On 8 March 2023, the Data Protection and Digital Information (No. 2) Bill, including data cybersecurity regulation, was introduced in the United Kingdom (UK) Parliament. The Bill would amend the UK Data Protection Regulation provisions in regard to the obligations of entities to safeguard the personal data they store. In particular, the Bill would require entities to adopt "appropriate measures, including technical and organisational measures", to ensure the security of the data and comply with the data protection by design requirements.
Original source