Financial Services And Markets PART 1 Introductory provisions Citation and commencement 1 1 These Regulations may be cited as the Small and Medium Sized Business (Credit Information) Regulations 2015. 2 These Regulations come into force on 1st January 2016. Interpretation 2 1 In these Regulations— “ the 2000 Act ” means the Financial Services and Markets Act 2000 ; “ credit information ” means information, about a business, of a type specified in the Schedule; “ designated firm ” means a designated bank or a designated credit reference agency; “ the FCA ” means the Financial Conduct Authority; “ group ” means a group as defined in section 474 of the Companies Act 2006 “ the PRA ” means the Prudential Regulation Authority; “ relevant requirement ” means a requirement on a designated bank under regulation 3 or regulation 5, a requirement on a designated credit reference agency under regulation 6 or 7, or any requirement or prohibition on a person other than the FCA imposed by or under Part 5 or Part 6; “ small or medium sized business ” means a business of the type described in section 7(1) of the Small Business, Enterprise and Employment Act 2015, which— has an address in the United Kingdom, carries out commercial activities as its principal activity, is not part of a group which as a whole has an annual turnover which is equal to or greater than £25 million; “ subsidiary ” means a subsidiary as defined in section 1159 of the Companies Act 2006. 2 In these Regulations a reference to a finance provider does not include a reference to a finance provider that provides credit only by providing goods or services before payment of part or all of the amount to be paid for such goods or services. PART 2 Provision of credit information about small and medium sized businesses by banks and credit reference agencies Designated banks to provide information to designated credit reference agencies 3 1 A designated bank must provide credit information that it holds about each customer of the bank which is a small or medium sized business to a designated credit reference agency if— a the credit reference agency has requested that the bank provide the information; b the request meets the requirements set out in regulation 4; 2 But paragraph (1) does not require a bank to provide information about a customer who has not agreed to information being provided about it to the credit reference agency (see regulation 5). 3 The bank must provide the information within a period of 30 days starting with the day on which the bank received the request. 4 The bank must provide an update to the information in each month following the month in which the information was first provided, unless the credit reference agency has informed the bank in writing that it no longer requires such updates. 5 Such update— a need not include updated information relating to— i a customer of the bank which has ceased to be a small or medium sized business; or ii a former customer of the bank; b must identify any customer or former customer in respect of which updated information is not provided reliant upon sub-paragraph (a), and in each case state whether such reliance is placed upon sub-paragraph (a)(i) or (a)(ii); c must include information about any customer of the bank which is a small or medium sized business about which information has not previously been provided, if the customer has agreed to the information being provided to the credit reference agency (see regulation 5). 6 The bank must provide the information and updates to the information— a in a form agreed between the bank and the credit reference agency; or b if there is no such agreement, electronically in a format which may be accessed using software commonly used to access financial information about businesses. 7 When first providing information to each designated credit reference agency the bank must provide such information falling within paragraph 3 of the Schedule as it holds in relation to a period of six months ending on the date on which the bank provides the information. Requests for information by credit reference agencies 4 1 A request under regulation 3(1)(a) must be made— a in writing; and b to the person identified by the bank to the credit reference agency, or identified by the bank to credit reference agencies generally, as the person to whom such requests should be made or, if no such person has been identified, to the head office of the bank. 2 A request under regulation 3(1)(a)— a may seek information falling within one or more of paragraphs 1 to 3 of the Schedule; b must not seek only part of the information falling within one of those paragraphs which is held by a bank about its small and medium sized business customers. Agreement by customers of banks 5 1 For the purposes of regulation 3(2) and (5)(c)— a agreement may be indicated by inclusion in the terms on which a designated bank provides services to a customer of a term under which the customer agrees to the provision of information about the customer to credit reference agencies (including such a term included by way of a variation); b agreement may relate to the provision of information about the customer to credit reference agencies generally; and c agreement may be indicated by a term in a contract between the bank and its customer which predates the date of any request made under regulation 3(1)(a). 2 Where a designated bank starts to provide a service referred to in the Schedule to a customer on or after the date on which these Regulations come into force, the bank must include in the standard terms on which it provides the service a term indicating the customer's agreement to the provision of information relating to that service under regulation 3(1). Designated credit reference agencies to provide information to finance providers 6 1 A designated credit reference agency must provide credit information that it holds about a small or medium sized business to a finance provider for the purposes specified in paragraph (3) if— a the finance provider has requested that the credit reference agency provide the information; b the business to which the information relates has agreed to the information being provided to the finance provider and the finance provider has confirmed such agreement to the credit reference agency; c the finance provider has agreed to the standard terms on which the credit reference agency provides credit information relating to small and medium sized businesses, including the payment of any fees for the provision of such information; d the finance provider has met any conditions which are required by those terms to be met before the information is provided; e in the case of a finance provider which is not a designated bank, the finance provider has agreed with the credit reference agency that it will, by the end of a period of 12 months starting on the day on which the credit reference agency first provides credit information to the finance provider and at other such time as it agrees with the credit reference agency, provide to the credit reference agency all credit information— i that it holds about each customer of the finance provider which is a small or medium sized business (but see paragraph (2)); and ii which relates to the period starting on the day on which the credit reference agency first provides credit information to the finance provider; f the finance provider has confirmed that, in respect of any service referred to in the Schedule which it offers to provide to small or medium sized business customers in the future, the standard terms provide for agreement by the customer that the finance provider may provide credit information to credit reference agencies. 2 A finance provider is not required to provide information pursuant to an agreement under paragraph (1)(e) if— a the customer to which the information relates has not agreed to the provision of such information; or b the provision of such information would be unlawful. 3 Any information provided under paragraph (1) is provided for the purpose of assisting a finance provider to decide whether to offer a business any kind of finance, lending or credit having in particular regard to— a the ability of the business to repay any debts resulting from the provision of such finance, lending or credit; b the ability of the finance provider to verify the identity of persons related to the business and to take steps to prevent fraud; c the ability of the finance provider or another party to recover debts resulting from the provision of such finance, lending or credit; or d the need for the finance provider to comply with its statutory or other legal obligations relating generally to the provision of finance, lending or credit. Designated credit reference agencies to provide information to the Bank of England 7 1 A designated credit reference agency must provide information received under regulation 3 or by virtue of regulation 6 to the Bank of England on request. 2 The Bank of England must provide information received from a designated credit reference agency pursuant to paragraph (1) to the Treasury on request, but such information must be so framed that it is not possible to ascertain from it information relating to a particular small or medium sized business. 3 The Bank of England may otherwise provide information received from a designated credit reference agency pursuant to paragraph (1) only where such disclosure is— a . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . b to any ... person where— i such information has already lawfully been made available to the public; ii such information is in the form of a summary or collection of information so framed that it is not possible to ascertain from it information relating to a particular person; iii the person to whom the information relates has provided consent for such disclosure; iv such disclosure is for the purposes of any criminal investigation or criminal proceedings whether in the United Kingdom or elsewhere; or v such disclosure is for the institution of, or otherwise for the purposes of, any proceedings arising by virtue of these Regulations or under the 2000 Act or any proceedings to which the Bank of England is, or is proposed to be, a party; ... vi . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Right of action for failure to provide information 8 A failure by a designated bank to comply with an obligation arising under regulation 3, or by a designated credit reference agency to comply with regulation 6, is actionable at the suit of a person who suffers loss as a result of such failure, subject to the defences and other incidents applying to actions for breach of statutory duty. PART 3 Designation of banks and credit reference agencies Power to designate banks and credit reference agencies and to revoke designations 9 1 The Treasury may designate a bank or a credit reference agency for the purposes of these Regulations, and may revoke such designation. 2 A designation, or the revocation of a designation— a takes effect on the date specified by the Treasury, or b if no such date is specified, takes effect immediately. 3 The Treasury may exercise the power in paragraph (1) on its own initiative or at the request of another person. 4 Paragraph (1) is subject to the requirements set out in this Part. Criteria for the designation of a bank 10 1 The Treasury may designate a bank only if it is— a an institution that is a bank for the purposes of Part 1 of the Banking Act 2009 , or b a finance provider that is a member of a banking group as defined in section 1164 of the Companies Act 2006 . 2 The Treasury must revoke the designation of a bank that no longer falls within paragraph (1)(a) or (b). 3 In considering whether to designate a bank or revoke the designation of a bank, the Treasury must have regard to— a the value of current lending by the bank to small and medium sized businesses; b such value as a proportion of the total value of current lending to small and medium sized businesses; c the importance to the economy in Northern Ireland of the bank's current lending to small and medium sized businesses. 4 In considering whether to designate a bank or to revoke the designation of a bank, the Treasury may also have regard to such other matters as they consider appropriate. Consultation before designation of a bank 11 1 Before designating a bank or revoking the designation of a bank, the Treasury may consult the Bank of England and any other person they consider appropriate. 2 In considering whether to designate a bank or to revoke the designation of a bank, the Treasury may rely on advice or information provided in response to consultation under paragraph (1). Criteria for the designation of a credit reference agency 12 1 The Treasury may designate a credit reference agency only if the agency— a carries on activities which consist primarily of the furnishing of persons with information relevant to the financial standing of persons or businesses and the collection of information for that purpose; b has procedures in place designed to give effect to the requirements of the data protection legislation and sections 158 to 160 of the Consumer Credit Act 1974 ; c permits all small and medium sized businesses about which it holds information to access that information and to challenge inaccuracies; d has systems in place which protect information against loss, corruption, destruction, misuse and unauthorised access; and e has systems in place which are capable of processing information in bulk. 2 In considering whether to designate a credit reference agency or to revoke the designation of a credit reference agency, the Treasury may also have regard to— a the agency's existing role in the furnishing of information relevant to the financial standing of persons or businesses in the United Kingdom; b the Treasury's view as to whether it is appropriate for the agency to have access to financial information about small and medium sized businesses in light of— i the skills and experience of the persons who control and manage the activities carried on by the agency; ii whether those persons can be expected to act with probity; iii the robustness of systems and procedures referred to in paragraph (1)(b), (d) and (e); and iv the agency's compliance, and likely future compliance, with the requirements referred to in paragraph (1)(b); and c such other matters as they consider appropriate. 3 In this regulation, “ the data protection legislation ” has the same meaning as in the Data Protection Act 2018 (see section 3 of that Act). Consultation before designation of a credit reference agency 13 1 Before designating a credit reference agency or revoking the designation of a credit reference agency, the Treasury may consult— a the company incorporated as a private company limited by shares on 18th July 2013 with the company number 08616013 and re-registered as a public company limited by shares on 29th October 2013 with the name British Business Bank plc; b a subsidiary of the company referred to in sub-paragraph (a); or c any other person they consider appropriate. 2 In considering whether to designate a credit reference agency or to revoke the designation of a credit reference agency, the Treasury may rely on advice or information provided in response to consultation under paragraph (1). Record of designated banks and credit reference agencies 14 The Treasury must, in such manner as they determine,— a publish the details of each designation and revocation under regulation 9, and b maintain a publicly accessible record of current designations. PART 4 Access to and correction of information Access to and correction of information for individuals and small firms 15 1 Section 13 of the Data Protection Act 2018 (rights of the data subject under the UK GDPR : obligations of credit reference agencies) applies in respect of a designated credit reference agency which is not a credit reference agency within the meaning of section 145(8) of the Consumer Credit Act 1974 as if it were such an agency. 2 Sections 157 to 160 of the Consumer Credit Act 1974 (credit reference agencies) , and any regulations made under those sections, apply in respect of a designated credit reference agency which does not carry on, by way of business, an activity of the kind specified by article 89B of the Financial Services and Markets Act 2000 (Regulated Activities) Order 2001 (providing credit references), as if it did so carry on such an activity. 3 In the event that the Treasury revokes the designation of a designated credit reference agency, paragraphs (1) and (2) continue to apply in respect of such credit reference agency for a period two years starting on the date of such revocation but thereafter shall cease to apply. 4 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Right of action in relation to inaccurate information 16 1 This regulation applies in respect of— a credit information about a small or medium sized business held by a designated credit reference agency; and b information provided to a designated credit reference agency under regulation 3(1) held by that credit reference agency during the period in which it is a designated credit reference agency and, in the event that the Treasury revokes its designation, for a further period of two years starting on the date on which its designation is revoked. 2 If a court is satisfied on the application of a person that information relating to that person is inaccurate, the court may order the credit reference agency holding the information to rectify, block, erase or destroy that information and any other information which contains an expression of opinion which appears to the court to be based on the inaccurate information. 3 Paragraph (2) applies whether or not the information accurately records information received from another person, but where that is the case— a if the court is satisfied that— i the credit reference agency holding the information has taken reasonable steps to ensure the accuracy of the information, and ii if the applicant has notified the credit reference agency of the applicant's view that the information is inaccurate, the information indicates that fact, instead of making an order under paragraph (2) the court may make an order requiring the information to be supplemented by such statement of true facts as the court may approve, or b if the court is not so satisfied, the court may make such order as it thinks fit for securing that the credit reference agency holding the information takes reasonable steps to ensure the accuracy of the information and that the information indicates the applicant's view that the information is inaccurate, with or without a further order requiring the information to be supplemented by such a statement as is mentioned in sub-paragraph (a). 4 Where the court— a makes an order under paragraph (2), or b is satisfied on the application of a person that information relating to that person and which has been rectified, blocked, erased or destroyed was inaccurate, it may, where it considers it reasonably practicable, order the credit reference agency holding or which held the inaccurate information to notify third parties to whom the information has been disclosed of the rectification, blocking, erasure or destruction. 5 In determining whether it is reasonably practicable to order such notification the court shall have regard, in particular, to the number of persons who would have to be notified. 6 The jurisdiction conferred by this regulation is exercisable— a in England and Wales by the High Court or the county court, b in Northern Ireland by the High Court or a county court, or c in Scotland by the Court of Session or the sheriff. PART 5 Complaints about designated credit reference agencies Extension of the jurisdiction of the Financial Ombudsman Scheme to designated credit reference agencies 17 1 Part 16 (the Ombudsman Scheme) of the 2000 Act applies in respect of a complaint relating to the act or omission of a designated credit reference agency as if— a in section 226(2)(b) of that Act (compulsory jurisdiction) , after “Payment Services Regulations 2017 ,” there were inserted “ or a designated credit reference agency, ” ; b in section 226(4) of that Act, after “under section 22,” there were inserted “ or the activity of furnishing, by a designated credit reference agency, of persons with information relevant to the financial standing of a business and ancillary activities, ” ; c in section 232A of that Act (scheme operator's duty to provide information to the FCA) , after “FCA's operational objectives,” there were inserted “ or which might otherwise be of assistance to the FCA for the purposes of discharging any of the FCA's duties under the Small and Medium Sized Business (Credit Information) Regulations 2015, ” ; d in section 234(1) of that Act (industry funding) , after “Payment Services Regulations 2017 ” there were inserted “ , or a designated credit reference agency, ” ; e in paragraph 13(4) of Schedule 17 to that Act (the Ombudsman Scheme) , after “Payment Services Regulations 2017 ,” there were inserted “ or a designated credit reference agency, ” ; and f “designated credit reference agency” had the meaning given in section 7(2) of the Small Business, Enterprise and Employment Act 2015; 2 The FCA must make compulsory jurisdiction rules (as defined in section 226(3) of the 2000 Act) relating to the activity of furnishing by designated credit reference agencies of persons with information relevant to the financial standing of a business. PART 6 Monitoring of compliance and enforcement CHAPTER 1 The FCA Functions of the FCA 18 1 The FCA has the functions conferred on it by this Part. 2 In discharging its functions under this Part (including its functions under any provision of the 2000 Act as applied by this Part), the FCA must have regard to the need to use its resources in the most efficient and economic way. Monitoring and enforcement 19 1 The FCA must maintain arrangements designed to enable it to determine whether— a designated banks and designated credit reference agencies are complying with any relevant requirements applicable to them, and b there has been a contravention of regulation 34 (misleading the FCA). 2 The FCA must also maintain arrangements designed to enable it to enforce relevant requirements. Guidance and consultation 20 1 The FCA may give guidance consisting of such information and advice as it considers appropriate with respect to— a the operation of these Regulations; b any matters relating to the functions of the FCA under this Part; c any other matters about which it appears to the FCA to be desirable to give information or advice in connection with these Regulations. 2 The FCA may— a publish its guidance; b offer copies of its published guidance for sale at a reasonable price; c if it gives guidance in response to a request made by any person, make a reasonable charge for that guidance. 3 The requirements of section 138I of the 2000 Act (consultation by the FCA) , in so far as they apply to a proposal to make rules or give guidance under or in relation to these Regulations, may be satisfied by things done (wholly or in part) before the date on which these Regulations come into force. Fees and penalties 21 1 Subject to paragraphs (2) to (4), the functions of the FCA under this Part are to be treated for the purposes of paragraph 23 (fees) of Schedule 1ZA to the 2000 Act as functions conferred on the FCA under that Act. 2 Paragraph 23 of that Schedule, as it applies by virtue of paragraph (1) above, has effect as if a reference to the 2000 Act in sub-paragraphs (7) and (8) included a reference to these Regulations. 3 Subsection (5)(a) of section 1B of the 2000 Act (the FCA's general duties) does not apply to the making of rules under paragraph 23 of that Schedule by virtue of this regulation. 4 Rules made under paragraph 23 of that Schedule by virtue of this regulation are not to be treated as regulating provisions for the purposes of Chapter 4 of Part 9A (competition scrutiny) of the 2000 Act. 5 The FCA must apply amounts paid to it by way of penalties imposed under regulation 29 towards expenses incurred in carrying out its functions under this Part or for any incidental purpose. Exemption from liability in damages 22 The functions of the FCA under these Regulations are to be treated for the purposes of paragraph 25 of Schedule 1ZA to the 2000 Act (exemption from liability in damages) as functions conferred on the FCA under that Act. CHAPTER 2 Reporting and information Reporting requirements 23 1 A designated firm must provide the FCA with such information in respect of its compliance or non-compliance with any relevant requirement applicable to it as the FCA may direct. 2 A designated firm must provide the FCA with information required to be given under this regulation at such times, in such form, and verified in such manner, as the FCA may direct. Record keeping 24 1 A designated firm must maintain relevant records in retrievable and legible form for no less than five years from the date on which the records were created. 2 For the purposes of this regulation, records are relevant where they contain information relevant to demonstrating the designated firm's compliance or non-compliance with any relevant requirement applicable to the designated firm. Restrictions on disclosure of information 25 1 Sections 348 (restrictions on disclosure of confidential information by FCA, PRA etc), 349 (exceptions from section 348) and 352 (offences) of the 2000 Act apply for the purposes of this Part as if— a in section 348— i in subsection (2)(b) for the words “, the PRA” to the end there were substituted “ under the Small and Medium Sized Business (Credit Information) Regulations 2015 ” ; ii in subsection (3)(a) for “this Act” there were substituted “ the Small and Medium Sized Business (Credit Information) Regulations 2015 ” ; iii in subsection (5)— aa paragraphs (aa) and (c) were omitted; bb in paragraph (d) after “section 166” there were inserted “ as applied by the Small and Medium Sized Business (Credit Information) Regulations 2015 ” ; cc in paragraph (e) for “ a person mentioned in paragraphs (a) to (c)” there were substituted “ the FCA ” ; dd in paragraphs (ea) and (f) for “a person mentioned in those paragraphs” there were substituted “ the FCA ” ; iv for subsection (6) there were substituted— 6 In subsection (5)(f) “ expert ” includes a competent person appointed by the FCA to conduct an investigation under Part 11 as applied by the Small and Medium Sized Business (Credit Information) Regulations 2015. ; b in section 349, subsections (3A) and (3B) were omitted; c in section 352— i in subsection (1) “or 350(5)” were omitted; ii subsection (4) were omitted; iii in subsection (5) “or (4)” were omitted; iv in subsection (6)(a) “or that it had been disclosed in accordance with section 350” were omitted. 2 The Financial Services and Markets Act 2000 (Disclosure of Confidential Information) Regulations 2001 apply for the purposes of this Part as if Part 3 were omitted. CHAPTER 3 Investigatory powers Information gathering and investigations under Part 11 of the 2000 Act 26 Part 11 (information gathering and investigations) of the 2000 Act applies for the purposes of this Part as if— a each reference in that Part to the 2000 Act were a reference to this Part; b each reference in that Part to an authorised person were a reference to a designated firm; c each reference in that Part to the PRA were omitted; d each reference in that Part to either regulator were a reference to the FCA only; e in section 165(7) (regulators' power to require information: authorised persons etc.), paragraphs (b) to (e) were omitted; f sections 165A (PRA's power to require information: financial stability), 165B (safeguards etc in relation to exercise of power under section 165A) and 165C (orders under section 165A(2)(d)) were omitted; g in section 166 (reports by skilled persons), subsections (10) and (11) were omitted; h in section 166A (appointment of skilled person to collect and update information)— i in subsection (1) for “rules made by that regulator to collect, and keep up to date, information of a description specified in the rules” there were substituted “ regulation 24 of the Small and Medium Sized Business (Credit Information) Regulations 2015 to maintain relevant records as specified in those Regulations ” , ii each reference in that section to “information” were a reference to “relevant records”; iii subsection (10) were omitted; i in section 167 (appointment of persons to carry out general investigations)— i in subsection (1)— aa for “an investigating authority” and “the investigating authority” there were substituted “ the FCA ” ; bb in paragraphs (a) and (c) of subsection (1) the words “a recognised investment exchange or” were omitted; cc in paragraph (a) of subsection (1) the words “or of an appointed representative” were omitted; ii in subsection (4) the words “(or appointed representative)” were omitted in each place; iii subsections (2)(c), (3A), (5A) and (6) were omitted; j in section 168 (appointment of persons to carry out investigations in particular cases)— i in subsection (1)— aa for “an investigating authority” there were substituted “ the FCA ” ; bb for paragraph (b) there were substituted— b a designated firm may have contravened a requirement imposed by or under the Small and Medium Sized Business (Credit Information) Regulations 2015, or a person may be guilty of an offence under regulation 34 of those Regulations (misleading the FCA). ; ii in subsection (3) for “investigating authority” there were substituted “ FCA ” ; and iii subsections (2), (4), (5) and (6) were omitted; k sections 169 (investigations etc. in support of overseas regulator) and 169A (support of overseas regulator with respect to financial stability) were omitted; l in section 170 (investigations: general)— i in subsection (1) “or (5)” were omitted; ii in subsection (3)(a) “or (4)” were omitted; iii subsection (3)(b) and the preceding “; or” were omitted; and iv for subsection (10) the following were substituted— 10 “Investigating authority” in this Part is to be read as a reference to the FCA. ; m in section 171 (powers of persons appointed under section 167), subsections (3A) and (7) were omitted; n in section 172 (additional power of persons appointed as a result of section 168(1) or (4)), in the heading and in subsection (4), “or (4)” were omitted; o section 173 (powers of persons appointed as a result of section 168(2)) were omitted; p in section 174 (admissibility of statements made to investigators)— i in subsection (2) “or in proceedings in relation to action to be taken against that person under section 123” were omitted; ii in subsection (3)(a) for “398” there were substituted “ regulation 34 of the Small and Medium Sized Business (Credit Information) Regulations 2015 (misleading the FCA) ” ; iii in subsection (4), “or (5)” were omitted; iv in subsection (5) “, 173” were omitted; q in section 175(8) (information and documents: supplemental provisions) “or (5)” were omitted; r in section 176 (entry of premises under warrant)— i in subsection (1) “the Secretary of State,” were omitted and “first or second” were substituted for “first, second or third”; ii in subsection (3)(a) “or an appointed representative” were omitted; iii subsection (4) were omitted; iv in subsection (10) “or (5)” were omitted; v in subsection (11)— aa in paragraph (a) “87C, 87J,” and “,165A, 169A” were omitted; and bb in paragraph (b) “, 173” were omitted. Protected information 27 Section 413 of the 2000 Act (protected items) applies for the purposes of this Part as it applies for the purposes of that Act. CHAPTER 4 Disciplinary measures Public censure 28 If the FCA considers that a designated firm has contravened a relevant requirement, the FCA may publish a statement to that effect. Financial penalties 29 1 The FCA may impose a penalty of such amount as it considers appropriate on— a a designated firm which it considers has contravened a relevant requirement; or b a person who it considers has contravened regulation 34 (misleading the FCA). 2 A penalty imposed under this regulation is payable to the FCA and may be recovered as a debt owed to the FCA. Limitations on permission to carry on regulated activities 30 1 If the FCA considers that a designated firm has contravened a relevant requirement, it may impose, for such period as it considers appropriate, such limitations in relation to the carrying on of a regulated activity by the designated firm as it considers appropriate. 2 In paragraph (1) above “ carrying on of a regulated activity ” means carrying on of a regulated activity under any permission given (or treated as given) by the FCA or PRA or conferred by any provision of the 2000 Act. 3 The period for which a limitation is to have effect may not exceed 12 months. 4 A limitation may, in particular, be imposed so as to require the designated firm to take, or refrain from taking, specified action. 5 The FCA may— a withdraw a limitation, or b vary a limitation so as to reduce the period for which it has effect or otherwise to limit its effect. 6 The power under this regulation may (but need not) be exercised so as to have effect in relation to all the regulated activities that the designated firm carries on. 7 Any one or more of the powers under this regulation and regulations 28 (public censure) and 29 (financial penalties) may be exercised in relation to the same contravention. CHAPTER 5 Injunctions and restitution Injunctions 31 1 If, on the application of the FCA, the court is satisfied— a that there is a reasonable likelihood that any person will contravene a relevant requirement; or b that any person has contravened such a requirement and that there is a reasonable likelihood that the contravention will continue or be repeated, the court may make an order restraining (or, in Scotland, an interdict prohibiting) the contravention. 2 If, on the application of the FCA, the court is satisfied— a that any person has contravened a relevant requirement; and b that there are steps which could be taken for remedying the contravention, the court may make an order requiring that person, and any other person who appears to have been knowingly concerned in the contravention, to take such steps as the court may direct to remedy it. 3 If, on the application of the FCA, the court is satisfied that any person may have— a contravened a relevant requirement imposed; or b been knowingly concerned in the contravention of such a requirement, it may make an order restraining (or, in Scotland, an interdict prohibiting) them from disposing of, or otherwise dealing with, any assets of theirs which it is satisfied that they are reasonably likely to dispose of or otherwise deal with. 4 The jurisdiction conferred by this regulation is exercisable by the High Court and the Court of Session. 5 In paragraph (2), references to remedying a contravention include references to mitigating its effect. Power of FCA to require restitution 32 1 The FCA may exercise the power in paragraph (2) if it is satisfied that a designated firm (referred to in this regulation as “ the person concerned ”) has contravened a relevant requirement, or been knowingly concerned in the contravention of such a requirement, and that— a profits have accrued to the person concerned as a result of the contravention; or b one or more persons have suffered loss or been otherwise adversely affected as a result of the contravention. 2 The power referred to in paragraph (1) is a power to require the person concerned, in accordance with such arrangements as the FCA considers appropriate, to pay to the appropriate person or distribute among the appropriate persons such amount as appears to the FCA to be just having regard— a in a case within sub-paragraph (a) of paragraph (1), to the profits appearing to the FCA to have accrued; b in a case within sub-paragraph (b) of that paragraph, to the extent of the loss or other adverse effect; c in a case within both of those sub-paragraphs, to the profits appearing to the FCA to have accrued and to the extent of the loss or other adverse effect. 3 In paragraph (2) “ appropriate person ” means a person appearing to the FCA to be someone— a to whom the profits mentioned in paragraph (1)(a) are attributable; or b who has suffered the loss or adverse effect mentioned in paragraph (1)(b). Restitution orders 33 1 The court may, on the application of the FCA, make an order under paragraph (2) if it is satisfied that a designated firm has contravened a relevant requirement, or been knowingly concerned in the contravention of such a requirement, and that— a profits have accrued to the designated firm as a result of the contravention; or b one or more persons have suffered loss or been otherwise adversely affected as a result of the contravention. 2 The court may order the designated firm to pay to the FCA such sum as appears to the court to be just having regard— a in a case within sub-paragraph (a) of paragraph (1), to the profits appearing to the court to have accrued; b in a case within sub-paragraph (b) of that paragraph, to the extent of the loss or other adverse effect; c in a case within both those sub-paragraphs, to the profits appearing to the court to have accrued and to the extent of the loss or other adverse effect. 3 Any amount paid to the FCA in pursuance of an order under paragraph (2) must be paid by it to such qualifying person or distributed by it among such qualifying persons as the court may direct. 4 In paragraph (3), “ qualifying person ” means a person appearing to the court to be someone— a to whom the profits mentioned in paragraph (1)(a) are attributable; or b who has suffered the loss or adverse effect mentioned in paragraph (1)(b). 5 On an application under paragraph (1) the court may require the designated firm to supply it with such accounts or other information as it may require for any one or more of the following purposes— a establishing whether any and, if so, what profits have accrued to them as mentioned in sub-paragraph (a) of that paragraph; b establishing whether any person or persons have suffered any loss or adverse effect as mentioned in sub-paragraph (b) of that paragraph; and c determining how any amounts are to be paid or distributed under paragraph (3). 6 The court may require any accounts or other information supplied under paragraph (5) to be verified in such manner as it may direct. 7 The jurisdiction conferred by this regulation is exercisable by the High Court and the Court of Session. 8 Nothing in this regulation affects the right of any person other than the FCA to bring proceedings in respect of the matters to which this regulation applies. CHAPTER 6 Misleading the FCA Offence of misleading the FCA 34 1 A person must not, for the purposes of compliance or purported compliance with a relevant requirement, knowingly or recklessly give the FCA information which is false or misleading in a material particular. 2 A person must not provide information to another person— a knowing, or b being reckless as to whether, the information is false or misleading in a material particular and knowing that the information is to be provided to, or to be used for the purposes of providing information to, the FCA in connection with the discharge of its functions under this Part. 3 A person who contravenes paragraph (1) or (2) is guilty of an offence. 4 A person guilty of an offence under this regulation is liable— a on summary conviction, to a fine, or b on conviction on indictment, to a fine. Restriction on penalties 35 A person who is convicted of an offence under regulation 34 (misleading the FCA) is not subsequently liable to a penalty under regulation 29 (financial penalties) in respect of the same acts or omissions that constituted the offence. Liability of officers of bodies corporate etc 36 1 If an offence under regulation 34 committed by a body corporate is shown— a to have been committed with the consent or connivance of an officer; or b to be attributable to any neglect of such officer, the officer as well as the body corporate is guilty of the offence and liable to be proceeded against and punished accordingly. 2 If the affairs of a body corporate are managed by its members, paragraph (1) applies in relation to the acts and defaults of a member in connection with such member's functions of management as if the member were a director of the body. 3 If an offence under regulation 34 committed by a partnership is shown— a to have been committed with the consent or connivance of a partner; or b to be attributable to any neglect of such partner, the partner as well as the partnership is guilty of the offence and liable to be proceeded against and punished accordingly. 4 If an offence under regulation 34 committed by an unincorporated association (other than a partnership) is shown— a to have been committed with the consent or connivance of an officer; or b to be attributable to any neglect of such officer, the officer as well as the association is guilty of the offence and liable to be proceeded against and punished accordingly. 5 In this regulation— “officer”— in relation to a body corporate, means a director, manager, secretary, chief executive, member of the committee of management, or a person purporting to act in that capacity; and in relation to an unincorporated association, means any officer of the association or any member of its governing body, or a person purporting to act in such capacity; “ partner ” includes a person purporting to act as a partner. Proceedings for offence 37 1 Proceedings for an offence under regulation 34 (misleading the FCA) may be instituted— a in England and Wales only by the FCA or by or with the consent of the Director of Public Prosecutions, or b in Northern Ireland only by the FCA or by or with the consent of the Director of Public Prosecutions for Northern Ireland. 2 In exercising its power to institute proceedings for an offence under regulation 34, the FCA must comply with any conditions or restrictions imposed in writing by the Treasury in relation to such proceedings. 3 Conditions or restrictions may be imposed under paragraph (2) in relation to— a proceedings generally; or b such proceedings, or categories of proceedings, as the Treasury may direct. Further provisions relating to proceedings for offence 38 1 Proceedings for an offence under regulation 34 (misleading the FCA) alleged to have been committed by a partnership or other unincorporated association must be brought in the name of the partnership or association (and not in those of its members). 2 A fine imposed on a partnership or unincorporated association on its conviction of an offence under regulation 34 is to be paid out of the funds of the partnership or association. 3 Rules of court relating to the service of documents are to have effect as if a partnership or unincorporated association were a body corporate. 4 In proceedings for an offence under regulation 34 brought against a partnership or unincorporated association— a section 33 (procedure on charge of offence against corporation) of the Criminal Justice Act 1925 and Schedule 3 to the Magistrates' Courts Act 1980 apply as they do in relation to a body corporate; b sections 70 and 143 (proceedings against organisations) of the Criminal Procedure (Scotland) Act 1995 apply; c section 18 (procedure on charge) of the Criminal Justice (Northern Ireland) Act 1945 and Schedule 4 (corporations) to the Magistrates' Courts (Northern Ireland) Order 1981 apply as they do in relation to a body corporate. 5 Summary proceedings for an offence under regulation 34 may be taken— a against a body corporate or unincorporated association at any place at which it has a place of business; b against an individual at any place where that individual is for the time being. 6 Paragraph (5) does not affect any jurisdiction exercisable apart from this regulation. CHAPTER 7 Procedure Requirement to issue warning notice 39 1 Where the FCA proposes to— a publish a statement under regulation 28 (public censure), b impose a penalty under regulation 29 (financial penalties), c impose a limitation on a permission under regulation 30 (limitations on permission to carry on regulated activities), or d exercise the power in regulation 32(2) (power of FCA to require restitution), it must give the person concerned a warning notice. 2 The warning notice must set out the following— a in the case of a statement under regulation 28, the terms of the proposed statement; b in the case of a penalty under regulation 29, the amount of the proposed penalty; c in the case of a limitation on a permission under regulation 30, the limitation and the period for which it is to have effect; d in the case of the exercise of the power in regulation 32(2), the amount which the FCA proposes to require to be paid or distributed as mentioned in regulation 32(2). Requirement to issue decision notice 40 1 If, having considered any representations made in response to the warning notice, the FCA decides to— a publish a statement under regulation 28 (public censure); b impose a penalty under regulation 29 (financial penalties); c impose a limitation on a permission under regulation 30 (limitations on permission to carry on regulated activities); or d exercise the power in regulation 32(2) (power of FCA to require restitution), it must without delay give the person concerned a decision notice. 2 The decision notice must set out the following— a in the case of a statement under regulation 28, the terms of the statement; b in the case of a penalty under regulation 29, the amount of the penalty; c in the case of a limitation on a permission under regulation 30, the limitation and the period for which it is to have effect; d in the case of the exercise of the power in regulation 32(2)— i the amount to be paid or distributed; ii the person or persons to whom that amount is to be paid or among whom that amount is to be distributed; and iii the arrangements in accordance with which the payment or distribution is to be made. Third party rights 41 After a statement under regulation 28 (public censure) is published, the FCA must send a copy of it to the person concerned and to any person to whom a copy of the decision notice was given under section 393(4) (third party rights) of the 2000 Act (as applied by regulation 44 (application of Part 26 of the 2000 Act)). Service of notices 42 1 Section 414 of the 2000 Act (service of notices) applies for the purposes of this Part as if in subsection (1) and (4) for “this Act” there were substituted “ the Small and Medium Sized Business (Credit Information) Regulations 2015 ” . 2 The Financial Services and Markets Act 2000 (Service of Notices) Regulations 2001 apply to any notice, direction or document of any kind given by or to the FCA under this Part as they apply to any notice, direction or document of any kind under the 2000 Act. Statements of policy 43 1 Sections 210 (statements of policy) and 211 (statements of policy: procedure) of the 2000 Act apply to the FCA with respect to— a the imposition of penalties or restrictions under regulations 29 (financial penalties) and 30 (limitations on permission to carry on regulated activities); b the amount of penalties imposed under regulation 29(1); and c the period for which restrictions imposed under regulation 30 are to have effect, as they apply with respect to action the FCA may take under sections 206 (financial penalties) and 206A (suspending permission to carry on regulated activities) of the 2000 Act . But see paragraph (2). 2 Section 210 of the 2000 Act applies as if subsection (1A) were omitted. Application of Part 26 of the 2000 Act 44 Part 26 (notices) of the 2000 Act applies for the purposes of this Part as if— a references to the PRA in that Part were omitted; b each reference in that Part to either regulator were a reference to the FCA only; c in section 387 (warning notices), subsections (1A) and (3A) were omitted; d in section 388 (decision notices), subsections (1A) and (2) were omitted; e in section 390 (final notices), in subsection (6) for “section 384(5)” there were substituted “ regulation 32 of the Small and Medium Sized Business (Credit Information) Regulations 2015 ” ; f in section 391 (publication)— i in subsection (1) for “falling within subsection (1ZB)” there were substituted “ given under regulation 39 of the Small and Medium Sized Business (Credit Information) Regulations 2015 ” ; ii subsections (1ZA), (1ZB), (4A), (5), (5A), (6A), (7A), (7B), (8A), (8), (10) and (11) were omitted; g section 391A were omitted; h for section 392(a) and (b) (application of sections 393 and 394) there were substituted— a a warning notice given in accordance with regulation 39 of the Small and Medium Sized Business (Credit Information) Regulations 2015; b a decision notice given in accordance with regulation 40 of those Regulations. i in section 395 (the FCA's and PRA's procedures)— i for subsections (1) and (2) there were substituted— 1 The FCA must determine the procedure that it proposes to follow in relation to a decision which gives rise to an obligation for it to give a warning notice or decision notice. 2 That procedure must be designed to secure, among other things, that a decision falling within subsection (1) is taken— a by a person not directly involved in establishing the evidence on which the decision is based, or b by two or more persons who include a person not directly involved in establishing that evidence. ; ii subsections (3), (4), (9A) and (13) were omitted, and iii in subsection (9), there were omitted “supervisory notice, or a” and “other than a warning notice or decision notice relating to a decision of the PRA that is required by a decision of the FCA of the kind mentioned in subsection (1)(b)(ii)”. CHAPTER 8 Referral to the Tribunal Referral to Tribunal 45 If the FCA decides to— a publish a statement under regulation 28 (public censure); b impose a penalty under regulation 29 (financial penalties); c impose a limitation on a permission under regulation 30 (limitations on permission to carry on regulated activities); or d exercise the power in regulation 32(2), the person concerned may refer the matter to the Upper Tribunal. The Tribunal 46 1 Part 9 (hearings and appeals) of the 2000 Act applies with respect to proceedings pursuant to references to the Upper Tribunal under regulation 45 (“relevant proceedings”) as it applies to proceedings pursuant to references to the Upper Tribunal under that Act, with the following modifications. 2 Section 133 (proceedings before the Tribunal: general provision) applies as if— a in subsection (1)— i there were omitted “(whether made under this or any other Act)”; ii in paragraph (a) “or the PRA” were omitted; iii paragraphs (b) and (c) were omitted; b in subsection (2) “, (b) or (c)” were omitted; c for subsection (7A) there were substituted— 7A A reference is a “ disciplinary reference ” for the purposes of this section if it is in respect of any of the following decisions— a a decision to publish a statement under regulation 28 (public censure) of the Small and Medium Sized Business (Credit Information) Regulations 2015; b a decision to impose a penalty under regulation 29 of those Regulations (financial penalties); c a decision to impose a limitation on a permission under regulation 30 of those Regulations (limitations on permission to carry on regulated activities). . 3 Section 133A (proceedings before Tribunal: decision and supervisory notices, etc.) applies as if— a the words “(whether under this or any other Act)” were omitted in each place; b in subsection (1) “, as a result of section 388(2),” were omitted; c in subsection (5) the words “or the PRA” were omitted. 4 Section 133B(1) (offences) applies as if— a in paragraph (a), “or the PRA” were omitted; b paragraphs (b) and (c) were omitted. PART 7 Review Review 47 1 The Treasury must from time to time— a carry out a review of these Regulations; b set out the conclusions of the review in a report; and c publish the report. 2 The report must in particular— a set out the objectives intended to be achieved by these Regulations; b assess the extent to which those objectives are achieved; and c assess whether those objectives remain appropriate and, if so, the extent to which they could be achieved with a system that imposes less regulation. 3 The first report under this regulation must be published on or before 1st January 2021. 4 Reports under this regulation are afterwards to be published at intervals not exceeding five years. Charlie Elphicke Mel Stride Two of the Lords Commissioners of Her Majesty's Treasury