World first code will protect app users in UK

A world-first code of practice will protect consumers with increased security and privacy within apps says the government. 

The voluntary code of practice for app developers and operators will include better reporting of software vulnerabilities and increased transparency for consumers on all app stores.

Cyber Minister Julia Lopez addressed the importance of protecting the public as apps become integral to daily life, she said: ‘Consumers should be able to trust that their money and data is in safe hands when using apps and these measures will not only boost our digital economy but also protect people from fraud.

‘We’ve already strengthened our laws to boost security in consumers’ digital devices and the telecoms networks we rely on. Today we are taking steps to get app stores and developers to keep customers even safer in the online world.’ 

Government officials will work alongside the participating operators and developers, including large tech companies such as Apple, Microsoft, Samsung and Google, over a nine month implementation period to ensure proper adoption of the code. 

Part of the government’s £2.6bn National Cyber Strategy, it is thought that the new rules could also lead to the creation of an international standard as the government collaborates with worldwide partners. 

The National Cyber Security Centre’s Director of National Resilience and Strategy, Paul Maddinson, said: ‘Our devices and the apps we rely on are increasingly essential to everyday life, and it’s important that developers and app store operators take steps to protect users. 

‘By signing up to this code of practice, developers and operators can demonstrate how they are delivering security as standard, as well as protect users from malicious actors and vulnerable apps.’ 

Launched last year, the cyber security strategy was touted as the government’s plan to ‘ensure that the UK remains confident, capable and resilient in this fast-moving digital world’ and includes five pillars guiding the policy and action taken. 

These pillars include strengthening the UK cyber ecosystem, detecting and disrupting adversaries to UK security in cyberspace, and advancing UK global leadership in the sector. 

A recent report from the Department for Digital, Culture, Media and Sport found that the vast majority of larger businesses and charities have experienced a cyber incident in the last twelve months. 

The voluntary code of practice can be viewed in full here.

Photo by William Hook