United Kingdom: FCA, Bank of England, and PRA rules for critical third parties in financial services
Progress
Current status
in force
01 Jan 2025 in force
12 Nov 2024 adopted
Scope
Implementers
United Kingdom
Policy Area
Data governance
Policy Instrument
Cybersecurity regulation
Regulated Economic Activity
digital payment provider (incl. cryptocurrencies)
other service provider
Government Branch
executive
Government Body
central bank
Implementation Level
national
Timeline of events
Implemented FCA, Bank of England, and PRA rules for critical third parties in financial services including resilience testing and incident reporting requirements
On 1 January 2025, the Financial Conduct Authority (FCA), Bank of England, and Prudential Regulation Authority (PRA) rules to strengthen the resilience of critical third parties (CTPs) providing services to the financial sector enter into force. The…
SourceEvent type
order
Action type
implementation
Government branch
executive
Government body
central bank
Adopted FCA, Bank of England, and PRA rules for critical third parties in financial services including resilience testing and incident reporting requirements
On 12 November 2024, the Financial Conduct Authority (FCA), Bank of England, and Prudential Regulation Authority (PRA) adopted rules to strengthen the resilience of critical third parties (CTPs) providing services to the financial sector. The rules …
SourceEvent type
order
Action type
adoption
Government branch
executive
Government body
central bank