Andy Burnham's appointment as U.K. prime minister on July 20 could signal a more interventionist phase for technology regulation, according to Jonathan Armstrong, partner at Punter Southall Law. Armstrong said Labour is likely to emphasize public procurement policies, cybersecurity, digital sovereignty, corporate accountability, and closer alignment with European Union artificial intelligence rules. The shift could affect AI policy, cybersecurity legislation, and data protection oversight.
Armstrong expects the Burnham government to take a less big-tech-friendly stance than the previous administration. He said don't be surprised if the United Kingdom becomes more closely aligned with the EU AI Act regime.
"My sense is we'll see a less big tech friendly Number 10, and that might have implications for AI, and if the plan is also to get closer to the EU, that might mean that there's some alignment with the EU AI Act," Armstrong said.
Impact on technology regulation
Labour's focus on public procurement could reshape government technology supply chains. Armstrong advised CISOs to prepare for potential regulatory change in cybersecurity by examining where services are hosted, which subcontractors support them, and how secure and stable those companies are. For AI, he recommended a focus on AI literacy, role-based training, shadow AI monitoring, and governance policies.
Third-party risks and procurement
Third-party risks are likely to enter the spotlight under the new government. Armstrong said tighter procurement policies will force technology vendors to demonstrate stronger security and compliance practices. Government agencies should expect greater scrutiny of subcontractors and hosting arrangements, especially for cloud services and AI tools.
What CISOs should do now
Armstrong urged security leaders to monitor regulatory developments closely and audit their supply chains. He also stressed the importance of AI governance policies that cover employee use of shadow AI tools. For government professionals, building internal expertise in AI regulation and cybersecurity will be critical. Resources such as AI for Government can help teams stay current on evolving compliance requirements.
Why this matters for government professionals
If Burnham's government aligns with the EU AI Act, U.K. public sector agencies will need to adopt new compliance frameworks for AI systems. They should start reviewing their procurement practices now, particularly for technology vendors that rely on complex subcontractor chains. Investing in AI literacy and cybersecurity training across departments will reduce exposure to regulatory penalties and supply chain risks.
Your membership also unlocks:
