Cyber Security and Resilience (Network and Information Systems) Bill: Remaining Stages

The House of Commons debated  the Bill on 16 June 2026 following a Public Bill Committee. The Bill updates the UK’s only cross-sector cyber regulations, and delivers new powers to ensure government can respond to new and emerging cyber threats.
There were three amendments that were voted on:
New Clause 13, which would have required the Government to publish a Digital Sovereignty Strategy setting out how it intends to address risks to relevant network and information systems posed by foreign interference and reliance on foreign technologies, including by supporting the use of domestic technologies, was rejected: 
Ayes 77, Noes 255
New Clause 14, which would have required the Government to maintain a register of state actors posing a threat to UK cyber security for the purposes of exercising the Secretary of State’s powers under Part 4 of the Act, which enable the giving of directions in the interests of national security, was rejected: Ayes 151, Noes 258
Amendment 3, which would have prevented the sharing of information with overseas authorities for the purpose of prosecuting crimes not committed in the UK if the Secretary of State determines that the receiving country is one in which the right to a fair trial cannot be guaranteed, was rejected: Ayes 162, Noes 246
The Bill was read the third time, and passed without division.