The Government explains that computer misuse, i.e., malicious or unauthorised access to computer systems, is an offence under the Computer Misuse Act 1990 and is one of the most prolific crimes facing UK citizens.

The Office for National Statistics (ONS) estimated that there were 1.6 million computer misuse offences in the year ending March 2022, which represents an 89% increase compared to the year ending March 2020 and is driven by a 158% increase in unauthorised access to personal information (including hacking) offences. These offences are often perpetrated to commit further offences such as fraud, as well as cyber stalking and other sexually motivated online crimes.

In line with the National Cyber Strategy, the Government aims to reduce cyber-crime offences through measures, both existing and new, which reduce the security burden on citizens and place more responsibility on organisations which manage user accounts and process personal data, to protect those personal accounts and data.

The Government says that while it and industry have been taking steps to protect citizens online, computer misuse remains a significant threat to citizens. To achieve large-volume reductions in the level of unauthorised access to online accounts and personal data, which so often facilitates other offences and leads to harm, the Government believes it needs to consider new proposals, recognising that any new measures should complement existing obligations. The working title for these potential measures is the “Cyber Duty to Protect”. To this end, the Government is seeking respondents’ views on the following areas:

• the risks associated with unauthorised access to UK citizens’ online accounts and personal data;
• actions that are currently taken to address the problem; and
• actions that should be taken to address the problem and where responsibilities for taking that action should lie.

The call for information closes on 27 October 2022. To access the call for information, click here.