logo

UK threatens £100K-a-day fines under new cyber bill

ID: 3d22d1bb-4ffa-52de-9adb-f9768c568d97

STIX ID: report--3d22d1bb-4ffa-52de-9adb-f9768c568d97

Feed Name: The Register (Security)

Date Published: 2025-04-01

Date Updated: 2026-04-26

Author: Connor Jones

...
...

The UK detailed its Cyber Security and Resilience (CSR) Bill, expanding critical infrastructure regulation to include managed service providers (and potentially datacenters), strengthening regulator enforcement and information-gathering powers, mandating faster incident reporting (initial within 24 hours and full within 72) to regulators and the NCSC, and enabling government to issue ad-hoc security directives backed by fines up to £100,000 per day or 10% of turnover; the bill also allows rapid regulatory updates and a unified strategic priorities statement to keep pace with evolving threats, citing recent attacks and escalating risks to national infrastructure as justification.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.