Parliamentary Search

Written question asked by Matt Vickers (Conservative) on Tuesday, 16 June 2026, in the House of Commons. It was due for an answer on Thursday, 18 June 2026. It was answered by Blair McDougall (Labour) on Monday, 22 June 2026 on behalf of the Department for Business and Trade.

Companies: Directors

Question

To ask the Secretary of State for Business and Trade, what assessment he has made of the risk of cyber-security breaches affecting personal data collected through the Companies House identity verification regime.

Answer

Companies House has assessed the cyber security risks associated with the identity verification process as part of its wider risk management framework. Any consequences to the agency's exposure to cyber threats and data risks resulting from the introduction of identity verification are actively managed through a robust risk management framework and appropriate security controls including annual assessments as part of the Cabinet Office Departmental Security Health Check (DSHC).

Companies House's digital infrastructure is continually monitored and assessed via a dedicated Security Operations Centre, supplemented by penetration testing of services and infrastructure, suitable supplier assurance, and certification to ISO 27001.

Secondary information

Type
Written question
Reference
10252
Session
2026-27
Subjects
Companies Directors Cybercrime Proof of identity Companies House
Link
View this Written question on www.parliament.uk