Financial Conduct Authority
The Financial Conduct Authority regulates the conduct of financial services firms and markets in the UK, setting standards for firms and holding them to account, including through fines and other final notices; it is not a personal-data regulator, but some of its final notices cover firms fined over IT or cyber failures that led to a data breach. Breach Census reads the FCA's published fines listing weekly, downloads each firm's final notice, and gates it on cyber-related wording before recording it as an action here.
Enforcement actions
| Reference | Type | Amount | Date | Organisation |
|---|---|---|---|---|
| equifax-limited-2023 | fine | £11,164,400 | October 13, 2023 | Equifax Limited |
| tsb-bank-plc-2022 | fine | £29,750,000 | December 20, 2022 | TSB Bank Plc |
| r-raphael-sons-plc-final-notice-2019 | fine | £775,100 | May 30, 2019 | R.Raphael & Sons plc |
| tesco-personal-finance-plc-2018 | fine | £16,400,000 | October 1, 2018 | Tesco Personal Finance plc |
Questions and answers
How many enforcement actions from Financial Conduct Authority does Breach Census have on file?
Breach Census has 4 enforcement actions from Financial Conduct Authority on file.
What date range do Financial Conduct Authority's actions on Breach Census cover?
Dated actions on file from Financial Conduct Authority range from October 1, 2018 to October 13, 2023.
Are Financial Conduct Authority's actions on Breach Census linked to a named organisation?
4 of the 4 Financial Conduct Authority actions on file are linked to a named organisation on Breach Census; an action with no organisation reported is shown with no link.
What is Financial Conduct Authority's breach-notification rule?
The FCA does not administer a personal-data breach-notification law; a UK GDPR breach still has to be notified to the ICO separately, whatever action the FCA itself takes.