Member

I turn to the questions asked by the noble Lords, Lord Clement-Jones and Lord Birt, about bringing providers of software and digital platforms within the definition of a “relevant digital service provider” and providing relevant security duties for those who create, distribute, manage or support software. Some software and digital platforms are captured by the existing RDSP framework where they meet the definition of “cloud computing”. This would include common models such as platform as a service, infrastructure as a service, and, where the service is scalable and elastic, software as a service. Organisations providing the ongoing management or support of software on behalf of others can also be captured under the relevant managed service provider measure where they meet that definition.