UK Government Exempting Itself From Cyber Law Inspires Little Confidence
Key topics
The UK government's decision to exempt itself from a new cyber law has sparked a lively debate about the country's constitutional monarchy and the true extent of parliamentary power. While some commenters, like firefax, joked that the UK's monarch can "just kind of... do whatever he wants," others, such as exsomet and alistairSH, corrected this interpretation, explaining that the UK is a constitutional monarchy with a complex, centuries-old constitution. As the discussion unfolded, it became clear that the UK's parliamentary power is, in theory, absolute, but in practice, is tempered by tradition, precedent, and the occasional constitutional crisis, like the 2019 prorogation controversy highlighted by afandian. The thread reveals a nuanced understanding of the UK's governance structure, with commenters weighing in on the subtleties of power and accountability.
Snapshot generated from the HN discussion
Discussion Activity
Active discussionFirst comment
57m
Peak period
15
0-2h
Avg / period
6.3
Based on 44 loaded comments
Key moments
- 01Story posted
Jan 10, 2026 at 8:51 AM EST
1d ago
Step 01 - 02First comment
Jan 10, 2026 at 9:48 AM EST
57m after posting
Step 02 - 03Peak activity
15 comments in 0-2h
Hottest window of the conversation
Step 03 - 04Latest activity
Jan 11, 2026 at 8:46 AM EST
2h ago
Step 04
Generating AI Summary...
Analyzing up to 500 comments to identify key contributors and discussion patterns
Want the full context?
Jump to the original sources
Read the primary article or dive into the live Hacker News thread when you're ready.
In the case of the UK, some of the rituals (such as the one you’re referring to with the prime minister) are based on longstanding traditions, because humans are weird and we like those sorts of things, but the requirement to do that stems from the constitution, not from the King deciding if he likes the PM or not.
In theory at least. In practice the courts have hinted that there are limits even for the parliament, and if it were to overstep some unwritten rules, it would cause a constitutional crisis.
What rules are those?
And, err, in England: https://en.wikipedia.org/wiki/Execution_of_Charles_I
>there is no "bill of rights"
There very literally is a bill of rights: https://en.wikipedia.org/wiki/Bill_of_Rights_1689
>which is akin to if we handed a bunch of decendants of the mayflower and rich industrialists and priests their own house of Congress.
The House of Lords does need reform, but this is not in any way an accurate picture of it since at least 1999 (https://en.wikipedia.org/wiki/House_of_Lords_Act_1999). When you strip away the historical baggage, the House of Lords is just an appointed second chamber. I'm fully in favor of removing the last vestiges of the hereditary principle in government, but hereditary peers do not have a significant amount of power in the current system.
>And when they "elect" a prime minister
Elections really do happen in the UK and really do determine who is Prime Minister. No need for the scare quotes here.
> so basically, there's this constant ritual of pretending they're a democracy when really it's only like that because the king current feels like it.
I'll resist the temptation to point out which country is more pertinently and accurately described this way in the present situation.
Different person, but while this is true, it's also true that the Prime Minister is not elected: they [ordinarily] emerge as being the leader of whichever party commands a majority in Parliament. It's how we've had so much Prime-Minister turnover since the Brexit referendum: those didn't happen because the electorate "determined" it.
In theory he was asking permission from the Queen. But in practice, everyone knew that the Queen was powerless to reject his request. Even for something as plainly anti-democratic.
The Supreme Court eventually ruled that the prorogation was not lawful.
Lots of people were hoping that the Queen would stand up for the people. It was a complicated moment when she didn't!
https://en.wikipedia.org/wiki/2019_United_Kingdom_prorogatio...
> The proposed Dissolution and Calling of Parliament Bill emphasised the non-justiciability of the revived prerogative powers, prevented courts from making certain rulings in relation to a Government's power to dissolve Parliament. It received royal assent over two years later, on 24 March 2022.
As some have said before, it effectively means in future the Supreme Court can't undo or interfere with prorogation like what Boris Johnson did in 2019. The Labour party have said they won't cancel this law, so Kier Starmer can now do same as Boris and courts can't stop him.
Are you talking about Bush, or Trump? Because the logic goes both ways -- when Blair bent over over when Bush wanted to go gallivanting into Iraq, we were set upon this path, one that started before I was old enough to vote... so maybe don't show up at the finish line to tut after literal decades of inaction?
Fun fact: The UK has the Magna Carta, the original bill of rights signed in 1215. Did you know that's 561 years before the US declared its independence from the UK? To put it another way, 561 years is more than double the length of time the US has been a country.
Second fun fact: UK Prime Ministers aren't elected. Their party is elected, and tends to command a majority in the House of Commons, but if they don't, they get to trade horses with other parties to see which coalition can command a majority, and thus win a confidence vote. The party selects a leader through their own internal processes. Doesn't even have to be an elected MP. Then they tell the king, who rubberstamps the decision. They can do this at any time, not just after an election. Provided the leader can command a majority in Parliament, they get to continue. If enough of your own party dislikes you as leader, they will vote against a confidence motion and drop themselves and you out of power; your job is to not let it get to that.
The House of Lords is a secondary chamber, which scrutinises what the House of Commons passes and suggests rewordings and rewrites. (There's a whole other layer of scrutiny at the committee stage, for costing, etc.) They can send back bad bills, but can't send them back indefinitely, if the government had that in its election manifesto, so appointed or not, they can't defy the "will of the people".
The king doesn't rock the boat, not because he fears for his life, but because he'd trigger a constitutional crisis which will inevitably resolve in the form of a republican UK.
As to the House of Lords, around 11% of its members are hereditary peers. A bill [1] is in progress to reduce that to zero:
> The bill would remove membership from 89 hereditary peers who currently sit in the House. Their membership would end at the conclusion of the current parliamentary session.
So, in summary, the UK is a democracy with its own set of historical quirks, much like many other democracies (Electoral College, anyone?).
[1]: https://lordslibrary.parliament.uk/hereditary-peers-in-the-h...
Then, of course, one of the scandals: the government got caught exploiting children they had placed (sometimes for fake reasons) for prostitution. Thousands. And by "got caught" I don't mean that the police noticed it, like normally happens when a hotel or nightclub does it. I mean that one of the victims exposed it (the government and the police refused to act for over 10 years, and so after 5 years, one of the exploited girls to age out of youth services and got a job, at which point she used her position in the press to expose the practice. It would take 4 more years from that point on for the government to act). Who was responsible? Well, a bunch of the government workers involved in the scheme were Pakistani on a visa (which was illegal: youth services was not allowed to hire these people, of course, this was barely reported and absolutely no consequences for that). Obviously these men were considered guilty, as in personally criminally liable. That plenty of English city hall workers were involved is quietly swept under the rug. That the police refused to help the children that complained, and in fact helped prostitute them and got payments for that is swept under the rug. That some of the "customers" were government workers and police officers especially was swept under the rug.
And, of course, when private persons or organizations (like hotels) are caught doing something like this enormous damages are awarded to the victims. No damages were awarded to any of the victims in this huge scandal (this has nothing to do with that even 1000 pounds times 1000s of victims would have cost the government millions. In private cases normally the damages are high 5 to low 6 figures, in pounds). So the government, as in the people that form the government, used their special privileges in law to prostitute minors, doing what the government considers billions of pounds in damages total ... and suddenly nothing was owed. Suddenly nobody was liable, and normal rules for responsibility didn't apply. And so on and so forth.
Oh and it was not the first, nor the last time it happened.
The corruption in South Yorkshire Police and Rotherham council (neither of which are part of HMG) in the 1990s and early 2000s also has absolutely nothing to do with UK Government cyber security policy in 2026.
It's puzzling to hear those steps described as "authoritarian." What makes you feel that way?
My money’s on Twitter being the source.
Starmer is indeed very unpopular, but “least popular ever” is not a claim which even has an agreed-upon measure.
Remember Liz Truss lasted lasted less time in office than it took for a lettuce to rot.
Thatcher was controversial but had ardent supporters. Where are Starmer's supporters? There aren't many even within the Labour Party.
No idea whether someone like Pitt the Younger or Canning back over a century ago were less popular. Really the onus should be on people to disprove this. I have not encountered a single live Starmer supporter in the wild but anyway...
https://www.independent.co.uk/bulletin/news/starmer-labour-c...
"New polling reveals Sir Keir is the least popular prime minister on record, with a net satisfaction rating of -66, lower than previous lows for Rishi Sunak and John Major."
https://www.telegraph.co.uk/politics/2025/09/27/starmer-leas... "Starmer is least popular PM on record, poll finds Only 13 per cent of voters are satisfied with Prime Minister, the fewest of any leader since 1970s."
I suppose you will complain about the Telegraph, but it isn't a tabloid.
https://www.newstatesman.com/politics/uk-politics/2025/12/wh...
"Keir Starmer is the least popular prime minister on record, less than 18 months after being elected. In this sense, he is making history. Few, if any, mainstream political commentators anticipated this situation before the 2024 election. Of course, many on the radical left predicted it several years ago, but who listens to us?"
Results are a bit meh so far with Labour but at least they're not Trussesque dangerous. And positive achievements rarely get a mention in our press. Can't think why.
He got in because people were sick of the last lot. Jeremy Corbyn got more votes overall as well.
But at the same time, they don't want to admit it and are rewriting these standards in a very specific way so that only British engineering firms and consultants can draft regulatory documents or ensure compliance.
It ensures a monopoly for these engineering firms and consultants.
A lot of it is about designating critical suppliers + providers and their security obligations.
Central government would typically be a customer, that uses other suppliers and providers to achieve its goals, not a supplier or a provider itself.
So in that sense it doesn't seem so strange to see it omitted, or at least for first set of legislation etc.? Get the first party suppliers in shape first, then legislate the net result of government function using those suppliers etc.
This is a wrong assumption, it's not that they aren't customers as they'll deal with hundreds of vendors/partners and will benefit from these changes regardless but national cyber & supporting IT agencies (including the UK) are often providers themselves to both other government agencies and private organizations in the country.
This can be anything from running their SOC functions to specialized consulting services to intelligence sharing so the bill is definitely relevant and the exclusion of the govt. doesn't seem to serve a purpose other than saving the budget to implement/maintain their own rules.
The UK is a crumbling museum compared to every leading G7 economy that has growth.
The right way to do this is to draft a framework law and a few decrees along the lines of “administrations XXX and YYY will apply NIS2 with the following exceptions and adaptations ....”
This avoids creating overly broad exemptions, ensuring that there is a reference framework, and preventing each administration from developing its own system.
This is very common in the arms and nuclear sectors, where many civil norms and standards clearly state “not applicable to nuclear” and the nuclear standard states “apply civil standard XXX, with the following specific provisions, the competent authority is the ONR.”
Declaring an overly broad exemption from the outset is not the right way to go about it.
src: worked construction in state data centers
¿What asbestos, qué?
This is a real world practical way to help security professionals and technology workers to report cyber risks in ways that are safer, sooner, and with better collaboration.
When I read about cyber security bills, I believe it's very helpful to phase in specific improvements that can help the UK make progress. For me this is professional because my work involves UK software engineering for medical information.
My notes on coordinated vulnerability disclosure: https://github.com/joelparkerhenderson/coordinated-vulnerabi...
11 more comments available on Hacker News