The UK government wants new powers to secretly order critical-sector companies to stop buying from or remove technology suppliers deemed national security risks. Amendments to the Cyber Security and Resilience Bill would let ministers issue "vendor-related directions" affecting managed service providers, data centers, digital infrastructure, and the energy, water, transport, and health sectors, building on powers previously used against Huawei in 5G but with fewer transparency requirements for naming the vendor or notifying it.
Why it matters: This could force operators of essential services to rapidly replace suppliers or shut off installed products, while the public may not be told which vendor is considered risky. It also raises major accountability and transparency concerns because orders could be issued and discussed in secret.
2026.08.25
100% relevant
This article appears to be the initial report on the UK bill amendments creating secret 'vendor-related direction' powers beyond telecoms, making it the anchor event for this policy story.
← Back to all stories