Powered by Lexis+®
Jurisdiction(s):
United Kingdom
CASE STUDY

“LexisNexis is great as I can find the answers I am looking for really quickly. I believe that nothing should be more than 6 clicks away - and the products from LexisNexis deliver on this standard”

Avensure

Access all documents on Supervisory authority

Supervisory authority meaning

What does Supervisory authority mean?
In practice, a supervisory authority is the independent data protection regulator that oversees compliance, receives breach notifications, investigates complaints, and issues guidance and enforcement measures. The term is defined in Article 4(21) GDPR, with Articles 51–59 setting out establishment, tasks and powers; Member States may establish one or more such authorities (Article 51). In the UK, the Information Commissioner is the supervisory authority under the UK GDPR and the Data Protection Act 2018; the UK is outside the EU GDPR regime. Usage is consistent across England & Wales, Scotland and Northern Ireland (the ICO acts UK‑wide). In Ireland, the Data Protection Commission is the supervisory authority under the EU GDPR and the Data Protection Act 2018 (Ireland). For cross‑border processing within the EU/EEA, a lead supervisory authority may act under the GDPR’s one‑stop‑shop (Article 56), coordinating with other supervisory authorities via the European Data Protection Board. Post‑Brexit, the one‑stop‑shop does not apply to UK processing, though the ICO cooperates internationally. Practically, organisations deal with the competent supervisory authority when notifying personal data breaches (Article 33 GDPR/UK GDPR), seeking prior consultation on high‑risk processing (Article 36), and obtaining approvals for codes of conduct, certification mechanisms or binding corporate rules.
Speed up all aspects of your legal work with tools that help you to work faster and smarter. Win cases, close deals and grow your business–all whilst saving time and reducing risk.

View the related Checklists about Supervisory authority

CHECKLISTS
FCA/PRA SYSC and Rulebook Cross-Reference Checklist: Senior Management Arrangements, Systems and Controls (SM&CR, Outsourcing, Operational Resilience, Remuneration) United Kingdom

FCA and PRA senior management arrangements, systems and controls requirements The Financial Conduct Authority’s (FCA) expectations for senior management arrangements, systems and controls are outlined in the Senior Management Arrangements, Systems and Controls sourcebook (SYSC) within the FCA Handbook, as set out in SYSC. For the Prudential Regulation Authority (PRA), equivalent obligations appear across sections of the PRA Rulebook and in PRA Supervisory Statements (SSs). This checklist offers a mapping of the requirements in the various SYSC chapters alongside the corresponding senior management arrangements, systems and controls provisions contained in the PRA Rulebook and SSs. The mapping links each SYSC chapter to the parallel PRA materials. Details of the entities within the scope of SYSC are summarised in SYSC 1.1A.1G, and set out in full in SYSC 1 Annex 1 and in the relevant SYSC chapter...

Read More Right Arrow
CHECKLISTS
UK financial services regulators and supervision—twin peaks structure, roles of BoE, PRA, FCA, FPC and PSR, FSMA 2023 reforms, and key institutional interactions

'Twin peaks' regulatory structure The 2007–2008 financial crisis prompted a sweeping overhaul of the UK’s supervisory framework. The new model, effective from 1 April 2013, is widely referred to as ‘twin peaks’ regulation. Under this arrangement, responsibilities are divided between: Prudential oversight — undertaken by the Prudential Regulatory Authority (PRA) for insurers, banks, building societies, credit unions and systemically important investment firms. Conduct supervision — undertaken by the Financial Conduct Authority (FCA), which also carries out prudential regulation of investment firms that are not systemically important. The framework also encompasses the Bank of England (the Bank) and its Financial Policy Committee (FPC), and the Payment Systems Regulator (PSR), a subsidiary of the FCA that began operating in 2015. For a visual outline, see Practice Note: Regulatory structure diagram. For more on the UK regulators, see Overview: UK regulators—financial services—overview, and for how they interact with each other and non-UK regulators, see Practice Note: Interaction between the PRA, FCA and FPC...

Read More Right Arrow
CHECKLISTS
Archived: UK PRA Consultation Papers Tracker 2017–2023, with Related Policy and Supervisory Statements

ARCHIVED: This Practice Note has been archived and is no longer being maintained This tracker summarises the consultation papers issued by the Prudential Regulation Authority (PRA) from 2017 onwards, together with the release of any follow‑on rules and guidance. For material on consultation papers from the Financial Conduct Authority (FCA) and the Financial Services Authority (FSA), see: FCA consultation paper tracker FSA consultation paper tracker Topic area, consultation paper, description, publication date, end of consultation period, and any Policy Statement / Supervisory Statement are recorded. Regulation of insurance 2023 — CP24/23 – Funded reinsurance. This consultation paper outlines proposed expectations for life insurance firms acting as cedants when entering into, or retaining, funded reinsurance arrangements. The PRA’s proposals reflect its assessment that the rising use of funded reinsurance within the UK insurance market presents significant potential risks, including the prospect of unduly concentrated exposures to correlated, credit‑focused counterparties...

Read More Right Arrow

View the related News about Supervisory authority

NEWS
UK and EU financial services round-up: FCA programme, fees and perimeter; PSR, PRA/BoE and FSCS updates; UK MLR draft; EU CMDI; ESMA MMF (26 March 2026)

Financial services developments FCA updates perimeter report and publishes work programme and fees proposals for 2026/27 The Financial Conduct Authority (FCA) has issued its annual work programme for 2026/27, refreshed its perimeter report, and opened consultation paper CP26/11, which sets out its proposals on the rates for regulated fees and levies for 2026/27. Responses to the consultation are requested by 30 April 2026. The Annual Work Programme sets out initiatives intended to streamline processes, remove friction where appropriate, and help firms operate more efficiently, while upholding high standards across the financial sector. It features, among other things: embedding AI in regulatory workflows to detect harm more effectively and accelerate regulatory decision-making processes using generative AI to review documents received from firms, supporting quicker, more timely decisions...

Read More Right Arrow
NEWS
UK, EU and international financial services regulation and enforcement: weekly developments, analysis and key dates—9 January 2025

In this issue: UK, EU and international regulators and bodies Acountability, culture and social governance Authorisation, approval and supervision Prudential requirements Financial crime and sanctions Investigations, enforcement and discipline Dispute resolution for financial services lawyers Banks and mutuals EU MiFID II Consumer credit, mortgage and home finance Regulation of insurance FSMA regulated pensions activity Payment services and systems Financial Services Enforcement Database Daily and weekly news alerts Intraday news alerts New and updated content Dates for your diary UK, EU and international regulators and bodies Regulation to prioritise UK growth over risk-aversion in 2025 Law360, London: Financial watchdogs have vowed, firmly in line with new government objectives, to elevate economic growth above risk-aversion in 2025 — a recalibration that might cut across the recent stress on safeguarding consumers. See: Regulation to prioritise UK growth over risk-aversion in 2025. Acountability, culture and social governance UK...

Read More Right Arrow
NEWS
UK, EU and international financial services regulation, supervision and enforcement update—banks, markets, funds, payments, insurance, consumer redress, cryptoassets and AI (2 April 2026)

In this issue: UK, EU and international regulators and bodies Prudential requirements Risk management and controls Operational resilience Financial crime and sanctions Complaints, compensation and claims management Investigations, enforcement and discipline Regulation of capital markets Sustainable finance and ESG Banks and mutuals Investment funds and asset management Consumer credit, mortgage and home finance Regulation of insurance Payment services and systems Fintech and cryptoassets Regulation of AI in FS Dates for your diary New and updated content Financial Services Enforcement Database Daily and weekly news alerts LexTalk®Financial Services: a Lexis®Nexis community UK, EU and international regulators and bodies ESAs publish spring 2026 joint risk update The three European Supervisory Authorities—the European Banking Authority, the European Insurance and Occupational Pensions Authority, and the European Securities and Markets Authority—have released their Joint Committee spring 2026 update examining risks and vulnerabilities across the EU financial system....

Read More Right Arrow

View the related Practice Notes about Supervisory authority

PRACTICE NOTES
FCA, PRA and Bank of England regtech strategy: TechSprints, Digital Sandbox, digital regulatory reporting, transforming data collection (Future Banking Data), and the move away from a ‘Robo Handbook’

Scope of this Practice Note This Practice Note addresses matters linked to technology used to help firms comply with their regulatory duties—often referred to as ‘regtech’. It reviews how the Financial Conduct Authority (FCA) and the Bank of England (BoE) (including the Prudential Regulation Authority (PRA)) engage with regtech, highlights industry activity, and records both the proposal and subsequent withdrawal of an FCA ‘Robo Handbook’. It examines these facets of what has come to be known as ‘regtech’: what is regtech? the FCA’s approach FCA TechSprints digital sandbox other regulator-side developments towards a Robo Handbook industry-side developments other initiatives What is regtech? Regtech is a broad label for the use of technology to help firms discharge regulatory requirements more efficiently and effectively than legacy systems allow—and, at times, for the use of technology by regulators to support their own supervisory responsibilities. The expression is used either in contrast to, or as a subset of, fintech....

Read More Right Arrow
PRACTICE NOTES
UK Prudential Regulation Authority supervisory intervention and enforcement: statutory notices, decision-making committees (including EDMC), hearings and Upper Tribunal references under FSMA 2000, and securitisation enforcement powers

This Practice Note This Practice Note sets out how the Prudential Regulation Authority (PRA) conducts its formal administrative procedures under the Financial Services and Markets Act 2000 (FSMA 2000), with particular emphasis on Part XXVI (Notices), alongside the PRA’s statements of policy and procedure for reaching decisions... Outcomes may involve supervisory steps—such as varying or imposing requirements—or formal enforcement, including a public censure or a financial penalty, directed at PRA‑authorised firms or individuals... It explains the PRA’s decision‑making routes for issuing statutory notices under FSMA 2000, namely: Supervisory Notices Warning Notices Decision Notices Final Notices Notices of Discontinuance The Note also sets out how subjects can make representations, including orally, at a hearing before PRA decision‑making bodies such as the Supervision, Risk and Policy Committee (SRPC) or the Enforcement Decision Making Committee (EDMC)... The Securitisation Regulation 2024 (SI 2024/102) broadened the PRA’s enforcement remit to cover firms engaged in securitisation that are not PRA‑authorised. Under the...

Read More Right Arrow
PRACTICE NOTES
Prudential supervision of climate-related financial risks in the UK: PRA/BoE expectations (SS3/19), implementation, governance, risk management, scenario analysis, disclosure and capital frameworks for banks and insurers

This Practice Note examines the Bank of England (BoE) and the Prudential Regulation Authority (PRA)’s supervisory expectations for banks and insurers in managing climate‑related financial risks, as articulated in supervisory statement SS3/19 (updated November 2024), alongside the related policy statement PS11/19. Background and introduction On 15 April 2019, the PRA issued PS11/19: Enhancing banks’ and insurers’ approaches to managing the financial risks from climate change, which summarised responses to consultation paper CP23/18 and included the final SS3/19 setting out the PRA’s expectations. The PRA observed that climate change, and society’s response to it, generate financial risks relevant to its objectives and, although such risks may fully emerge over longer horizons, they are already starting to be seen. SS3/19 set the expectation that firms take a strategic approach to climate‑related risk management, identifying present exposures and plausible future risks, and implementing suitable measures to mitigate them. A revised SS3/19, updated to reflect PS15/24—Review of Solvency II: Restatement of assimilated law, was published on 15 November 2024. The PRA’s...

Read More Right Arrow

View the related Precedents about Supervisory authority

PRECEDENTS
Danish supervisory authority SCCs for EU GDPR Article 28(3) controller–processor contracts, not for international transfers

Danish SCCs A set of Standard Contractual Clauses (SCCs) designed to meet Article 28(3) of the EU’s General Data Protection Regulation, Regulation (EU) 2016/679 (EU GDPR), specifically addresses contractual arrangements between controllers and processors and was formally issued by the Danish data protection supervisory authority (the Danish SCCs). Their release followed an opinion from the European Data Protection Board (EDPB). The Danish SCCs are distinct from SCCs that concern cross-border international personal data transfers under Chapter V of the EU GDPR...

Read More Right Arrow
PRECEDENTS
Sanctions compliance definitions, seller warranties and covenants for short-form asset purchase agreement

Insert the following definitions as new definitions into clause 1 of Precedent: Asset purchase agreement—short form: 1 Definitions and interpretation Sanctioned Activity • means any act subject to sanctions imposed by the Sanctioning Body; Sanctioning Body • includes the United Kingdom, United States of America, European Union, plus any other relevant local, national or multinational governmental agency, ministry, official parliament, public or statutory person, or any governmental or professional body, regulator or supervisory authority, board or other entity charged with imposing and/or administering sanctions; Sanctioned Entity • denotes any individual or organisation that is, or that is owned or controlled ...

Read More Right Arrow
PRECEDENTS
Sanctions compliance clauses for commercial contracts: long-form warranties, due diligence, suspension/termination, indemnity; short-form performance and affiliates/ownership options

1 Sanctions (long form) For clause 1, the following terms are to be interpreted as set out below: Losses means all damages, liabilities, demands, costs and expenses [including all legal and other professional fees, costs and expenses], claims, actions and proceedings [(including all consequential, direct, indirect, special or incidental loss or punitive damages or loss, fines, penalties, interest and loss of profit or any other form of economic loss (including loss of reputation))]; Sanctioned Activity means any activity that falls within sanctions imposed by a Sanctioning Body; Sanctioning Body means the United Kingdom, United States of America, United Nations, European Union and any other applicable local, national or multinational government agency, department, official, parliament, public or statutory person or any government or professional body, regulatory or supervisory authority, board or other body responsible for imposing and/or administering sanctions; Sanctioned Entity means any person or entity that is, or that is owned or controlled directly or indirectly by a person or entity that is,...

Read More Right Arrow