Prudential Regulation Authority
The Prudential Regulation Authority, part of the Bank of England, regulates banks, building societies, credit unions, insurers and major investment firms under the Financial Services and Markets Act 2000, focused on their financial soundness rather than data protection as such. Breach Census reads the PRA's published enforcement listing weekly, alongside the FCA's own fines listing (both surfaced by the same ingest job), and gates each notice on cyber-related wording before recording it as an action here.
Enforcement actions
| Reference | Type | Amount | Date | Organisation |
|---|---|---|---|---|
| final-notice-from-pra-to-former-tsb-bank-plc-cio | fine | £81,620 | April 13, 2023 | Mr Carlos Abarca |
| final-notice-from-pra-to-tsb-bank | fine | £27,000,000 | December 20, 2022 | TSB Bank Plc |
| r-raphael-and-sons-plc-final-notice-may-2019 | fine | £1,890,000 | May 29, 2019 | R.Raphael & Sons plc |
| en201114 | fine | £14,000,000 | November 20, 2014 | Royal Bank of Scotland plc, National Westminster Bank plc and Ulster Bank Ltd |
Questions and answers
How many enforcement actions from Prudential Regulation Authority does Breach Census have on file?
Breach Census has 4 enforcement actions from Prudential Regulation Authority on file.
What date range do Prudential Regulation Authority's actions on Breach Census cover?
Dated actions on file from Prudential Regulation Authority range from November 20, 2014 to April 13, 2023.
Are Prudential Regulation Authority's actions on Breach Census linked to a named organisation?
4 of the 4 Prudential Regulation Authority actions on file are linked to a named organisation on Breach Census; an action with no organisation reported is shown with no link.
What is Prudential Regulation Authority's breach-notification rule?
The PRA does not administer a personal-data breach-notification law; a UK GDPR breach still has to be notified to the ICO separately, whatever action the PRA itself takes.