UK Cyber Bill teases mandatory ransomware reporting

Labour leader Keir Starmer’s government plans to introduce a Cyber Security and Resilience Bill in the upcoming parliamentary term. The aim is to enhance the UK’s cyber defenses and ensure the continuity and protection of digital services. A key aspect of the proposed law is mandatory ransomware reporting.

During the State Opening of Parliament, various potential new laws were mentioned, including the Cyber Security and Resilience Bill. The government recognizes that the UK is facing increasing cyber threats from financially-motivated cyber criminals and state actors targeting organizations of all sizes.

The government highlighted that current cyber laws are based on EU regulations that are now outdated and need urgent updates to keep pace with evolving threats. Critical national infrastructure and essential services are particularly vulnerable to cyber attacks, as seen in recent incidents affecting various organizations.

The main objectives of the Bill are to expand existing regulations to better protect digital services and supply chains and to enhance reporting requirements for a clearer understanding of cyber threats. Regulatory bodies may receive increased powers, including the ability to investigate IT system vulnerabilities proactively.

Mandatory incident reporting will enable the government to gather more data on cyber attacks, improve the national understanding of threats, and alert organizations and individuals to potential attacks, including ransomware incidents.