UK companies which do not take adequate measures to prevent cyber attacks , leaving infrastructure ##s such as transport or health exposed , could face financial penalties in a 2018 proposal from the Department for Digital , Culture , Media , and Sport . Although dubbed a last resort , fines of up to £ ##500 m ( $ 22 m ) or 4 % of global turnover could be imposed . The consultation will also focus on system failures, with requirements for companies to show what action they are taking to reduce the risks. The proposal is part of a recently launched government consultation on the Network and Information Systems directive , set to take effect from May 2018 .
UK companies which do not take adequate measures to prevent cyber attacks , leaving infrastructure ##s such as transport or health exposed , could face financial penalties in a 2018 proposal from the Department for Digital , Culture , Media , and Sport . Although dubbed a last resort , fines of up to £ ##500 m ( $ 22 m ) or 4 % of global turnover could be imposed . The proposal is part of a recently launched government consultation on the Network and Information Systems directive , set to take effect from May 2018 .