On 3 September 2026, the House of Lords continued committee scrutiny of the Cyber Security and Resilience (Network and Information Systems) Bill. This is a legislative debate, not the commencement of a new education-sector obligation.
Why education featured
Baroness Berger discussed a proposed amendment to bring education within the bill’s essential-activities regime. Her argument covered schools, further and higher education, examination bodies and admissions infrastructure. She also cited the growing accessibility of cyberattacks, including through artificial intelligence.
What is at stake?
The debate connected cyber resilience with student records, examination results and continuity of educational services. The proposed approach would require proportionate security and incident-prevention measures for covered education bodies.
What did the government say?
The minister favoured a considered, sector-based assessment of possible expansion, including risk assessment, consultation and parliamentary procedure. Readers should not treat an amendment discussed in committee as enacted law.
Committee scrutiny is scheduled to continue on 7 September. Institutions can follow the bill’s progress without assuming that every suggested sector has already been added.
Official sources
General legal news, not individual legal advice.