The Department for Science, Innovation and Technology (DSIT) has launched a consultation seeking views on proposals to update the Telecommunications Security Code of Practice 2022, following advice from the National Cyber Security Centre (NCSC), Ofcom and industry feedback. The proposed updates aim to support providers of public electronic communications networks and services in protecting UK telecoms networks and services against evolving threats and emerging technologies. Key changes include drafting amendments for clarity in Sections 1–3, the addition of new technical measures in Section 3, and the addition of associated guidance in Section 2. The proposals aim to reflect evolving technology such as embedded Subscriber Identity Modules (eSIMs), automation tools and Application Programming Interfaces (APIs), address emerging security threats including hostile-state-linked cyber-attacks and provide further clarity on measures relating to privileged access workstations, vendor security assessments and network resilience. The consultation closes on 22 October 2025.

The Department for Science, Innovation and Technology (DSIT) has designated the Statement of Strategic Priorities (SSP) for telecommunications, the management of radio spectrum and postal services under section 2A of the Communications Act 2003, with effect from 27 April 2026. The statement sets out the government’s policy priorities, to which Ofcom must have regard when exercising its regulatory functions.

The Department for Science, Innovation and Technology (DSIT) has published guidance detailing the implementation timeline for the Data (Use and Access) Act 2025. The Act, which received Royal Assent on 19 June 2025, will be implemented in four stages. The first commencement regulations under the Act, the Data (Use and Access) Act 2025 (Commencement No.1) Regulations 2025, bring into force specified provisions on 20 August 2025.

The Department for Science, Innovation and Technology (DSIT) has introduced the Cyber Security and Resilience Bill to Parliament, which aims to strengthen the UK’s cyber defences against cybercriminals and state-backed actors. The Bill focuses on safeguarding essential public services such as the NHS, transport, energy and drinking water providers. It seeks to bring medium and large managed service providers—those offering IT management, help desk support and cyber security services to public and private sector organisations like the NHS—under regulation.

The Department for Science, Innovation and Technology (DSIT) has published initial voluntary guidance to support regulators’ implementation of the UK’s pro-innovation artificial intelligence (AI) regulatory principles. The aim of the guidance is to help regulators interpret and apply the five principles set out in the AI regulation white paper.

The Department for Science, Innovation and Technology (DSIT) has invited organisations to adopt a voluntary Cyber Resilience Pledge aimed at strengthening resilience to cyber attacks. The pledge asks organisations to commit to three actions: making cyber security a Board-level responsibility by implementing the Cyber Governance Code of Practice and ensuring board members complete NCSC Cyber Governance Training, signing up to the Early Warning service within one month of taking the pledge, and requiring Cyber Essentials across their supply chains through registration and audit measures. Organisations are also expected to promote these actions within their supply chains and publish their signed pledge declaration on their websites. DSIT advises that, where an organisation is unable to implement any of the pledge actions, it must provide DSIT with an explanation and relevant feedback outlining the reasons.

The Department for Science, Innovation and Technology (DSIT), acting as agent for the Ministry of Housing, Communities and Local Government (MHCLG), has issued a tender notice under the Procurement Act 2023 (PA 2023) seeking suppliers to develop an AI-augmented planning decision tool. The tool aims to reduce average planning application processing times from eight weeks to four, initially focusing on householder developments, with plans to extend the tool to other application types, including advertisements, changes of use, listed building consents and relevant demolitions in conservation areas. The procurement will follow a competitive flexible procedure under PA 2023, s 20, with a maximum of five suppliers to be invited to tender. The deadline for requests to participate is 21 November 2025. The contract award date is estimated as 6 January 2026. The estimated contract value is £10m (including VAT), and the contract is scheduled to run from 16 January 2026 to 16 May 2028, with a possible extension to May 2029.

The Department for Science, Innovation and Technology (DSIT) has launched GDS Local, a new government unit established to modernise and simplify local services across the UK. This initiative aims to make everyday interactions such as managing council tax, applying for school places, and accessing local support faster and more accessible by integrating services through GOV.UK One Login and the GOV.UK App. It will also reform local government technology procurement to promote flexibility and cost efficiency, and support data sharing through the Government Digital and Data Hub while maintaining strong privacy protections. The launch, part of the government’s wider digital transformation strategy, is expected to unlock £45bn in annual public sector productivity gains. Early collaboration with the Liverpool City Region Combined Authority demonstrates how shared innovation can enhance service delivery, and both the Local Government Association and DSIT view the initiative as key to creating seamless, reliable, and inclusive digital services. The programme is complemented by the new Government Digital and Data Hub and an Innovation Hackathon, designed to build public sector digital skills and foster solutions to challenges such as homelessness.

The Department for Science, Innovation and Technology (DSIT) has launched the Regulatory Innovation Office (RIO) to speed up public access to new technologies such as AI and drones by reducing the red tape on bringing these services into the market. The RIO will speed up approvals, support regulators to update regulations, ensure that regulatory bodies are working together, inform the government of regulatory barriers to innovation and set priorities for regulators aligning with the government's ambitions. The RIO will support areas of growing technology including engineering biology, space, AI and digital in healthcare, connected and autonomous technology.

The Department for Science, Innovation and Technology (DSIT) published a new Software Security Code of Practice on 8 May 2025, establishing 14 principles for organisations developing and selling software. Simultaneously, DSIT's AI Cyber Security Code of Practice, originally published in January 2025, has been adopted by the European Telecommunications Standards Institute (ETSI) as Technical Standard 104 223, setting baseline security requirements for AI models and systems globally. The codes form part of the government's wider strategy to position the UK cyber sector for economic growth.

The Department for Science, Innovation and Technology (DSIT) has launched a call for evidence on the proposed AI Growth Lab, a cross-sector regulatory sandbox aimed at accelerating responsible AI innovation across the UK. The Lab would enable time-limited, closely supervised regulatory modifications to facilitate the deployment of AI-enabled products and services currently constrained by outdated legislation. Designed to support both public and private sector innovators, the Lab seeks to generate real-world evidence to inform permanent regulatory reform, while maintaining safeguards around safety, consumer protection, and fundamental rights. The call for evidence closes on 2 January 2026.

The Department for Science, Innovation and Technology (DSIT) has launched a call for evidence to inform the statutory review of the impact and effectiveness of sections 1–13 of the Telecommunications (Security) Act 2021 (T(S)A 2021). The government is seeking views on whether the telecoms security framework is meeting its objectives, including improving cyber security standards, ensuring providers take appropriate and proportionate security measures, protecting networks and services from security risks, and supporting Ofcom’s oversight and enforcement role. The call for evidence closes on 12 October 2026.