---

Proposed Directive (Information Systems)

Will the Minister help me on a technical point? I understand that the directive is a repeal-and-replace measure; it repeals a directive to which the UK is party and replaces it with a new version. If the UK had opted out of the directive—I am glad that it has not—would it have still considered itself bound by the original 2005 framework decision? If not, what would the implications have been for UK cyber-security, given that that framework decision provides for police and judicial co-operation on cross-border cyber-threats?