The Cyber Security and Resilience Bill is at committee stage in the House of Lords, with a running list of amendments dated 23 July on the Parliament publications page1. The bill extends the Network and Information Systems Regulations 2018, the UK's existing regime for critical-service operators, with wider incident-reporting duties and a broader set of organisations inside scope. It cleared the Commons at third reading on 10 June.
Committee stage in the Lords is the point where every clause is examined in turn and amendments are debated without a time limit, which is why a bill's operative detail often changes more here than at any other stage. Reporting thresholds, the definition of a relevant incident and the powers a regulator gets to compel information are the provisions that determine what the legislation costs an organisation to comply with, and they are settled in exactly this room.
Lord Alton has proposed an amendment on transnational repression, the practice of states pursuing dissidents and diaspora communities abroad. Whether it has been tabled formally or adopted could not be established from the published record, so its standing stays open. Nothing in the amendment paper resolves it.
