A Bill to require a company that meets specified criteria to report any cyber extortion or ransomware attack on the company to the Government within a specified time after the attack; to make provision about the content of such reports, including a requirement to provide information about any payments made; and for connected purposes.
May contain errors — check source documents for definitive information.
The Bill would require certain companies to report cyber extortion or ransomware attacks to the Government within a set time after an incident. The reports must include details of the attack and any payments made to attackers. The goal is to improve government awareness and response to cyber threats.
The bill is at the 2nd Reading in the House of Commons. If it progresses, it would move to committee stage and then further stages before a potential Lords consideration.
Generated 21 February 2026
21 Oct 2025
The 2024-2026 session of Parliament has come to an end so the House of Commons is now prorogued until the next session begins on 13 May 2026. Prorogation is the formal end to the parliamentary year.
This Bill will therefore make no further progress.
No recorded votes for this bill yet.
