02/09/2026
A significant piece of UK legislation is making its way through Parliament – and if your business uses an IT support company, it matters to you directly. The Cyber Security and Resilience Bill passed the House of Commons on 10 June 2026 and received its first reading in the House of Lords on 17 June. Peers are due to debate its principles at second reading on 14 July 2026, with Royal Assent expected later this year.
When it comes into force – implementation is expected to be phased through to 2028 – it will do something that has not happened before in UK law: it will place IT companies like ours under direct government regulation.
What Is This Bill?
The Cyber Security and Resilience Bill updates the Network and Information Systems (NIS) Regulations 2018.
The Cyber Security and Resilience Bill will put IT companies under direct ICO regulation for the first time. Here is what UK businesses need to know and why your choice of IT provider now matters more.