UK Report Proposes Liability For Software Provider Insecurity

The UK Business and Trade Committee report calls for legislation to make software providers legally responsible for insecure products after a string of disruptive 2025 cyber-attacks (including Co-op, M&S and Jaguar Land Rover) highlighted significant public costs; it recommends mandating secure-by-design, vendor liability for avoidable vulnerabilities, mandatory incident reporting, and enforcement powers for regulators to reduce economic and consumer exposure.