Exiting The European Union PART 1 General Citation and commencement 1 1 These Regulations may be cited as the Cyber (Sanctions) (EU Exit) Regulations 2020. 2 These Regulations come into force in accordance with regulations made by the Secretary of State under section 56 of the Act. Interpretation 2 In these Regulations— “ the Act ” means the Sanctions and Anti-Money Laundering Act 2018; “ arrangement ” includes any agreement, understanding, scheme, transaction or series of transactions, whether or not legally enforceable (but see paragraph 12 of Schedule 1 for the meaning of that term in that Schedule); “ conduct ” includes acts and omissions; “ director disqualification licence ” means a licence under regulation 20A; “ document ” includes information recorded in any form and, in relation to information recorded otherwise than in legible form, references to its production include producing a copy of the information in legible form; “ the EU Cyber Regulation ” means Council Regulation (EU) 2019/796 of 17 May 2019 concerning restrictive measures against cyber-attacks threatening the Union or its Member States , as it has effect in EU law; “ relevant cyber activity ” has the meaning given by regulation 4(2); “ technical assistance ” means the provision of technical support or any other technical service; “ Treasury licence ” means a licence under regulation 20(1); “ United Kingdom person ” has the same meaning as in section 21 of the Act. Application of prohibitions and requirements outside the United Kingdom 3 1 A United Kingdom person may contravene a relevant prohibition by conduct wholly or partly outside the United Kingdom. 2 Any person may contravene a relevant prohibition by conduct in the territorial sea. 3 For the purposes of this regulation, a “ relevant prohibition ” means any prohibition imposed by— a regulation 9(2) (confidential information), b Part 3 (Finance), or c a condition of a Treasury licence. 4 A United Kingdom person may comply, or fail to comply, with a relevant requirement by conduct wholly or partly outside the United Kingdom. 5 Any person may comply, or fail to comply, with a relevant requirement by conduct in the territorial sea. 6 In this regulation a “ relevant requirement ” means any requirement imposed— a by or under Part 6 (Information and records), or by reason of a request made under a power conferred by that Part, or b by a condition of a Treasury licence. 7 Nothing in this regulation is to be taken to prevent a relevant prohibition or a relevant requirement from applying to conduct (by any person) in the United Kingdom. Purpose 4 1 The purpose of the regulations contained in this instrument that are made under section 1 of the Act is to further the prevention of relevant cyber activity. 2 For the purpose of paragraph (1), “ relevant cyber activity ” means an activity falling within paragraph (3) which— a undermines, or is intended to undermine, the integrity, prosperity or security of the United Kingdom or a country other than the United Kingdom, b directly or indirectly causes, or is intended to cause, economic loss to, or prejudice to the commercial interests of, those affected by the activity, c undermines, or is intended to undermine, the independence or effective functioning of— i an international organisation, or ii a non-governmental organisation or forum whose mandate or purposes relate to the governance of international sport or the Internet, or d otherwise affects a significant number of persons in an indiscriminate manner. 3 The following activity falls within this paragraph— a accessing, or attempting to access, an information system, b carrying out, or attempting to carry out, information system interference, or c carrying out, or attempting to carry out, data interference, except where— i the owner or other right holder of the information system or part of it has consented to such action, ii there is a lawful defence to such action, or iii such action is otherwise permitted under the law of the United Kingdom. 4 For the purpose of paragraphs (2) and (3)— “ data interference ”, in relation to digital data on an information system, means— deleting, damaging, deteriorating, altering or suppressing that data, rendering that data inaccessible, or stealing that data or otherwise stealing funds, economic resources or intellectual property related to such data; “ information system ” includes— a device or group of interconnected or related devices, one or more of which, pursuant to a programme, automatically processes digital data; digital data stored, processed, retrieved or transmitted by such a device or group of devices for the purposes of its or their operation, use, protection or maintenance; “ information system interference ” means hindering or interrupting the functioning of an information system by— inputting digital data, transmitting, damaging, deleting, deteriorating, altering or suppressing such data, or rendering such data inaccessible; “integrity”, in respect of a country (whether the United Kingdom or a country other than the United Kingdom), includes— the exercise of governmental functions of that country; the exercise of parliamentary functions in that country; the functioning of bodies, organisations or institutions involved in public elections or the voting process; the operation of the criminal or civil justice system in that country; the provision of essential services to the population, including banking, education, energy, healthcare, sewerage, transport or water; the operation of critical national infrastructure; “ international organisation ” means an organisation and its subordinate bodies governed by international law, or any other body which is set up by, or on the basis of, an agreement between two or more countries; “prosperity”, in respect of a country (whether the United Kingdom or a country other than the United Kingdom), includes the effective functioning of the economy, or part of it, of that country. PART 2 Designation of persons Power to designate persons 5 1 The Secretary of State may designate persons by name in accordance with regulation 5A (conditions for the designation of persons by name) for the purposes of any of the following— a regulations 11 to 15 (asset-freeze etc.); aa regulation 16A (director disqualification sanctions); b regulation 17 (immigration). 2 The Secretary of State may designate different persons for the purposes of different provisions mentioned in paragraph (1). Conditions for the designation of persons by name 5A 1 The Secretary of State may choose whether to designate a person under regulation 5 (power to designate persons) under— a the standard procedure, or b the urgent procedure. 2 Paragraph (3) applies where the Secretary of State chooses to designate a person under regulation 5 under the standard procedure. 3 The Secretary of State may not designate a person except where condition A is met. 4 Condition A is that the Secretary of State has reasonable grounds to suspect that that person is an involved person. 5 Paragraphs (6) to (8) apply where the Secretary of State chooses to designate a person under regulation 5 under the urgent procedure. 6 The Secretary of State may designate a person where condition A is not met, but conditions B and C are met. 7 The person ceases to be a designated person at the end of the period of 56 days beginning with the day following the day on which the person became a designated person unless, within that period, the Secretary of State certifies that— a condition A is met, or b conditions B and C continue to be met. 8 Where the Secretary of State makes a certification under paragraph (7)(b), the designation ceases to have effect at the end of the period of 56 days beginning with the day immediately following the period mentioned in paragraph (7), unless within that period the Secretary of State certifies that condition A is met. 9 Condition B is that relevant provision (whenever made) applies to, or in relation to, the person under the law of— a the United States of America; b the European Union; c Australia; d Canada. 10 Condition C is that the Secretary of State considers that it is in the public interest to make designations under the urgent procedure. 11 For the purposes of condition B, “relevant provision” is provision that the Secretary of State considers— a corresponds, or is similar, to the type of sanction or sanctions in these Regulations, or b is made for purposes corresponding, or similar, to any purpose of any type of sanction or sanctions in these Regulations. 12 In this regulation, “ involved person ” has the meaning given in regulation 6 (designation criteria: meaning of “involved person”). Designation criteria: meaning of “involved person” 6 1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2 For the purposes of regulation 5A (conditions for the designation of persons by name) an “ involved person ” means a person who— a is or has been involved in relevant cyber activity, b is owned or controlled directly or indirectly (within the meaning of regulation 7) by a person who is or has been so involved, c is acting on behalf of or at the direction of a person who is or has been so involved, or d is a member of, or associated with, a person who is or has been so involved. 3 Any reference in this regulation to being involved in relevant cyber activity includes being so involved in whatever way and wherever any actions constituting the involvement take place, and in particular includes— a being responsible for, engaging in, providing support for, or promoting the commission, planning or preparation of relevant cyber activity; b providing financial services, or making available funds or economic resources, that could contribute to relevant cyber activity; c providing technical assistance that could contribute to relevant cyber activity; d being involved in the supply of goods or technology that could contribute to relevant cyber activity, or in providing financial services relating to such supply; e being involved in any other action, policy, activity or conduct which promotes, enables or facilitates the commission of relevant cyber activity; f being involved in assisting the contravention or circumvention of any relevant provision. 4 In this regulation— “ relevant provision ” means— any provision of Part 3 (Finance); any provision of the law of a country other than the United Kingdom made for purposes corresponding to a purpose of any provision of Part 3 (Finance). 5 Nothing in any sub-paragraph of paragraph (3) is to be taken to limit the meaning of any of the other sub-paragraphs of that paragraph. Meaning of “owned or controlled directly or indirectly” 7 1 A person who is not an individual (“C”) is “owned or controlled directly or indirectly” by another person (“P”) if either of the following two conditions is met (or both are met). 2 The first condition is that P— a holds directly or indirectly more than 50% of the shares in C, b holds directly or indirectly more than 50% of the voting rights in C, or c holds the right directly or indirectly to appoint or remove a majority of the board of directors of C. 3 Schedule 1 contains provision applying for the purpose of interpreting paragraph (2). 4 The second condition is that it is reasonable, having regard to all the circumstances, to expect that P would (if P chose to) be able, in most cases or in significant respects, by whatever means and whether directly or indirectly, to achieve the result that affairs of C are conducted in accordance with P's wishes. Notification and publicity where designation power used 8 1 Paragraph (2) applies where the Secretary of State— a has made a designation under regulation 5, or b has by virtue of section 22 of the Act varied or revoked a designation made under that regulation. 2 The Secretary of State— a must without delay take such steps as are reasonably practicable to inform the designated person of the designation, variation or revocation, and b must take steps to publicise the designation, variation or revocation. 3 The information given under paragraph (2)(a)— a where the Secretary of State designates a person under the standard procedure, must include a statement of reasons; b where the Secretary of State designates a person under the urgent procedure, must include a statement— i that the designation is made under the urgent procedure, ii identifying the relevant provision by reference to which the Secretary of State considers that condition B is met in relation to the person, and iii setting out why the Secretary of State considers that condition C is met. 3A Where the Secretary of State designates a person under the urgent procedure, the Secretary of State must, after the end of the period mentioned in paragraph (7) of regulation 5A (conditions for the designation of persons by name), or if the Secretary of State has made a certification under paragraph (7)(b) of that regulation, the period mentioned in paragraph (8) of that regulation, but otherwise without delay— a in a case where the person ceases to be a designated person, take such steps as are reasonably practicable to inform the person that they have ceased to be a designated person, or b in any other case, take such steps as are reasonably practicable to give the person a statement of reasons. 4 In this regulation, a “ statement of reasons ” means a brief statement of the matters that the Secretary of State knows, or has reasonable grounds to suspect, in relation to the person— a in the case of a designation under the standard procedure, which have led the Secretary of State to make the designation, and b in the case of a designation under the urgent procedure, as a result of which the person does not cease to be a designated person at the end of the period mentioned in regulation 5A(7) or (8) (as the case may be). 5 Matters that would otherwise be required by paragraph (4) to be included in a statement of reasons may be excluded from it where the Secretary of State considers that they should be excluded— a in the interests of national security or international relations, b for reasons connected with the prevention or detection of serious crime in the United Kingdom or elsewhere, or c in the interests of justice. 6 The steps taken under paragraph (2)(b) must— a unless one or more of the restricted publicity conditions is met, be steps to publicise generally— i the designation, variation or revocation, and ii in the case of a designation, the statement of reasons; b if one or more of those conditions is met, be steps to inform only such persons as the Secretary of State considers appropriate of the designation, variation or revocation and (in the case of a designation) of the contents of the statement of reasons. 7 The “restricted publicity conditions” are as follows— a the designation is of a person believed by the Secretary of State to be an individual under the age of 18; b the Secretary of State considers that disclosure of the designation, variation or revocation should be restricted— i in the interests of national security or international relations, ii for reasons connected with the prevention or detection of serious crime in the United Kingdom or elsewhere, or iii in the interests of justice. 8 Paragraph (9) applies if— a when a designation is made, one or more of the restricted publicity conditions is met, but b at any time when the designation has effect, it becomes the case that none of the restricted publicity conditions is met. 9 The Secretary of State must— a take such steps as are reasonably practicable to inform the designated person that none of the restricted publicity conditions is now met, and b take steps to publicise generally the designation and the statement of reasons relating to it. Confidential information in certain cases where designation power used 9 1 Where the Secretary of State in accordance with regulation 8(6)(b) informs only certain persons of a designation, variation or revocation and (in the case of a designation) of the contents of the statement of reasons, the Secretary of State may specify that any of that information is to be treated as confidential. 2 A person (“P”) who— a is provided with information that is to be treated as confidential in accordance with paragraph (1), or b otherwise obtains such information, must not, subject to paragraph (3), disclose it if P knows, or has reasonable cause to suspect, that the information is to be treated as confidential. 3 The prohibition in paragraph (2) does not apply to any disclosure made by P with lawful authority. 4 For this purpose information is disclosed with lawful authority only if and to the extent that— a the disclosure is by, or is authorised by, the Secretary of State, b the disclosure is by or with the consent of the person who is or was the subject of the designation, c the disclosure is necessary to give effect to a requirement imposed under or by virtue of these Regulations or any other enactment, or d the disclosure is required, under rules of court, tribunal rules or a court or tribunal order, for the purposes of legal proceedings of any description. 5 This regulation does not prevent the disclosure of information that is already, or has previously been, available to the public from other sources. 6 A person who contravenes the prohibition in paragraph (2) commits an offence. 7 The High Court (in Scotland, the Court of Session) may, on the application of— a the person who is the subject of the information, or b the Secretary of State, grant an injunction (in Scotland, an interdict) to prevent a breach of the prohibition in paragraph (2). 8 In paragraph (4)(c), “ enactment ” has the meaning given by section 54(6) of the Act. PART 3 Finance Meaning of “designated person” in Part 3 10 In this Part a “ designated person ” means a person who is designated under regulation 5 for the purposes of regulations 11 to 15. Asset-freeze in relation to designated persons 11 1 A person (“P”) must not deal with funds or economic resources owned, held or controlled by a designated person if P knows, or has reasonable cause to suspect, that P is dealing with such funds or economic resources. 2 Paragraph (1) is subject to Part 5 (Exceptions and licences). 3 A person who contravenes the prohibition in paragraph (1) commits an offence. 4 For the purposes of paragraph (1), a person “deals with” funds if the person— a uses, alters, moves, transfers or allows access to the funds, b deals with the funds in any other way that would result in any change in volume, amount, location, ownership, possession, character or destination, or c makes any other change, including portfolio management, that would enable use of the funds. 5 For the purposes of paragraph (1), a person “deals with” economic resources if the person— a exchanges the economic resources for funds, goods or services, or b uses the economic resources in exchange for funds, goods or services (whether by pledging them as security or otherwise). 6 The reference in paragraph (1) to funds or economic resources that are “owned, held or controlled” by a person includes, in particular, a reference to— a funds or economic resources in which the person has any legal or equitable interest, regardless of whether the interest is held jointly with any other person and regardless of whether any other person holds an interest in the funds or economic resources; b any tangible property (other than real property), or bearer security, that is comprised in funds or economic resources and is in the possession of the person. 7 For the purposes of paragraph (1), funds or economic resources are to be treated as owned, held or controlled by a designated person if they are owned, held or controlled by a person who is owned or controlled directly or indirectly (within the meaning of regulation 7) by the designated person. 8 For the avoidance of doubt, the reference in paragraph (1) to a designated person includes P if P is a designated person. Making funds available to designated persons 12 1 A person (“P”) must not make funds available directly or indirectly to a designated person if P knows, or has reasonable cause to suspect, that P is making the funds so available. 2 Paragraph (1) is subject to Part 5 (Exceptions and licences). 3 A person who contravenes the prohibition in paragraph (1) commits an offence. 4 The reference in paragraph (1) to making funds available indirectly to a designated person includes, in particular, a reference to making them available to a person who is owned or controlled directly or indirectly (within the meaning of regulation 7) by the designated person. Making funds available for benefit of designated persons 13 1 A person (“P”) must not make funds available to any person for the benefit of a designated person if P knows, or has reasonable cause to suspect, that P is making the funds so available. 2 Paragraph (1) is subject to Part 5 (Exceptions and licences). 3 A person who contravenes the prohibition in paragraph (1) commits an offence. 3A The reference in paragraph (1) to making funds available to any person for the benefit of a designated person includes making funds available for the benefit of a person who is owned or controlled directly or indirectly (within the meaning of regulation 7) by the designated person (and references to designated person in paragraph (4) are to be read accordingly). 4 For the purposes of this regulation— a funds are made available for the benefit of a designated person only if that person thereby obtains, or is able to obtain, a significant financial benefit, and b “ financial benefit ” includes the discharge (or partial discharge) of a financial obligation for which the designated person is wholly or partly responsible. Making economic resources available to designated persons 14 1 A person (“P”) must not make economic resources available directly or indirectly to a designated person if P knows, or has reasonable cause to suspect— a that P is making the economic resources so available, and b that the designated person would be likely to exchange the economic resources for, or use them in exchange for, funds, goods or services. 2 Paragraph (1) is subject to Part 5 (Exceptions and licences). 3 A person who contravenes the prohibition in paragraph (1) commits an offence. 4 The reference in paragraph (1) to making economic resources available indirectly to a designated person includes, in particular, a reference to making them available to a person who is owned or controlled directly or indirectly (within the meaning of regulation 7) by the designated person. Making economic resources available for benefit of designated persons 15 1 A person (“P”) must not make economic resources available to any person for the benefit of a designated person if P knows, or has reasonable cause to suspect, that P is making the economic resources so available. 2 Paragraph (1) is subject to Part 5 (Exceptions and licences). 3 A person who contravenes the prohibition in paragraph (1) commits an offence. 3A The reference in paragraph (1) to making economic resources available to any person for the benefit of a designated person includes making economic resources available for the benefit of a person who is owned or controlled directly or indirectly (within the meaning of regulation 7) by the designated person (and references to designated person in paragraph (4) are to be read accordingly). 4 For the purposes of paragraph (1)— a economic resources are made available for the benefit of a designated person only if that person thereby obtains, or is able to obtain, a significant financial benefit, and b “ financial benefit ” includes the discharge (or partial discharge) of a financial obligation for which the designated person is wholly or partly responsible. Circumventing etc. prohibitions 16 1 A person must not intentionally participate in activities knowing that the object or effect of them is, whether directly or indirectly— a to circumvent any of the prohibitions in regulations 11 to 15, or b to enable or facilitate the contravention of any such prohibition. 2 A person who contravenes the prohibition in paragraph (1) commits an offence. PART 3A Director disqualification sanctions Director disqualification sanctions 16A A person who is designated under regulation 5 (power to designate persons) for the purposes of this regulation is a person subject to director disqualification sanctions for the purposes of— a section 11A of the Company Directors Disqualification Act 1986, and b Article 15A of the Company Directors Disqualification (Northern Ireland) Order 2002. PART 4 Immigration Immigration 17 A person who is designated under regulation 5 for the purposes of this regulation is an excluded person for the purposes of section 8B of the Immigration Act 1971 . PART 5 Exceptions and licences Finance: exceptions from prohibitions 18 1 The prohibition in regulation 11 (asset-freeze in relation to designated persons) is not contravened by an independent person (“P”) transferring to another person a legal or equitable interest in funds or economic resources where, immediately before the transfer, the interest— a is held by P, and b is not held jointly with the designated person. 2 In paragraph (1) “ independent person ” means a person who— a is not the designated person, and b is not owned or controlled directly or indirectly (within the meaning of regulation 7) by the designated person. 3 The prohibitions in regulations 11 to 13 (asset-freeze in relation to, and making funds available to, or for the benefit of, designated persons) are not contravened by a relevant institution crediting a frozen account with interest or other earnings due on the account. 4 The prohibitions in regulations 12 and 13 (making funds available to, or for the benefit of, designated persons) are not contravened by a relevant institution crediting a frozen account where it receives funds transferred to that institution for crediting to that account. 5 The prohibitions in regulations 12 and 13 are not contravened by the transfer of funds to a relevant institution for crediting to an account held or controlled (directly or indirectly) by a designated person, where those funds are transferred in discharge (or partial discharge) of an obligation which arose before the date on which the person became a designated person. 6 The prohibitions in regulations 11 to 13 are not contravened in relation to a designated person (“P”) by a transfer of funds from account A to account B, where— a account A is with a relevant institution which carries on an excluded activity within the meaning of section 142D of the Financial Services and Markets Act 2000 , b account B is with a ring-fenced body within the meaning of section 142A of the Financial Services and Markets Act 2000 , and c accounts A and B are held or controlled (directly or indirectly) by P. 7 In this regulation— “ designated person ” has the same meaning as it has in Part 3 (Finance); “ frozen account ” means an account with a relevant institution which is held or controlled (directly or indirectly) by a designated person; “ relevant institution ” means a person that has permission under Part 4A of the Financial Services and Markets Act 2000 (Permission to carry on regulated activities). 8 The definition of “relevant institution” in paragraph (7) is to be read with section 22 of the Financial Services and Markets Act 2000 , any relevant order under that section and Schedule 2 to that Act . 9 For the purposes of paragraphs (1)(b), (5) and (6) and the definition of “frozen account” in paragraph (7), references to a designated person are to be read as including a person who is owned or controlled directly or indirectly (within the meaning of regulation 7) by the designated person. 10 When determining for the purposes of paragraph (5) when a person (“ C ”) who is owned or controlled directly or indirectly (within the meaning of regulation 7) by the designated person (“ D ”) became a designated person, C is to be treated as having become a designated person at the same time as D. Finance: exception for authorised conduct in a relevant country 18A 1 Where a person's conduct in a relevant country would, in the absence of this regulation, contravene a prohibition in any of regulations 11 to 15 (asset-freeze etc.) (“the relevant prohibition”), the relevant prohibition is not contravened if the conduct is authorised by a licence or other authorisation which is issued— a under the law of the relevant country, and b for the purpose of disapplying a prohibition in that jurisdiction which corresponds to the relevant prohibition. 2 In this regulation— “ relevant country ” means— any of the Channel Islands, the Isle of Man, or any British overseas territory. Finance: exception from prohibitions for required payments 18B 1 This regulation applies to required payments within the meaning of paragraph (2). 2 A required payment is a payment which— a a designated person is required to make under or by virtue of any enactment to— i the registrar of companies, ii the Commissioners for His Majesty's Revenue and Customs, iii the Welsh Revenue Authority, iv Revenue Scotland, v the Financial Conduct Authority, vi the Secretary of State, vii the Welsh Ministers, viii the Department of Finance in Northern Ireland, or ix a local authority, and b is not an excluded payment. 3 The prohibitions in regulations 11 (asset-freeze in relation to designated persons) and 13 (making funds available for benefit of designated persons) are not contravened by a person making a required payment. 4 Where a required payment is made by a person other than a designated person, the prohibition in regulation 11 is not contravened by the designated person making a reimbursement payment to that person. 5 The reference in paragraph (3) to a person making a required payment includes a designated person, but only where they are making a required payment on their own behalf. 6 The following payments are to be treated as payments which a designated person is required to make under or by virtue of an enactment for the purposes of this regulation, where made by a designated person on their own behalf or by a person, other than a designated person, on behalf of a designated person— a a payment to the Financial Conduct Authority of a levy imposed by the scheme manager of the Financial Services Compensation Scheme by virtue of section 213 of the Financial Services and Markets Act 2000 (the compensation scheme); b a payment to the Financial Conduct Authority which is collected by that Authority on behalf of the Financial Reporting Council Limited. 7 For the purposes of this regulation, references to a designated person are to be read as including a person who is owned or controlled directly or indirectly (within the meaning of regulation 7) by the designated person. 8 In this regulation— “ BID levy ” means a levy that is imposed on those persons who are, in respect of particular business improvement district proposals, entitled to vote in accordance with section 39(3) of the Planning etc. (Scotland) Act 2006; “ business improvement district ” has the meaning given in section 33 of the Planning etc. (Scotland) Act 2006; “ designated person ” has the same meaning as it has in Part 3 (Finance); “ enactment ” has the meaning given in section 54(6) of the Act; “ excluded payment ” means, in relation to— the registrar of companies, a payment of fees for— the incorporation of a firm; the restoration of a firm to a register which is administered by the registrar; the Financial Conduct Authority, a payment of fees for— an application for permission from, authorisation by, registration with or recognition from the Financial Conduct Authority which relates to the carrying on of any activity falling within any function of the Financial Conduct Authority; an application for a variation of such permission, authorisation, registration or recognition; an application for listing or for eligibility for listing; an application for review or approval of a document relating to listing; an application for approval as a sponsor or primary information provider; an application for review or approval of— a document under the prospectus rules or the prospectus regulation; listing particulars under section 79 of the Financial Services and Markets Act 2000 or supplementary listing particulars under section 81 of that Act; the Secretary of State or the Welsh Ministers, a payment that a designated person is required to make under or by virtue of an enactment other than a payment under or by virtue of Part 3 of the Local Government Finance Act 1988; the Department of Finance in Northern Ireland, a payment that a designated person is required to make under or by virtue of an enactment other than a payment under or by virtue of Part 2 of the Rates (Northern Ireland) Order 1977; a local authority, a payment that a designated person is required to make under or by virtue of an enactment other than a payment under or by virtue of— Part 1 of the Local Government (Scotland) Act 1975; Part 3 of the Local Government Finance Act 1988; Parts 1 and 2 of the Local Government Finance Act 1992; Part 4 of the Local Government Act 2003; Part 9 of the Planning etc. (Scotland) Act 2006; the Business Rate Supplements Act 2009; the Business Improvement Districts Act (Northern Ireland) 2013; “ firm ” has the meaning given in section 1173(1) of the Companies Act 2006; “ listing ” means being included in the official list maintained by the Financial Conduct Authority in accordance with Part 6 of the Financial Services and Markets Act 2000; “ local authority ” means— in relation to England— a district council; a county council for any area for which there is no district council; a London borough council; the Common Council of the City of London in its capacity as a local authority; the Council of the Isles of Scilly; in relation to Wales, a county council or a county borough council; in relation to Scotland, a council constituted under section 2 of the Local Government etc. (Scotland) Act 1994 or a person appointed by such a council for the purposes of the administration, collection and recovery of a BID levy; in relation to Northern Ireland, a district council; “ primary information provider ” has the meaning given in section 89P(2) of the Financial Services and Markets Act 2000; “ prospectus regulation ” means Regulation (EU) 2017/1129 of the European Parliament and of the Council of 14 June 2017 on the prospectus to be published when securities are offered to the public or admitted to trading on a regulated market, and repealing Directive 2003/71/EC ; “ prospectus rules ” has the meaning given in section 73A(4) of the Financial Services and Markets Act 2000; “ registrar of companies ” has the meaning given in section 1060 of the Companies Act 2006 (the registrar); “ reimbursement payment ” means a repayment from the designated person to the person who made a required payment which is of the same amount as that required payment; “ scheme manager ” has the meaning given in section 212 of the Financial Services and Markets Act 2000; “ sponsor ” has the meaning given in section 88(2) of the Financial Services and Markets Act 2000. Exception for acts done for purposes of national security or prevention of serious crime 19 1 Where an act would, in the absence of this paragraph, be prohibited by regulation 9(2) (confidentiality) or any prohibition in Part 3 (Finance), that prohibition does not apply to the act if the act is one which a responsible officer has determined would be in the interests of— a national security, or b the prevention or detection of serious crime in the United Kingdom or elsewhere. 2 Where, in the absence of this paragraph, a thing would be required to be done under or by virtue of a provision of Part 6 (Information and records), that requirement does not apply if a responsible officer has determined that not doing the thing in question would be in the interests of— a national security, or b the prevention or detection of serious crime in the United Kingdom or elsewhere. 3 In this regulation “ responsible officer ” means a person in the service of the Crown or holding office under the Crown, acting in the course of that person's duty. Treasury licences 20 1 The prohibitions in regulations 11 to 15 (asset-freeze etc.) do not apply to anything done under the authority of a licence issued by the Treasury under this paragraph. 2 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3 The Treasury may issue a licence which authorises acts by a particular person only where the Treasury consider that it is appropriate to issue the licence for a purpose set out in Schedule 2. 4 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Director disqualification licences 20A The Secretary of State may issue a licence in relation to any person who is designated under regulation 5 for the purposes of regulation 16A (director disqualification sanctions) providing that the prohibitions in— a section 11A(1) of the Company Directors Disqualification Act 1986, and b Article 15A(1) of the Company Directors Disqualification (Northern Ireland) Order 2002, do not apply to anything done under the authority of that licence. Licences: general provisions 20B 1 This regulation applies in relation to Treasury licences and director disqualification licences. 2 A licence must specify the acts authorised by it. 3 A licence may be general or may authorise acts by a particular person or persons of a particular description. 4 A licence may— a contain conditions; b be of indefinite duration or a defined duration. 5 A person who issues a licence may vary, revoke or suspend it at any time. 6 A person who , on the application of a person (“ P ”), issues a licence which authorises acts by a particular person , or varies, revokes or suspends that licence, must give written notice to P of the issue, variation, revocation or suspension of the licence. 7 A person who issues, varies, revokes or suspends a general licence or a licence which authorises acts by persons of a particular description must take such steps as that person considers appropriate to publicise the issue, variation, revocation or suspension of the licence. Finance: licensing offences 21 1 A person (“P”) commits an offence if P knowingly or recklessly— a provides information that is false in a material respect, or b provides or produces a document that is not what it purports to be, for the purpose of obtaining a Treasury licence (whether for P or anyone else). 2 A person who purports to act under the authority of a Treasury licence but who fails to comply with any condition of the licence commits an offence. Director disqualification: licensing offences 21A 1 A person (“ P ”) commits an offence if P knowingly or recklessly— a provides information that is false in a material respect, or b provides or produces a document that is not what it purports to be, for the purpose of obtaining a licence (whether for P or anyone else). 2 A person who purports to act under the authority of a director disqualification licence but who fails to comply with any condition of the licence commits an offence. 3 A licence in respect of which an offence under paragraph (1) has been committed is to be treated as void from the time at which it was issued. Section 8B(1) to (3) of the Immigration Act 1971: directions 22 1 The Secretary of State may direct that, in relation to any person within regulation 17 whose name is specified, or who is of a specified description, section 8B(1) and (2) of the Immigration Act 1971, or section 8B(3) of that Act, have effect subject to specified exceptions. 2 A direction may contain conditions. 3 A direction must be of a defined duration (and that duration may be expressed in any way, including, for example, being expressed in a way such that the direction ceases to have effect on, or within a specified period after, the occurrence of a specified event). 4 The Secretary of State may vary, revoke or suspend a direction at any time. 5 On the issue, variation, revocation or suspension of a direction, the Secretary of State may take such steps as the Secretary of State considers appropriate to publicise the issue, variation, revocation or suspension of the direction. 6 In this regulation “ specified ” means specified in a direction. PART 6 Information and records Finance: reporting obligations 23 1 A relevant firm must inform the Treasury as soon as practicable if— a it knows, or has reasonable cause to suspect, that a person— i is a designated person, or ii has breached a prohibition or failed to comply with an obligation under any provision of Part 3 (Finance) or regulation 21 (finance: licensing offences), and b the information or other matter on which the knowledge or cause for suspicion is based came to it in the course of carrying on its business. 2 Where a relevant firm informs the Treasury under paragraph (1), it must state— a the information or other matter on which the knowledge or suspicion is based, and b any information it holds about the person by which the person can be identified. 3 Paragraph (4) applies if— a a relevant firm informs the Treasury under paragraph (1) that it knows, or has reasonable cause to suspect, that a person is a designated person, and b that person is a customer of the relevant firm. 4 The relevant firm must also state the nature and amount or quantity of any funds or economic resources held by it for the customer at the time when it first had the knowledge or suspicion. 4A Where a person (“ P ”) knows, or has reasonable cause to suspect, that P holds funds or economic resources owned, held or controlled by a designated person, P must by no later than 30th November in each calendar year provide a report to the Treasury as to the nature and amount or quantity of those funds or economic resources held by P as of 30th September in that calendar year. 4B Where a report has been provided further to paragraph (4A) but as of 30th September in the following calendar year P no longer holds funds or economic resources owned, held or controlled by the designated person, P must by no later than 30th November in that calendar year report this to the Treasury. 4C For the purposes of paragraphs (4A) and (4B), funds or economic resources are to be treated as owned, held or controlled by a designated person if they are owned, held or controlled by a person who is owned or controlled directly or indirectly (within the meaning of regulation 7) by the designated person. 5 A relevant institution must inform the Treasury without delay if that institution— a credits a frozen account in accordance with regulation 18(4) (finance: exceptions from prohibitions), or b transfers funds from a frozen account in accordance with regulation 18(6). 6 A person who fails to comply with a requirement in paragraph (1), (2) or (4) commits an offence. 6A A person commits an offence if that person, without reasonable excuse, fails to comply with a requirement in paragraph (4A) or (4B). 7 In this regulation— “ designated person ” has the same meaning as it has in Part 3 (Finance); “ frozen account ” has the same meaning as it has in regulation 18; “ relevant firm ” is to be read in accordance with regulation 24; “ relevant institution ” has the same meaning as it has in regulation 18. Finance: reporting obligations for required payments 23A 1 A designated person must inform the Treasury without delay if they make a required payment. 2 A person who makes a required payment on behalf of a designated person must inform the Treasury without delay that they have made the required payment. 3 A person must inform the Treasury without delay if they receive a reimbursement payment. 4 For the purposes of this regulation, references to a designated person are to be read as including a person who is owned or controlled directly or indirectly (within the meaning of regulation 7) by the designated person. 5 In this regulation— “ designated person ” has the meaning given in regulation 18B(8) (finance: exception from prohibitions for required payments); “ reimbursement payment ” has the meaning given in regulation 18B(8); “ required payment ” has the meaning given in regulation 18B(2). “Relevant firm” 24 1 The following are relevant firms for the purposes of regulation 23 (finance: reporting obligations)— a a person that has permission under Part 4A of the Financial Services and Markets Act 2000 (Permission to carry on regulated activities); b an undertaking that by way of business— i operates a currency exchange office, ii transmits money (or any representation of monetary value) by any means, or iii cashes cheques that are made payable to customers; c a firm or sole practitioner that is— i a statutory auditor within the meaning of Part 42 of the Companies Act 2006 (Statutory Auditors) , or ii a local auditor within the meaning of section 4(1) of the Local Audit and Accountability Act 2014 (general requirements for audit) ; d a firm or sole practitioner that provides to other persons, by way of business— i accountancy services, ii legal or notarial services, iii advice about tax affairs, or iv trust or company services within the meaning of paragraph (2); e a firm or sole practitioner that carries out, or whose employees carry out, estate agency work; f the holder of a casino operating licence within the meaning given by section 65(2)(a) of the Gambling Act 2005 (nature of licence) ; g a person engaged in the business of making, supplying, selling (including selling by auction) or exchanging— i articles made from gold, silver, platinum or palladium, or ii precious stones or pearls; h a cryptoasset exchange provider; i a custodian wallet provider; j a high value dealer; k an art market participant; l an insolvency practitioner; m a firm or sole practitioner (“ P ”) that carries out, or whose employees carry out, letting agency work. 2 In paragraph (1), “ trust or company services ” means any of the following services— a forming companies or other legal persons; b acting, or arranging for another person to act— i as a director or secretary of a company, ii as a partner of a partnership, or iii in a similar capacity in relation to other legal persons; c providing a registered office, business address, correspondence or administrative address or other related services for a company, partnership or any other legal person or arrangement; d acting, or arranging for another person to act, as— i a trustee of an express trust or similar legal arrangement, or ii a nominee shareholder for a person. 3 In paragraph (1)— “ estate agency work ” is to be read in accordance with section 1 of the Estate Agents Act 1979 , but as if references in that section to disposing of or acquiring an interest in land included (despite anything in section 2 of that Act) references to disposing of or acquiring an estate or interest in land outside the United Kingdom where that estate or interest is capable of being owned or held as a separate interest; “ firm ” means any entity that, whether or not a legal person, is not an individual, and includes a body corporate and a partnership or other unincorporated body. 3A In paragraph (1), a “ cryptoasset exchange provider ” means a firm or sole practitioner that by way of business provides one or more of the following services, including where the firm or sole practitioner does so as creator or issuer of any of the cryptoassets involved— a exchanging, or arranging or making arrangements with a view to the exchange of, cryptoassets for money or money for cryptoassets, b exchanging, or arranging or making arrangements with a view to the exchange of, one cryptoasset for another, or c operating a machine which utilises automated processes to exchange cryptoassets for money or money for cryptoassets. 3B In paragraph (1), a “ custodian wallet provider ” means a firm or sole practitioner that by way of business provides services to safeguard, or to safeguard and administer— a cryptoassets on behalf of its customers, or b private cryptographic keys on behalf of its customers in order to hold, store and transfer cryptoassets. 3C For the purposes of this regulation— a “ cryptoasset ” means a cryptographically secured digital representation of value or contractual rights that uses a form of distributed ledger technology and can be transferred, stored or traded electronically; b “ money ” means— i money in sterling, ii money in any other currency, or iii money in any other medium of exchange, but does not include a cryptoasset; and c in sub-paragraphs (a) to (c) of paragraph (3A), “ cryptoasset ” includes a right to, or interest in, the cryptoasset. 3D In paragraph (1), a “ high value dealer ” means a firm or sole trader that by way of business trades in goods (including an auctioneer dealing in goods), when the firm or sole trader makes or receives, in respect of any transaction, a payment or payments in cash of at least 10,000 euros in total, whether the transaction is executed in a single operation or in several operations which appear to be linked. 3E In paragraph (1), an “ art market participant ” means, subject to paragraph (3F), a firm or sole practitioner that is registered or required to register with the Commissioners for His Majesty's Revenue and Customs as an art market participant under regulation 56(5) and (6) of the Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulations 2017. 3F A firm or sole practitioner is not an art market participant for the purposes of paragraph (3E) in relation to the sale or storage of a work of art which is created by, or is attributable to, a member of the firm or the sole practitioner. 3G For the purposes of this regulation, “ work of art ” means anything which, in accordance with section 21(6) to (6B) of the Value Added Tax Act 1994 (value of imported goods), is a work of art for the purposes of section 21(5)(a) of that Act. 3H In paragraph (1), an “ insolvency practitioner ” means a firm or individual who acts as an insolvency practitioner within the meaning of section 388 of the Insolvency Act 1986 or Article 3 of the Insolvency (Northern Ireland) Order 1989. 3I In paragraph (1), “ letting agency work ” means work— a consisting of things done in response to instructions received from— i a person (a “prospective landlord”) seeking to find another person to whom to let land for a term of a month or more, or ii a person (a “prospective tenant”) seeking to find land to rent for a term of a month or more, and b done— i in relation to a prospective landlord, from the point that the prospective landlord instructs P, or ii otherwise in the course of concluding an agreement for the letting of land for a term of a month or more. 3J For the purposes of paragraph (3I)— “ land ” includes part of a building and part of any other structure; “ letting agency work ” does not include the things listed in paragraph (3K) when done by, or by employees of, a firm or sole practitioner if neither the firm or sole practitioner, nor any of their employees, does anything else within paragraph (3I). 3K Those things are— a publishing advertisements or disseminating information; b providing a means by which a prospective landlord or a prospective tenant can, in response to an advertisement or dissemination of information, make direct contact with a prospective tenant or a prospective landlord; c providing a means by which a prospective landlord and a prospective tenant can communicate directly with each other; d the provision of legal or notarial services by a barrister, advocate, solicitor or other legal representative communications with whom may be the subject of a claim to professional privilege or, in Scotland, protected from disclosure in legal proceedings on grounds of confidentiality of communications. 4 Sub-paragraphs (a) and (b) of paragraph (1) are to be read with section 22 of the Financial Services and Markets Act 2000, any relevant order under that section and Schedule 2 to that Act. 5 For the purposes of regulation 23(1), information or another matter comes to a relevant firm “in the course of carrying on its business” if the information or other matter comes to the firm— a in the case of a relevant firm within paragraph (1)(a), in the course of carrying on an activity in respect of which the permission mentioned in that provision is required; b in the case of a relevant firm within paragraph (1)(c)(i), in the course of carrying out statutory audit work within the meaning of section 1210 of the Companies Act 2006 (meaning of “statutory auditor” etc.) ; c in the case of a relevant firm within paragraph (1)(c)(ii), in the course of carrying out an audit required by the Local Audit and Accountability Act 2014; d in the case of a relevant firm within paragraph (1)(f), in the course of carrying on an activity in respect of which the licence mentioned in that provision is required; da in the case of a relevant firm within paragraph (1)(k)— i in the course of trading, or acting as an intermediary in the sale or purchase of, works of art when the value of the transaction, or a series of linked transactions, amounts to 10,000 euros or more, or ii in the course of storing works of art where the value of the works of art so stored for a person amounts to 10,000 euros or more; e in the case of a relevant firm within any other provision of paragraph (1), in the course of carrying on an activity mentioned in that provision. Finance: powers to request information 25 1 The Treasury may request a designated person to provide information about— a funds or economic resources owned, held or controlled by or on behalf of the designated person, or b any disposal of such funds or economic resources. 2 The Treasury may request a designated person to provide such information as the Treasury may reasonably require about expenditure— a by the designated person, or b for the benefit of the designated person. 3 For the purposes of paragraph (2), expenditure for the benefit of a designated person includes expenditure on the discharge (or partial discharge) of a financial obligation for which the designated person is wholly or partly responsible. 4 The power in paragraph (1) or (2) is exercisable only where the Treasury believe that it is necessary for the purpose of monitoring compliance with or detecting evasion of any provision of Part 3 (Finance). 5 The Treasury may request a person acting under a Treasury licence to provide information about— a funds or economic resources dealt with under the licence, or b funds or economic resources made available under the licence. 6 The Treasury may request a person to provide information within paragraph (7) if the Treasury believe that the person may be able to provide the information. 7 Information within this paragraph is such information as the Treasury may reasonably require for the purpose of— a establishing for the purposes of any provision of Part 3— i the nature and amount or quantity of any funds or economic resources owned, held or controlled by or on behalf of a designated person, ii the nature and amount or quantity of any funds or economic resources made available directly or indirectly to, or for the benefit of, a designated person, or iii the nature of any financial transactions entered into by a designated person; b monitoring compliance with or detecting evasion of— i any provision of Part 3, ii regulation 23 (finance: reporting obligations), or iii any condition of a Treasury licence; c detecting or obtaining evidence of the commission of an offence under Part 3 or regulation 21 (finance: licensing offences) or 23. 8 The Treasury may specify the way in which, and the period within which, information is to be provided. 9 If no such period is specified, the information which has been requested must be provided within a reasonable time. 10 A request may include a continuing obligation to keep the Treasury informed as circumstances change, or on such regular basis as the Treasury may specify. 11 Information requested under this regulation may relate to any period of time during which a person is, or was, a designated person. 12 Information requested by virtue of paragraph (1)(b), (2) or (7)(a)(iii) may relate to any period before a person became a designated person (as well as, or instead of, any subsequent period). 13 Expressions used in this regulation have the same meaning as they have in Part 3. Finance: production of documents 26 1 A request under regulation 25 may include a request to produce specified documents or documents of a specified description. 2 Where the Treasury request that documents be produced, the Treasury may— a take copies of or extracts from any document so produced, b request any person producing a document to give an explanation of it, and c where that person is a body corporate, partnership or unincorporated body other than a partnership, request any person who is— i in the case of a partnership, a present or past partner or employee of the partnership, or ii in any other case, a present or past officer or employee of the body concerned, to give such an explanation. 3 Where the Treasury request a designated person or a person acting under a Treasury licence to produce documents, that person must— a take reasonable steps to obtain the documents (if they are not already in the person's possession or control); b keep the documents under the person's possession or control (except for the purpose of providing them to the Treasury or as the Treasury may otherwise permit). 4 In this regulation “ designated person ” has the same meaning as it has in Part 3 (Finance). Finance: information offences 27 1 A person commits an offence if that person— a without reasonable excuse, refuses or fails within the time and in the manner specified (or, if no time has been specified, within a reasonable time) to comply with any request under regulation 25 (finance: powers to request information); b knowingly or recklessly gives any information, or produces any document, which is false in a material particular in response to such a request; c with intent to evade any provision of regulation 25 or 26 (finance: production of documents), destroys, mutilates, defaces, conceals or removes any document; d otherwise intentionally obstructs the Treasury in the exercise of their powers under regulation 25 or 26. 2 Where a person is convicted of an offence under this regulation, the court may make an order requiring that person, within such period as may be specified in the order, to comply with the request. Disclosure of information 28 1 The Secretary of State or the Treasury may, in accordance with this regulation, disclose— a any information obtained under or by virtue of Part 5 (Exceptions and licences) or this Part, or b any information held in connection with— i anything done under or by virtue of Part 2 (Designation of persons) , Part 3 (Finance) or Part 3A (Director disqualification sanctions), or ii any exception or licence under Part 5 or anything done in accordance with such an exception or under the authority of such a licence. 2 Information referred to in paragraph (1) may be disclosed for, or in connection with, any of the following purposes— a the exercise of functions under these Regulations; b the purpose stated in regulation 4; c facilitating, monitoring or ensuring compliance with these Regulations; d taking any action with a view to instituting, or otherwise for the purposes of, any proceedings in the United Kingdom— i for an offence under any provision of these Regulations, or ii in relation to a monetary penalty under section 146 of the Policing and Crime Act 2017 (breach of financial sanctions legislation) ; e taking any action with a view to instituting, or otherwise for the purposes of, any proceedings in any of the Channel Islands, the Isle of Man or any British overseas territory, for an offence under a provision in any such jurisdiction that is similar to a provision of these Regulations; f compliance with an international obligation ; g facilitating the exercise by an authority outside the United Kingdom or by an international organisation of functions which correspond to functions under these Regulations. 3 Information referred to in paragraph (1) may be disclosed to the following persons— a a police officer; b any person holding or acting in any office under or in the service of— i the Crown in right of the Government of the United Kingdom, ii the Crown in right of the Scottish Government, the Northern Ireland Executive or the Welsh Government, iii the States of Jersey, Guernsey or Alderney or the Chief Pleas of Sark, iv the Government of the Isle of Man, or v the Government of any British overseas territory; c any law officer of the Crown for Jersey, Guernsey or the Isle of Man; d the Scottish Legal Aid Board; e the Financial Conduct Authority, the Prudential Regulation Authority, the Bank of England, the Jersey Financial Services Commission, the Guernsey Financial Services Commission or the Isle of Man Financial Services Authority; f any other regulatory body (whether or not in the United Kingdom); g any organ of the United Nations; h the Council of the European Union, the European Commission or the European External Action Service; i the Government of any country; j any other person where the Secretary of State or the Treasury (as the case may be) consider that it is appropriate to disclose the information. 4 Information referred to in paragraph (1) may be disclosed to any person with the consent of a person who, in their own right, is entitled to the information. 5 In paragraph (4) “ in their own right ” means not merely in the capacity as a servant or agent of another person. 6 In paragraph (1)(b)— a the reference to information includes information obtained at a time when any provision of these Regulations is not in force, and b the reference to a licence under Part 5 includes a licence which has effect or is treated as if it were a licence which had been issued under that Part. Finance: disclosure to the Treasury 28A 1 A relevant public authority may disclose information to the Treasury if the disclosure is made for the purpose of enabling or assisting the Treasury to discharge any of its functions in connection with any sanctions regulations contained in these Regulations . 2 In this regulation— “ relevant public authority ” means— any person holding or acting in any office under or in the service of— the Crown in right of the Government of the United Kingdom, the Crown in right of the Scottish Government, the Northern Ireland Executive or the Welsh Government, any local authority, any police officer, the Financial Conduct Authority, the Prudential Regulation Authority, the Bank of England or any other regulatory body in the United Kingdom, or any other person exercising functions of a public nature; “ local authority ” means— in relation to England— a county council, a district council, a London Borough council, the Common Council of the City of London in its capacity as a local authority, the Council of the Isles of Scilly, or an eligible parish council within the meaning of section 1(2) of the Local Government Act 2000, in relation to Wales, a county council, a county borough council or a community council, in relation to Scotland, a council constituted under section 2 of the Local Government etc. (Scotland) Act 1994, or in relation to Northern Ireland, a district council. Part 6: supplementary 29 1 A disclosure of information under regulation 28 or 28A does not breach any restriction on such disclosure imposed by statute or otherwise. 2 But nothing in those regulations authorises a disclosure that— a contravenes the data protection legislation, or b is prohibited by any of Parts 1 to 7 or Chapter 1 of Part 9 of the Investigatory Powers Act 2016 . 3 Nothing in this Part is to be read as requiring a person who has acted or is acting as counsel or solicitor for any person to disclose any privileged information in their possession in that capacity. 4 Regulations 28 and 28A do not limit the circumstances in which information may be disclosed apart from those regulations . 5 Nothing in this Part limits any conditions which may be contained in a Treasury licence. 6 In this regulation— “ the data protection legislation ” has the same meaning as in the Data Protection Act 2018 (see section 3 of that Act) ; “ privileged information ” means information with respect to which a claim to legal professional privilege (in Scotland, to confidentiality of communications) could be maintained in legal proceedings. PART 7 Enforcement Penalties for offences 30 1 A person who commits an offence under any provision of Part 3 (Finance) or regulation 21 (finance: licensing offences) is liable— a on summary conviction in England and Wales, to imprisonment for a term not exceeding the general limit in a magistrates’ court or a fine (or both); b on summary conviction in Scotland, to imprisonment for a term not exceeding 12 months or a fine not exceeding the statutory maximum (or both); c on summary conviction in Northern Ireland, to imprisonment for a term not exceeding 6 months or a fine not exceeding the statutory maximum (or both); d on conviction on indictment, to imprisonment for a term not exceeding 7 years or a fine (or both). 2 A person who commits an offence under regulation 9(6) (confidentiality) or 21A (director disqualification: licensing offences) is liable— a on summary conviction in England and Wales, to imprisonment for a term not exceeding the general limit in a magistrates’ court or a fine (or both); b on summary conviction in Scotland, to imprisonment for a term not exceeding 12 months or a fine not exceeding the statutory maximum (or both); c on summary conviction in Northern Ireland, to imprisonment for a term not exceeding 6 months or a fine not exceeding the statutory maximum (or both); d on conviction on indictment, to imprisonment for a term not exceeding 2 years or a fine (or both). 3 A person who commits an offence under regulation 23(6) or 27 (information offences in connection with Part 3) is liable— a on summary conviction in England and Wales, to imprisonment for a term not exceeding 6 months or a fine (or both); b on summary conviction in Scotland, to imprisonment for a term not exceeding 6 months or a fine not exceeding level 5 on the standard scale (or both); c on summary conviction in Northern Ireland, to imprisonment for a term not exceeding 6 months or a fine not exceeding level 5 on the standard scale (or both). 4 In relation to an offence committed before 2nd May 2022 , the reference in each of paragraphs (1)(a) and (2)(a) to the general limit in a magistrates’ court is to be read as a reference to 6 months. Liability of officers of bodies corporate etc. 31 1 Where an offence under these Regulations, committed by a body corporate— a is committed with the consent or connivance of any director, manager, secretary or other similar officer of the body corporate, or any person who was purporting to act in any such capacity, or b is attributable to any neglect on the part of any such person, that person as well as the body corporate is guilty of the offence and is liable to be proceeded against and punished accordingly. 2 In paragraph (1), “ director ”, in relation to a body corporate whose affairs are managed by its members, means a member of the body corporate. 3 Paragraph (1) also applies in relation to a body that is not a body corporate, with the substitution for the reference to a director of the body of a reference— a in the case of a partnership, to a partner; b in the case of an unincorporated body other than a partnership— i where the body's affairs are managed by its members, to a member of the body; ii in any other case, to a member of the governing body. Jurisdiction to try offences 32 1 Wherever an offence under these Regulations is committed (whether in the United Kingdom or outside the United Kingdom)— a proceedings for the offence may be taken at any place in the United Kingdom, and b the offence may for all incidental purposes be treated as having been committed at any such place. 2 In the application of paragraph (1) to Scotland, where an offence is committed outside the United Kingdom any such proceedings against a person may be taken— a in any sheriff court district in which the person is apprehended or is in custody, or b in such sheriff court district as the Lord Advocate may determine. 3 In paragraph (2) “ sheriff court district ” is to be read in accordance with the Criminal Procedure (Scotland) Act 1995 (see section 307(1) of that Act) . Procedure for offences by unincorporated bodies 33 1 Paragraphs (2) and (3) apply if it is alleged that an offence under these Regulations has been committed by an unincorporated body (as opposed to by a member of the body). 2 Proceedings in England and Wales or Northern Ireland for such an offence must be brought against the body in its own name. 3 For the purposes of proceedings for such an offence brought against an unincorporated body— a rules of court relating to the service of documents have effect as if the body were a body corporate; b the following provisions apply as they apply in relation to a body corporate— i section 33 of the Criminal Justice Act 1925 and Schedule 3 to the Magistrates' Courts Act 1980 ; ii section 18 of the Criminal Justice Act (Northern Ireland) 1945 and Article 166 of, and Schedule 4 to, the Magistrates' Courts (Northern Ireland) Order 1981 . 4 A fine imposed on an unincorporated body on its conviction of an offence under these Regulations is to be paid out of the funds of the body. Time limit for proceedings for summary offences 34 1 Proceedings for an offence under these Regulations which is triable only summarily may be brought within the period of 12 months beginning with the date on which evidence sufficient in the opinion of the prosecutor to justify the proceedings comes to the prosecutor's knowledge. 2 But such proceedings may not be brought by virtue of paragraph (1) more than 3 years after the commission of the offence. 3 A certificate signed by the prosecutor as to the date on which the evidence in question came to the prosecutor's knowledge is conclusive evidence of the date on which it did so; and a certificate to that effect and purporting to be so signed is to be treated as being so signed unless the contrary is proved. 4 In relation to proceedings in Scotland— a section 136(3) of the Criminal Procedure (Scotland) Act 1995 (date of commencement of summary proceedings) applies for the purposes of this regulation as it applies for the purposes of that section, and b references in this regulation to the prosecutor are to be treated as references to the Lord Advocate. Application of Chapter 1 of Part 2 of the Serious Organised Crime and Police Act 2005 35 Chapter 1 of Part 2 of the Serious Organised Crime and Police Act 2005 (investigatory powers) applies to any offence under Part 3 (Finance) or regulation 21 (finance: licensing offences). PART 8 Supplementary and final provision Notices 36 1 This regulation applies in relation to a notice required by regulation 20B(6) (Licences: general provisions) to be given to a person. 2 The notice may be given to an individual— a by delivering it to the individual, b by sending it to the individual by post addressed to the individual at his or her usual or last-known place of residence or business, or c by leaving it for the individual at that place. 3 The notice may be given to a person other than an individual— a by sending it by post to the proper officer of the body at its principal office, or b by addressing it to the proper officer of the body and leaving it at that office. 4 The notice may be given to the person by other means, including by electronic means, with the person's consent. 5 In this regulation, the reference in paragraph (3) to a “principal office”— a in relation to a registered company, is to be read as a reference to the company's registered office; b in relation to a body incorporated or constituted under the law of a country other than the United Kingdom, includes a reference to the body's principal office in the United Kingdom (if any). 6 In this regulation— “proper officer”— in relation to a body other than a partnership, means the secretary or other executive officer charged with the conduct of the body's general affairs, and in relation to a partnership, means a partner or a person who has the control or management of the partnership business; “ registered company ” means a company registered under the enactments relating to companies for the time being in force in the United Kingdom. Revocations 37 1 Council Regulation (EU) 2019/796 of 17 May 2019 concerning restrictive measures against cyber-attacks threatening the Union or its Member States is revoked. 2 The Cyber-Attacks (Asset-Freezing) Regulations 2019 are revoked. Transitional provision: Treasury licences 38 1 Paragraphs (2) to (4) apply to a licence which— a was granted by the Treasury under regulation 9 of the 2019 Regulations, b was in effect immediately before the relevant date, and c authorises conduct which would (on and after the relevant date, and in the absence of paragraphs (2) to (4)) be prohibited under Part 3 (Finance), and such a licence is referred to in this regulation as “ an existing financial sanctions licence ”. 2 An existing financial sanctions licence which authorises an act which would otherwise be prohibited has effect on and after the relevant date as if it had been issued by the Treasury under regulation 20(1) (Treasury licences). 3 Any reference in an existing financial sanctions licence to the 2019 Regulations is to be treated on and after the relevant date as a reference to these Regulations. 4 Any reference in an existing financial sanctions licence to a prohibition in— a the 2019 Regulations, or b the EU Cyber Regulation, is to be treated on and after the relevant date as a reference to the corresponding prohibition in Part 3. 5 Paragraph (6) applies where— a an application for a licence, or for the variation of a licence, under the 2019 Regulations was made before the relevant date, b the application is for the authorisation of conduct which would (on and after the relevant date) be prohibited under Part 3, and c a decision to grant or refuse the application has not been made before that date. 6 The application is to be treated on and after the relevant date as an application for a licence, or for the variation of a licence (as the case may be), under regulation 20(1) (Treasury licences). 7 In this regulation— “ the 2019 Regulations ” means the Cyber-Attacks (Asset-Freezing) Regulations 2019; “ the relevant date ” means— where regulations under section 56 of the Act provide that Part 3 comes into force at a specified time on a day, that time on that day; otherwise, the date on which Part 3 comes into force. Transitional provision: prior obligations etc. 39 1 Where— a a person was named in Annex I of the EU Cyber Regulation immediately before the relevant date, and b the person is a designated person immediately before the relevant date, any reference in a provision mentioned in paragraph (2) to the date on which a person became a designated person is a reference to the date on which the person was so named. 2 The provisions referred to in paragraph (1) are— a regulation 18(5) (finance: exceptions from prohibitions), and b paragraph 9(a) of Schedule 2 (Treasury licences: purposes). 3 In this regulation— “ designated person ” has the same meaning as it has in Part 3 (Finance); “ the relevant date ” means— where regulations under section 56 of the Act provide that Part 3 comes into force at a specified time on a day, that time on that day; otherwise, the date on which Part 3 comes into force. Ahmad Minister of State Foreign and Commonwealth Office