Member

This amendment would give the Government the power—they would exercise it, I hope—to require third- party recipients of customer data to publish regular statements on their cyber resilience against some external specified standards. Of course, people will say that the Financial Reporting Council is due to issue a revised code of corporate governance. That will come into effect, but not for a whole year yet. The difficulty is that it is not compulsory and in no real sense are the standards specified.