Question to the Cabinet Office:

To ask the Minister for the Cabinet Office, what discussions he has had with the Secretary of State for (a) the Home Department and (b) Science, Innovation and Technology on the potential merits of updating the Computer Misuse Act 1990 to enhance national cyber resilience through strengthened legal protections for cybersecurity researchers.

The Government recognises the significant role that UK cybersecurity professionals play in enhancing and protecting the country’s resilience against cyber threats; it is essential that we provide them with the necessary support. The Home Office is currently reviewing the Computer Misuse Act, and as part of this process, officials are considering the issue of strengthened legal protections for legitimate cybersecurity researchers. However, this work is complex and requires careful consideration. Without robust safeguards and oversight, the introduction of legal protections could significantly hinder law enforcement's ability to prosecute cyber criminality.

To address this, the Home Office is collaborating with the Department for Science, Innovation and Technology (DSIT), the National Cyber Security Centre, law enforcement agencies, and the cybersecurity industry to evaluate the safeguards that would need to accompany any implementation of strengthened legal protections. An update will be provided in due course.