Campaign mentioned as several peers call for CMA reform in CSR Bill Second Reading

Peers from across the House of Lords raised the need for reform of the Computer Misuse Act during the Second Reading of the Cyber Security and Resilience Bill last week.

The CyberUp Campaign was pleased to see the issue raised by a number of peers, including the Earl of Effingham, Baroness Ludford, Lord Arbuthnot, Lord Clement-Jones, Lord Holmes and Viscount Camrose. Their contributions reinforced the growing parliamentary recognition that cyber resilience cannot be strengthened solely through new duties on organisations, but must also ensure that the professionals responsible for identifying vulnerabilities, testing systems and defending against threats are not held back by outdated legislation.

The Computer Misuse Act was passed in 1990 and remains the UK’s principal cybercrime law. While it plays an important role in tackling malicious activity, the Act has not kept pace with the realities of modern cyber security. As a result, legitimate security researchers and cyber professionals can face legal uncertainty when undertaking good-faith work that helps protect businesses, public services and critical national infrastructure.

During the debate, peers noted that the Cyber Security and Resilience Bill will increase the expectations placed on organisations to manage cyber risk, report incidents and strengthen resilience. However, several also made clear that the UK must address the legal framework governing the cyber workforce if it is to meet those ambitions.

The Government has confirmed that reform of the Computer Misuse Act is expected to come through forthcoming National Security Bill. CyberUp welcomes this commitment and will continue to work with parliamentarians, industry and the wider cyber security community to ensure that reform delivers a clear, workable and future-proof legal framework.

You can view the peers’ contributions here.