UK government proposes powers to block risky tech suppliers

The UK government is proposing new powers through amendments to the Cyber Security and Resilience Bill to intervene in the procurement of technology by essential service providers. The proposed “vendor-related directions” clause would allow ministers to block or restrict technology from suppliers with ties to hostile states that pose risks of cyber espionage or sabotage.

These powers would extend beyond telecommunications to include sectors such as energy, water, transport, health, data centers, and digital infrastructure. Under the proposal, a senior minister could order companies to stop purchasing from specific suppliers, restrict the use of certain products, or remove existing equipment.

Notably, the amendments suggest that the government could act without publicly identifying the banned vendor. While a notice of the direction would be published, the specific supplier could remain unnamed for national security or commercial reasons, and the recipient company could be barred from discussing the instruction publicly. Cybersecurity minister Liz Jones stated the measures aim to “act before a threat materialises” to protect critical services like hospitals and energy networks.