Company: AHL
Filing Date: 2025-03-19
Form Type: 20-F
Source: 0001267395-25-000019
Chunk: 126

Company: ASPEN INSURANCE HOLDINGS LTD
Filing Date: 2025-03-19
Form: 20-F
Item: Item 4
Chunk 126
---
 on the expectations for FCA authorized firms subject to the general ‘anti-greenwashing rule’ which took effect at the same time.

Table of Contents

In September 2023, the PRA and FCA issued a joint consultation paper (CP18/23 and CP23/20) on diversity and inclusion applicable to Aspen UK and AMAL. On March 12, 2025, the PRA and FCA each issued a statement to confirm that, based on feedback received and in order to reduce regulatory burden on firms, they have decided not to publish new rules on diversity and inclusion and will not revisit this position until after the implementation of any new legislation in this area. However, the PRA and FCA have indicated that they will continue to support voluntary industry initiatives. The FCA also indicated that it continues to prioritize its work to tackle non-financial misconduct and will set out next steps by June 2025. For further information refer to “ Risk Factors - Risks Related to Our Business - Strategic Risks - Increasing scrutiny and evolving expectations from investors, customers, regulators, policymakers and other stakeholders regarding environmental, social and governance matters may adversely affect our reputation or otherwise adversely impact our business and results of operations.”

Brexit and the U. K. GDPR. Following the United Kingdom’s departure from the European Union, commonly referred to as Brexit, the European Union General Data Protection Regulation’s (the “ E. U. GDPR”) data protection obligations continue to apply to the United Kingdom in substantially unvaried form under the so called “ U. K. GDPR”. The U. K. GDPR exists alongside the U. K. Data Protection Act 2018 which implements certain derogations in the U. K. GDPR into U. K. law. Under the U. K. GDPR, companies not established in the U. K. but who process personal data (i. e., information which identifies or from which an individual is identifiable) in relation to the offering of goods or services to individuals in the United Kingdom, or to monitor their behavior will be subject to the U. K. GDPR and will be required to appoint a data protection representative in the U. K., provided certain exceptions are not met. Otherwise, the requirements of the U. K. GDPR are currently virtually identical to those of the E. U. GDPR and as such, may lead to similar compliance and operational costs. For information on E. U. GDPR and U. K. GDPR, refer also to “ Risk Factors - Risks Related to Our Business