Gibraltar passporting arrangements

This page is only applicable for firms passporting between the UK and Gibraltar.

In this section

The transition period has ended and passporting rights for EEA firms have now ceased.

Please see our Temporary permissions regime and Financial Services Contracts Regime webpages for more information. 

Subject to any transitional relief, forms and templates applicable before 11pm Thursday 31 December 2020 should be read in conjunction with Supervisory Statement (SS) 2/19, which sets out how the PRA expects firms to interpret EU-based references in reporting and disclosure requirements and regulatory transactions forms.

Passporting rights will continue for firms operating between the UK and Gibraltar. Statutory Instrument (SI) 2019/589 established transitional arrangements for Gibraltar that will preserve the status quo of deemed-passporting for Gibraltarian firms after the end of the Transition Period. These transitional arrangements have been extended until 31 December 2025 by a further SIs and can be further extended until such time as the permanent arrangements of the Gibraltar Authorisation Regime are in place.

Until further notice, the PRA requests that all passport notifications in accordance with the Capital Requirements and Solvency II directives be submitted by email only to PRA-passporting@bankofengland.co.uk, and not sent by post.

Overview of outward passporting to Gibraltar

A firm authorised in the UK can carry on activities that it has permission for in Gibraltar by either establishing a branch, appointing agents or providing cross-border services. This is known as ‘passporting’.

The PRA is the lead regulator for outward passports for dual-regulated firms (firms regulated by both the Financial Conduct Authority (FCA) and the PRA). 

Submitting outward passport notifications

Firms wishing to passport into Gibraltar should notify us by using the relevant forms: 

Banking forms

Insurance forms

Investment forms

Firms using the Banking forms and Investment forms found in the above link will also need to complete a Declaration Form:

Declaration form

Completed forms should be emailed to PRA-passporting@bankofengland.co.uk.

How we assess outward passporting firms

We will seek reassurance about the risks posed to our objectives by UK firms wishing to operate in Gibraltar. The depth of our review of a passporting notification will be proportionate to its impact on our objectives. 

When we receive a passporting notification from a UK firm, we will consider the adequacy of the firm’s resources and administrative structure and how the firm meets our regulatory requirements. We may also consider whether significant individuals are fit and proper to carry out the proposed business.

Our timelines for processing outward passporting notifications are set out below:

Area  Timeframe to process/respond 
Banking  Establishment: Three months
Services: One month 
Insurance  Establishment: Three months
Services: One month 
Reinsurance  Services: One month 
Insurance Intermediary  Establishment: One month
Services: One month 
Investment  Establishment: One month
Services: One month 

Changes to the original notification

Firms must tell us if they make any changes to the original notification details. For example, changes of branch address, management, organisational structure, or an amendment to the regulated activities. This must be done before the change is implemented, unless the change is caused by circumstances beyond the firm’s control (in which case we should be notified as soon as possible after the change occurs).  

Firms will need to notify the FCA, by using the FCA Connect system, and also email PRA-passporting@bankofengland.co.uk if changing its registered name of contact details. This notification should include all details so we can inform the Gibraltar FSC. 

Banks

Banking firms passporting into Gilbraltar must notify us of any such changes using the relevant Banking forms and declaration form

Investment

Investment firms passporting into Gibraltar must notify us of any such changes by using the relevant Investment business notification forms and declaration form

Insurance 

Insurance firms passporting into Gibraltar must notify us of such changes by completing the following Insurance Distribution Branch and cross-border notification form. 

All notifications should be submitted by email to PRA-Passporting@bankofengland.co.uk.

Overview of Inward passporting from Gibraltar

A firm authorised in Gibraltar can passport into the UK on either a ‘services’ basis (if it does not have a physical presence in the UK) or a ‘branch’ basis (if it opens an office in the UK). 

Submitting inward passport notifications

The PRA will be the lead UK regulator of a firm that passports into the UK where that firm undertakes any of the following activities:

  • accepting Deposits;
  • effecting Contracts of Insurance as principal; or
  • carrying out Contracts of Insurance as principal.

Where a firm authorised in Gibraltar intends to conduct any of those activities in the UK, the Gibraltar FSC is responsible for informing us of that firm’s intention to passport into the UK. Notices for firms which do not undertake these activities should be directed to the FCA.

How we assess inward passporting firms

When we receive a passporting notification from the Gibraltar FSC the depth of our review will be proportionate to the firm's potential impact on our objectives, the information provided by the Gibraltar FSC and any subsequent information requests. This assessment is intended to inform the dialogue with the home state regulator and to prepare for supervision of the firm.

Our timelines for processing inward passporting notifications are set out below:

Area  Timeframe to process/respond 
Banking  Establishment: Two months
Services: One month 
Insurance  Establishment: Two months
Services: One month 
Reinsurance   Establishment: Two months

The UK has now left the EU and any references to EU legislation on this page and any related links or forms are there only to provide clarity.


  • How we use your information

    Information we collect

    Through our authorisations forms, and in interviews we carry out with candidates for Senior Management Functions under the SM&CR regime, the Bank of England (in its capacity as the Prudential Regulation Authority) (the ‘Bank’) collects personal data about individuals, including candidates Senior Management Function (SMF) roles. This personal data could include (depending on the application or notification form submitted) personal identification details, contact information, addresses, employment history and information relating to fitness and propriety such as criminal, civil and regulatory matters, and recordings and/or transcriptions of interviews carried out as part of the Bank’s SMF approvals process. Each form clearly states what personal data is being gathered. The Bank may make further enquiries and seek similar information from third parties and other data sources as we think appropriate to identify and verify information that we consider relevant to the application or notification, this could include criminal, credit and other background checks.                                                                                               

    Why we need your personal data

    The Bank collects personal data to process a range of authorisation applications and notifications, which include:

    • New firm authorisations
    • Senior Management Functions
    • Waivers and Modifications of rules
    • Variations and cancelling of Permissions
    • Change in Control
    • Standing Data
    • Passporting

    This information is used to assist the Bank of England in discharging its functions, in particular the statutory functions of the Prudential Regulation Authority (PRA) under the Financial Services and Markets Act 2000 and other relevant legislation.

    The PRA may also use recordings and/or transcripts of interviews of candidates for SMF roles, to provide training to PRA employees. 

    What we do with your personal data

    In complying with applicable laws (including the PRA’s obligations in relation to co-operation with the Financial Conduct Authority (FCA) on matters of common regulatory interest, and for law enforcement purposes, we may disclose information to any government entity, regulatory authority (including the FCA) or to any other person the Bank reasonably considers necessary. This may mean that personal data is transferred outside the United Kingdom. Otherwise, we will not disclose your information without your permission. Your personal data will be retained in accordance with the Bank’s records management schedule.

    Your rights

    You have a number of rights under data protection laws.  For example, you have the right to ask us for a copy of the personal data the Bank holds about you. You can also ask us to change how we process or deal with your personal data, and you may have the right in some circumstances to have your personal data amended or deleted. To contact us about those rights, including making a request for the personal data we hold about you, or to find out more about privacy and data protection at the Bank, please see the Privacy and the Bank of England page.

Back to top

This page was last updated 18 December 2024