to ten years in prison or a fine or both. Section 37. Making, supplying or obtaining articles for use in computer misuse offences, punishable by up to two years in prison or a fine or both. Section 38. Transitional and saving provision. The amendments to the Computer Misuse Act 1990 by Part 2 of the Serious Crime Act 2015. are Section 41 (new Section 3ZA of the Computer Misuse Act 1990). Unauthorised acts causing, or creating risk of, serious damage – punishable by up to 14 years in prison or a fine or both, possible life imprisonment where human welfare or national security were endangered. Section 42. Obtaining articles for purposes relating to computer misuse – amendments to Section 3A. Section 43. Territorial scope of computer misuse - amendments to Sections 4, 5 and 10 making the primary territorial scope the United Kingdom but can be worldwide especially if the perpetrator (or conspirators) is British and broke local law. Section 44. Savings – covers seizure and enactment amendments to Sections 10 and 16. Section 47. Serious Crime Prevention Orders: meaning of "Serious Offence" - adds Computer Misuse to list of serious crimes in the Serious Crime Act 2007 including being grounds for compulsory winding up of a company. Section 86. Transition and savings provisions – requires Sections 42 and 43 to be brought into force before they can be used. Schedule 1. Amendments to Serious Crimes Act 2007: Scotland – similar changes to Scottish law. Schedule 4. Minor and consequential amendments – changes Computer Misuse Act 1990 and the Armed Forces Act 2006. Application to the NHS In April 2020, Matt Hancock issued directions giving GCHQ temporary powers over National Health Service information systems until the end of 2020 for the purposes of the Act to support and maintain the security of any network and information system which supports, directly or indirectly, the provision of NHS services or public health services intended to address COVID-19. Reform In May 2021, UK Home Secretary Priti Patel announced the formal review of the Computer Misuse Act. She also launched a Call for Information on the Act that seeks views on whether there is activity causing harm in the area covered by the Act that is not adequately covered by the offences, including whether the legislation is fit for use following the technological advances since the CMA was introduced, and any other suggestions on