An amendment would let ministers make rules on SI-agent deployment and incident reporting at essential-service operators and digital providers. It would not impose duties itself; consultation and parliamentary approval of secondary legislation would still be required.
The UK government has introduced an amendment that would let ministers regulate how essential-service operators and digital providers deploy superintelligence (SI) agents and report incidents involving them. The amendment was introduced during the Cyber Security and Resilience Bill’s third reading in the House of Lords this week.
On 15 October, officials were still considering whether to introduce SI-related amendments to the bill. The proposed clause would enable future rules rather than create duties immediately.
In an explanatory note, ministers outlined plans for safeguards against loss of control, notification of affected organizations, preservation of evidence and government-led reviews of incidents, The Register said. The proposed rules would address incidents when safeguards fail.
Gas and electricity suppliers, managed service providers and cloud providers deploying SI agents for customers could be affected. Developers of the underlying models would not automatically be covered simply because they build the technology.
Stuart Davey, a partner at law firm Pinsent Masons, said future investigatory powers could include appointing inspectors, entering and searching premises, and seizing and retaining documents after an SI-agent compromise or issue.
The measures would still require consultation and parliamentary approval through secondary legislation: rules made under powers granted by an act of Parliament.
The Commission says TikTok failed to take adequate measures to mitigate risks from repeated recommendations. Its owner ByteDance could face a fine of up to 6% of global annual turnover if the issue is not resolved.
2 min
Microsoft says attackers stole Azure Key Vault secrets in a handful of cases and accessed SharePoint, OneDrive and mailbox items through compromised applications.
2 min
The data-center company moved its operational target from year-end to January 2027, with a possible extension through the end of February, after design changes requested by Microsoft and supplier timing affected the schedule.
2 min
