AI and data laws

311 moving · 704 enacted

United KingdomUnited KingdomBill

Cyber Security and Resilience (Network and Information Systems) Bill

Amends the Network and Information Systems Regulations 2018 to bring managed service providers, data centres and large load controllers into scope, strengthen incident reporting, and expand regulators' enforcement powers.

Passed one chamberIntroducedCommitteeFloorLawPassed one chamber

Lords committee stage sittingSep 7 2 months ago

Body
UK Parliament
Session
2024 to 2026 session, carried over to 20
Introduced
Nov 12, 2025

Timeline

  1. Oct 26 2 weeks ago

    Lords report stage scheduled

  2. Sep 7 2 months ago

    Lords committee stage sitting

  3. Sep 3 2 months ago

    Lords committee stage sitting

  4. Sep 1 2 months ago

    Lords committee stage begins

  5. Jul 14 4 months ago

    Lords second reading

  6. Jun 17 4 months ago

    Lords first reading

  7. Jun 16 4 months ago

    Commons report stage and third reading

  8. May 14 6 months ago

    Bill reintroduced in the Commons in the new session

  9. Feb 3 9 months ago

    Commons committee stage begins (sittings to 26 February 2026)

  10. Jan 6 10 months ago

    Commons second reading and carry-over motion

  11. Nov 12, 2025 12 months ago

    Introduced in the House of Commons (first reading)

  12. Apr 9, 2025 1 year ago

    Policy statement published

  13. Apr 1, 2025 1 year ago

    Government announces the Bill's measures

United Kingdom
United Kingdomunverified

British Data Centre Covenant

The UK government unveiled a covenant setting local job, community investment, and water protection standards for data centers seeking faster grid connections.

Proposed
United Kingdom

AI Opportunities Action Plan

Independent report led by Matt Clifford, adopted by the government, setting out 50 recommendations to expand AI infrastructure, drive AI adoption across the economy and improve public services.

Adopted
United Nations
United NationsA/RES/79/243

UN Convention against Cybercrime

A global treaty requiring parties to criminalize certain offences committed through information and communications technology systems and to cooperate on sharing electronic evidence of serious crimes, which enters into force 90 days after the 40th ratification.

Adopted

Change log

  • AddedAdded to the list. Set by hand from the official record.Sep 27

Summaries of public legislative records, executive actions and court rulings, for reference, not legal advice. Check the official page linked on each item. First seen 2026-09-27. Checked against the official source.