The Department for Science, Innovation and Technology (DSIT) has published its response to a call for evidence on enterprise connected device security. The call for evidence sought input on proposals to improve the cyber security of enterprise connected devices used in business settings, which are often critical to operations but may lack adequate security protections.

The Department for Science, Innovation and Technology (DSIT) has published a speech delivered by Digital Minister, Liz Lloyd at the New Statesman Security and Resilience Conference on 5 May 2026, in which she described cyber security as “foundational” to national security, economic resilience and business growth amid an increasingly unstable global security environment. The Minister warned that cyber threats are becoming more frequent, disruptive and costly: 43% of businesses experienced a cyber breach or attack in the last 12 months, rising to 69% for large firms, while 29% faced attacks at least weekly. She stressed that cyber resilience is no longer optional for organisations seeking to operate, innovate and survive in a hostile digital environment.

The Department for Science, Innovation and Technology (DSIT) has conducted an exploratory study, based on literature review, stakeholder consultations and legal analysis, to examine how data access limitations affect the performance of age assurance tools and to identify potential solutions in support of the Online Safety Act 2023. It found that restricted access to high-quality, representative training and testing data is a central barrier, particularly for facial age estimation, the most widely used method. Existing datasets lack sufficient coverage of children and diverse demographic groups, contributing to bias and reduced accuracy, especially when assessing users near legal age thresholds. Although performance has improved, tools still exhibit limitations due to both data gaps and inherent technical constraints, and there is limited evidence on the extent to which these issues affect real-world outcomes across sectors.

The Department for Science, Innovation & Technology (DSIT) has published terms of reference for a Copyright and AI Technical Working Group. The working group aims to inform copyright and AI policy development, with obligations under the Data (Use and Access) Act 2025 requiring a report before Parliament by 18 March 2026. Four technical workshops covering control and technical standards, information and transparency, licensing and creator protections will run between November-December 2025, with each workshop including approximately 15 experts selected through an open application process.

The Department for Science, Innovation and Technology (DSIT) has published an impact assessment which updates the Online Safety Act 2023 (OSA 2023) final stage impact assessment published in 2022, alongside a research and analysis report which highlights the impact of the OSA 2023. The impact assessment approximated that the OSA 2023 must prevent just 1.3% of online harms to balance the cost of the regulatory regime to business and government, which is lower than the 2.1% estimate the 2022 impact assessment made.

The Department for Science, Innovation and Technology (DSIT) has published version 1.1 of the Telecommunications Security Code of Practice 2026, following parliamentary scrutiny of the draft laid before Parliament on 3 June 2026. The revised Code provides updated guidance for large and medium-sized public telecommunications providers on complying with the Telecommunications (Security) Act 2021 and the Electronic Communications (Security Measures) Regulations 2022, SI 2022/933. It updates the 2022 Code by clarifying existing guidance, addressing emerging cyber threats and reflecting technological developments, including the secure use of public cloud services, automation and application programming interfaces. It also provides clearer guidance on privileged access workstations, security testing, encryption and data protection, while reinforcing the expectation that providers adopt a proportionate, risk-based approach to security.

The Department for Science, Innovation and Technology (DSIT) has published its Cyber Security Breaches Survey for 2025/2026, which was carried out between August and December 2025. The results show that 43% of businesses and 28% of charities in the UK reported cyber security breaches or attacks in the last 12 months, with phishing attacks remaining the most prevalent type of breach or attack. Results for public sector schools, colleges and universities were covered in a separate education annex.

The Department for Science, Innovation and Technology (DSIT) has announced the renaming of the 'AI Safety Institute' to the 'AI Security Institute', signalling a shift in focus towards addressing serious AI risks with security implications. The Institute will now concentrate on threats such as the use of AI in developing chemical and biological weapons, cyber-attacks, and enabling crimes like fraud and child sexual abuse. DSIT has moved away from addressing bias and freedom of speech concerns, instead prioritising the development of scientific evidence to inform policymakers on keeping the country safe as AI evolves. A new criminal misuse team will be launched to work with the Home Office on researching crime and security issues, including the use of AI in creating child sexual abuse images. The Institute will collaborate with various government bodies and the national security community to tackle these challenges.

The Department for Science, Innovation and Technology (DSIT) has published research findings on the implementation of International Data Transfer Agreements (IDTAs), introduced in March 2022 to replace EU Standard Contractual Clauses (SCCs). The study, conducted by Ipsos between February-March 2025, found that 15% of UK businesses transferring data internationally used IDTAs in 2024, while most larger businesses preferred EU SCCs with the UK Addendum. The research revealed that while larger businesses found IDTAs simpler than SCCs, they opted for SCCs with the Addendum when handling both UK and EU data transfers. Small businesses demonstrated limited awareness of international transfer tools, often relying on larger clients' compliance mechanisms.

The Department for Science, Innovation and Technology (DSIT) has tabled an amendment to the Crime and Policing Bill on 12 November 2025 establishing a legal framework for testing AI models against child sexual abuse material generation. The amendment grants the Technology Secretary and Home Secretary powers to designate AI developers and child protection organisations as authorised testers, enabling them to scrutinise AI models for safeguards against generating child sexual abuse material, extreme pornography, and non-consensual intimate images. The legislation addresses current criminal liability restrictions that prevent developers from conducting safety testing on AI models, creating legal protections for researchers testing models for child safety risks.

The Department for Science, Innovation and Technology (DSIT) has published details of the forthcoming Cyber Security and Resilience Bill, to be introduced to Parliament in 2025. The legislation will require 1,000 service providers, including data centres, Managed Service Providers and critical suppliers, to meet enhanced cyber security requirements. The Bill grants new powers to regulators for improved oversight and to the Technology Secretary to update regulatory frameworks in response to emerging threats. The National Cyber Security Centre (NCSC) reported managing 430 cyber incidents in the year to September 2024, with 89 classified as nationally significant. The legislation aims to address cyber threats that cost the UK economy £22bn annually between 2015 and 2019.

Department for Science, Innovation and Technology, Prime Minister's Office, 10 Downing Street, The Rt Hon Peter Kyle MP, The Rt Hon Sir Keir Starmer KCB KC MP and The Rt Hon Rachel Reeves MP have announced a new AI Opportunities Action Plan. The plan includes 50 recommendations aimed at fostering AI growth in the UK. Key initiatives include a significant increase in public compute capacity and the establishment of a National Data Library. The government has secured £14bn in private sector investment and commitments for 13,250 new jobs in the AI sector. Additionally, a new digital centre within DSIT will be created to drive AI adoption across public services, while a dedicated team will work to maintain the UK's position at the forefront of emerging technologies. The plan consists of three main pillars, one of which involves the creation of new AI Growth Zones, aimed at expediting the planning approval process for the rapid construction of data centres, improving access to the energy grid, and attracting global investment. The first Growth Zone will be established in Culham, Oxfordshire.