Question to the Department for Digital, Culture, Media & Sport:

To ask Her Majesty's Government what steps they are taking to modernise the legal environment to enhance the resilience of UK private sector organisations to defend themselves and their clients against cyber threats.

The forthcoming Data Protection Bill will require all organisations to have appropriate technical and organisational cyber security measures in place to protect personal data. In addition, for critical services and digital service providers, the Government is transposing the Network and Information Systems Directive into UK Law which requires relevant digital service providers to take appropriate and proportionate measures to secure their network and information systems from both cyber attacks and physical failures. In addition, as committed to in its Cyber Regulation and Incentives review published in 2016, the Government continues to monitor the wider cyber security regulatory landscape to ensure it remains fit for purpose.