UK authorities consult on operational incident and third-party reporting

The Financial Conduct Authority, Prudential Regulation Authority, and the Bank of England have launched consultations on operational incident and third-party reporting. The regulators propose to establish a framework to enhance incident and third-party risk management, strengthen firms' operational resilience and minimize harm. To achieve this, the regulators propose a definition for an operational incident and introduce new material third-party reporting rules. The proposals introduce standardized reporting templates to allow the regulators to collect data which would be used to monitor and respond to potential risks arising from operational incidents and firms' increasing reliance on third parties.

The deadline for comments is March 13, 2025. The FCA intends to publish finalized rules in H2 2025. The PRA and the BoE propose that the implementation date for the proposals will be no earlier than H2 2026. You may like to see our client bulletin, "Operational incident reporting: UK financial regulators propose new rules", which goes into the details of these proposals.

Return to main website.