Cyber Security and Resilience Bill

Overview

The government introduced the Cyber Security and Resilience Bill to Parliament for its first reading on 12 November 2025.

The Cyber Security and Resilience Bill will reform and add to the existing Network and Information Systems (NIS) Regulations 2018, to increase UK defences against cyber attacks, better protecting the services the public rely on to go about their normal lives – to switch on lights, turn on the tap to safe water, and know the NHS is there to support them.

The Bill will deliver a fundamental step change in the UK’s national security – making essential and digital services more secure in the face of cyber criminals and state actors who want to disrupt our way of life. Reforms will underpin greater economic stability, helping grow the economy for working people, by reducing business cost and disruption, and supporting investment.

Key documents

Read the press notice announcing bill.

See factsheets explaining the measures in the Bill.

Read the full Bill on the Parliament website.

View the Bill’s impact assessment.

Legislation documents can be found on the Parliament website including:

• Cyber Security and Resilience Bill
• Explanatory Notes
• Delegated Powers Memorandum
• Impact Assessments

Background

The government announced as part of the July 2024 King’s Speech that it would introduce a Cyber Security and Resilience Bill in the current Parliamentary session.

In April 2025 the government published details of the measures to be included in the bill.

Read the April 2025 press notice detailing the measures in the bill.

Read the Cyber Security and Resilience Bill policy statement from April 2025.

Read the ministerial statement on the bill.

Read the National Cyber Security Centre blog about the bill.

The Bill has now completed its second reading and committee stage in the House of Commons.

Visit the Parliament website for further details on the passage of the Bill through Parliament.