Skip to content
You can now search across every topic, entity and event.What's new
Cyber Crime Risk Orders
Concept

Cyber Crime Risk Orders

Cyber Crime Risk Orders

Last refreshed: 24 July 2026

Key Question

Police call it a 'digital prison', but Cyber Crime Risk Orders don't exist in law yet, so who decides if they will?

Timeline for Cyber Crime Risk Orders

#11 16 Jul

Police press for a 'digital prison'

Cybersecurity: Threats and Defences
View full timeline →

Background

Cyber Crime Risk Orders are a proposed UK court power, raised by City of London Police Commander Ollie Shaw after the sentencing of two Scattered Spider hackers over the 2024 Transport for London attack. They do not yet exist in UK statute.

The proposed model mirrors Sexual Harm Prevention Orders, which impose post-conviction restrictions on offenders, applied instead to computer misuse. Shaw described it as a 'digital prison', restricting a convicted hacker's access to devices and technology after release.

Parliament has not legislated for the power; Shaw is using Britain's largest-ever cybercrime conviction as a platform to argue one should exist.

Common Questions
What are Cyber Crime Risk Orders?
Cyber Crime Risk Orders are a proposed UK court power that would restrict a convicted hacker's access to devices and technology after release. They do not currently exist in UK statute.Source:
Are Cyber Crime Risk Orders law in the UK?
No. As of July 2026 they are only a proposal raised by City of London Police Commander Ollie Shaw; Parliament has not legislated for them.Source:
Why is City of London Police calling for a 'digital prison'?
Commander Ollie Shaw used the TfL hacking sentencing to argue for Cyber Crime Risk Orders, modelled on Sexual Harm Prevention Orders, to restrict convicted hackers' technology access after release.Source: