The Policy Unveil

Independent Analysis of Policy & Law

Cyber Extortion and Ransomware (Reporting) Bill

Reference
4027
Date
2026-05-01
Status
2nd reading
Country
United Kingdom
Level
National
Primary Source
View original text →

A Bill to require a company that meets specified criteria to report any cyber extortion or ransomware attack on the company to the Government within a specified time after the attack; to make provision about the content of such reports, including a requirement to provide information about any payments made; and for connected purposes.