage · Withdrawn Vote
  337. 26 Clause 15, page 22, line 34, at end insert— “(6A) Where the OES incident is still occurring at the time a final report would otherwise fall to be given under p…7 Sep 2026 · Committee stage · NotMoved Vote
  338. 26 Clause 57, page 83, line 17, leave out “or notice” and insert “, notice, notification or decision”16 Jun 2026 · Report stage · Agreed Vote
  339. 26 Clause 40, page 63, line 7, leave out “5” and insert “3”26 Feb 2026 · Committee stage · Withdrawn Vote
  340. 25 Clause 15, page 22, line 34, at end insert— “(c) in the case of an intermediate report, before the end of such period as the designated competent authority may…7 Sep 2026 · Committee stage · NotMoved Vote
  341. 25 Clause 57, page 83, line 14, leave out “or notice” and insert “, notice, notification or decision”16 Jun 2026 · Report stage · Agreed Vote
  342. 25 Clause 8, page 7, line 31, at the end insert— “(1A) In paragraph (1), after “risks” insert “, including risks arising from fraud,””26 Feb 2026 · Committee stage · NegativedOnDivision Vote
  343. 24 Clause 15, page 22, line 33, leave out “72 hours” and insert “30 days”7 Sep 2026 · Committee stage · NotMoved Vote
  344. 24 Clause 57, page 83, line 5, leave out “or notice” and insert “, notice, notification or decision”16 Jun 2026 · Report stage · Agreed Vote
  345. 24 Clause 57, page 83, line 11, leave out “there is no such published address” and insert “no email address has been so provided or published”26 Feb 2026 · Committee stage · Agreed Vote
  346. 23 Clause 15, page 22, line 33, after “notification,” insert “without undue delay and in any event”7 Sep 2026 · Committee stage · NotMoved Vote
  347. 23 Clause 57, page 82, line 28, leave out “or notice” and insert “, notice, notification or decision”16 Jun 2026 · Report stage · Agreed Vote
  348. 23 Clause 57, page 83, line 8, at end insert— “(za) an email address provided to a regulatory authority as an address for contacting that person,”26 Feb 2026 · Committee stage · Agreed Vote
  349. 22 Clause 15, page 22, line 30, after “notification,” insert “without undue delay and in any event”7 Sep 2026 · Committee stage · NotMoved Vote
  350. 22 Clause 57, page 82, line 25, leave out “or notice” and insert “, notice, notification or decision”16 Jun 2026 · Report stage · Agreed Vote
  351. 22 Schedule 2, page 91, line 4, at end insert— “11A (1)Regulatio…26 Feb 2026 · Committee stage · Agreed Vote
  352. 21 Clause 15, page 22, line 28, at end insert— “(5A) The information referred to in paragraph (2)(d) is—7 Sep 2026 · Committee stage · NotMoved Vote
  353. 21 Clause 57, page 82, line 23, leave out “or notice” and insert “, notice, notification or decision”16 Jun 2026 · Report stage · Agreed Vote
  354. NC21 To move the following Clause— “Food supply chain to be regulated as an essential service16 Jun 2026 · Report stage · NotCalled Vote
  355. 21 Schedule 2, page 89, line 37, at end insert— “(iia) omit the “and” at the end of the definition of “representative”;”26 Feb 2026 · Committee stage · Agreed Vote
  356. 20 Clause 15, page 22, line 15, at end insert— “(f) whether there has been, is or is likely to be any impact as a result of the incident on network and informatio…7 Sep 2026 · Committee stage · NotMoved Vote
  357. 20 Clause 57, page 82, line 22, leave out “or notice” and insert “, notice, notification or decision”16 Jun 2026 · Report stage · Agreed Vote
  358. NC20 To move the following Clause— “Specification of retail commerce as an essential activity16 Jun 2026 · Report stage · NotCalled Vote
  359. 20 Schedule 2, page 89, line 35, at end insert— “(ia) omit the “and” at the end of the definition of “relevant law-enforcement authority”;”26 Feb 2026 · Committee stage · Agreed Vote
  360. 19 Clause 15, page 22, line 14, leave out “users of”7 Sep 2026 · Committee stage · Agreed Vote
  361. 19 Clause 57, page 82, line 20, at end insert— “(1A) Where a regulated person has—16 Jun 2026 · Report stage · Agreed Vote
  362. NC19 To move the following Clause— “Review of risks posed by foreign state ownership or control of providers of cellular Internet of Things modules16 Jun 2026 · Report stage · NotCalled Vote
  363. 19 Schedule 1, page 86, line 33, at end insert— “(ea) in sub-paragraph (da), after “14A;” insert “or”;”26 Feb 2026 · Committee stage · Agreed Vote
  364. NC19 To move the following Clause— “Vulnerability research: review of the merits of a statutory defence26 Feb 2026 · Committee stage · NotMoved Vote
  365. 18 Clause 15, page 21, line 33, at end insert— “(c) if requested by the designated competent authority following the full notification, an intermediate report con…7 Sep 2026 · Committee stage · Withdrawn Vote
  366. 18 Clause 57, page 82, line 16, leave out “or notice” and insert “, notice, notification or decision”16 Jun 2026 · Report stage · Agreed Vote
  367. NC18 To move the following Clause— “Review of the number of bodies providing cloud computing services16 Jun 2026 · Report stage · NotCalled Vote
  368. 18 Clause 18, page 39, line 34, leave out “anything mentioned in paragraph (5)(b)” and insert “the provision and availability of data centre services in the Unite…26 Feb 2026 · Committee stage · Agreed Vote
  369. NC18 To move the following Clause— “Computer Misuse Act 1990: security and resilience of network and information systems26 Feb 2026 · Committee stage · Withdrawn Vote
  370. 17 Clause 15, page 21, line 19, leave out “capable of having” and insert “likely to have”7 Sep 2026 · Committee stage · Withdrawn Vote
  371. NC17 To move the following Clause— “Specification of retail commerce carried out by UK-owned companies as an essential activity16 Jun 2026 · Report stage · NoDecision Vote
  372. 17 Clause 20, page 44, line 28, at end insert— “(da) assessing the security or resilience of network and information systems relied on by a person regulated by th…16 Jun 2026 · Report stage · Agreed Vote
  373. 17 Clause 18, page 39, line 26, leave out from beginning to “, or” and insert “the provision and availability of data centre services in the United Kingdom”26 Feb 2026 · Committee stage · Agreed Vote
  374. NC17 To move the following Clause— “Requirement for regular testing of network and information systems26 Feb 2026 · Committee stage · NegativedOnDivision Vote
  375. 16 Clause 12, page 12, line 26, at end insert— “Restrictions on designation: systemic risk7 Sep 2026 · Committee stage · NotMoved Vote
  376. 16 Clause 20, page 44, line 15, at end insert— “(da) assessing the security or resilience of network and information systems relied on by a person regulated by th…16 Jun 2026 · Report stage · Agreed Vote
  377. NC16 To move the following Clause— “Digital Sovereignty Strategy (relevant network and information systems)16 Jun 2026 · Report stage · NotCalled Vote
  378. 16 Clause 18, page 39, leave out line 2426 Feb 2026 · Committee stage · Agreed Vote
  379. NC16 To move the following Clause— “Board oversight of security and resilience of network and information systems26 Feb 2026 · Committee stage · NegativedOnDivision Vote
  380. 15B Clause 12, page 11, leave out line 13 and insert— “(a) P supplies goods or services, whether directly or through one or more intermediaries, on which an RDSP o…7 Sep 2026 · Committee stage · NotMoved Vote
  381. 15A Clause 12, page 10, leave out lines 27 and 28 and insert— “(a) P supplies goods or services, whether directly or through one or more intermediaries, on which a…7 Sep 2026 · Committee stage · Withdrawn Vote
  382. 15 After Clause 10, insert the following new Clause— Workforce competence7 Sep 2026 · Committee stage · NotMoved Vote
  383. 15 Clause 18, page 41, line 23, at end insert— “(1A) A disclosure of information under paragraph (1) must be limited to information which is relevant and proporti…16 Jun 2026 · Report stage · Agreed Vote
  384. NC15 To move the following Clause— “Review of the cyber security risk posed by foreign powers16 Jun 2026 · Report stage · NotCalled Vote
  385. 15 Clause 18, page 39, leave out line 2126 Feb 2026 · Committee stage · Agreed Vote
  386. NC15 To move the following Clause— “Review of high-risk bodies26 Feb 2026 · Committee stage · NegativedOnDivision Vote
  387. 14 Clause 9, page 9, line 13, at end insert— “(3E) A person does not provide a managed service for the purposes of paragraph (3B) where the service provided consi…7 Sep 2026 · Committee stage · NotMoved Vote
  388. 14 Clause 18, page 41, line 4, at end insert— “(4A) A disclosure of information under any provision of regulation 6 or this regulation must be limited to informat…16 Jun 2026 · Report stage · Agreed Vote
  389. NC14 To move the following Clause— “Register of foreign powers for the purposes of Part 416 Jun 2026 · Report stage · NegativedOnDivision Vote
  390. 14 Clause 18, page 38, line 31, at end insert— “(aa) otherwise in connection with—26 Feb 2026 · Committee stage · Agreed Vote
  391. NC14 To move the following Clause— “Cyber security support service for SMEs26 Feb 2026 · Committee stage · NegativedOnDivision Vote
  392. 13 Clause 9, page 8, line 24, after “2003/361/EC” insert “, unless the Information Commission determines that the person’s provision of the relevant service poses…7 Sep 2026 · Committee stage · NotMoved Vote
  393. 13 Clause 18, page 40, line 31, leave out from “regulation 6(1)” to end of line 3316 Jun 2026 · Report stage · Agreed Vote
  394. NC13 To move the following Clause— “Digital Sovereignty Strategy on risks posed by foreign interference and reliance on foreign technologies16 Jun 2026 · Report stage · NegativedOnDivision Vote
  395. 13 Clause 7, page 7, line 7, leave out paragraph (b) and insert— “(b) a pool of computing resources is “scalable” if the resources are flexibly allocated by the p…26 Feb 2026 · Committee stage · Agreed Vote
  396. NC13 To move the following Clause— “Statement on risks posed to systems by foreign interference26 Feb 2026 · Committee stage · NegativedOnDivision Vote
  397. 12 Clause 8, page 8, line 7, leave out from “Commission” to end of line 8 and insert “and the Artificial Intelligence Security Institute when carrying out the dut…7 Sep 2026 · Committee stage · NotMoved Vote
  398. 12 Clause 18, page 40, line 24, leave out from “regulation 6(1)” to “, or” in line 2616 Jun 2026 · Report stage · Agreed Vote
  399. NC12 To move the following Clause— ““Last-resort” powers in respect of data centres and AI models16 Jun 2026 · Report stage · NotCalled Vote
  400. 12 Clause 4, page 3, line 7, leave out “(acting jointly)”26 Feb 2026 · Committee stage · Agreed Vote
  401. NC12 To move the following Clause— “Political parties to be regulated as an essential service26 Feb 2026 · Committee stage · NotMoved Vote
  402. 11 Clause 8, page 7, line 36, at end insert— “(1A) In paragraph (1), after “engine;” insert—7 Sep 2026 · Committee stage · NotMoved Vote
  403. 11 Clause 18, page 40, line 12, leave out “(1)(c)” and insert “(1)(b)”16 Jun 2026 · Report stage · Agreed Vote
  404. NC11 To move the following Clause— “Requirement for regular testing of network and information systems16 Jun 2026 · Report stage · NotCalled Vote
  405. 11 Clause 4, page 3, line 5, column 3, leave out from beginning to “the” in line 626 Feb 2026 · Committee stage · Agreed Vote
  406. NC11 To move the following Clause— “Electoral infrastructure to be regulated as an essential service26 Feb 2026 · Committee stage · NotMoved Vote
  407. 10 Clause 8, page 7, line 36, at end insert— “(1A) In paragraph (1), after “risks” insert “, including risks arising from fraud,”7 Sep 2026 · Committee stage · Withdrawn Vote
  408. 10 Clause 18, page 39, line 42, leave out from “paragraph (1)” to end of line 2 on page 4016 Jun 2026 · Report stage · Agreed Vote
  409. NC10 To move the following Clause— “Board oversight of security and resilience of network and information systems16 Jun 2026 · Report stage · NotCalled Vote
  410. 10 Clause 10, page 9, line 29, at end insert— “(2A) The measures taken by an RMSP under paragraph (1) must ensure that the number of customers to whom the RMSP pr…26 Feb 2026 · Committee stage · NotCalled Vote
  411. NC10 To move the following Clause— “Consultation on resourcing of regulatory authorities and regulated persons 26 Feb 2026 · Committee stage · NegativedOnDivision Vote
  412. 9 Clause 7, page 7, line 28, after “nature;” insert— “and in the case of software or a digital platform, includes a person which—7 Sep 2026 · Committee stage · NotMoved Vote
  413. 9 Clause 18, page 39, leave out lines 15 to 1716 Jun 2026 · Report stage · Agreed Vote
  414. NC9 To move the following Clause— “Political parties to be regulated as an essential service16 Jun 2026 · Report stage · NotCalled Vote
  415. 9 Clause 18, page 40, line 10, at end insert— “(8A) Where the CSIRT receives notification of an incident under regulation 11, 11A, 12A, or 14E that materially in…26 Feb 2026 · Committee stage · NotCalled Vote
  416. NC9 To move the following Clause— “Critical manufacturing and retail sectors26 Feb 2026 · Committee stage · NotMoved Vote
  417. 8 Clause 7, page 7, line 23, after “2003/361/EC” insert “, unless the Information Commission or Artificial Intelligence Security Institute determines that the pe…7 Sep 2026 · Committee stage · NotMoved Vote
  418. 8 Clause 18, page 38, line 35, leave out “and” and insert “or”16 Jun 2026 · Report stage · Agreed Vote
  419. NC8 To move the following Clause— “Electoral infrastructure to be regulated as an essential service16 Jun 2026 · Report stage · NotCalled Vote
  420. 8 Clause 15, page 30, line 21, at end insert— “(ea) where the incident was associated with one or more autonomous or adaptive systems based on machine learning,…26 Feb 2026 · Committee stage · NotCalled Vote
  421. NC8 To move the following Clause— “Local authorities to be regulated as essential services26 Feb 2026 · Committee stage · NotMoved Vote
  422. 7 Clause 7, page 6, line 31, after “engine” insert “, software or a digital platform,”7 Sep 2026 · Committee stage · Withdrawn Vote
  423. 7 Clause 18, page 38, line 33, leave out first “and” and insert “or”16 Jun 2026 · Report stage · Agreed Vote
  424. NC7 To move the following Clause— “Consultation on resourcing of regulatory authorities and regulated persons16 Jun 2026 · Report stage · NotCalled Vote
  425. 7 Clause 15, page 30, line 8, at end insert— “(fa) whether the incident involves failure modes not previously observed in the relevant sector materially involvin…26 Feb 2026 · Committee stage · NotCalled Vote
  426. NC7 To move the following Clause— “Impact of reporting requirements on relevant bodies26 Feb 2026 · Committee stage · NegativedOnDivision Vote
  427. 6 Clause 7, page 6, line 31, after “engine” insert “, an AI product or service”7 Sep 2026 · Committee stage · Withdrawn Vote
  428. 6 Clause 18, page 40, line 12, at end insert— “(8A) Where the CSIRT receives notification of an incident under regulation 11, 11A, 12A or 14E which it considers…16 Jun 2026 · Report stage · NotCalled Vote
  429. NC6 To move the following Clause— “Computer Misuse Act 1990: security and resilience of network and information systems16 Jun 2026 · Report stage · NotCalled Vote
  430. 6 Clause 15, page 27, line 7, at end insert— “(ea) where the incident was associated with one or more autonomous or adaptive systems based on machine learning, d…26 Feb 2026 · Committee stage · NotCalled Vote
  431. NC6 To move the following Clause— “Inclusion of ransomware attacks in the NIS Regulations26 Feb 2026 · Committee stage · NotMoved Vote
  432. 5 Clause 6, page 5, line 5, at end insert— “(za) an activity is carried on for “system-balancing purposes” if it is carried on with a view to contributing to the…7 Sep 2026 · Committee stage · Agreed Vote
  433. 5 Clause 43, page 66, line 18, at end insert— “(i) a requirement relating to embedded communications components manufactured outside the UK16 Jun 2026 · Report stage · NotCalled Vote
  434. NC5 To move the following Clause— “Local authorities to be regulated as essential services16 Jun 2026 · Report stage · NotCalled Vote
  435. 5 Clause 15, page 26, line 37, at end insert— “(h) whether the incident involves failure modes not previously observed in the relevant sector materially involvin…26 Feb 2026 · Committee stage · NotCalled Vote
  436. NC5 To move the following Clause— “Duty on Secretary of State to report on the meeting of existing recommendations and implementation deadlines26 Feb 2026 · Committee stage · NegativedOnDivision Vote
  437. 4 Clause 42, page 68, line 26, after “section 30(2)” insert “(and see also section 30(5))”2 Nov 2026 · 3rd reading · Agreed Vote
  438. 4 Clause 6, page 4, line 31, after “controller” insert “— (a) which carries on activities for system-balancing purposes (whether or not it also carries on other…7 Sep 2026 · Committee stage · Agreed Vote
  439. 4 Clause 29, page 54, line 9, at end insert “, including the risks arising from the use of embedded communications components manufactured outside the UK;”16 Jun 2026 · Report stage · NotCalled Vote
  440. NC4 To move the following Clause— “Critical manufacturing and retail sectors16 Jun 2026 · Report stage · NotCalled Vote
  441. 4 Clause 15, page 23, line 32, at end insert— “(ea) where the incident involved one or more autonomous or adaptive systems based on machine learning, details of…26 Feb 2026 · Committee stage · NotCalled Vote
  442. NC4 To move the following Clause— “Review of effect of information sharing and analysis centres26 Feb 2026 · Committee stage · NegativedOnDivision Vote
  443. 3 Clause 36, page 65, line 13, at end insert “(and see also section 30(5))”2 Nov 2026 · 3rd reading · Agreed Vote
  444. 3 Clause 4, page 3, line 18, at end insert— “(3A) A data centre also meets the threshold requirement in this paragraph, regardless of its rated IT load, if the O…7 Sep 2026 · Committee stage · Withdrawn Vote
  445. 3 Clause 18, page 41, line 15, at end insert— “Exemption from disclosure: right to a fair trial16 Jun 2026 · Report stage · NegativedOnDivision Vote
  446. NC3 To move the following Clause— “Review of high-risk bodies16 Jun 2026 · Report stage · NotCalled Vote
  447. 3 Clause 15, page 23, leave out lines 13 to 21 and insert— “(3) For the purposes of this regulation, an incident is a “data centre incident” if—26 Feb 2026 · Committee stage · NotMoved Vote
  448. NC3 To move the following Clause— “Register of foreign powers for the purposes of Part 4: review of nature of risk26 Feb 2026 · Committee stage · NegativedOnDivision Vote
  449. 2 Clause 24, page 53, line 39, at end insert “and (5)”2 Nov 2026 · 3rd reading · Agreed Vote
  450. 2 Clause 2, page 2, line 13, leave out from “directions” to end of line 15 and insert “in particular circumstances involving a risk to national security interests7 Sep 2026 · Committee stage · NotMoved Vote
  451. 2 Clause 40, page 63, line 7, leave out “5” and insert “3”16 Jun 2026 · Report stage · NotCalled Vote
  452. NC2 To move the following Clause— “Cyber security support service for SMEs16 Jun 2026 · Report stage · Withdrawn Vote
  453. 2 Clause 15, page 22, line 25, at end insert— “(ea) where the incident was associated with one or more autonomous or adaptive systems based on machine learning,…26 Feb 2026 · Committee stage · NotCalled Vote
  454. NC2 To move the following Clause— “Register of foreign powers for the purposes of Part 426 Feb 2026 · Committee stage · NegativedOnDivision Vote
  455. 1 Clause 2, page 1, line 10, leave out “centres” and insert “centre services”2 Nov 2026 · 3rd reading · Agreed Vote
  456. 1 Clause 2, page 2, line 13, leave out “on the Secretary of State”7 Sep 2026 · Committee stage · Withdrawn Vote
  457. NC1 To move the following Clause— “Statement on risks posed to systems by foreign interference16 Jun 2026 · Report stage · NoDecision Vote
  458. 1 Clause 8, page 7, line 36, at end insert— “(1A) In paragraph (1), after “risks” insert “, including risks arising from fraud,””16 Jun 2026 · Report stage · NotCalled Vote
  459. NC1 To move the following Clause— “Food supply chain to be regulated as an essential service26 Feb 2026 · Committee stage · NotCalled Vote
  460. 1 Clause 15, page 22, line 15, at end insert— “(f) whether the incident involves failure modes not previously observed in the relevant sector materially involvin…26 Feb 2026 · Committee stage · Withdrawn Vote