delete The Network and Information Systems (Amendment and Transitional Provision etc.) Regulations 2020
The Network and Information Systems (Amendment and Transitional Provision etc.) Regulations 2020 amend the 2018 NIS Regulations, which implemented the EU NIS Directive. The regulations establish a cybersecurity framework for Operators of Essential Services (OES) in sectors including energy, transport, health, water, and digital infrastructure. Key changes include: new information-sharing powers between NIS enforcement authorities and law enforcement; requirements for non-UK headquartered OES to nominate UK representatives; enhanced inspection and enforcement powers; revised penalty procedures with notice-and-comment requirements; and coordination with existing communications sector regulations under sections 105A-105C of the Communications Act 2003.
This regulation is EU-derived (NIS Directive 2016/1148) retained post-Brexit without democratic review—the exact bureaucratic burden the brief identifies as requiring removal. The compliance costs for essential service operators in energy, transport, health, and water sectors are substantial and ultimately borne by consumers. The extensive inspection powers, information notice requirements, and enforcement mechanisms create significant administrative burden that distorts business decisions and may deter investment in critical infrastructure. While cybersecurity is important, this prescriptive command-and-control approach can be achieved through principles-based guidance and existing sector-specific regulation, reducing the regulatory overhead while maintaining security outcomes.