Last week, the UK government outlined its legislative programme for 2026.
This article covers the key bills affecting tech and digital businesses. While there is no single technology or AI bill included in the programme, there are a number of measures and targeted reforms affecting AI, cyber security, digital infrastructure and competition law.
Under the Competition Reform bill, the government aims to promote competition and ensure markets work well for consumers and businesses. The bill aims to deliver reforms to make the CMA’s investigations faster, more predictable and reduce unnecessary burdens on businesses and ensure consumers benefit. The bill will aim to improve decision-making at the CMA, make market reviews quicker and more focused so that they take no longer than 18 to 24 months compared to currently, where they can take over three years.
The Digital Access to Services Bill will establish the legal basis for the government introducing Digital ID, which can be used as a secure form of proof of identity for use across services and the wider economy without requiring physical documents. The government aims to start rolling out Digital ID to interested parties by 2029.
While there is no specific AI bill, AI still appears within the Regulating for Growth bill which sets out plans for a regulatory sandbox, allowing businesses to test their products in a real-world environment under controlled conditions. The briefing notes outline how this can allow for responsible testing of AI products and services across multiple sectors. The NHS Modernisation Bill also mentions AI, highlighting how AI has the capability to improve healthcare capacity, including outperforming radiologists by 78-90%.
In the past, SCL has written about possible reforms to the Computer Misuse Act 1990. Among other things, the National Security Bill will update the Act, giving law enforcement bodies more modern powers and capabilities for the digital age. This will include the creation of a Cyber Crime Risk Order to impose robust controls on the behaviour of cyber criminals, which will accompany new powers to search individuals believed to be concealing evidence on behalf of suspects. It also aims to unlock the role of cybersecurity professionals by better enabling them to secure computer systems.
The Government has carried over the Cyber Security and Resilience Bill from the previous parliamentary session 2024-26. This bill will expand the remit of existing regulations to protect more core services that people and businesses rely on. Many IT companies which deliver key services like IT helpdesks and cyber security to private and public sector organisations will be regulated under the Bill. These companies will be required to meet new security duties due to their possession of trusted access across government, national
infrastructure and business networks.
A Representation of the People Bill is also planned. As well as other measures, it aims to improve transparency for digital imprint rules (parties must disclose who is responsible for promoting online content, particularly in political advertising) and create clearer and more proportionate enforcements. This also means that more people will be required to include digital imprints on online campaigning material.
