techUK news and views
15 Nov 2024

PS24/16: What’s confirmed for the regulation of Critical Third Party Services in the Financial Services Sector?

The Bank of England (BoE), Financial Conduct Authority (FCA) and the Prudential Regulation Authority (PRA) stand as the collective regulators to oversee the activities of critical third parties, and they issued a policy statement 12 November 2024 confirming the rules set to strengthen their use and that of other technologies within Financial Services. 

You can read the policy statement here. 

Critical third party (CTP) service providers provide technological infrastructure and cloud-based services that Financial Services organisations, such as payment systems, rely on for their data storage and to manage their operations. However, their increasing use comes with risks. As if the CTP experiences a cyber-attack, data breaches, or other serious disruption, it will also expose the FS firms and their customers. This can potentially affect their ability to process functions such as transactions and customer access. 

Under the CTP regime, third parties will become subject to the monitoring and management of the regulators to minimise these risks, increasing the operational resilience of the UK’s FS Sector and ultimately build customer confidence in its stability. In creating the new rules, regulators have worked closely with industry, including techUK, and have aligned their rules closely with international standards such as the EU’s Digital Operational Resilience Act. 

Under the CTP regime, regulators will be allowed to: 

  • Hold rulemaking powers imposing duties over third parties 

  • Direct instructions on a CTP to do or refrain from an action specified in the direction 

  • Investigatory powers- regulators can gather information from a CTP and Persons Connected to a CTP, direct the appointment of a skilled persons. 

  • Take enforcement action against a CTP 

The new rules for CTP are set to take effect January 2025. The HM Treasury will designate which third parties are subject to the regime upon the advice of regulators, but FS firms are able to make their suggestions.  

While this takes affect, techUK will continue to monitor its implementation and continue to engage with regulators so that our members are up to date throughout the process.  

You can catch up on our CTP explainer and event held in March here. 

Financial Services Programme activities

The techUK Financial Services programme connects tech firms, the FS industry, and regulators to ensure innovation and technology can be fully embraced. Through market engagement activities and events, we help to empower decision makers and aid collaboration.

 

Upcoming events

15 November 2024

NHS Genomic Medicine Service | Genomics Interoperability Programme: Follow Up

In Person Workshop
15 November 2024

MOD Project ZODIAC – ISA Industry Brief

London and Online Market briefing
15 November 2024

Satellite Connectivity at the UK Space Agency – New Directions in Direct to Device and Non-Terrestrial Networks

Online Webinar

Latest news and insights 

Learn more and get involved

 

Financial Services updates

Sign-up to get the latest updates and opportunities from our Financial Services programme.

 

 

Here are the five reasons you should join the Financial Services programme.

Learn about the value members get from our work.

Download

Join techUK groups

techUK members can get involved in our work by joining our groups, and stay up to date with the latest meetings and opportunities in the programme.

Learn more

 

Become a techUK member

Our members develop strong networks, build meaningful partnerships and grow their businesses as we all work together to create a thriving environment where industry, government and stakeholders come together to realise the positive outcomes tech can deliver.

Learn more

Meet the team  

Ella Gago-Brookes

Ella Gago-Brookes

Team Assistant, Markets, techUK

Ella joined techUK in November 2023 as a Markets Team Assistant, supporting the Justice and Emergency Services, Central Government and Financial Services Programmes.  

Before joining the team, she was working at the Magistrates' Courts in legal administration and graduated from the University of Liverpool in 2022.  Ella attained an undergraduate degree in History and Politics, and a master's degree in International Relations and Security Studies, with a particular interest in studying asylum rights and gendered violence.  

In her spare time she enjoys going to the gym, watching true crime documentaries, travelling, and making her best attempts to become a better cook.  

Email:
[email protected]

Read lessmore

 

 

 

Return to listing