BREACH WATCH BRIEF High 🏛️ Advisory

UK Proposes Up to 14‑Year Prison Terms for Undersea Cable Sabotage

The UK government is drafting legislation that would impose up to 14 years imprisonment for deliberate damage to undersea telecom, electricity, and pipeline infrastructure. The move underscores the need for robust physical‑security and supply‑chain controls that can be continuously evidenced for audit readiness.

SeverityHigh
Type🏛️ Advisory
ConfidenceHigh
ReportedOct 23, 2026
Energy & Utilities Telecommunications carriers Energy interconnector owners Pipeline operators Third‑party service providers dependent on subsea links Unknown

What happened

The British government released a white‑paper proposing new criminal offenses with up to 14‑year prison terms and unlimited fines for anyone who deliberately damages undersea telecommunications cables, electricity interconnectors, or pipelines. The draft would replace the 1885 Submarine Telegraph Act and introduce statutory security‑and‑resilience requirements for subsea operators.

Why it matters for trust and compliance

  • This proposal tests the control objective of physical security and supply‑chain risk management, demanding auditable evidence that organizations can produce through continuous control‑mapping processes.
  • Map the new statutory security requirements to your existing control framework to close evidence gaps.
  • Implement continuous monitoring of physical‑security logs and sensor data to provide defensible audit evidence.

Who is affected

Telecommunications carriers Energy interconnector owners Pipeline operators Third‑party service providers dependent on subsea links

Recommended actions

  1. Conduct a gap analysis between the proposed legal requirements and your current controls.
  2. Begin collecting continuous evidence (e.g., sensor logs, incident‑response records) that aligns with the identified gaps.

Regulations library

Every US state privacy law, on one map

24 states have a comprehensive privacy law in the library, alongside the EU, UK, US federal and global laws: 102 in all, each explained in plain words with its sources. Select a state to see what applies there.

  • In force
  • Coming into force
  • Sector laws
AK ME VT NH WA ID MT ND MN IL WI MI NY RI MA OR NV WY SD IA IN OH PA NJ CT CA UT CO NE MO KY WV VA MD DE AZ NM KS AR TN NC SC DC OK LA MS AL GA HI TX FL

Get the Breach Digest

The incidents that matter for your vendors and your data, analysed for practitioners, in one email.