Financial services firms increasingly rely on a small number of critical third parties to provide services, such as cloud computing providers. Although outsourcing can have many benefits, the growing dependence of financial services firms on this small pool of critical third parties also carries risks. A failure or disruption at a critical third party could have systemic impacts affecting market confidence and threatening the stability of our financial system. To mitigate that risk, the Bill grants the financial regulators powers to oversee the services that critical third parties supply to the financial sector.

Clause 18 gives the Treasury the power to designate a third party to the finance sector as critical, bringing the services provided by that third party into the regulator’s oversight. Only third parties whose failure could have a systemic impact on the sector can be designated in that way. Designations will be done in consultation with the regulators, taking into account a clear set of criteria. The first is materiality—that is, how important the services are to the delivery of essential services, such as making payments. The second is concentration—the number and type of firms that rely on that provider. The clause provides the FCA, the PRA and the Bank of England with new rule-making powers to ensure the resilience of services provided by critical third parties. The regulators have published a discussion paper setting out how they may use the powers.

Clause 18 also grants the regulators a power of direction and targeted enforcement powers. As an ultimate sanction, the financial regulators may prevent or limit a critical third party from providing services to the financial services sector. Clause 19 then makes the necessary consequential changes to FSMA to ensure that the regime functions properly, in particular in relation to the Bank of England’s ability to make rules. This approach is flexible and proportionate, addressing the systemic risk posed by outsourcing to keep the UK’s financial system safe, while targeting only the services that critical third parties provide to the finance sector. I therefore recommend that clauses 18 and 19 stand part of the Bill.