Latest FCA and PRA fines against a retail bank show little tolerance for poor outsourcing systems and controls.
By Fiona M. Maclean, Christian F. McDermott, Laura Holden, and Charlotte Collins
On 29 May 2019, the FCA and PRA announced that they had fined an independent UK bank for failing to manage its outsourcing arrangements properly between April 2014 and December 2016. The bank received separate fines of £775,100 from the FCA and £1,112,152 from the PRA (resulting in a combined fine of £1,887,252) for breaches of the regulators’ high-level principles for authorised firms, as well as their more detailed rules on outsourcing. Each fine includes a 30% early settlement discount.
The bank was fined by both regulators as the failings resulted in breaches of both regulators’ rules, and went to both regulators’ statutory objectives (specifically, the FCA’s consumer protection objective and the PRA’s objective to promote firms’ safety and soundness). Although both regulators applied the same five-step penalty framework to calculate their penalties, the way in which they applied the framework led to different figures. In particular, because the PRA had previously fined the same bank for outsourcing failures in November 2015, the repeat failure was a significant aggravating factor that led to an uplift in the PRA’s penalty.

Following the publication of its Draft Terms of Reference in July 2018, the PSR has now listened to market feedback and has issued its
Growth in applications for blockchain and tokenisation, combined with an increasing number of initial coin offerings (ICOs), mean that buyout firms should note developments in this sector.
The Payment Systems Regulator (PSR) has issued
The FCA has published a
Operational responsibility for the Bacs and Faster Payments systems, which process a combined £6.3 trillion worth of payments annually, has transferred to the New Payment System Operator (NPSO).
The new directive is of particular interest to the FinTech sector as, amongst other things, MLD5 includes measures to increase transparency around more recently developed instruments of payment — namely cryptocurrencies and prepaid cards. Both these instruments lend themselves to anonymity and raise concerns that they could be used to help fund terrorist activities.