UK Government Seeks Secret Powers to Block Risky Tech Suppliers in Critical Sectors

Proposed New Powers for Supplier Bans

The British government has introduced amendments to the Cyber Security and Resilience Bill that would grant it new authority to block technology vendors. These powers would enable the government to prohibit suppliers on national security grounds from providing services to companies operating in the UK's critical sectors. A key aspect of these proposals is the ability to implement such bans secretly, without publicly identifying the supplier or allowing the affected company to discuss the instruction.

Expanded Scope and Reduced Transparency

These proposed powers adapt existing legislation previously used to restrict Huawei equipment in 5G networks, but with fewer transparency safeguards. Unlike the telecoms law, ministers would not be required to publicly designate a vendor as a security risk, nor would the vendor necessarily receive a copy of the order. The scope of these powers is also significantly broader, encompassing managed service providers, data centers, digital infrastructure, and essential sectors such as energy, water, transport, and health.

Ministerial Authority and Secrecy Provisions

Under the new provisions, a senior minister could direct companies in critical sectors to cease purchasing from a specific supplier, restrict the use of their products, or modify/remove existing equipment. While a notice of direction would be published, only the recipient company would be named, not the vendor. Details could be withheld for national security or commercial reasons, and recipients could be barred from public discussion. Consulted parties could also be prevented from revealing the consultation.

Rationale for Proactive Intervention

Cybersecurity minister Liz Lloyd stated that these new powers would allow the government to "act before a threat materialises, not just after the damage is done." The government aims to integrate national security considerations into supplier choices for essential services. While the draft bill allows for public disclosure of directions when deemed in the national interest, security officials have previously advocated for greater transparency in similar cases, citing concerns about the sustainability and justification of secret powers.