UK plans for cybercrime law reform would protect almost no one, experts warn

Recorded Future reports that proposed UK reforms to the Computer Misuse Act 1990 would create a narrowly framed statutory defence for security researchers that is limited to scanning internet-facing systems, requires personal testing by UK nationals accredited by the UK Cyber Security Council, and forces researchers to stop immediately upon finding a vulnerability; industry experts warn these constraints (including lack of guidance for AI tools) would exclude many researchers, hamper disclosure and skills development, and primarily protect government legal exposure rather than address sector needs.