Financial Conduct Authority
FCA and PRA jointly fine Raphaels Bank £1.89m for outsourcing failings
The Financial Conduct Authority (FCA) and Prudential Regulation Authority (PRA) have fined R. Raphael & Sons plc (“Raphaels”) for failing to manage its outsourcing arrangements properly between April 2014 and December 2016.
Raphaels has received separate fines of £775,100 from the FCA and £1,112,152 from the PRA in respect of these breaches (resulting in a combined fine of £1,887,252).
Mark Steward, FCA Executive Director of Enforcement and Market Oversight said:
'Raphaels’ systems and controls supporting the oversight and governance of its outsourcing arrangements were inadequate and exposed customers to unnecessary and avoidable harm and inconvenience. There is no lower standard for outsourced systems and controls and firms are accountable for failures by outsourcing providers.'
Sam Woods, Deputy Governor for Prudential Regulation and Chief Executive Officer of the PRA, yesterday said:
'Firms’ ability to manage outsourcing of any critical activities is a vital part of maintaining their safety and soundness. Such outsourcing is an important part of a firm’s operational resilience, and particularly so in the case of Raphaels given the level of reliance on outsourcing in its business model.
'In addition, this was a repeat failing which demonstrates a lack of adequate and timely remediation. This is a significant aggravating factor in this case, leading to an uplift in the penalty.'
Raphaels is a retail bank providing banking and related financial services. Its Payment Services Division (PSD) operates prepaid card and charge card programmes in the UK and Europe. The PSD relies on outsourced service providers to perform certain functions that are critical to the operation of its card programmes. These functions include the authorisation and processing of card transactions, a service performed by third party card processors.
Raphaels failed to have adequate processes to enable it to understand and assess the business continuity and disaster recovery arrangements of its outsourced service providers - particularly how they would support the continued operation of its card programmes during a disruptive event. The absence of such processes posed a risk to Raphaels’ operational resilience and exposed its customers to a serious risk of harm. These risks crystallised on the 24 December 2015 when a technology incident occurred at a card processor.
The incident caused the complete failure of the authorisation and processing services it provided to Raphaels and lasted over eight hours. During this period, 3,367 customers were unable to use their prepaid cards and charge cards. In total, the card processor could not authorise 5,356 customer card transactions attempted at point of sale terminals, ATM machines and online. Seasonal workers, who depended on their cards to receive their wages, used the largest prepaid card programme affected by the incident. The timing of the incident, on Christmas Eve, is likely to have exacerbated the impact of the outage.
Raphaels’ specific failings in relation to the incident resulted from deeper flaws in its overall management and oversight of outsourcing risk from Board level down. The joint FCA and PRA investigation identified weaknesses throughout the Firm’s outsourcing systems and controls which Raphaels ought to have known about since April 2014. These included a lack of adequate consideration of outsourcing within its Board and departmental risk appetites, the absence of processes for identifying critical outsourced services and flaws in its initial and on-going due diligence of outsourced service providers. Raphaels’ outsourcing arrangements continued to be inadequate until the end of 2016, by which time Raphaels had designed new outsourcing policies and procedures to remedy the failings.
Raphaels agreed to resolve this matter and therefore qualified for a 30% reduction in the fines imposed by both regulators. Without this discount, the combined fine imposed by the FCA and PRA would have been £2,709,574.
Notes to editors
- FCA Final Notice for Raphaels
- PRA Final Notice for Raphaels(link is external)
- Raphaels is a retail bank authorised by the PRA and jointly regulated by the FCA and PRA.
- This was a joint investigation by the FCA and PRA. Raphaels has been fined according to the FCA and PRA penalty regimes which each have five steps to calculate the level of the fines imposed. The detailed calculations are set out in both the PRA and FCA Final Notices.
- The PRA has previously fined Raphaels for historic failings in relation to its governance and oversight of outsourced functions – see PRA Final Notice(link is external) dated 12 November 2015.
- In July 2018, the PRA and FCA published a discussion paper on operational resilience of the financial system and the individual firms and financial market infrastructures within it. This included guidance to firms to recognise the significance that third party service provision can play in operational resilience. Feedback has been received and the FCA and PRA are expected to publish a consultation paper on this topic later in 2019.
- On 1 April 2013, the FCA became responsible for the conduct supervision of all regulated financial firms and the prudential supervision of those not supervised by the Prudential Regulation Authority (PRA).
- The FCA has an overarching strategic objective of ensuring the relevant markets function well. To support this, it has three operational objectives: to secure an appropriate degree of protection for consumers; to protect and enhance the integrity of the UK financial system; and to promote effective competition in the interests of consumers.
- Find out more information about the FCA and the PRA(link is external).
Latest News from
Financial Conduct Authority
FCA proposes new rules to help consumers with pre-existing medical conditions access suitable travel insurance16/07/2019 10:25:00
The Financial Conduct Authority (FCA) yesterday launched a consultation on proposals designed to help consumers with pre-existing medical conditions (PEMCs) have better access to travel insurance products.
Richard Baldwin conviction for money laundering revealed after reporting restrictions lifted12/07/2019 13:51:00
On 13 July 2017, Richard Baldwin was convicted of dealing in criminal property between October 2007 and November 2008.
HSBC agrees to extend redress scheme for customers impacted by historical debt collection practices12/07/2019 10:25:00
HSBC has voluntarily agreed to extend its redress scheme for customers who may have lost out by paying an unreasonable debt collection charge imposed by HFC Bank Ltd (HFC) and John Lewis Financial Services Limited (JLFS), the Financial Conduct Authority (FCA) yesterday announced.
Unauthorised firm and directors to pay restitution to consumers11/07/2019 10:25:00
The High Court has consented to an order by which Samuel Golding, Shantelle Golding, Digital Wealth Limited and Outsourcing Express Limited will pay funds held by them to the Financial Conduct Authority (FCA) for distribution to investors. The funds were raised by the defendants in unauthorised investment schemes operated by them.
FCA publishes Annual Report and Accounts 2018/1910/07/2019 10:25:00
The Financial Conduct Authority (FCA) yesterday published its Annual Report and Accounts, which looks back on the key pieces of work undertaken by the organisation throughout 2018/19.
FCA proposes ban on sale of crypto-derivatives to retail consumers04/07/2019 10:25:00
The Financial Conduct Authority (FCA) is proposing rules to address harm to retail consumers from the sale of derivatives and exchange traded notes (ETNs) referencing certain types of cryptoassets.
FCA confirms permanent restrictions on the sale of CFDs and CFD-like options to retail consumers02/07/2019 10:25:00
Following consultation feedback, the Financial Conduct Authority (FCA) is confirming new rules restricting the sale, marketing and distribution of CFDs and CFD-like options to retail customers.
New Chairs of the Financial Conduct Authority’s Practitioner Panel and Markets Practitioner Panel announced01/07/2019 10:25:00
The Financial Conduct Authority Chair, Charles Randell, recently (28 June 2019) announced the appointments of new Chairs for the FCA’s independent Practitioner Panel and Markets Practitioner Panel.