Budget documents published on Wednesday carried the UK government's first formal pledge to examine where liability for cyber breaches should sit, committing to consult next year on how to "tackle insecure technology at source". The announcement follows last year's Jaguar Land Rover hack, estimated to have cost the British economy £1.9 billion ($2.5 billion), and builds on the Law Commission of England and Wales' ongoing review of product-liability law. Open questions include which department leads the consultation, whether a civil-liability regime or statutory vendor obligations are envisaged, and how liability for open-source components would be treated. The move is a marker for the global vendor-responsibility debate: if the UK legislates, product-security expectations for enterprise software — including Australian deployments of the same suites — would shift toward duty-of-care models.

• Source article