FINANCIAL SERVICES AND MARKETS PART I PRELIMINARY Citation and Commencement 1 These Regulations may be cited as the Financial Services and Markets Act 2000 (Disclosure of Confidential Information) Regulations 2001 and come into force on 18th June 2001. Interpretation 2 In these Regulations— “ACER” means the Agency for the Cooperation of Energy Regulators established by Regulation (EC) No. 713/2009 of the European Parliament and of the Council of 13 July 2009 establishing an Agency for the Cooperation of Energy Regulators ; “the Act" means the Financial Services and Markets Act 2000; “ assimilated law restrictions ” means the restrictions imposed on the disclosure of confidential information by the relevant provisions, and (excluding those specified at paragraphs (h) and (j) of that definition) as they had effect immediately before IP completion day, and as modified as follows— requirements imposed on a Member State or an EU entity are to be read as if they are requirements imposed on the United Kingdom or, where relevant, a primary recipient; a restriction on the disclosure of confidential information to a person in a third country applies to any disclosure of confidential information to any person in a country or territory outside the United Kingdom; a requirement to seek the consent of an EU entity only applies where an equivalent requirement applies in relation to an equivalent entity in a third country; and for the purposes of sub-paragraph (b) a reference to a person in a third country, which is a third country regulatory authority, is to be read as including an ESA and the ESRB; ... “capital requirements directive information” means confidential information received by the PRA— before IP completion day in the course of discharging its functions as the competent authority under the capital requirements directive; after IP completion day in the course of exercising its functions in or under the Act or assimilated law which functions are equivalent to the functions as the competent authority set out in the capital requirements directive; “ CCP ” has the meaning given in paragraph 154 of Schedule 11 to the Financial Services and Markets Act 2023; “ competent authority ” includes a supervisory authority that has the same meaning as in regulation 2(1) of the Solvency 2 Regulations 2015 ; “ conglomerates directive ” means Directive 2002/87/EC of the European Parliament and of the Council of 16th December 2002 on the supplementary supervision of credit institutions, insurance undertakings and investment firms in a financial conglomerate and amending Council Directives 73/239/EEC , 79/267/EEC , 92/49/EEC , 92/96/EEC , 93/6/EEC , 93/22/EEC , and Directives 98/78/EC and 2000/12/EC of the European Parliament and of the Council as last amended by Directive 2011/89/EU of the European Parliament and of the Council ; “criminal investigation" means an investigation of any crime, including an investigation of any alleged or suspected crime and an investigation of whether a crime has been committed; ... ... ... “disciplinary proceedings authority" means a person responsible for initiating prescribed disciplinary proceedings or determining the outcome of such proceedings; ... ... ... EMIR information” means confidential information received by one of the regulators in the course of discharging its functions as a competent authority under the EMIR regulation; “the EMIR regulation” means Regulation (EU) 648/2012 of the European Parliament and of the Council of 4 July 2012 on OTC derivatives, central counterparties and trade repositories; “ESRB” means the European Systemic Risk Board established by Regulation (EU) No. 1092/2010 of the European Parliament and the Council of 24 November 2010 on European Union macro-prudential oversight of the financial system and establishing a European Systemic Risk Board; “ESAs” means the European Supervisory Authorities established by Regulation (EU) No. 1093/2010 of the European Parliament and of the Council of 24 November 2010 establishing a European Supervisory Authority (European Banking Authority), Regulation (EU) No. 1094/2010 of the European Parliament and of the Council of 24 November 2010 establishing a European Supervisory Authority (European Insurance and Occupational Pensions Authority) and Regulation (EU) No. 1095/2010 of the European Parliament and of the Council of 24 November 2010 establishing a European Supervisory Authority (European Securities and Markets Authority); “ EU Benchmarks Regulation 2016 ” means Regulation EU 2016/1011 of the European Parliament and of the Council of 8 June 2016 on indices used as benchmarks in financial instruments and financial contracts or to measure the performance of investment funds and amending Directives 2008/48/EC and 2014/17/EU and Regulation (EU) No 596/2014; “ EU entity ” has the meaning given in section 20(1) of the European Union (Withdrawal) Act 2018; “ EU Benchmarks Regulation 2016 information ” means information received by the FCA in the course of discharging its functions as a competent authority under the EU Benchmarks Regulation 2016; ... “ foreign lawyer ” means a person who is a member of a legal profession regulated within a jurisdiction outside England and Wales, Scotland or Northern Ireland, and is entitled to practise as such; “former regulated activities" means activities carried on before the coming into force of section 19 of the Act and which constitute— investment business within the meaning of the Financial Services Act 1986 ; deposit-taking business within the meaning of the Banking Act 1987 ; insurance business within the meaning of the Insurance Companies Act 1982 ; or insurance business within the meaning of the Friendly Societies Act 1992 ; “former regulated person" means a person who, at any time before the coming into force of section 19 of the Act, was— authorised under section 3 or 4 of the Insurance Companies Act 1982; an authorised person within the meaning of the Financial Services Act 1986, or an appointed representative within the meaning of section 44 (appointed representatives) of that Act; an authorised institution within the meaning of the Banking Act 1987; a European institution within the meaning of the Banking Coordination (Second Council Directive) Regulations 1992 ; a European investment firm within the meaning of the Investment Services Regulations 1995 ; an EC company within the meaning of the Insurance Companies Act 1982 able to carry on direct insurance business through a branch in the United Kingdom, or provide insurance in the United Kingdom by virtue of paragraph 1 or 8 of Schedule 2F to that Act ; a friendly society authorised or treated as authorised for the purposes of Part IV of the Friendly Societies Act 1992, or permitted by virtue of section 31(2) or (3) of that Act to carry on activities without authorisation under that Part; or a building society authorised or treated as authorised for the purposes of the Building Societies Act 1986 ; ... “ market in financial instruments information ” means confidential information received by the FCA or the PRA in the course of discharging their functions under— the markets in financial instruments regulation; EU tertiary legislation (within the meaning of section 20 of the European Union (Withdrawal) Act 2018) made under— the markets in financial instruments directive which forms part of assimilated law; and the markets in financial instruments regulation; the Financial Services and Markets Act 2000 (Markets in Financial Instruments) Regulations 2017; or the Act, which correspond to functions under the markets in financial instruments directive; ... ... ... ... “PRA worker” means— a person who is or has been employed by the PRA; or an auditor or expert instructed by the PRA; “prescribed disciplinary proceedings" means the disciplinary proceedings prescribed in Schedule 3; “ PRA rules ” means the rules made by the PRA under the Act as they have effect from time to time; ... “ recovery and resolution information ” means confidential information received by— the Bank of England in the course of discharging its functions under Part 1 of the Banking Act 2009 , the Bank Recovery and Resolution (No. 2) Order 2014 or Schedule 11 to the Financial Services and Markets Act 2023 ; the FCA or PRA in the course of discharging their functions under Part 1 of the Banking Act 2009 , the Bank Recovery and Resolution (No. 2) Order 2014 or Schedule 11 to the Financial Services and Markets Act 2023 ; a person appointed by the Bank of England under section 62B (resolution administrator) of the Banking Act 2009 to act as resolution administrator in the course of discharging that person's functions as such; “regulators” means the FCA, the PRA and the Bank of England, and “regulator” means any one of the regulators; “regulator worker” means— a person who is or has been employed by one of the regulators; or an auditor or expert instructed by one of the regulators; “ relevant directives ” means, for the purposes of this regulation— the alternative investment fund managers directive; the capital requirements directive; the conglomerates directive; the insurance distribution directive; the mortgages directive; the Solvency 2 directive; the UCITS directive; “ relevant provisions ” means, for the purposes of this regulation— Articles 76 and 81 of the markets in financial instruments directive; section 2 of Chapter 1 of Title 7 of the capital requirements directive; Articles 64, 65, 66, 67, 68, 69 and 70 of the Solvency 2 directive; Articles 102 and 104.1 of the UCITS directive; Article 13 of the insurance distribution directive; Articles 47.2, 47.3, 51, 52 and 53.2 of the alternative investment fund managers directive; Articles 5(2) and 36 of the mortgages directive; Article 83 of the EMIR regulation; Article 18 of the SFT regulation; ... “Secretary of State worker" means— a person who is or has been employed by the Secretary of State; or an auditor or expert instructed by the Secretary of State; “ SFTR information ” means confidential information received by a regulator in the course of discharging its functions as a competent authority under the SFT regulation; “ short selling information ” means confidential information received by the FCA in the course of discharging its functions as a competent authority under the short selling regulation under or by virtue of the Short Selling Regulations 2025 ; “ specified confidential EU law information ” means confidential information received by the FCA or the PRA— before IP completion day in the course of discharging its functions as the competent authority under the relevant directives; or after IP completion day in the course of exercising its functions in or under the Act or assimilated law which functions are equivalent to the functions as the competent authority set out in the relevant directives; ... ... ... ... “ third country regulatory authority ” means— an authority in a country or territory outside the United Kingdom which exercises any function of a kind mentioned in section 195(4) of the Act; a third country investment exchange, a third country clearing house, a third country central counterparty (within the meaning of section 285(1)(d) of the Act) or a third country CSD (within the meaning of section 285(1)(g) of the Act); or an authority in a country or territory outside the United Kingdom which exercises any functions of a kind corresponding to a function of the Bank of England; “ third country resolution authority ” means an authority in a country or territory which is not, and does not form part of, the United Kingdom which exercises functions in relation to third country resolution action (within the meaning of section 89H of the Banking Act 2009 or within the meaning of paragraph 145 of Schedule 11 to the Financial Services and Markets Act 2023, as appropriate ), including planning for such action, corresponding to one or more functions exercisable by the Bank of England pursuant to Part 1 of the Banking Act 2009 , the Bank Recovery and Resolution (No. 2) Order 2014 or Schedule 11 to the Financial Services and Markets Act 2023 ; “ UCITS information ” means confidential information received by the FCA in the course of discharging its functions as the United Kingdom authority under the Undertakings for Collective Investment in Transferable Securities Regulations 2011; ... ... , and any reference to an EU regulation, or part of an EU regulation, is to be read as a reference to that EU regulation, or that part of an EU regulation, as amended from time to time. PART II DISCLOSURE OF CONFIDENTIAL INFORMATION GENERALLY Disclosure by and to the regulators , the Secretary of State and the Treasury etc. 3 1 A disclosure of confidential information is permitted when it is made to any person— a by one of the regulators or a regulator worker for the purposes of enabling or assisting the person making the disclosure to discharge any public functions of that regulator or (if different) the regulator worker; b by the Secretary of State or a Secretary of State worker for the purpose of enabling or assisting the person making the disclosure to discharge any public functions of the Secretary of State or (if different) of the Secretary of State worker; c by the Treasury for the purpose of enabling or assisting the Treasury to discharge any of their public functions; d by one of the regulators or a regulator worker to one of the other regulators or a regulator worker employed or instructed by one of the other regulators for the purpose of enabling or assisting the recipient to discharge any public functions of the regulator or (if different) the regulator worker. 2 A disclosure of confidential information is permitted when it is made by any primary recipient, or person obtaining the information directly or indirectly from a primary recipient, to one of the regulators , the Secretary of State or the Treasury for the purpose of enabling or assisting that regulator , the Secretary of State or the Treasury (as the case may be) to discharge any of its, his or their public functions. 3 Paragraphs (1) and (2) do not permit disclosure in contravention of any of the assimilated law restrictions . Disclosure for the purposes of criminal proceedings and investigations 4 A primary recipient of confidential information, or a person obtaining such information directly or indirectly from a primary recipient, is permitted to disclose such information to any person— a for the purposes of any criminal investigation whatever which is being or may be carried out, whether in the United Kingdom or elsewhere; b for the purposes of any criminal proceedings whatever which have been or may be initiated, whether in the United Kingdom or elsewhere; or ba for the purposes of any proceedings under Part 2, 3 or 4 of the Proceeds of Crime Act 2002 which have been, or may be initiated; c for the purpose of initiating or bringing to an end any such investigation or proceedings, or of facilitating a determination of whether it or they should be initiated or brought to an end. Disclosure for the purposes of certain other proceedings 5 1 Subject to paragraphs (4) and (5), a primary recipient of confidential information, or a person obtaining such information directly or indirectly from a primary recipient, is permitted to disclose such information to— a a person mentioned in paragraph (3) for the purpose of initiating proceedings to which this regulation applies, or of facilitating a determination of whether they should be initiated; or b any person for the purposes of proceedings to which this regulation applies and which have been initiated, or for the purpose of bringing to an end such proceedings, or of facilitating a determination of whether they should be brought to an end. 2 A person mentioned in paragraph (3) (or a person who is employed by one of the regulators or the Secretary of State) is permitted to disclose confidential information to any person for a purpose mentioned in paragraph (1)(a). 3 The persons referred to in paragraphs (1)(a) and (2) are— a the regulators ; b the Secretary of State; and c the Department for the Economy in Northern Ireland . 4 This regulation does not permit the disclosure of information with a view to the institution of, or in connection with, proceedings of the kind referred to in paragraph (6)(e) to the extent that— a the information relates to an authorised person, former authorised person or former regulated person (“A"); b the information also relates to another person (“B") who, to the knowledge of the primary recipient (or person obtaining confidential information directly or indirectly from him), is or has been involved in an attempt to rescue A, or A’s business, from insolvency or impending insolvency; and c B is not a director, controller or manager of A. 5 This regulation does not permit disclosure in contravention of any of the assimilated law restrictions . 6 The proceedings to which this regulation applies are— a civil proceedings arising under or by virtue of the Act, an enactment referred to in section 338 of the Act, the Banking Act 1979 , the Friendly Societies Act 1974 , the Insurance Companies Act 1982 , the Financial Services Act 1986 , the Building Societies Act 1986 , the Banking Act 1987 , the Friendly Societies Act 1992 or the Investment Services Regulations 1995 ; b proceedings before the Tribunal; c any other civil proceedings to which one of the regulators is, or is proposed to be, a party; d proceedings under section 7 or 8 of the Company Directors Disqualification Act 1986 or article 10 or 11 of the Companies (Northern Ireland) Order 1989 in respect of a director or former director of an authorised person, former authorised person or former regulated person; or e proceedings under Parts I to VI or IX to X of the Insolvency Act 1986 , the Bankruptcy (Scotland) Act 1985 or Parts II to VII or IX or X of the Insolvency (Northern Ireland) Order 1989 in respect of an authorised person, former authorised person or former regulated person. Disclosure in pursuance of an EU obligation 6 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Restrictions on use of confidential information 7 Where confidential information is disclosed under these Regulations to a person other than the FCA, the PRA, , the Secretary of State, the Treasury or the Bank of England, and the disclosure is made subject to any conditions as to the use to which the information may be put, the person to whom the information has been disclosed may not use the information in breach of any such condition, without the consent of the person who disclosed it to him. PART III DISCLOSURE OF SPECIFIED CONFIDENTIAL EU LAW INFORMATION ... Application of this Part 8 This Part applies to— a specified confidential EU law information ; ... b markets in financial instruments ... information, where that information has been received from a third country regulatory authority under a cooperation agreement; and c . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . d recovery and resolution ... information ... e . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . f . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Disclosure by regulators or regulator workers to certain other persons 9 1 Subject to paragraphs (2) ... , (3A) , (3C) ... ... ... , ... (4) and (5) , any of the regulators or a regulator worker is permitted to disclose information to which this Part applies to a person specified in the first column in Schedule 1 for the purpose of enabling or assisting that person to discharge any of the functions listed beside him in the second column in that Schedule. 1A A regulator or a person who is employed by a regulator may disclose confidential information if it is necessary to do so in order to publish the outcome of a stress test conducted in respect of a credit institution or investment firm .... 2 Paragraph (1) does not permit disclosure to a person specified in the first column in Part 3 of Schedule 1 unless the conditions in paragraphs (2ZA), (2B) or (2C) are met . 2ZA The condition in this paragraph is that the disclosure is provided for by a cooperation agreement of the kind referred to in— a article 88 of the markets in financial instruments directive; b article 55 of the capital requirements directive; c article 66 of the Solvency 2 Directive; d . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . e article 102.3 of the UCITS directive; ... f . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . reading the relevant provisions in those directives as if— i requirements imposed on a Member State or an EU entity are to be read as if they are requirements imposed on the United Kingdom or, where relevant, a primary recipient; ii a restriction on the disclosure of confidential information to a person in a third country applies to any disclosure of confidential information to any person in a country or territory outside the United Kingdom; iii a requirement to seek the consent of an EU entity only applies where an equivalent requirement applies in relation to an equivalent entity in a third country; and iv for the purposes of sub-paragraph (ii) a reference to a person in a third country, which is a third country regulatory authority, is to be read as including an ESA and the ESRB. 2A . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2B The conditions in this paragraph are that— a the disclosure is made in accordance with Chapter V of the UK GDPR ; and b the regulator or regulator worker is satisfied that the disclosure is necessary for the purpose of complying with i requirements imposed on the regulator in the exercise of its functions under the Act which correspond to the functions under the Alternative Investment Fund Managers Regulations 2013; ii EU tertiary legislation (within the meaning of section 20 of the European Union (Withdrawal) Act 2018) made under the alternative investment fund managers directive which forms part of assimilated law; and iii rules made by the FCA under the Act that were in force immediately before IP completion day to implement the alternative investment fund managers directive. c . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2C The condition in this paragraph is that— a the disclosure is of recovery and resolution information; b the disclosure is to a third country resolution authority; c the third country resolution authority is subject to restrictions on the disclosure of confidential information at least equivalent, in the opinion of the Bank of England, to the restrictions on the Bank of England in relation to its functions under Part 1 of the Banking Act 2009 , the Bank Recovery and Resolution (No. 2) Order 2014 or Schedule 11 to the Financial Services and Markets Act 2023 ; and c the information— i is necessary for the performance by the third country resolution authority of its functions in relation to a third country resolution action (within the meaning of section 89H of the Banking Act 2009 or within the meaning of paragraph 145 of Schedule 11 to the Financial Services and Markets Act 2023, as appropriate ) including planning for such action, corresponding to one or more of the functions exercisable by the Bank of England pursuant to Part 1 of the Banking Act 2009 , the Bank Recovery and Resolution (No. 2) Order 2014 or Schedule 11 to the Financial Services and Markets Act 2023 ; and ii is not used for any other purpose. 2D . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3A Paragraph (1) does not permit disclosure of markets in financial instruments information to a person specified in the first column of Schedule 1 other than a person listed in paragraph (3B) where that information— a was obtained from a third country regulatory authority under a cooperation agreement; and b that authority indicated at the time of communication that such information must not be disclosed, unless that authority has given its express consent to the disclosure. 3B The persons are— a the Bank of England, b . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . c the central bank of any country or territory outside the United Kingdom, ... d a body (other than a central bank) ... outside the United Kingdom having— i functions as a monetary authority; or ii responsibility for overseeing payment systems , e . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . f . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3C Paragraph (1) does not permit disclosure of UCITS ... information to a person specified in the first column of Schedule 1 other than a person listed in paragraph (3D) where that information— a was obtained from a third country regulatory authority under a cooperation agreement referred to in Article 102 of the UCITS directive, reading the provisions in Article 102 of that directive as if the requirements imposed on a Member State were requirements imposed on the regulator , and b that authority indicated at the time of communication that such information must not be disclosed, unless that authority has given its express consent to the disclosure. 3D The persons are— a the Bank of England; b a central bank outside the United Kingdom; c a recognised investment exchange; d an auditor exercising functions conferred by or under the Act in relation to insurance undertakings, credit institutions, investment firms or other financial institutions; e . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3E . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3EA . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3F . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3G . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4 Paragraph (1) does not permit disclosure in breach of any restriction on the disclosure of confidential information in Section 2 of Chapter 1 of Title 7 of the capital requirements directive reading those provisions in that directive as follows— a the requirements imposed on a Member State or an EU entity are to be read as if they are requirements imposed on the United Kingdom or, where relevant, a primary recipient; b a restriction on the disclosure of confidential information to a person in a third country applies to any disclosure of confidential information to any person in a country or territory outside the United Kingdom; c a requirement to seek the consent of an EU entity applies only where an equivalent requirement applies in relation to an equivalent entity in a third country; and d for the purposes of sub-paragraph (b) a reference to a person in a third country, which is a third country regulatory authority, is to be read as including an ESA and the ESRB. 4A Paragraph (4) does not apply where regulation 10C applies to the disclosure of confidential information. 5 Paragraph (1) does not permit the disclosure of recovery and resolution ... information to any person unless the assessment required in regulation 10B has been carried out. 6 In this regulation, “ the UK GDPR ” has the same meaning as in Parts 5 to 7 of the Data Protection Act 2018 (see section 3(10) and (14) of that Act). Disclosure by Schedule 1 person 10 A person specified in the first column in Schedule 1 is permitted to disclose information to which this Part applies for the purpose of enabling or assisting him to discharge any of the functions listed beside him in that Schedule. Disclosure of recovery and resolution ... information 10A 1 The Bank of England may disclose recovery and resolution ... information to any person for the purpose of enabling the Bank to prepare for and carry out the functions given to it under— a Parts 1, 2 and 3 of the Banking Act 2009, ... b the Investment Bank Special Administration Regulations 2011, or c Schedule 11 to the Financial Services and Markets Act 2023, provided that any such disclosure is made subject to the conditions in paragraph (2), and following the assessment required in regulation 10B. 2 A disclosure made by the Bank of England under paragraph (1) must be made subject to— a a requirement that the information disclosed is kept confidential and not disclosed to any other person without the consent of the Bank; and b restrictions imposed by the Bank as to the way in which the information may be used. 3 A resolution administrator appointed under section 62B of the Banking Act 2009 may disclose recovery and resolution ... information to a regulator. Assessment of effects of disclosure 10B 1 Before any disclosure is made of recovery and resolution ... information the person disclosing that information must— a assess the possible effects of disclosing the information in question on— i the public interest in relation to financial, monetary or economic policy; ii the commercial interests of natural and legal persons; iii the purpose of any investigation, inspection or audit to which the information is relevant; and b where the information in question relates to the recovery plan or resolution plan of any undertaking, assess the effects of the disclosure of any part of that recovery plan or resolution plan. 2 In this regulation— “ recovery plan ” means a recovery plan or a group recovery plan as those terms are defined in the Bank Recovery and Resolution (No.2) Order 2014 (“ the 2014 Order ”) or in paragraph 2 of Schedule 11 to the Financial Services and Markets Act 2023 ; and “ resolution plan ” means a resolution plan or a group resolution plan as those terms are defined in the 2014 Order, or as defined in paragraph 4 of Schedule 11 to the Financial Services and Markets Act 2023 . Disclosure of capital requirements directive information to International Financial Institutions 10C 1 Subject to the conditions in paragraph (2), the PRA or a PRA worker is permitted to disclose capital requirements directive information to an organisation specified in the first column of Part 6 of Schedule 1 for the purpose of enabling or assisting that organisation to discharge any of the functions listed beside it in the second column of Part 6 of Schedule 1. 2 The conditions are as follows— a the organisation must make an explicit request for the confidential information; b the request is precise as to the nature, scope and format of the confidential information and the means of its disclosure or transmission; c the confidential information requested is necessary for the performance of the specific tasks of the organisation making the request and does not go beyond the functions conferred on that organisation; d the organisation making the request justifies it by reference to its tasks; and e to the extent that the disclosure of confidential information involves processing of personal data, any processing of personal data by the organisation making the request complies with the UK GDPR. 3 In this regulation, “the UK GDPR” has the same meaning as in Parts 5 to 7 of the Data Protection Act 2018 (see section 3(10) and (14) of that Act). Disclosure of information in order to publish a stress test in relation to insurance undertakings and reinsurance undertakings 10D The PRA or a person who is employed by the PRA may disclose confidential information if it is necessary to do so in order to publish the outcome of a stress test conducted in respect of an insurance undertaking, which is also a UK Solvency II Firm as defined by the PRA rules, or a reinsurance undertaking, which is also a UK Solvency II firm as defined by the PRA rules. PART IV DISCLOSURE OF CONFIDENTIAL INFORMATION NOT SUBJECT TO ASSIMILATED LAW RESTRICTIONS Application of this Part 11 This Part applies to confidential information other than— a specified confidential EU law information ; b . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . c . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . d markets in financial instruments ... information, where that information has been received from a third country regulatory authority under a cooperation agreement unless that authority has given its express consent for disclosure that is covered by this Part; e UCITS ... information, where that information has been received from a third country regulatory authority under a cooperation agreement unless that authority has given its express consent for disclosure that is covered by this Part; f . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . fa . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . g recovery and resolution ... information ; h . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Disclosure by and to a Schedule 1 or 2 person or disciplinary proceedings authority 12 1 A primary recipient of information to which this Part applies, or a person obtaining such information directly or indirectly from a primary recipient, is permitted to disclose such information to— a a person specified in the first column in Schedule 1 or 2 for the purpose of enabling or assisting that person to discharge any function listed beside him in the second column in Schedule 1 or 2; or b a disciplinary proceedings authority for the purposes of any prescribed disciplinary proceedings which have been or may be initiated, or for the purpose of initiating or bringing to an end any such proceedings, or of facilitating a determination of whether they should be initiated or brought to an end. 2 A person specified in the first column in Schedule 1 or 2 is permitted to disclose information to which this Part applies to any person for the purpose of enabling or assisting the person making the disclosure to discharge any function listed beside him in the second column in Schedule 1 or 2. 3 A disciplinary proceedings authority is permitted to disclose information to which this Part applies to any person for any of the purposes mentioned in paragraph (1)(b). 3A This regulation does not permit disclosure of short selling information to a person specified in the first column in Part 3 of Schedule 1 unless the disclosure is in accordance with paragraph (3B) or a cooperation arrangement on the exchange of data and information with that person. 3B The FCA may disclose short selling information to a person specified in the first column in Part 3 of Schedule 1 where— a the disclosure does not contravene Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data or the Data Protection Act 2018, b the FCA is satisfied that the disclosure is necessary for the purposes of the Short Selling Regulations 2025, and c any such disclosure is made under agreement that the person shall not disclose the data to the supervisory authority of another country without the express written authorisation of the FCA. 3C Where the short selling information has been received from the supervisory authority of another country, the FCA may disclose the information to another person specified in the first column in Part 3 of Schedule 1 only where— a the FCA has obtained the express agreement of the person which transmitted the information, and b where applicable, the information is disclosed solely for the purposes for which that person gave its agreement. 4 This regulation does not permit disclosure of short selling regulation information to a person specified in the first column in Part 3 of Schedule 1 unless the disclosure is in accordance with article 40 of the short selling regulation or a cooperation arrangement of the kind referred to in article 38 of the short selling regulation. 5 This regulation does not permit the disclosure of information if— a the information is confidential information received by the FCA in the course of discharging its functions as a competent authority under the market abuse regulation or any directly applicable EU regulation made under the market abuse regulation; and b the disclosure of the information contravenes the market abuse regulation. 6 This regulation does not permit disclosure of the EU Benchmarks Regulation 2016 information which has been received from another competent authority unless the disclosure is in accordance with Article 38 of the EU Benchmarks Regulation 2016. The Gambling Commission 12A The Gambling Commission may disclose information to which this Part applies to the Comptroller and Auditor General for the purpose of enabling or assisting the Comptroller and Auditor General to carry out an examination under Part II of the National Audit Act 1983 in relation to the Commission. Electronic commerce 12B . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Proceedings under the Proceeds of Crime Act 2002 12C A primary recipient of information to which this Part applies, or a person obtaining such information directly or indirectly from a primary recipient is permitted to disclose such information to any person for the purposes of any proceedings under the Proceeds of Crime Act 2002 which have been or may be initiated. Disclosure of information in order to publish a stress test in relation to insurance undertakings and reinsurance undertakings 12D The PRA or a person who is employed by the PRA may disclose confidential information if it is necessary to do so in order to publish the outcome of a stress test conducted in respect of an insurance undertaking, which is also a UK Solvency II Firm as defined by the PRA rules, or a reinsurance undertaking, which is also a UK Solvency II Firm as defined by the PRA rules. PART V CHAPTER 1 Transitional Provisions Applicable Before IP completion day Interpretation 13 In this Part— “the Authority” means the Financial Services Authority; “ EEA competent authority ” has the meaning given in regulation 2 of these Regulations as it had effect immediately before IP completion day; “pre-commencement information" means information which is subject to restrictions (with or without qualifications or exceptions) on disclosure by virtue of a pre-commencement provision; “pre-commencement provision" means— any provision in— Schedule 2B to the Insurance Companies Act 1982 ; Part VIII of the Financial Services Act 1986 ; Part V of the Banking Act 1987 ; or SRO rules; which imposes restrictions on the disclosure of information, or creates exceptions or qualifications to such restrictions; or regulation 48 of the Investment Services Regulations 1995 ; “recognised self-regulating organisation" means a body which immediately before the coming into force of section 348 of the Act was a recognised self-regulating organisation within the meaning of section 8(1) of the Financial Services Act 1986, or a recognised self-regulating organisation for friendly societies within the meaning of Schedule 11 to that Act; “ single market information ” has the meaning given in regulation 2 of these Regulations as it had effect immediately before IP completion day; “ single market restrictions ” has the meaning given in regulation 2 of these Regulations as it had effect immediately before IP completion day; “SRO rules" means the rules of a recognised self-regulating organisation; “transitional information" means information which immediately before the coming into force of section 19 of the Act was subject to restrictions on disclosure by virtue of a pre-commencement provision. Disclosure of pre-commencement information 14 1 Before the coming into force of section 19 of the Act, each pre-commencement provision is to be treated as permitting the disclosure of pre-commencement information— a in accordance with regulation 3(1) as if it were confidential information; b to the Authority, the Secretary of State or the Treasury for the purpose referred to in regulation 3(2); c to any person for the purposes referred to in regulation 4; and d to— i a person mentioned in regulation 5(3) for the purpose referred to in regulation 5(1)(a); or ii any person for the purposes referred to in regulation 5(1)(b), but only if the proceedings in question are of the kind referred to in regulation 5(6)(a), (b) or (c). 2 Paragraph (1) is not to be taken as— a precluding disclosure of pre-commencement information where that is otherwise permitted under the pre-commencement provision in question; or b permitting disclosure in contravention of any of the single market restrictions . Disclosure of transitional information 15 1 After the coming into force of section 19 of the Act, sections 348, 349 and 352 of the Act apply in relation to transitional information in the same way as they apply in relation to confidential information within the meaning of section 348(2) of the Act. 2 Paragraph (1) does not apply to transitional information which— a has been made available to the public by virtue of being disclosed in any circumstances in which, or for any purposes for which, disclosure is not precluded by section 348 of the Act or a pre-commencement provision; or b satisfies the criterion set out in section 348(4)(b) of the Act. 3 For the purposes of sections 348 and 349 of the Act as they apply by virtue of paragraph (1)— a a person who holds transitional information is to be treated as a primary recipient of the information if he— i obtained it as mentioned in paragraph 1(2) or 5(1)(a) of Schedule 2B to the Insurance Companies Act 1982 ; ii was a primary recipient of the information for the purposes of section 179 of the Financial Services Act 1986 ; iia obtained or received it as mentioned in subsection (5) of that section; iii received it as mentioned in section 82(1)(a) of the Banking Act 1987 ; or iv received it as mentioned in regulation 48(1) of the Investment Services Regulations 1995 ; b any other person who holds transitional information is to be treated as having obtained the information directly or indirectly from a primary recipient. 4 Transitional information which is subject to single market restrictions ... is to be treated for the purposes of these Regulations as single market information .... 5 Part IV of these Regulations does not apply to transitional information which is subject to single market restrictions imposed by article 107.3 of the listing particulars directive. Disclosure by recognised self-regulating organisations 16 If a recognised self-regulating organisation discloses any information to the Authority for the purpose of enabling or assisting the Authority to discharge functions corresponding to functions of the organisation, the disclosure is not to be taken as a contravention of any duty to which the organisation is subject. Investment services directive information: transitional provision 17 In these Regulations confidential information received by the Authority in the course of discharging its functions as an EEA competent authority under Council Directive 93/22/EEC of 10th May 1993 on investment services in the securities field shall be deemed to have been received by the Authority in the course of discharging its functions as an EEA competent authority under Directive 2004/39/EC of the European Parliament and of the Council of 21st April 2004 on markets in financial instruments . CHAPTER 2 Transitional Provision Applicable on or after IP completion day Transitional provision applicable on or after IP completion day 18 Confidential information received before IP completion day by a primary recipient or any person obtaining the information directly or indirectly from a primary recipient shall continue to be treated, on or after IP completion day, as if that information had been received by that person in accordance with the relevant EU Regulations, directives or these Regulations as they had effect immediately before IP completion day. Gordon Brown David Jamieson Two of the Lords Commissioners of Her Majesty’s Treasury 15th June 2001