BREACH WATCH BRIEF High 📰 Threat intel

UK Proposes Emergency Powers Over Subsea Cable Operators; Analysts Urge US to Modernize Cable Law

The UK has introduced emergency powers and harsher sabotage penalties for undersea cable operators, prompting analysts to call on the US to update its 1888 Submarine Cable Act. The move underscores the need for robust third‑party governance and incident‑response controls to protect critical communications infrastructure.

SeverityHigh
Type📰 Threat intel
ConfidenceHigh
ReportedOct 24, 2026
Telecommunications Telecom carriers and undersea‑cable operators Enterprises that depend on international data transport (cloud, finance, health) Unknown

What happened

The United Kingdom published a white paper granting ministers direct authority over submarine cable operators during national‑security incidents and creating new sabotage offenses with up to 14 years imprisonment. Analysts are urging the United States to adopt comparable legislation, noting that the current US law limits sabotage penalties to two years.

Why it matters for trust and compliance

  • This policy push tests the supply‑chain governance control objective—continuous oversight of critical‑infrastructure vendors and documented crisis‑response procedures—an area that continuous control‑assurance programs must evidence across frameworks.
  • Ensures your third‑party risk program can capture emergency‑authority directives as control evidence.
  • Provides a defensible audit trail for incident‑response actions involving critical‑infrastructure suppliers.

Who is affected

Telecom carriers and undersea‑cable operators Enterprises that depend on international data transport (cloud, finance, health)

Recommended actions

  1. Audit existing cable‑provider contracts for emergency‑directive and sabotage‑reporting clauses.
  2. Integrate supplier‑crisis authority controls into your continuous monitoring platform.
  3. Update incident‑response playbooks to include a ‘critical‑infrastructure supplier’ scenario and test activation procedures.

Regulations library

Every US state privacy law, on one map

24 states have a comprehensive privacy law in the library, alongside the EU, UK, US federal and global laws: 102 in all, each explained in plain words with its sources. Select a state to see what applies there.

  • In force
  • Coming into force
  • Sector laws
AK ME VT NH WA ID MT ND MN IL WI MI NY RI MA OR NV WY SD IA IN OH PA NJ CT CA UT CO NE MO KY WV VA MD DE AZ NM KS AR TN NC SC DC OK LA MS AL GA HI TX FL

Get the Breach Digest

The incidents that matter for your vendors and your data, analysed for practitioners, in one email.