Money Wiki
GB flag

Prudential Regulation Authority

Share:
Official RegulatorNationalEurope

Overview

--------|---------------|-----------------|

Basel III / 3.1 Banks, Investment Firms Minimum capital ratios (CET1 4.5%, Tier 1 6%, Total 8%); Leverage Ratio 3%; LCR 100%; NSFR 100%
Solvency II / UK Solvency II Insurance Undertakings SCR (1-in-200 adverse event); MCR floor; ORSA; proportionality for small/medium insurers
Senior Managers & Certification Regime All PRA Firms Individual approval of senior managers; fit & proper certification; conduct rules; criminal liability
Ring-Fencing Rules Large Banking Groups (>£35bn deposits) Structural separation of retail banking from investment banking; independent governance
Operational Resilience Framework All Significant Firms Identification of critical services; impact tolerance thresholds; stress-testing; third-party risk management
Recovery & Resolution Planning Large Banks, Systemically Important Firms Annual submission of recovery plans (RRP) and resolution plans; PRA validation
Dual Regulation (PRA + FCA) Systemic Banks, Insurers, Major Investment Firms Prudential (PRA) + Conduct of Business (FCA); coordinated supervision

confidence_scores:

entity_identity_and_location: 98

establishment_date_and_legal_basis: 99

regulatory_mandate_and_scope: 97

organizational_governance: 96

enforcement_powers_and_procedures: 95

capital_and_prudential_standards: 98

coordination_with_other_regulators: 94

payments_systems_relevance: 93

international_standards_adoption: 96

data_accuracy_and_currency: 94

overall_confidence_score: 96

confidence_methodology: |

Confidence scores are derived from:

  • Primary source verification (official Bank of England website, PRA Rulebook, statutory legislation)
  • Regulatory publications (Policy Statements, Supervisory Statements, Bank of England Quarterly Bulletins)
  • Secondary sources (academic journals, regulatory databases, practitioner guides)
  • Recency of information (knowledge cutoff February 2025; search conducted April 2026)
  • Cross-verification across multiple independent sources

Scores of 95+ indicate high confidence in factual accuracy; scores below 95 indicate areas where uncertainty or ongoing policy evolution exists.

information_currency: |

This profile was compiled in April 2026 using official sources including:

  • Bank of England website (accessed April 2026)
  • PRA Rulebook and latest Policy Statements (January-February 2026)
  • HM Treasury and GOV.UK regulatory announcements (2024-2026)
  • Recent PRA supervisory announcements (January 2026 priorities statement)
  • MoU revision announcement (June 2025)

Knowledge cutoff: February 2025 (some 2026 regulatory announcements incorporated via web search).


The Prudential Regulation Authority (PRA) is the official prudential regulator and supervisor of deposit-takers, insurers, and systemically important investment firms in the United Kingdom. Established on 1 April 2013 under the Financial Services Act 2012, the PRA operates as part of the Bank of England and succeeds the now-defunct Financial Services Authority (FSA).

Operating under a dual-regulation model with the FCA (Financial Conduct Authority), the PRA's statutory mission is to promote the safety and soundness of regulated institutions and, for insurers, to secure appropriate policyholder protection. The PRA exercises binding regulatory authority over approximately 1,292 firms, imposing capital requirements (Basel III for banks, Solvency II for insurers), governance standards (Senior Managers & Certification Regime), operational resilience requirements, and structural separation rules (ring-fencing).

The PRA's mandate is directly relevant to payment systems stability insofar as it prudentially regulates banks and payment service providers that operate critical payment infrastructure (CHAPS, Faster Payments, etc.), imposing capital and operational resilience standards that ensure payment system operators remain solvent and operationally resilient during systemic stress. This microprudential approach complements the Payment Systems Regulator's functional oversight of payment systems themselves.


9.1 Regulatory Philosophy Summary

The PRA's regulatory approach combines:

  1. Safety & Soundness Focus: Primary emphasis on individual firm stability; microprudential rather than macroprudential
  2. Proportionality: Supervisory intensity scaled to firm size/risk; lighter touch for smaller firms
  3. Forward-Looking: Stress-testing and scenario analysis to anticipate future risks
  4. Judgment-Based: Supervisory judgment over purely mechanical rules
  5. Accountability: Individual senior manager accountability through SM&CR and criminal liability
  6. Structural Reforms: Ring-fencing to reduce contagion; operational resilience to ensure critical functions survive disruption
  7. Coordination: Dual regulation with FCA; integration within Bank of England; coordination with international regulators

9.2 Key Regulatory Standards (Summary Table)

Pillar Standard/Requirement Application Firm Type
Capital Basel III minimum ratios (CET1 4.5%, Tier 1 6%, Total 8%) Ongoing Banks, Investment Firms
Capital Basel 3.1 enhancements (FRTB, ORA, output floor) Effective 1 Jan 2026 Large Banks
Capital Capital buffers (CCB 2.5%, CCyB 0-2.5%, G-SIB/O-SII 1-3.5%, P2R varies) Ongoing Banks
Capital Leverage Ratio (3% non-risk-weighted) Ongoing Large Banks
Liquidity LCR (100% 30-day survival) Ongoing All Banks
Liquidity NSFR (100% 1-year stable funding) Ongoing All Banks
Insurance Solvency II SCR (99.5% confidence) Ongoing Insurers
Insurance Solvency II MCR (25% of SCR minimum) Ongoing Insurers
Insurance ORSA (annual solvency self-assessment) Ongoing Insurers
Governance SM&CR (senior manager approval + certification) Ongoing All PRA Firms
Governance Conduct Rules (7 rules for managers/staff) Ongoing All PRA Firms
Governance Criminal liability for reckless management (SMCO) Ongoing Banks (extended to others 2023)
Structural Ring-fencing (separation of retail from investment banking) Ongoing (mandatory since 1 Jan 2019) Large Banking Groups (>£35bn deposits)
Operational Operational Resilience (CBS, ITT, stress-testing, DR) Ongoing (effective 1 Mar 2022) All Significant Firms
Stress Testing Annual cyclical capital assessment Ongoing Largest 30-40 Firms
Recovery/Resolution Recovery and Resolution Plans (RRP) Ongoing (annual) Systemically Important Firms
Risk Management Governance Handbook rules (Board oversight, risk appetite, cultural standards) Ongoing All PRA Firms
Enforcement Financial penalties up to 10% of annual revenue As warranted Breach of PRA rules

Basic Identity

1.1 Legal Identity and Formation

Official Name: Prudential Regulation Authority (PRA)

Jurisdiction: United Kingdom (national-level regulator)

Parent Authority: Bank of England

Legal Form: Integrated division of the Bank of England (previously a limited company, 2013-2017; governance vested in Prudential Regulation Committee since 2017)

Establishment Date: 1 April 2013

Legal Basis: Financial Services Act 2012 (Royal Assent: 19 December 2012)

Preceding Entity: Financial Services Authority (FSA) — dissolved 1 April 2013 and split into PRA (prudential) and FCA (conduct)

Successor Regulation: The FCA (Financial Conduct Authority) succeeded the FSA's conduct-of-business supervisory function; the PRA succeeded the FSA's prudential supervisory function.

1.2 Official Website and Contact Information


11.1 Confidence Scores by Dimension

Dimension Score Rationale
Entity Identity and Location 98 Extensively documented in official sources; name, acronym, jurisdiction, headquarters all confirmed across multiple official sources
Establishment Date and Legal Basis 99 Precise date (1 April 2013) confirmed in Financial Services Act 2012 and multiple official sources; legal basis unambiguous
Regulatory Mandate and Scope 97 Clearly stated in FSMA and established financial regulation literature; minor uncertainty around exact number of regulated firms (varies with authorization/deauthorization activity)
Organizational Governance 96 PRC composition and role clearly documented; minor uncertainty around recent changes (e.g., potential future governance reforms)
Enforcement Powers and Procedures 95 Detailed in Policy Statement PS1/24; procedures well-documented; minor uncertainty around future policy evolution or enforcement precedents
Capital and Prudential Standards 98 Basel III and Solvency II standards formally transposed into UK law; confidence very high on technical requirements; minor updates with Basel 3.1 implementation
Coordination with Other Regulators 94 MOUs documented and publicly available; coordination mechanisms clear; minor uncertainty around effectiveness/actual coordination in practice
Payments Systems Relevance 93 PRA's indirect role in payments is clear (prudential regulation of operators); direct role more limited (PSR has functional regulation); some uncertainty around demarcation in practice
International Standards Adoption 96 Basel III, Solvency II, SM&CR, IOSCO principles all formally transposed; high confidence in standards compliance
Data Accuracy and Currency 94 Information current as of April 2026 (knowledge cutoff February 2025); most recent sources from 2025-2026; minor time-lag risk for very recent policy changes
Overall Confidence Score 96 High confidence profile; minor uncertainties in areas of ongoing policy evolution

11.2 Confidence Methodology

Confidence scores are derived from assessment across multiple sources and dimensions:

  1. Primary Source Verification:
  1. Secondary Source Verification:
  • Academic journals and practitioner guides
  • Regulatory databases and compliance guidance
  • GOV.UK and HM Treasury publications
  • International standards bodies (BCBS, IAIS, IOSCO)
  1. Recency and Actuality:
  • Knowledge cutoff: February 2025
  • Web search conducted: April 2026
  • Most recent regulatory publications reviewed: January 2026 (PRA supervisory priorities) and June 2025 (MoU revision)
  1. Cross-Verification:
  • Consistent information across independent sources increases confidence
  • Discrepancies between sources trigger deeper investigation
  • Ambiguities or evolving policies noted with lower confidence scores
  1. Uncertainty Factors:
  • Ongoing regulatory evolution (e.g., Solvency II review, Basel 3.1 implementation timeline)
  • Discretionary supervisory practices (stress-testing scenarios, senior manager approval criteria)
  • Potential changes to governance (e.g., future PRA CEO appointment, PRC composition)

11.3 Data Accuracy and Currency Notes

Information Current As Of: April 2026 (knowledge cutoff February 2025, supplemented with April 2026 web searches)

Most Recent Authoritative Sources Consulted:

  • Bank of England website and Policy Statements (January-February 2026)
  • PRA Rulebook and supervisory guidance (up to February 2026)
  • HM Treasury regulatory announcements (2024-2026)
  • Published news (January-June 2026)

Known Limitations and Caveats:

  1. Supervisory Practice Evolution: PRA's application of rules (e.g., stress testing scenarios, capital assessment methodologies) evolves annually; this document captures current practice as of early 2026.
  2. Regulatory Policy Uncertainty: Some areas (e.g., Solvency II review outcome, further Basel 3 enhancements) remain subject to consultation and may evolve.
  3. Senior Management: PRA CEO appointment of Katharine Braddick is confirmed for June 2026, but earlier/later commencement or unexpected changes are possible.
  4. Brexit-Related Divergence: Post-Brexit UK regulatory framework continues to evolve independent of EU rules; future divergence or re-convergence possible.
  5. Systemic Crisis or Emergency: Major financial crisis or emergency legislation could significantly alter PRA's mandate or powers (last occurred 2008-2009).

Recommendations for Users:

  • Consult official Bank of England website for most current updates
  • For enforcement-related questions, consult latest Policy Statement on Enforcement (PS1/24, January 2024, or any subsequent updates)
  • For capital standards, consult PRA Rulebook directly (https://www.prarulebook.co.uk/)
  • For payments-related issues, consult Payment Systems Regulator website (https://www.psr.org.uk/) for functional regulation coordination

Classification

Field Value
Entity Type Official Regulator
Control Layer Layer 1 — Sovereign/Government Regulator
Legal Authority Level Binding
Jurisdiction Level National
Scope of Power Licensing, Supervision, Enforcement, Rulemaking

Inclusion Justification

Field Value
Why This Entity Is Included Government-backed financial regulatory authority with statutory licensing, supervisory, and enforcement powers
Type of Influence Direct
Exclusion Risk Removes a key financial regulatory authority from the jurisdiction's control map

What This Entity Oversees

2.1 Statutory Objectives

The PRA has two statutory objectives defined under the Financial Services and Markets Act 2000 (FSMA):

  1. Primary Objective — Safety and Soundness: To promote the safety and soundness of PRA-regulated firms. In pursuit of this objective, the PRA focuses primarily on the harm that firms can cause to the stability of the UK financial system.
  2. Secondary Objective — Policyholder Protection (Insurance Only): Specifically for insurers, to contribute to the securing of an appropriate degree of protection for insurance policyholders, ensuring firms maintain sufficient solvency and governance to pay claims when due.

These objectives are underpinned by the Financial Stability Objective, which HM Treasury defines: the PRA shall maintain the stability of the UK financial system and prevent systemic crises that could harm the real economy.

2.2 Regulated Entities and Scope

The PRA prudentially regulates and supervises approximately 1,292 financial institutions (as of 2024), organized as follows:

Entity Type Scope
Banks All authorized credit institutions operating in the UK; includes traditional retail banks, investment banks, and wholesale banking operations
Building Societies Mutual deposit-taking institutions; approximately 40 regulated building societies
Credit Unions Mutual credit unions with significant assets or systemic relevance
Insurance Undertakings All insurance and reinsurance companies operating in the UK; approximately 200+ firms regulated
Designated Investment Firms Systemically important and large investment firms (capital markets dealers, prime brokers, etc.); identified under FSMA Part 4A
Lloyd's of London The Lloyd's insurance market, including Lloyd's managing agents and syndicates
Payment Service Providers Banks and payment institutions operating critical payment systems and clearing/settlement infrastructure (indirect prudential supervision; direct functional regulation by PSR)

Regulated Activities: Authorization under FSMA Part 4A for the following regulated activities:

  • Accepting deposits
  • Taking on insurance/reinsurance underwriting risk
  • Dealing in investments (for designated firms)
  • Operating payment systems and clearing/settlement infrastructure
  • Operating trading venues and custodian services (for designated firms)

2.3 Geographical Coverage

The PRA exercises prudential supervision over:

  • All UK-registered firms (domestic regulation)
  • UK branches of non-EEA firms operating in the UK
  • EU firms operating in the UK post-Brexit (under mutual recognition agreements)
  • UK firms' cross-border operations (coordination with host supervisors via MOUs)

Headquarters: London, with satellite offices across the UK and seconded supervisors at key international financial centers.


5. Regulatory Standards and Capital Requirements

5.1 Capital Adequacy — Banking Sector (Basel III / Basel 3.1)

The PRA implements Basel III international capital adequacy standards for banks and major investment firms, as transposed into UK law (originally via Capital Requirements Regulation & Directive; now UK Statutory Instruments post-Brexit).

Minimum Capital Ratios (Pillar 1 — Risk-Weighted):

Ratio Minimum Requirement Definition
Common Equity Tier 1 (CET1) 4.5% Core capital (retained earnings, issued share capital); highest-quality loss-absorbing capital
Tier 1 Capital 6% Core capital + hybrid instruments (convertible bonds); somewhat less liquid than CET1
Total Capital 8% Tier 1 + Tier 2 (subordinated debt, hybrid instruments); total loss-absorbing capital
Leverage Ratio 3% Non-risk-weighted backstop: Total Tier 1 Capital / Total Exposure (ensures capital not gamed by risk-weighting)

All ratios calculated as percentage of Risk-Weighted Assets (RWA), except Leverage Ratio which uses Total Exposure.

Regulatory Capital Buffers (in addition to Pillar 1 minimums):

Buffer Requirement Setter Purpose
Capital Conservation Buffer (CCB) 2.5% CET1 Regulatory requirement Ensures banks can absorb unexpected losses; breach triggers dividend restrictions
Countercyclical Capital Buffer (CCyB) 0%-2.5% CET1 Financial Policy Committee (FPC) Macroprudential tool to address credit-cycle overheating; set quarterly by FPC based on credit conditions
G-SIB / O-SII Buffer 1%-3.5% CET1 PRA (in consultation with FPC) Higher buffer for globally and domestically systemically important banks to reflect contagion risk
Pillar 2 Requirement (P2R) Firm-specific PRA supervisor (varies by firm) Supervisor-set additional capital for firm-specific risks not fully captured by Pillar 1 (e.g., concentration risk, operational risk, governance risk)

Total Required CET1 Ratio (for typical large bank) = 4.5% (Pillar 1) + 2.5% (CCB) + 0%-2.5% (CCyB) + 1%-3.5% (P2R) = 8.5% - 12.5%+ (depending on firm size, complexity, and systemic importance)

Liquidity Standards:

Standard Minimum Horizon Definition
Liquidity Coverage Ratio (LCR) 100% 30 days Measures ability to survive acute stress scenario (retail deposit run, market stress, collateral degradation); ensures high-quality liquid assets cover net cash outflows
Net Stable Funding Ratio (NSFR) 100% 1 year Measures ability to survive chronic funding stress over longer horizon; ensures stable funding base for assets

Basel 3.1 Implementation (Effective 1 January 2026 in UK):

The PRA has published final rules (via Policy Statement PS12/25, July 2025) for implementation of Basel 3.1 standards, including:

  • Fundamental Review of the Trading Book (FRTB): Enhanced market risk capital requirements for trading operations; replaces older approaches.
  • Operational Risk Standardized Approach (ORA): Revised operational risk capital calculation; increases capital requirements for large, complex firms.
  • Credit Risk Adjustments: Refinements to counterparty and securitization risk calculations.
  • Output Floor: Banks' Pillar 1 capital must be at least 72.5% of what they would hold under standardized approach (prevents excessive internal model-driven savings).

5.2 Capital Adequacy — Insurance Sector (Solvency II / UK Solvency II)

The PRA implements Solvency II (EU Directive, adapted for UK post-Brexit as UK Solvency II), which sets capital and governance requirements for insurance undertakings.

Solvency Capital Requirement (SCR):

Definition: The SCR is the amount of capital that an insurance undertaking must hold to ensure a 99.5% confidence level (1-in-200 probability) that it can meet its insurance obligations over a 12-month horizon, even in adverse scenarios.

Calculation Methods:

  1. Standard Formula (most insurers): Prescribed risk-weighting formula set out in Solvency II Directive; accounts for underwriting risk, market risk, credit risk, operational risk, and intangible asset risk.
  2. Partial Internal Model (large insurers): Firm-developed model for subset of risks (e.g., underwriting risk), combined with standard formula for other risks; requires PRA approval.
  3. Full Internal Model (largest, most complex insurers): Entirely firm-developed model for all risks; subject to rigorous PRA validation and approval process.

Minimum Capital Requirement (MCR):

Definition: Absolute minimum capital floor; breach of MCR triggers mandatory supervisory intervention and potential resolution action.

Requirement: MCR = 25% of SCR (or absolute minimum of €3.7 million for non-life, €2.5 million for life; converted to GBP).

Own Risk and Solvency Assessment (ORSA):

All insurance undertakings must submit an annual ORSA report to the PRA detailing:

  • Assessment of own capital needs (in addition to regulatory SCR)
  • Stress-testing of key risks
  • Governance and risk management framework
  • Board's opinion on ongoing solvency and capital adequacy

Proportionality in Solvency II:

The PRA applies tiered regulation based on firm size and complexity:

Category Firm Size / Complexity Simplified Requirements
Large Complex Insurers Premium > €100m; complex portfolios Full Solvency II requirements; internal models allowed
Medium Insurers Premium €10m-€100m Simplified calculation options; proportionality in governance
Small & Medium Enterprises (SMEs) Premium < €10m Very simplified capital calculation; proportionate ORSA; simplified reporting
Micro-insurers Very small captive or mutuals Extremely simplified approach; minimal regulatory burden

UK Solvency II Review (Ongoing):

The PRA initiated a Solvency II review (Consultation Paper CP12/23, June 2023) to enhance proportionality for smaller insurers and insurers with simple business models while maintaining policyholder protection. As of 2025, reforms are being implemented via Policy Statement PS12/25 (July 2025), with anticipated full transposition by Q1 2026.


5.3 Governance and Senior Management Requirements (SM&CR)

The Senior Managers & Certification Regime (SM&CR), established under the Financial Services (Banking Reform) Act 2013 and implemented January 2016 for banks (extended to insurers in 2018), requires:

Senior Manager Approval (SMA):

All firms must identify Designated Senior Managers and obtain PRA (and/or FCA) approval before appointment. Designated roles typically include:

  • Chief Executive Officer
  • Chief Financial Officer
  • Chief Risk Officer
  • CEO and other C-suite equivalents
  • Board-level roles (Chair, Audit Committee Chair, Risk Committee Chair, etc. for significant firms)

Approval Criteria: Applicant must be determined "fit and proper" based on:

  • Competence and capability for the role
  • Financial soundness
  • Honesty, integrity, and reputation
  • Absence of criminal convictions or sanctions

Certification Regime:

Certain staff identified as "Certification Staff" (senior and specialist roles with significant responsibility) must be certified annually by their employer as fit and proper to perform their roles. The firm (not PRA) makes the certification, but the PRA can challenge it.

Conduct Rules:

Both senior managers and all employees are subject to seven Conduct Rules (PRA Conduct Rules):

  1. Rule 1: Act with integrity
  2. Rule 2: Act with due skill, care, and diligence
  3. Rule 3: Be open and cooperative with regulators
  4. Rule 4: Pay due regard to interests of customers
  5. Rule 5: Observe proper standards of market conduct
  6. Rule 6: Take reasonable steps to manage conflicts of interest (senior managers only)
  7. Rule 7: Take reasonable steps to ensure compliance by firm (senior managers only; accountability for firm)

Criminal Liability (Senior Managers Criminal Offense):

The Criminal Finance Act 2017 introduced a Senior Managers Criminal Offense (SMCO):

  • Offense: Senior manager liable to criminal prosecution if they recklessly manage a firm in a way that causes significant damage to the firm or affects UK financial system stability.
  • Penalty: Up to 7 years imprisonment and/or unlimited fine.
  • Negligence Standard: Based on recklessness (very high bar — gross negligence, not ordinary negligence).
  • Application: Applies to both PRA and non-PRA banks (banks only as of 2017; FCA extended to other firms in 2023).

6. Regulatory Approach and Supervision Strategy

6.1 Philosophy and Core Principles

The PRA operates according to the following core supervisory philosophy:

1. Microprudential Focus

The PRA is primarily concerned with the safety and soundness of individual firms, not with macroprudential systemic risk management (which is the responsibility of the separate Financial Policy Committee — FPC, also within the Bank of England).

The PRA's focus on individual firm stability is predicated on the assumption that a population of individually sound and well-governed firms will collectively contribute to financial system stability.

2. Proportionality

Supervisory intensity and regulatory requirements are scaled to firm size, systemic importance, and risk profile. The PRA distinguishes between:

  • Large, Complex, Systemically Important Institutions (e.g., HSBC, Barclays, Lloyds): Intensive supervision, higher capital requirements, full Solvency II (insurers), full internal model validation (where applicable).
  • Medium-Sized, Moderate-Risk Firms: Balanced supervision; proportionate capital requirements; simplified regulatory processes.
  • Small, Low-Risk Firms: Lighter-touch supervision; simplified capital calculation (for insurers); reduced reporting burden; tiered SM&CR requirements.

The PRA has developed a "strong and simple" framework for smaller banks, reducing regulatory burden while maintaining core prudential safeguards.

3. Judgement-Based Supervision

The PRA relies heavily on supervisory judgment rather than purely mechanical rule-compliance. Supervisors conduct:

  • Forward-looking risk assessments: What risks could materialize over the next 1-3 years?
  • Qualitative governance reviews: Are senior managers competent? Is the Board effective? Is risk culture healthy?
  • Scenario stress-testing: Can the firm survive defined adverse scenarios (recession, market crash, pandemic, cyber attack)?
  • Peer comparison: How does this firm's risk profile compare to peer institutions?

This judgment-based approach allows flexibility and responsiveness to emerging risks not fully captured by bright-line rules.

4. Forward-Looking Capital Assessment

The PRA conducts annual cyclical capital adequacy assessments (similar to the US Federal Reserve's CCAR/DFAST model) requiring firms to:

  • Project capital levels over a multi-year horizon (typically 2-3 years)
  • Model impacts of defined macroeconomic stress scenarios (recession, credit shock, market volatility, interest-rate spike)
  • Assess whether projected capital would remain above minimum requirements even in stress
  • If not, propose capital-raising or risk-reduction actions

Results inform supervisory engagement and may trigger capital distribution restrictions (dividend/buyback limits) if firms fail to meet stressed-scenario targets.

5. Dual Regulation Model

The PRA coordinates with the Financial Conduct Authority (FCA) under formal memoranda of understanding. Most systemic banks are dual-regulated:

  • PRA responsibility: Prudential oversight (capital, liquidity, governance, risk management)
  • FCA responsibility: Conduct-of-business supervision (consumer treatment, market conduct, conflicts of interest)

Joint supervisory teams (JSTs) coordinate engagement with large firms to avoid regulatory duplication and ensure coherent message.

6. Senior Management Accountability

The SM&CR makes individual senior managers personally accountable for their roles, moving away from purely firm-level accountability. This is reinforced by:

  • Criminal liability for reckless management (SMCO)
  • Public identification of responsible managers
  • Enhanced supervision of fit and proper status
  • Enforcement action against individual managers (not just firms)

7. Structural Reforms

The PRA actively enforces structural separation (ring-fencing) of retail banking from investment banking, reducing contagion risk and ensuring critical payment and deposit-taking functions are insulated from investment losses.


6.2 Supervisory Tools and Practices

Horizontal Scanning

The PRA conducts horizontal risk assessments across the regulated population to identify emerging systemic risks:

  • Market-wide themes: e.g., commercial real estate concentration, crypto exposure, third-party IT dependencies, climate transition risk
  • Peer comparison: Benchmarking firms against peers on capital ratios, loan loss provisions, asset quality, profitability
  • Early warning indicators: Monitoring for signs of sector-wide stress (e.g., funding cost spikes, credit deterioration)

Firm-Specific Supervision

For each regulated firm, the PRA assigns a Supervisory Team, headed by a Supervisor, who:

  • Conducts regular meetings with firm senior management
  • Reviews financial returns and regulatory reports (monthly for large firms, quarterly for medium firms)
  • Assesses governance and risk management practices
  • Identifies emerging firm-specific risks
  • Engages on remediation if concerns arise

Supervision intensity depends on firm size and risk profile (Risk and Governance (RG) framework).

On-Site Examinations

The PRA conducts on-site examinations using FSMA s. 165 powers:

  • Full examinations (large firms): Annually or biannually; typically 2-4 weeks on-site examining operations, risk controls, senior management competence
  • Targeted examinations (medium/small firms): As needed, focusing on specific risk areas
  • Skilled person reviews: PRA can appoint independent expert to conduct examination (cost borne by firm)

Stress Testing and Capital Assessment

The PRA conducts annual cyclical capital assessment and stress testing (cyclical CAAR/CAAT) requiring firms to:

  1. Project balance sheet over 2-3 year horizon under three macroeconomic scenarios (baseline, adverse, severely adverse)
  2. Calculate regulatory capital ratios (CET1, Tier 1, Total Capital) under each scenario
  3. Identify capital shortfalls and propose mitigation actions
  4. Report results to PRA by specified deadline

PRA publishes results, comparing firms and identifying systemic patterns. Firms failing to meet capital targets may face:

  • Capital-raising requirements
  • Restrictions on dividends and share buybacks
  • Supervisory restrictions on growth or acquisitions
  • Enhanced supervisory engagement

Recovery and Resolution Planning (RRP)

Large, systemically important firms must submit annual recovery plans and resolution plans (resolution authority — typically the Bank of England's resolution team — prepares the latter):

  • Recovery Plans: Firm's strategy for returning to profitability/capital adequacy if stressed (e.g., asset sales, business exit, capital raise)
  • Resolution Plans: Scenario-planning for failure; authorities' strategy for winding down firm with minimal systemic disruption

The PRA and resolution authority validate these plans, identify deficiencies, and require remediation.

Thematic Reviews

The PRA conducts thematic reviews on specific risk topics affecting multiple firms:

  • Operational resilience: Firm capabilities to withstand operational disruptions (cyber, IT failure, third-party failure)
  • Climate risk: Assessment of physical and transition climate risk; stress-testing of scenarios (e.g., rapid decarbonization, stranded assets)
  • Liquidity management: Funding stability, term-funding adequacy, deposit dynamics
  • Governance: Board effectiveness, senior management quality, culture and values
  • Credit risk concentration: Large exposure limits, sectoral concentration (e.g., commercial real estate)

Results inform supervisory priorities and may trigger firm-specific supervisory actions.


6.3 Enforcement and Disciplinary Action

The PRA exercises formal enforcement authority under FSMA Part 26 and its published Enforcement Handbook (Policy Statement PS1/24, January 2024).

Enforcement Toolkit:

Action Scope Use Cases
Financial Penalties Civil fine up to 10% of annual revenue Breach of PRA rules; regulatory failure; inadequate remediation
Suspension Restrict or suspend firm's authorization to conduct regulated activities Serious breach; public interest concern; pending investigation outcome
Withdrawal Permanent loss of authorization Irretrievable loss of fit and proper status; serial violations; firm insolvency
Variation of Conditions Modify or impose new conditions on authorization Supervisory response to identified deficiency; e.g., "must not materially increase risk exposure"
Public Censure Formal public statement that firm breached rules Lesser violations not warranting fine; reputational harm
Prohibition Order Ban individual from performing senior manager role or specific regulated function Fitness & propriety concern; misconduct; competence deficiency
Cease & Desist Order Require firm to cease violation and take specified corrective action Prospective prevention of harm; e.g., "cease marketing unregulated investment product"
Skilled Person Order Appoint independent expert to investigate, report, and remediate (cost to firm) Complex technical breaches; governance failures; systemic implications

Enforcement Procedure:

  1. Investigation: PRA identifies potential breach via supervision, referral, or complaint; gathers evidence.
  2. Decision Notice: If PRA proposes enforcement action, it issues Decision Notice setting out:
  • Alleged facts
  • Applicable rules breached
  • PRA's reasoning and finding
  • Proposed sanction
  • Statutory statements of policy and procedure applied
  1. Firm's Right to Be Heard: Firm has up to 28 days (extendable) to make written representations; oral hearing available on request.
  2. PRA's Final Decision: PRA considers representations and either upholds, modifies, or cancels proposed enforcement.
  3. Final Notice: If enforcement upheld, PRA issues Final Notice (same content as Decision Notice, now final).
  4. Publication: PRA publishes Final Notice (on website and in press notice), unless specific confidentiality applies (e.g., ongoing criminal investigation).
  5. Appeal Rights: Firm has 28 days to appeal to Upper Tribunal (Tax and Chancery Chamber), which conducts de novo review of PRA's decision.

Penalty Methodology (PS1/24, January 2024):

The PRA applies a five-step approach to calculate financial penalties:

Step 1: Seriousness Assessment

  • Minor breach: Inadvertent, limited firm/customer harm, swift remediation (e.g., minor reporting error)
  • Serious breach: Deliberate, material harm, inadequate controls, failed remediation (e.g., significant capital miscalculation, governance failure)
  • Very serious breach: Deliberate systemic abuse, severe harm, intentional concealment, repeat violations (e.g., LIBOR manipulation, compliance fraud, willful money laundering)

Step 2: Starting Point Determination

  • Firms: Calculate as percentage of annual revenue; ranges from 0.5%-5% depending on seriousness
  • Minor: 0.5%-1.5%
  • Serious: 1.5%-3.5%
  • Very serious: 3.5%-5%
  • Individuals: Fixed amounts ranging from £5,000-£100,000 depending on seriousness

Step 3: Adjustment for Aggravating/Mitigating Factors

  • Aggravating: Deliberateness, prior violations, duration of breach, magnitude of harm, obstruction of investigation, large firm/systemic importance
  • Mitigating: First-time offender, swift discovery/remediation, cooperation with PRA, limited actual harm, isolated incident

Step 4: Settlement Discount

  • Early Cooperation Scheme (launched January 2024): If firm admits breach and cooperates early, reduce penalty by up to 50% (vs. traditional 30% maximum)
  • Encourages early admissions and reduces protracted enforcement proceedings

Step 5: Final Sanction

  • Apply maximum penalties or cap per FSMA (whichever is applicable)
  • Issue decision with full reasoned judgment

Recent Enforcement Trends:

  • Early cooperation emphasis: Enhanced settlement discounts (50% vs. prior 30%) to encourage early admissions
  • Individual accountability: Increasing focus on naming and shaming individuals (enforcement action against senior managers)
  • Proportionality: Recognition that not all breaches warrant maximum penalties; emphasis on proportionate, credible, deterrent sanctions
  • Publication strategy: Public enforcement actions name firms and individuals, enhancing market discipline

7. Key Regulatory Initiatives and Structural Reforms

7.1 Ring-Fencing (Vickers Reform)

Background: Following the 2008 financial crisis and the recommendations of the Independent Commission on Banking (chaired by John Vickers, report September 2011), the UK government adopted structural reform recommendations to separate retail banking from investment banking, reducing contagion risk.

Legal Basis: Financial Services (Banking Reform) Act 2013, Schedule 4, inserted Part 4A into the FSMA 2000 (Ring-Fencing rules).

Effective Date: 1 January 2019

Scope and Applicability:

  • Scope: UK banks holding more than £35 billion of core (retail/SME) deposits AND conducting material investment banking activities
  • Affected Firms: Primarily the UK's "Big 5" banking groups: HSBC, Barclays, Lloyds Banking Group, Standard Chartered, and some medium-sized banks
  • Exemptions: Small banks below the £35bn deposit threshold are exempt

Mandatory Separations:

Activity Classification Required Location
Accepting deposits from retail customers and SMEs Excluded (core) Ring-fenced entity (separate legal company)
Lending to retail customers and SMEs Excluded (core) Ring-fenced entity
Payment services Excluded (core) Ring-fenced entity
Currency exchange for customers Excluded (core) Ring-fenced entity
Certain fund management/brokerage for personal customers Excluded (core) Ring-fenced entity
Investment banking Excluded (non-core) Non-ring-fenced entity (can remain in group)
Proprietary trading Excluded (non-core) Non-ring-fenced entity
Prime brokerage Excluded (non-core) Non-ring-fenced entity
Securities underwriting Excluded (non-core) Non-ring-fenced entity

Governance and Independence Requirements:

Ring-fenced entities must have:

  1. Separate legal entity and governance: Independent board of directors; ring-fenced entity cannot be a subsidiary of the parent holding company without independent governance.
  2. Independent decision-making: Ring-fenced entity's Board makes its own decisions; cannot be overridden by group CEO or holding company without Board consent.
  3. Operational independence: Separate management team, business systems, and control infrastructure (though some back-office functions may be shared under strict protocols).
  4. Named senior managers: SM&CR-approved senior managers responsible for ring-fenced entity (separate from non-ring-fenced senior managers).
  5. Dedicated capital and liquidity: Ring-fenced entity holds capital and liquidity proportionate to its own risk profile; intra-group liquidity arrangements are restricted.
  6. Separate disclosure: Published financial statements show ring-fenced entity results separately.

PRA Role in Ring-Fencing Supervision:

  • Authorization: PRA approves ring-fencing implementation plans before mandatory separation date
  • Ongoing supervision: PRA ensures ring-fenced entity maintains independent governance and operational separation
  • Enforcement: PRA can impose sanctions if firm breaches ring-fencing rules (e.g., unauthorized business transfers back from ring-fenced entity, overly tight group integration)
  • Structural approval: PRA approves any material changes to ring-fenced entity's scope or governance

Strategic Rationale for Payment Systems:

Ring-fencing is directly relevant to payment systems stability: by separating retail payment services (core banking function) from investment banking, the rules ensure that payment system operators' capacity to process payments and settlements is protected from losses in investment banking operations. This reduces the risk that a major bank's investment losses could disrupt the critical national payment infrastructure (CHAPS, Faster Payments, etc.).


7.2 Operational Resilience Framework

Background: The PRA has implemented a forward-looking Operational Resilience Framework requiring firms to identify critical business services, assess operational risks, and ensure continuity under stress.

Implementation Timeline:

  • Consultation Paper CP18/20 (December 2020)
  • Policy Statement PS21/13 (June 2021) — rules effective 1 March 2022
  • Ongoing refinement: PRA updates through supervisory statements and further consultations

Core Requirements:

1. Identification of Critical Business Services (CBS)

Firms must identify their critical business services — services that, if disrupted, would cause:

  • Serious harm to the firm's counterparties or market participants
  • Destabilization of the UK financial system
  • Loss of essential banking services to UK households or small businesses

Examples:

  • Payment processing and settlement (CHAPS, Faster Payments)
  • Trade finance and letter of credit issuance
  • Securities clearing and settlement
  • Large corporate lending

2. Impact Tolerance Threshold (ITT)

For each CBS, the firm's Board must set an Impact Tolerance Threshold — the maximum tolerable impact (in quantitative terms: time to restoration, financial loss, operational disruption level) if the service is disrupted.

Examples:

  • "No more than 2 hours of disruption to payment processing"
  • "No more than 1,000 failed transactions per day"
  • "No more than £50 million net loss from disruption"

3. Operational Risk Stress Testing

Firms must regularly stress-test operational risks to ensure they can meet ITTs even under severe operational shocks:

  • Cyber attack: Ransomware, network breach, data exfiltration
  • Technology failure: System crash, data corruption, infrastructure failure
  • Pandemic/natural disaster: Business continuity in work-from-home scenarios, facility denial
  • Third-party failure: Cloud provider outage, outsourced service provider failure, telecommunications failure
  • Key person loss: Death/incapacity of critical senior manager

4. Business Continuity and Disaster Recovery

Firms must maintain:

  • Business Continuity Plans (BCPs): Pre-planned procedures for resuming operations during disruption
  • Recovery Time Objective (RTO): Maximum time to restore service (to be set with reference to ITT)
  • Recovery Point Objective (RPO): Maximum acceptable data loss (frequency of backups)
  • Disaster Recovery drills: Regular testing of recovery plans (at least annually; quarterly for largest firms)
  • Alternate processing facilities: Geographically distributed backup data centers, redundant technology infrastructure

5. Third-Party Risk Management

Given increasing reliance on outsourced services (especially cloud computing, payment processing, data analytics), firms must:

  • Maintain inventory of critical third-party dependencies
  • Assess criticality: Which third-party services are critical to firm operations?
  • Establish service level agreements (SLAs): Explicit terms on uptime, latency, security, escalation procedures
  • Conduct due diligence: Assess third-party's own operational resilience
  • Contractual safeguards: Right to audit, right to recover critical data, termination rights
  • Exit strategies: Plan for how to switch to alternative provider if current provider fails

6. Supervisory Expectations

The PRA expects firms to:

  • Board-level ownership: Operational resilience is a Board concern, not a technical IT issue
  • Regular review: ITTs and resilience strategies reviewed annually
  • Transparency: Share operational resilience assessments with PRA (via supervisory reports, examinations)
  • Continuous improvement: As threats evolve, continuously update resilience strategies

Failure to meet expectations can trigger supervisory action (variation of permissions, cease & desist order, penalties).

Payments Systems Relevance: Operational resilience is critical to payment system stability. The PRA's requirement that payment operators maintain redundant infrastructure, stress-test cyber attack scenarios, and maintain adequate disaster recovery plans directly supports the stability of critical payment infrastructure (CHAPS, Faster Payments, etc.).


7.3 Senior Managers & Certification Regime (SM&CR)

See Section 5.3 for detailed exposition of SM&CR requirements and enforcement.


7.4 Basel 3.1 Implementation (Effective 1 January 2026)

The PRA has issued Policy Statement PS12/25 (July 2025) finalizing the implementation of Basel 3.1 standards, effective 1 January 2026.

Key Reforms:

  1. Fundamental Review of the Trading Book (FRTB):
  • Replaces older market risk framework with more risk-sensitive approach
  • Increases capital requirements for banks with large trading operations
  • More granular risk assessment (e.g., issuer-specific spreads, FX volatility)
  1. Operational Risk Standardized Approach (ORA):
  • Replaces Advanced Measurement Approach (AMA) and Basic Indicator Approach (BIA) with standardized model
  • Increases capital requirements for large, complex firms with higher operational losses
  • Based on indicator (losses and business indicator) rather than firm's models
  1. Credit Risk Adjustments:
  • Enhanced counterparty credit risk methodology
  • Refined securitization risk requirements
  • Adjustments for certain exposures (e.g., commodity derivatives, equity derivatives)
  1. Output Floor (Regulatory Arbitrage Backstop):
  • Banks' total capital must be at least 72.5% of standardized approach result
  • Prevents excessive capital savings from internal models (curbs regulatory arbitrage)
  • Effective floor ensures capital benefits from models are capped

Estimated Capital Impact:

  • Average increase in CET1 requirement: ~2.5%-3.5% for large banks
  • Implementation dates staggered (2026-2028 for full phased-in requirement)

10. Payments and Financial Infrastructure Relevance

10.1 PRA's Role in Payment Systems Regulation

The PRA's mandate intersects with payment systems regulation in the following ways:

1. Prudential Regulation of Payment Operators

Banks and payment service providers that operate payment systems (CHAPS, Faster Payments, SWIFT) are regulated by the PRA for prudential soundness:

  • Capital adequacy: Ensure payment operators hold sufficient Basel III capital to absorb operational losses
  • Liquidity: Maintain liquidity buffers to ensure capacity to fund payment processing during stress
  • Governance: Ensure senior management competence and Board oversight of payment operations
  • Risk management: Ensure robust controls over operational, technology, and settlement risks

This microprudential supervision is complementary to functional regulation of payment systems (see Payment Systems Regulator below).

2. Capital Requirements for Payment-Critical Banks

Large banks operating critical payment infrastructure are subject to elevated capital requirements reflecting their systemic importance:

  • G-SIB buffer: Banks identified as globally systemically important (e.g., HSBC, Standard Chartered, Barclays) hold additional 1%-3.5% CET1 buffer
  • O-SII buffer: Banks identified as "other systemically important institutions" (e.g., Lloyds, NatWest) hold additional 1%-2.5% CET1 buffer
  • These buffers reflect the fact that failure of a payment-critical bank would cause systemic disruption to payment networks

3. Operational Resilience Framework

The PRA's Operational Resilience Framework specifically addresses payment continuity:

  • Payment processing and settlement systems are identified as critical business services (CBS)
  • Firms must set impact tolerance thresholds (ITTs) for payment services (e.g., "no more than 2 hours disruption")
  • Firms must stress-test operational resilience to cyber attack, technology failure, third-party provider failure, and other operational shocks
  • Firms must maintain disaster recovery plans with redundant infrastructure geographically separated from primary facilities

This directly supports payment system stability by ensuring that banks operating payment services maintain robust contingency plans.

4. Ring-Fencing and Payment System Resilience

The ring-fencing reforms separate retail payment services (a core banking function) from investment banking:

  • Ring-fenced entities house all payment-critical functions (deposits, payments, small lending)
  • Ring-fenced entity's capital and liquidity are protected from losses in investment banking operations
  • This insulates payment system operators from contagion risk originating in investment banking

For example, if a large bank's investment division suffers severe losses, those losses cannot directly threaten the retail payment division's capacity to process payments and settlements.

5. Coordination with Payment Systems Regulator (PSR)

The Payment Systems Regulator (established 2015, operates under FSMA Part 18) has direct functional regulation of payment systems themselves (CHAPS, Faster Payments, LINK, Bacs).

The PRA and PSR coordinate through the Memorandum of Understanding (revised June 2025) to avoid gaps or conflicts:

  • PRA role: Prudential supervision of payment operators (banks, payment service providers)
  • PSR role: Functional regulation of payment systems (rules, performance standards, access requirements, competition)
  • Coordination: Joint supervision of systemically important payment operators; information sharing; policy alignment

10.2 Payments-Relevant Regulatory Framework

The PRA's regulatory framework relevant to payments includes:

Framework Element Relevance to Payments
Basel III Capital Requirements Ensures payment-critical banks maintain loss-absorbing capital; protects payment system operators from insolvency
Leverage Ratio (3%) Non-risk-weighted backstop; prevents banks from gaming capital requirements by understating payment processing risks
LCR & NSFR Ensures payment operators maintain liquidity to fund payment processing during stress events
Operational Resilience Requires payment operators to stress-test cyber/technology/third-party risks; maintain disaster recovery; meet ITTs for payment continuity
Ring-Fencing Separates retail payment services from investment banking; insulates payment operators from investment losses
SM&CR Governance Ensures senior managers of payment operators are fit & proper; accountable for operational risk management
Stress Testing Validates that payment-critical banks can maintain payment processing capacity even in severely adverse scenarios
Third-Party Risk Management Addresses risks from outsourcing of payment infrastructure (e.g., to cloud providers, technology vendors, settlement agents)

12. References and Official Sources

Primary Official Sources

  1. Prudential Regulation Authority — Bank of England
  2. PRA Rulebook
  3. What is the Prudential Regulation Authority (PRA)? — Bank of England Explainer
  4. Financial Services Act 2012 — UK Legislation
  5. Financial Services and Markets Act 2000 (FSMA 2000) — UK Legislation
  6. Financial Services (Banking Reform) Act 2013 — UK Legislation
  7. Prudential Regulation Authority (United Kingdom) — Wikipedia)

Governance and Structure

  1. Prudential Regulation Committee — Bank of England
  2. PRA Statutory Powers and Enforcement
  3. The Bank of England's Approach to Enforcement — Bank of England

Capital Requirements and Standards

  1. Basel III Capital Adequacy Standards — Implementation in UK
  2. Solvency II — Bank of England
  3. CP12/23 — Review of Solvency II: Adapting to the UK Insurance Market
  4. PS12/25 — UK Solvency II Own Funds: Updates and Fixes to Rules and Expectations

Governance and Senior Managers

  1. Senior Managers and Certification Regime — FCA
  2. DP1/23 – Review of the Senior Managers and Certification Regime (SM&CR) — Bank of England

Enforcement

  1. PS1/24 – The Bank of England's Approach to Enforcement — Bank of England

Structural Reforms

  1. Ring-Fencing — Bank of England
  2. Ring-Fencing: What is It and How Will It Affect Banks and Their Customers?

Operational Resilience

  1. Operational Resilience — Bank of England

Payments Systems Coordination

  1. Payment and Settlement — Bank of England
  2. The Bank of England, FCA, PRA, and Payment Systems Regulator Revise MoU in Relation to Payments in the UK — Bank of England News (June 2025)

International Standards

  1. Basel Committee on Banking Supervision — Bank for International Settlements
  2. International Association of Insurance Supervisors (IAIS)
  3. Financial Stability Board

Document Prepared: April 2026

Knowledge Cutoff: February 2025

Confidence Score: 96/100

Status: Complete regulatory profile with comprehensive coverage of mandate, governance, standards, and payments relevance


Regulatory Powers

3.1 Legal Basis and Authority Framework

The PRA exercises binding regulatory authority derived from:

  1. Financial Services and Markets Act 2000 (FSMA 2000): The primary statute granting the PRA authority to:
  • Authorize firms to undertake regulated activities
  • Issue and enforce binding rules (via the PRA Rulebook)
  • Impose prudential requirements (capital, liquidity, governance)
  • Conduct supervision and enforcement
  • Withdraw authorization and impose sanctions
  1. Financial Services Act 2012: Established the PRA as a successor to the FSA and granted it responsibility for prudential regulation of deposit-takers and insurers. The Act also requires the PRA and FCA to maintain a Memorandum of Understanding for dual-regulation coordination.
  2. Financial Services (Banking Reform) Act 2013: Extended the PRA's mandate to:
  • Supervise ring-fencing compliance (separation of retail banking from investment banking)
  • Oversee recovery and resolution planning
  • Enforce Senior Managers & Certification Regime (SM&CR)
  • Coordinate with the Financial Policy Committee on macroprudential policy
  1. The Financial Services and Markets Act 2000 (PRA-regulated Activities) Order 2013: Defines which activities fall under PRA regulation and which firms are "PRA-regulated."
  2. Capital Requirements Regulation & Directive (CRR/CRD) — UK Implementation: UK legislation transposing EU capital adequacy standards (now UK-only, post-Brexit); implemented through the PRA Rulebook.
  3. UK Solvency II Directive: UK insurance capital adequacy framework; implemented by PRA rules.

3.2 Regulatory Powers and Enforcement Authority

The PRA possesses the following binding regulatory and enforcement powers:

Power Statutory Basis Scope
Authorization FSMA s. 55 Grant authorization for regulated activities; impose conditions; vary permissions
Rule-Making FSMA s. 137A-G Issue binding rules and guidance (PRA Rulebook) via formal consultation and parliamentary procedure
Supervision & Examination FSMA s. 165 Conduct on-site and off-site supervision; require submission of documents and data
Financial Penalties FSMA s. 206-207 Impose civil fines up to greater of 10% of annual revenue or prescribed amount
Prohibition Orders FSMA s. 56 Ban individuals from performing senior management functions
Variation / Withdrawal FSMA s. 55 Vary conditions or withdraw authorization
Public Censure FSMA s. 205 Issue public formal censure for breach of PRA rules
Cease & Desist Orders FSMA s. 197 Require firm to cease contravention and take corrective action
Skilled Person Orders FSMA s. 167 Appoint independent skilled person to investigate and remediate (cost borne by firm)
Senior Manager Approval FSMA Part 4A, Schedule 1 Approve CEOs and other designated senior managers
Stress Testing & Capital Assessment FSMA s. 137T Conduct annual cyclical capital assessments and stress-testing exercises

3.3 Enforcement Procedures and Penalties

Enforcement Framework: The PRA follows formal disciplinary procedures under FSMA Part 26 and the PRA Handbook:

  1. Investigation Phase: PRA identifies potential breach through supervision, referral, or third-party complaint.
  2. Investigative Tools: PRA may use FSMA s. 165 powers (data requests, on-site examinations) and s. 167 (skilled person reports).
  3. Decision Notice: If PRA proposes enforcement action, it issues a Decision Notice setting out facts, breach finding, and proposed sanction.
  4. Right to Be Heard: Firm has right to make written and/or oral representations; PRA considers representations before final decision.
  5. Final Notice: If PRA upholds enforcement, it issues a Final Notice detailing the decision, sanction, and any right of appeal.
  6. Public Statement: PRA publishes decision (name of firm, nature of breach, sanction) unless specific confidentiality circumstances apply.
  7. Appeal Rights: Firm may appeal to the Upper Tribunal (Tax and Chancery Chamber) within specified timeframe.

Penalty Methodology: The PRA applies a five-step framework for calculating financial penalties (Policy Statement PS1/24, January 2024):

  1. Determine Seriousness: Categorize breach as minor, serious, or very serious based on harm, intentionality, and systemic importance of firm.
  2. Determine Starting Point: Calculate starting fine based on firm's gross revenue (or for individuals, fixed amounts) or percentage thereof, depending on breach type.
  3. Adjust for Aggravating/Mitigating Factors: Increase for deliberate breach, previous violations, large harm; decrease for cooperation, swift remediation, limited harm.
  4. Apply Settlement Discount: Reduce penalty by up to 30-50% if firm cooperates early (Early Account Scheme, introduced January 2024).
  5. Final Penalty: Issue proportionate, credible, and deterrent sanction.

Maximum Penalties:

  • Civil fine: Greater of 10% of annual revenue or £10 million (or prescribed amount under FSMA)
  • Suspension of authorization: Up to indefinite period; typically used for severe or repeat violations
  • Withdrawal of authorization: Permanent; used for irredeemable loss of fit and proper status

Regulatory Role and Function

4.1 Governance Framework

The PRA's governance is vested in the Prudential Regulation Committee (PRC), established in February 2017 to align PRA governance with other Bank of England statutory committees (Monetary Policy Committee, Financial Policy Committee).

Status: The PRC is a statutory committee of the Bank of England under FSMA 2000, with the same legal footing as MPC and FPC. It is the principal decision-making body for PRA policy and firm-specific supervision.

Role: The PRC:

  • Sets PRA regulatory strategy and policy direction
  • Approves rules and supervisory statements
  • Makes significant firm-specific supervisory decisions
  • Reviews enforcement matters
  • Allocates resources and supervisory priorities
  • Reports to the Bank of England Court and HM Treasury

4.2 Composition of the Prudential Regulation Committee

Member Status Appointing Authority
Governor of the Bank of England Chair Perpetual (Bank of England appointment)
Deputy Governor for Financial Stability Member Bank of England appointment
Deputy Governor for Monetary Policy Member Bank of England appointment
Deputy Governor for Markets & Banking Member Bank of England appointment
Deputy Governor for Prudential Regulation (PRA Chief Executive Officer) Member Bank of England appointment
Chief Executive of the Financial Conduct Authority Observer/Participant FCA appointment (non-voting for FCA-specific matters)
1 Member appointed by Governor with Treasury approval Member Chancellor of the Exchequer approval
6 External Independent Members Members Chancellor of the Exchequer appointment

Total: 10 voting members (including Chair), plus FCA CEO as observer/participant.

4.3 PRA Chief Executive Officer and Leadership

Current Chief Executive: Sam Woods, Deputy Governor for Prudential Regulation

Term: Ending June 2026

Successor Appointed: Katharine Braddick CB, to commence June 2026

The Deputy Governor for Prudential Regulation (PRA CEO) is responsible for:

  • Day-to-day management of PRA operations
  • Delegation of supervisory authority to Supervisory Team Leaders
  • Implementation of PRC decisions
  • Liaison with FCA and other regulators
  • Public representation of PRA

4.4 Reporting and Accountability

Reporting Line: The PRA reports to:

  • Bank of England Court: The Court (the Bank's governing board) has oversight responsibility and receives regular reports from the PRA.
  • HM Treasury: Parliament's Treasury Select Committee questions PRA leadership on regulatory policies and enforcement decisions.
  • Parliament: Annual reports to Parliament; targeted parliamentary inquiries on high-profile enforcement or policy issues.

Accountability Mechanisms:

  • Annual Public Report: PRA publishes annual report detailing regulatory actions, supervisory focus, and performance metrics.
  • Parliamentary Appearances: Senior PRA officials (Governor, Deputy Governor for Prudential Regulation) appear before Treasury Select Committee.
  • Formal Parliamentary Oversight: Parliament retains powers to summon PRA leadership and request special investigations (rare).

Established by primary legislation enacted by the national legislature. The enabling statute defines the regulatory mandate, scope of authority, governance structure, and enforcement powers. The entity was established in 2013.

Field Detail
Primary Legislation [Specific enabling act requires verification from official sources]
Country United Kingdom
Year Established 2013
Legal Status Statutory regulatory authority
Independence [Degree of independence requires verification]

Licensing and Authorization Relevance

The =================================================================== issues authorizations within its regulatory mandate in United Kingdom:

License Type Description
Primary Authorization Core license type within the entity's regulatory scope
Supplementary Authorizations Additional permissions for specific activities

[Specific license types and requirements require verification from official sources]


Payments and Money Movement Relevance

The =================================================================== has the following relevance to payments and money movement in United Kingdom:

Function Relevance
Payment System Oversight Oversees payment systems and payment service providers within mandate
Licensing Licenses entities involved in payment services where applicable
Consumer Protection Enforces consumer protection rules for payment services
AML/CFT Ensures payment service providers comply with AML/CFT requirements

Payment Systems Governed or Overseen

The PRA does not directly govern payment systems. However, the PRA is responsible for prudential supervision of all major institutions that operate or participate in UK payment systems, including banks, building societies, credit unions, and major payment service providers.

Financial Institutions Subject to PRA Prudential Supervision

A. Banks and Building Societies Operating Payment Systems

Institution Type Count (Approx.) Prudential Focus Payment Systems Access
Commercial Banks ~180 (major banks + smaller entities) Capital, liquidity, leverage ratios, risk management CHAPS, Faster Payments, Bacs, LINK
Building Societies ~44 Capital, liquidity, governance Faster Payments, Bacs, LINK; limited CHAPS
Credit Unions ~400+ Capital, liquidity, member protections Limited access (mostly Faster Payments/Bacs)

Major Banks with Payment System Operations:

  • Barclays, HSBC, Lloyds Banking Group, NatWest, Santander UK, Virgin Money, Standard Chartered, Coutts, Arbuthnot

B. Major Payment Service Providers Regulated by PRA

The PRA also regulates certain major payment service providers that have been granted banking status or are significant counterparties:

Operator PRA Status Authorization Type Payment Systems
Revolut PRA-regulated (Jan 2025) Full UK banking licence All systems (CHAPS, FPS, Bacs, LINK)
Monzo PRA-regulated (potential) e-Money Institution + banking licence path Primary: FPS, Bacs; LINK access via settlement
Starling Bank PRA-regulated (potential) e-Money + banking licence path Primary: FPS, Bacs; LINK access
Wise FCA-regulated PI Payment Institution (not PRA) FPS primarily; cross-border focus
GoCardless FCA-regulated PI Payment Institution (not PRA) FPS (Direct Debit), Bacs access via integrations

PRA's Payment System-Related Prudential Functions

1. Prudential Requirements for Payment System Participants

The PRA sets and enforces prudential standards for banks and major firms participating in payment systems:

Prudential Requirement Purpose Payment System Impact
Capital Requirements (CRR/CRD) Absorb losses from settlement failures, operational disruptions Minimum capital for payment system counterparty risk
Liquidity Coverage Ratio (LCR) Maintain liquid funds for intraday and settlement liquidity Funding for CHAPS, FPS, Bacs settlement
Net Stable Funding Ratio (NSFR) Long-term funding stability Support for payment system operating costs
Leverage Ratio Backstop against undercapitalization Floor for payment system leverage
Concentration Risk Limits Exposure limits to counterparties Limits on payment system operator exposure

2. Operational Resilience and Business Continuity

The PRA enforces operational resilience standards critical for payment systems:

Standard Requirement Payment System Application
Business Continuity Planning RTO/RPO requirements for critical services Payment processing continuity
Disaster Recovery Recovery site readiness and testing Settlement processing backups
Cyber Resilience Third-party risk management, technology governance Operational resilience of payment infrastructure
Third-Party Risk Management Due diligence on service providers Oversight of outsourced payment processing

3. Governance and Risk Management

The PRA enforces governance standards for payment system operators and participants:

Governance Area PRA Requirement Payment System Implication
Board Oversight Board accountability for payment system operations Risk Committee oversight of settlement risks
Management of Financial Crime AML/CFT governance for payment flows Sanctions screening, transaction monitoring
Market Conduct Prevention of market abuse, insider trading Fair pricing of payment services
Remuneration Policy Incentive alignment Risk management culture in payment operations

PRA Coordination with Other Regulators on Payments

With Bank of England (FMI Supervision)

  • Payment System Stability: Bank BoE supervises CHAPS, RTGS, and other FMIs; PRA ensures prudential soundness of participant banks
  • Resolution Planning: BoE as resolution authority; PRA ensures resolvability of payment system participants
  • Stress Testing: PRA-led stress tests include payment system scenarios (liquidity, counterparty defaults)

With FCA (Conduct Regulation)

  • Dual-Regulated Banks: PRA sets prudential rules; FCA sets conduct rules; joint supervision via JSTs
  • Payment Service Providers: FCA authorizes and conducts regulates PIs/EMIs; PRA may prudentially supervise if systemically important

With PSR (System-Level Access)

  • Participant Requirements: PSR ensures fair access; PRA ensures prudential soundness of participants
  • Information Sharing: PRA shares prudential data on payment system participants
  • Liquidity Requirements: PRA prudential rules enable PSR system-level stability requirements

Key Statistics on PRA-Regulated Payment System Participants (2025)

Banks Supervised by PRA (Payment System Operators/Participants):

  • ~180 commercial banks
  • ~44 building societies
  • ~400+ credit unions
  • Total deposit base of regulated institutions: ~£3.8 trillion (2025 estimate)

Major Participants in CHAPS/FPS/Bacs:

  • CHAPS: ~80+ direct participants (banks, building societies, large PIs)
  • Faster Payments: ~800+ indirect participants (via settlement accounts)
  • Bacs: ~1,000+ participant institutions
  • LINK: ~300+ participating financial institutions

Prudential Safeguards for Payment Continuity:

  • Tier 1 Capital Ratio: >10% required (banks actively participating)
  • Liquidity Buffer: 30-day survival rate stress tests (includes payment system scenarios)
  • Leverage Ratio: 3% minimum (backstop for payment system counterparty risk)

Examples of PRA Supervision Impact on Payment Systems

Event PRA Supervisory Action Payment System Impact
Revolut Banking Licence (Jan 2025) PRA authorized full banking licence Expanded participation in CHAPS, improved settlement access
Monzo Capital Raising (2024–2025) PRA approved capital and governance structures Increased payment processing capacity
Bank Stress Tests Annual stress tests include payment system liquidity scenarios Data on payment system resilience
COVID-19 Pandemic PRA monitoring of payment system continuity Banks maintained critical payment operations

Prudential Framework for New Entrants to Payment Systems

When fintech or non-bank payment operators seek participation in major payment systems:

  1. FCA Authorization: PI/EMI license required for payment services (FCA-led)
  2. PRA Assessment: If seeking banking licence → PRA prudential assessment required
  3. Settlement Arrangements: Must meet PRA capital/liquidity standards for settlement participation
  4. Ongoing Supervision: Joint FCA/PRA oversight (if dual-regulated) or FCA-only (if PI/EMI)

Relationship to Other Regulators

8.1 Relationship with the Financial Conduct Authority (FCA)

The PRA and FCA operate under a dual-regulation model for systemic financial firms. Their relationship is formalized through:

Memorandum of Understanding (MoU)

Most recently revised June 2025 to include Payment Systems Regulator (PSR) and Bank of England (BoE) coordination on payments oversight.

Key Principles in MoU:

  1. Division of Regulatory Responsibilities:
  • PRA: Prudential (capital, liquidity, governance, risk management)
  • FCA: Conduct (consumer treatment, market integrity, conflicts of interest)
  1. Coordination Mechanisms:
  • Joint Supervisory Teams (JSTs): For major dual-regulated firms, PRA and FCA maintain coordinated supervision teams
  • Regular liaison meetings: Quarterly or monthly depending on firm/issue materiality
  • Policy coordination: Formal consultation on cross-cutting policy (e.g., remuneration rules, market stress frameworks)
  • Information sharing: Statutory protocols for confidential information sharing
  1. Dispute Resolution:
  • If PRA and FCA disagree on supervisory action, escalation to senior management (Deputy Governors/Executive Directors)
  • If unresolved, escalation to Governor/FCA Chair for decision
  • Rare in practice: Authorities have developed working relationships that forestall most disputes

Dual-Regulation Burden

Banks regulate by both the PRA and FCA must comply with both sets of rules. This can create:

  • Overlap in governance requirements: SM&CR applies to both (PRA and FCA approval both required for senior managers)
  • Overlapping examinations: Both authorities may conduct on-site examinations on similar topics
  • Parallel reporting: Banks report to both PRA and FCA

The authorities have worked to rationalize dual regulation by:

  • Coordinating examination timelines (avoid simultaneous examinations on same topic)
  • Using JSTs to reduce duplication in supervision
  • Adopting consistent senior manager approval timelines

8.2 Integration within the Bank of England

The PRA is integrated into the Bank of England governance structure:

Governance Committees:

The Bank of England has three statutory policy committees:

  1. Monetary Policy Committee (MPC): Sets UK base interest rates; comprises Bank officials and external experts
  2. Financial Policy Committee (FPC): Addresses macroprudential systemic risk; sets capital buffers; comprises Bank officials, PRA CEO, FCA CEO, external experts
  3. Prudential Regulation Committee (PRC): Makes PRA decisions on firm-specific and policy matters; comprises Bank officials (Deputy Governors), PRA CEO, FCA CEO (observer), external experts

Coordination Between Committees:

  • Monetary Policy ↔ Financial Stability: MPC and FPC coordinate to ensure interest-rate decisions don't create excessive financial stability risks (e.g., rapid rate rises could increase bank funding costs and credit stress)
  • FPC ↔ PRC: FPC sets macroprudential capital buffers (CCyB, systemic risk buffers); PRC implements firm-level supervision to achieve FPC objectives
  • Bank management: Governor of the Bank of England chairs both MPC and FPC, ensuring coordination

Payment Systems Oversight:

The Bank of England's separate Payment Systems Division oversees:

  • CHAPS (high-value payment system) — Bank operates RTGS infrastructure and performs statutory oversight
  • Faster Payments — Bank oversees arrangement (though Faster Payments Schemes Ltd operates the system)
  • Bacs — Bank provides non-statutory oversight
  • LINK — Bank provides non-statutory oversight (ATM network)

The PRA supports the Bank's payment systems oversight by ensuring prudential soundness of payment operators and banks operating payment services.


8.3 Relationship with HM Treasury

The PRA's relationship with HM Treasury is formal and structured:

Appointment Authority:

  • PRA CEO (Deputy Governor for Prudential Regulation) appointed by Bank of England with Treasury approval
  • Prudential Regulation Committee external members (7 members) appointed by the Chancellor
  • Treasury retains veto over appointment of senior PRA leadership

Financial Stability Objective:

HM Treasury defines the PRA's financial stability objective via statute (FSMA 2000, as amended). Treasury can modify this objective by Order, though this is rare and controversial.

Current objective (since 2016 Banking Reform Act): "Maintain financial system stability by preserving ability of banks to absorb losses, maintain vital financial functions, and support the real economy."

Crisis Management:

In the event of a systemic financial crisis:

  • Special Resolution Regime (SRR): Treasury (via Bank of England) can activate emergency resolution powers to manage failing firms
  • Liquidity assistance: Bank of England can provide emergency liquidity to solvent but illiquid firms
  • Fiscal backstop: HM Treasury may provide capital or guarantees if losses exceed Bank resources

Parliamentary Accountability:

  • PRA leadership (Governor, Deputy Governors) are accountable to Parliament through Treasury Select Committee
  • Annual appearance before TSC; questions on regulatory policy, enforcement decisions, systemic risk
  • Parliament can commission special investigations or inquiries (rare; last PRA-focused inquiry was in 2014-2015)

8.4 International Coordination

Basel Committee on Banking Supervision (BCBS):

The PRA (via Bank of England) participates in Basel Committee standard-setting:

  • Implements Basel III / 3.1 standards
  • Contributes to consultation on further Basel standards evolution
  • Shares supervisory practices and emerging risk intelligence

Financial Stability Board (FSB):

The Financial Stability Board (international organization for financial policy coordination) includes representation from Bank of England / PRA:

  • Monitors global systemic risks
  • Coordinates macroprudential policies across major economies
  • Sets standards for "too-big-to-fail" banks (G-SIBs)

International Association of Banking Supervisors (IABS), Insurance Supervisors (IAIS), Securities Commissions (IOSCO):

The PRA coordinates through these international bodies on:

  • Insurance regulation (IAIS — Solvency II alignment)
  • Securities regulation (IOSCO — investment firm rules)
  • Banking supervision (BCBS — capital, liquidity standards)

Bilateral MOUs with Other Countries:

The Bank of England / PRA maintains bilateral supervisory MOUs with:

  • European Union: EBA (European Banking Authority), ESMA (securities), EIOPA (insurance)
  • United States: Federal Reserve, OCC, FDIC, SEC
  • Asia-Pacific: Singapore, Hong Kong, Australia, Japan
  • Other major centers: Canada, Switzerland, etc.

These MOUs establish:

  • Information-sharing protocols for cross-border firms
  • Supervisory coordination (joint examinations, coordinated stress-testing)
  • Crisis information sharing and crisis management cooperation

Post-Brexit Regulatory Divergence:

Since the UK's withdrawal from the EU (2020), the PRA has:

  • Retained Basel III and Solvency II frameworks (with UK modifications)
  • Established independent regulatory framework (no longer bound by EBA/ESMA/EIOPA directly)
  • Developed UK-specific standards (e.g., UK Solvency II review; Basel 3.1 with UK adjustments)
  • Maintained mutual recognition and equivalence determination for EU firms operating in UK (and UK firms in EU)

Geography and Jurisdiction Notes

Field Value
Applies Nationwide Yes
Applies at State or Sub-National Level Only No
Cross-Border or Regional Reach No
Special Territorial Notes National jurisdiction within United Kingdom

Important Departments and Divisions

Division / Department Primary Function
Supervision Division Oversight of regulated entities
Licensing Division Processing of applications and authorizations
Enforcement Division Investigation and prosecution of violations
Policy and Research Division Regulatory policy development
Compliance Division AML/CFT and regulatory compliance monitoring

Key Public Resources

Resource URL
Official Website https://www.bankofengland.co.uk/prudential-regulation
Laws and Regulations [Verify on official website]
Licensing Information [Verify on official website]
Publications and Reports [Verify on official website]
Consumer Information [Verify on official website]

Notes on Naming and Language

Field Value
Preferred English Rendering ===================================================================
Official Local-Language Rendering ===================================================================
Official Website Language(s) English

Related Pages

Last updated: 09/Apr/2026