Authorisations

Firms and individuals must apply to the Prudential Regulation Authority (PRA) for authorisation to carry out any of the activities that we regulate. There are also certain changes that they must either apply to or notify us about.
  • How we use your information

    Information we collect

    Through our authorisations forms, the Bank of England (the ‘Bank’) collects personal data about you. This personal data could include (depending on the application or notification form submitted) personal identification details, contact information, addresses, employment history and information relating to fitness and propriety such as criminal, civil and regulatory matters. Each form clearly states what personal data is being gathered. The Bank may make further enquiries and seek similar information from third parties and other data sources as we think appropriate to identify and verify information that we consider relevant to the application or notification, this could include criminal, credit and other background checks.                                                                                               

    Why we need your personal data

    The Bank collects personal data to process a range of authorisation applications and notifications, which include:

    • New firm authorisations
    • Senior Management Functions
    • Waivers and Modifications of rules
    • Variations and cancelling of Permissions
    • Change in Control
    • Standing Data
    • Passporting

    This information is used to assist the Bank of England in discharging its functions, in particular the statutory functions of the Prudential Regulation Authority under the Financial Services and Markets Act 2000 and other relevant legislation.

    What we do with your personal data

    In complying with applicable laws and for law enforcement purposes, we may disclose information to any government entity, regulatory authority or to any other person the Bank reasonably considers necessary. This may mean that personal data is transferred outside the United Kingdom. Otherwise, we will not disclose your information without your permission. Your personal data will be retained in accordance with the Bank’s records management schedule. 

    Your rights

    You have a number of rights under data protection laws.  For example, you have the right to ask us for a copy of the personal data the Bank holds about you. You can also ask us to change how we process or deal with your personal data, and you may have the right in some circumstances to have your personal data amended or deleted. To contact us about those rights, including making a request for the personal data we hold about you, or to find out more about privacy and data protection at the Bank, please see the Privacy and the Bank of England page.

This page was last updated 12 March 2024