FS regulatory affairs newsletter - Q1 2024
In this instalment of the FS regulatory affairs newsletter, our experts have summarised the significant updates firms should be aware of in the first quarter of 2024.
Expect this to change in Q2 when the Bank of England will publish the Basel 3.1 final rules for credit risk (possibly the most consequential item of regulatory change since Covid-19) and Strong & Simple final rules for capital. Both of these should already be occupying a significant amount of senior management's time and will continue to do so in the months ahead. The proposed UK regime for critical third parties: speech by Gareth TruranIn March, Gareth Truran, the director of Prudential Policy at the Bank of England, delivered a speech at the UK Tech Summit on Operational Resilience for Critical Third Parties (CTPs). His speech focused on the main objectives and priorities for the PRA’s regime for CTP’s. In his speech Truran outlined that the new regime enables HMT to designate third parties as CTPs, if they meet the criteria, and gives the Financial Services (FS) regulators new powers to oversee the resilience of the services these CTPs provide to the UK financial sector. The scope of the CTP regime largely falls to who is likely to be designated as a CTP. Ultimately, this is decided by the HMT who will consider recommendations from the regulatory authorities. A third party will only be considered a CTP if a failure, or disruption to a service it provides, could have systemic consequences. A key focus area of Truran’s speech was around recognition that situations exist where compliance with previous regulatory guidance might be insufficient to deliver an appropriate level of operational resilience. In some cases, a failure of a third party or its services could create a single point of failure for multiple firms, and a single FS firm may struggle to mitigate this risk. This is one of the main things the new CTP regime is looking to address. Key features of the proposed CTP regime are:
The requirements and expectations of CTPs once designated can be split into ‘Fundamental Rules’ and other ‘Operational Risk and Resilience Requirements’. The latter is more granular and applies only to the material services the CTP offers. These requirements cover areas such as governance, risk management, technology and cyber resilience. |
What management should considerManagement at banks and building societies needs to aware the new regime does not detract from fulfilling existing regulatory obligations on operational resilience and third-party risk management. In addition to this, firms should also ensure that they incorporate the impact tolerance framework for Important Business Services into any response to the CTP regime. This should include an awareness of the fact that firms will need to continue meeting impact tolerances even if they rely on third parties under the CTP regime to support service delivery. |
Solvent Exit Plan SS2/24A solvent exit is the process by which firms discontinue PRA regulated activities (deposit taking) while remaining solvent. Firms will be required to transfer or repay (or both) all deposits as part of its solvent exit which will end with the removal of the firm’s Part 4A PRA permission. The supervisory statement becomes effective from October 1, 2025 and applies to non-systemic UK banks or building societies. For reference, the PRA defines such firms as:
Other firms that are not in scope of this SS may also find the expectations helpful in preparing themselves for the cessation of PRA-regulated activities. Some expectations for Firms include:
This still fits in with existing regulations as:
|
What management should considerManagement at in scope firms may consider previous implementations done under their exiting recovery planning regime to meet the expectations of the PRA per this CP. Firms may also consider the following:
|
The Bank of England’s James Benford outlines the new data strategyIn March, James Benford, the Bank of England’s Executive Director for Data and Analytics Transformation and Chief Data Officer, outlined the Bank’s new strategy on data and analytics. Regular readers of the Newsletter will be aware that this is not the first time in recent years the Bank of England has flagged its intention to improve its data capabilities. For example, many readers will have already been involved in discussions with the regulator over its ongoing Banking Data Review, where the focus is on modernising the PRA’s approach to receiving regulatory returns. In order for the Bank to make the best use of its current datasets and data capabilities a review was commissioned last year to be undertaken by the internal Independent Evaluation Office (IEO). This strategy refresh comprised seven steps:
Benford emphasised the importance of creating a data-driven culture at the Bank, including broadening existing skills and formalising data roles into the Professions model used in the Civil Service. One particular area of focus is the Transforming Data Collection initiative, which seeks to streamline the cost of data collection by banks. In the 2019 Future of Finance report such obligations were estimated to be in the region of £2-4.5bn, which demonstrates both the complexity of such an undertaking and the value of a new, simplified approach. |
What management should considerManagement will need to be aware of Bank of England initiatives which have a direct impact on the way that they are regulated and/or supervised by the PRA, and therefore might require a response from a compliance perspective. For example, the ongoing Banking Data Review may result in material changes to expectation the PRA has on firm’s provision of regulatory returns. Prudential Compliance teams will also need to ensure they are aware of instances where a shift in supervisory data strategy by the PRA results in more, or less, focus on different risk drivers at their organisation. |
Get in touchIf you would like to speak with a member of our team, please click the button below. |
This website uses cookies.
Some of these cookies are necessary, while others help us analyse our traffic, serve advertising and deliver customised experiences for you.
For more information on the cookies we use, please refer to our Privacy Policy.
This website cannot function properly without these cookies.
Analytical cookies help us enhance our website by collecting information on its usage.
We use marketing cookies to increase the relevancy of our advertising campaigns.