United Kingdom: UK government launches eight-week consultation on data centers and the cloud

The Department for Digital, Culture, Media & Sport recently announced the commencement of an eight-week consultation, ​​part of the National Data Strategy, to explore strengthening the security and resiliency of the UK's data centers and cloud services. Specifically, it is calling for views and inviting contributions from those within the sector, to understand better the risks data storage and processing service face, including data center operators, cloud platform providers, data center customers, security and equipment suppliers and cyber security experts, 

The department's press release outlines that it is looking to learn more about the tools currently used in "other regulated sectors," e.g.: having an incident management plan in place, notifying a regulator when an incident impacts their services, a requirement for a person board or committee to be held accountable for security and resilience.

Running until July 24th, the DCMS will use the consultation to decide whether any additional government support or management is needed to "minimise the risks that data storage and processing infrastructure face."

According to the department, new protections would "build on existing safeguards for data infrastructure," including Networks and Information Systems (NIS) Regulations 2018, which covers cloud computing services, and the National Cyber Security Centre and Centre for the Protection of National Infrastructure also offer regular guidance for data centers and online assets.

Speaking about the goal of the consultation, data minister Julia Lopez, explained: "Data centers and cloud platforms are a core part of our national infrastructure. They power the technology which makes our everyday lives easier and delivers essential services like banking and energy. We legislated to better protect our telecoms networks and the internet-connected devices in our homes from cyber attacks and we are now looking at new ways to boost the security of our data infrastructure to prevent sensitive data ending up in the wrong hands."

Julian David, CEO, techUK said: The UK's data infrastructure – through cloud platforms and data centres – underpins the digital technologies and services upon which all citizens and organisations increasingly rely." Adding: "The technology sector already plays an important role in strengthening resilience across the UK economy and techUK welcomes the opportunity to engage with Government on these significant issues. One particular focus will be how these proposals will align with wider efforts to strengthen resilience across sectors as well as the wider ambitions outlined in the UK's National Cyber Strategy - which is a continuation of UK Government's longstanding leadership in cyber security."