UK Prime Minister Reappoints Cybersecurity Minister Despite Department Abolition

Ministerial Reappointment Amid Government Overhaul

UK Prime Minister Andy Burnham has reappointed Liz Lloyd as the cybersecurity minister. This decision comes amidst a significant restructuring of ministerial positions, where Burnham abolished the department previously responsible for cybersecurity policy. Lloyd will now hold a junior post within the Department for Digital, Culture, Media and Sport (DCMS) and a second role at the renamed Department for Business, Innovation, Science and Trade (DBIST), with Whitehall sources indicating she will retain the cyber brief.

Continuity for Key Legislation

Lloyd's reappointment ensures continuity for the Cyber Security and Resilience Bill, which she has been steering through the House of Lords. The bill, which cleared its second reading with cross-party support, is set for line-by-line scrutiny in September. Replacing the minister at this stage would have risked delays to the legislation, which the government aims to pass this year.

Expanded Cyber Regulations

The Cyber Security and Resilience Bill updates UK cyber rules from 2018, extending regulations to a broader range of organizations. Notably, it brings data centers and managed service providers into scope and establishes incident reporting deadlines for operators of essential services, including energy, water, and healthcare. The bill also grants ministers powers to amend rules and issue directions to companies on national security grounds.

Political Context of the Decision

Lloyd's reappointment is an unusual move within Burnham's new administration, which has largely removed allies of his predecessor, Keir Starmer. Lloyd, who was close to Starmer and served as his director of policy delivery, holds no elected seat but sits in the House of Lords. Her retention signals a prioritization of policy continuity in cybersecurity despite broader political changes.