Cyber Security and Resilience (Network and Information Systems) Bill

Jim McMahon Excerpts

Report stage
Tuesday 16th June 2026 Commons Chamber

[Chris Vince (Harlow) (Lab/Co-op)]

I thank all my hon. Friends and all hon. Members who have contributed to what has been a really good and well-meaning debate. People will be relieved to know that I intend to keep my contribution fairly brief. I say to the right hon. Member for Chingford and Woodford Green (Sir Iain Duncan Smith) that I do not pretend to be an expert when it comes to cyber-security and resilience, although other Members across the House would say that that has never stopped me talking before.

It was a pleasure to be on the Bill Committee for this legislation; in part, I think that was because of the very constructive nature of conversations in Committee. As the shadow Minister in particular will know, I sat very passively throughout Committee and said very little, which is common for me. This is a really important piece of legislation. As Members across the House have rightly said, it is the first duty of any Government to protect their citizens. There are obviously huge benefits as we move forward into a more technologically advanced world, but there are also real challenges, and as a country we need to be ready for them.

It was also a pleasure in Committee to have the opportunity to mention my father-in-law, Professor Robin Bloomfield—not least because I need all the brownie points that I can get—who is a professor of cyber-security at City St George’s, University of London. Let me also reference the fact that I have a data centre in my constituency, the Kao data centre; it is named after Charlie Kao, who, along with George Hockham, created the fibre-optic cable in Harlow. It is fair to say that I have some skin in the game in terms of the importance of this legislation.

When I looked through the list of amendments, the first thing I thought was, “The Liberal Democrats have been busying themselves.” I say genuinely to them that I welcome conversations about the need to protect local government and electoral services. Although I do not think that necessarily has to be covered in this legislation, I hope the Minister has listened to the comments made by the Liberal Democrats. We can absolutely come back to that conversation in this House, because it is hugely important that our democratic services in particular are not eroded by bad state actors, as has been discussed previously.

[Jim McMahon (Oldham West, Chadderton and Royton) (Lab/Co-op)]

On local government, there are clearly hundreds of local authorities, many of which are busy upgrading their systems. However, one thing that is not spoken about enough is the human capacity to actually do the work. Many local authorities, like Government themselves, find a real difficulty in recruiting the talent that they need. Does my hon. Friend agree that central Government could provide a greater role and act almost as a centre of excellence for cyber-security for local government?

[Chris Vince]

As a former councillor in a district council bordering London, I know the particular challenges we had in recruiting really decent council officers. I should put it on record that we have had some fantastic officers in Harlow district council, but it was always more difficult to recruit them, because they were drawn particularly to London. I recognise the challenges that he highlights, and I obviously want more support to be given to those professionals to understand cyber-security risks. My father-in-law is very much retired, so I am not giving him a job, but I am sure he would be very keen to see that as well.

My hon. Friend’s intervention brings me nicely on to my next point. My hon. Friend the Member for Warwick and Leamington (Matt Western) spoke very well and with a great deal of expertise on this topic. He referenced something that I referenced in Committee, which was that even if we think this legislation is perfect, it will not be enough. We need a culture shift when it comes to cyber-security, so I welcome my hon. Friend’s comments and ask the Minister to reflect on them when he concludes the debate.

I did say that I would not give a very long speech, but I have been on my feet longer than I thought I would be, which is typical of me. I will finish by saying that over 11,000 NHS appointments and procedures were lost last year due to cyber-attacks. For too long, successive Governments have failed to properly address the growing threats from cyber criminals and hostile states. I am pleased that this Government are addressing those threats by giving regulators new powers to designate which suppliers are critical in the supply chain, and by investing £210 million to tackle threats and strengthen public services. For that reason, I strongly support the Bill.

--- Later in debate ---

[Dr Ben Spencer (Runnymede and Weybridge) (Con)]

Before I begin, I would also like to make some remarks in commemoration of the 10th anniversary of the murder of Jo Cox. I never met Jo Cox. I never knew Jo Cox, and I am very sad that I did not, because having seen the impact she has had on our politics, on this place and on the people who knew her, she was clearly an incredible person. I do not think anyone can disagree with what she stood for, and in particular, that we have more in common in our politics. Our politics is worse off without her.

Yet again, we return to this Government’s vacant vacillation regarding our national security. I urge the Minister again to take this opportunity to strengthen UK cyber-security from the threat posed by foreign state actors. Protecting the UK and its citizens is the primary responsibility of Government, but still, in the face of clear evidence of increasing threats, this Government fail to act. The risk of physical threats and the need to invest in defence are clear to all, yet the Government prioritise increasing welfare spending over the safety and security of armed forces personnel and our country. The situation is so serious that the Defence Secretary had to resign, as he could not defend the inaction of this Government or the risks they are taking.

While the dangers presented to our cyber-security may be less visible, they are no less real. Hostile state actors are working every single hour of every single day to undermine our democracy and our security. These are risks that every Member across this House will be aware of. It is chilling to know that when Iran shut down its internet access, social media accounts purporting to be pro-independence Scottish people stopped tweeting. Expert analysis has estimated that thousands of similar accounts could originate in Iran and that as much as 26% of such accounts could be fake. Social media is now a weapon. We know that hostile state actors have sought to attack and undermine Parliament. Just last week we were told that spyware had been discovered in Government buildings linked to recent high-profile decisions regarding China’s controversial mega-embassy project in London.

[Jim McMahon]

I have often said about the device that was found in the Ministry of Housing, Communities and Local Government that unless someone is a member of staff, they cannot get to that side of the building without going through the Home Office. That obviously raises serious questions about the complex on Marsham Street more broadly. Does the shadow Minister accept that there is a pattern of foreign malign forces impacting our institutions, whether that is our Parliament or even the sovereignty of the United Kingdom itself? Unless there is resolve by Government and all parties in this place, we will not face that threat with the scale of response needed.

Digital ID

Jim McMahon Excerpts

Thursday 15th January 2026 Commons Chamber

[Josh Simons]

Let me restate for the hon. Gentleman the argument that connects digital ID to small boat crossings. We are using digital right-to-work checks, which will enable an audit of where those checks have happened, so that we can toughen up our enforcement against illegal working. That will bring this country in line with international peers, such as France and Germany, and reduce the pull factors. The use cases for this system, and how it will join up Government, are matters that will be subject to the consultation, so I invite him to make a submission to the consultation and tell us where exactly it can be useful.

Let me give one example. When somebody has a baby, they have to apply for childcare repeatedly, and have to remind the Government of what they are doing. The Government already know that information, so people should not have to do that. Tired working parents should not have to fight the Government to get things that they are entitled to, and we will ensure that they do not have to.

[Jim McMahon (Oldham West, Chadderton and Royton) (Lab/Co-op)]

I welcome this revision to the Government’s policy—the removal of the mandatory element of this scheme. There is some benefit in looking at more advanced digital public services, but that is not the same as ID. When we came to government, the Prime Minister gave a speech outside Downing Street, in which he promised two things; the first was to “tread more lightly” on people’s lives, and the second was to be a Government of service. On a range of issues, including checking bank accounts to see what people are selling on eBay or Etsy, the Government appear to be intruding on people’s everyday lives in a way that is overbearing, so I ask that this be the moment when we go back to those founding principles that the Prime Minister set out on coming into government, and make sure that those principles cut across all Government policy.

[Josh Simons]

I agree with my hon. Friend that it is vital that people trust any digital product and system that this Government build. Trust has to be at the heart of everything we do. We will put trust at the heart of the consultation that will be published in a few weeks, and we will explain more about how we will do that. To be really clear, though, the reason why the digital ID connects public services is that at the moment, there is no mechanism for the Government to join up public services based on what an individual wants. If somebody wants to share information across Government services to get something—their childcare, for instance—they should be able to do so, having given consent. That is what this digital ID will unlock.