UK Plans Cybercrime Law Overhaul to Support Security Researchers
Summary
The UK plans to update the Computer Misuse Act 1990 and is considering Cyber Crime Risk Orders and evidence-concealment powers. Draft legislation has not been published, and the scope of the reforms remains unclear.
Key points
- The government announced plans to rewrite key cybercrime laws, including the Computer Misuse Act 1990.
- Researchers and industry groups say the law creates uncertainty for legitimate work such as vulnerability research, penetration testing and threat intelligence.
- A public-interest defense for good-faith cybersecurity work is among the possibilities, but the government has not confirmed its scope.
- Briefing notes also refer to proposed Cyber Crime Risk Orders and powers related to people suspected of concealing evidence for cybercrime suspects.
- The reforms are intended to help disrupt ransomware and organized cybercrime networks.
- Draft legislation has not been published; the legislation is expected to be introduced in Parliament later this year.
Article Details
- Event Type
- The UK government announced plans to reform key cybercrime laws, including the Computer Misuse Act 1990.
- Impact
- The proposed reforms aim to reduce legal uncertainty for good-faith security research and defensive cybersecurity work, while strengthening powers to disrupt ransomware and organized cybercrime. Possible measures include a public-interest defense, Cyber Crime Risk Orders, and powers related to concealing evidence. Draft legislation has not been published, so the scope and final provisions remain uncertain.