Closed petition: Enact new Cybersecurity law that sets minimum standards and creates a regulator

Closed on 21 January 2026

To make the UK a resilient place to operate and reduce the destructive effects of cybercrime on businesses and the public, we want the government to introduce a new Cybersecurity Act that mandates minimum cybersecurity standards for ALL businesses larger than 20 staff or £2m annual turnover.

We think cybercrime is a pandemic. Effects on the mental health of it's victims, from business leaders to the general public, are huge. We think we need mandated defence.

We think a new cybersecurity law, modelled on previous Health & Safety legislation should be overseen by a new Cybersecurity Executive with powers of enforcement exercised centrally for large and government organisations and additional powers granted to local authorities responsible for monitoring and fining SME businesses headquartered in their areas.