Progress

Current status
in consultation
05 Mar 2026 processing consultation
07 Jan 2026 in consultation
23 Dec 2025 under deliberation
12 Nov 2025 under deliberation
01 Apr 2025 under deliberation
17 Jul 2024 under deliberation

Scope

Implementers
United Kingdom
Policy Area
Data governance
Policy Instrument
Cybersecurity regulation
Regulated Economic Activity
cross-cutting
Government Branch
legislature
executive
Government Body
parliament
data protection authority
central government
Implementation Level
national

Timeline of events

05 Mar 2026
processing consultation

Consultation on the Cyber Security and Resilience (Network and Information Systems) Bill closes

On 5 March 2026, the public consultation on the Cyber Security and Resilience (Network and Information Systems) Bill closes. The Bill was introduced to the House of Commons on 12 November 2025 and would update the Network and Information Systems (NI…

Source
Event type law
Action type consultation closed
Government branch legislature
Government body parliament
07 Jan 2026
in consultation

Public Bill Committee opened consultation on the Cyber Security and Resilience (Network and Information Systems) Bill

On 7 January 2026, a public consultation on the Cyber Security and Resilience (Network and Information Systems) Bill was opened until 5 March 2026, when the Public Bill Committee concludes its consideration of the Bill. The Bill was introduced to th…

Source
Event type law
Action type consultation opened
Government branch legislature
Government body parliament
23 Dec 2025
under deliberation

Information Commissioner's Office issued response on Cyber Security and Resilience Bill

On 23 December 2025, the Information Commissioner's Office (ICO) issued its response on the Cyber Security and Resilience Bill, which was laid before Parliament on 12 November 2025. The Bill will update the Network and Information Systems (NIS) Regu…

Source
Event type law
Action type opinion
Government branch executive
Government body data protection authority
12 Nov 2025
under deliberation

Cyber Security and Resilience Bill introduced to Parliament

On 12 November 2025, the Cyber Security and Resilience Bill was introduced to Parliament. The Bill will update the Network and Information Systems (NIS) Regulations 2018 by expanding the regulatory scope to include a broader range of essential and d…

Source
Event type law
Action type introduction
Government branch legislature
Government body parliament
01 Apr 2025
under deliberation

Department for Science, Innovation & Technology published policy statement on Cyber Security and Resilience Bill

On 1 April 2025, the Department for Science, Innovation & Technology published a policy statement detailing the confirmed and proposed measures in the Cyber Security and Resilience Bill. The Bill is expected to update the Network and Information Sys…

Source
Event type law
Action type announcement
Government branch executive
Government body central government
17 Jul 2024
under deliberation

Announced Cyber Security and Resilience Bill

On 17 July 2024, the Cyber Security and Resilience Bill was announced in the King's Speech. The Bill aims to introduce new cybersecurity measures by updating the legacy regulatory framework. It would expand the scope of regulation to protect a broad…

Source
Event type law
Action type announcement
Government branch executive
Government body central government