The UK government has rejected House of Lords amendments that would have brought AI vendors within the scope of the Cyber Security and Resilience Bill, with cybersecurity minister Baroness Lloyd arguing the bill is designed to be technology-agnostic and impose stricter requirements on key organisations rather than individual tech providers. Instead, the government is relying on voluntary measures such as the AI Security Institute and the AI Cyber Security Code of Practice to address AI-related security risks. Lords pushed back, questioning whether voluntary, self-regulated guidelines are sufficient given past failures in online safety and privacy, and citing concerns about rogue AI behaviour and the growing threat of AI-orchestrated cyberattacks.
