Skip to content

Cyber Security and Resilience (Network and Information Systems) Bill

Amends the Network and Information Systems Regulations 2018 to bring managed service providers, data centres and large load controllers into scope, strengthen incident reporting, and expand regulators' enforcement powers.

Where it stands

Passed one chamberIntroducedCommitteeFloorLawPassed one chamber

Lords committee stage sittingSep 72 weeks ago

Body
UK Parliament
Session
2024 to 2026 session, carried over to 20
Introduced
Nov 12, 2025

Timeline

  1. Oct 26 in 4 weeks

    Lords report stage scheduled

  2. Sep 7 2 weeks ago

    Lords committee stage sitting

  3. Sep 3 3 weeks ago

    Lords committee stage sitting

  4. Sep 1 3 weeks ago

    Lords committee stage begins

  5. Jul 14 2 months ago

    Lords second reading

  6. Jun 17 3 months ago

    Lords first reading

  7. Jun 16 3 months ago

    Commons report stage and third reading

  8. May 14 4 months ago

    Bill reintroduced in the Commons in the new session

  9. Feb 3 7 months ago

    Commons committee stage begins (sittings to 26 February 2026)

  10. Jan 6 8 months ago

    Commons second reading and carry-over motion

  11. Nov 12, 2025 10 months ago

    Introduced in the House of Commons (first reading)

  12. Apr 9, 2025 1 year ago

    Policy statement published

  13. Apr 1, 2025 1 year ago

    Government announces the Bill's measures