Prudential Regulation Authority

The Prudential Regulation Authority (PRA) is a subsidiary of the Bank of England responsible for the safety and soundness of major financial institutions in the United Kingdom. Established after the 2008 crisis as part of a regulatory overhaul, the PRA sets capital and liquidity standards, conducts supervisory examinations, and enforces prudential rules for banks, insurers, investment firms, and other systemically important entities. It operates alongside the Financial Conduct Authority (FCA), which handles conduct and consumer protection.

Origins in post-crisis reform

Before 2008, British financial regulation was split between the Financial Services Authority (FSA), a single mega-regulator, and the Bank of England, which had little say in prudential supervision. The FSA licensed firms and policed market conduct; the Bank managed monetary policy and acted as lender of last resort but had limited day-to-day oversight of individual bank health.

When the crisis hit, the FSA was widely blamed for regulatory complacency. Northern Rock, a major UK mortgage lender, failed in 2007 despite FSA supervision. Other UK banks—HBOS, RBS—nearly collapsed and required state rescue. A post-mortem revealed that the FSA’s regulatory approach was too light-touch and that the Bank of England’s exclusion from day-to-day prudential supervision was a flaw.

The Government’s response, crystallised in the Financial Services Act 2012, was to abolish the FSA and split its functions. A new Financial Conduct Authority (FCA) would handle market conduct, consumer protection, and conflict-of-interest rules. A new Prudential Regulation Authority, housed inside the Bank of England, would handle capital, liquidity, governance, and safety—the “prudential” side. The rationale was that prudential regulation (the question of whether a firm will fail) should sit with the central bank, which is the lender of last resort and bears the cost of financial collapse.

Scope and dual-regulation

The PRA regulates roughly 1,500 firms across three categories. The first is deposit-taking banks, including High Street banks like HSBC, Barclays, and Lloyds, as well as smaller building societies and foreign banks with UK branches. The second is insurers—life and general insurance companies, from Aviva to smaller underwriters. The third is investment firms—broker-dealers and custodians handling securities for others.

This scope is broad but not exhaustive. The PRA focuses on prudential risk (solvency, counterparty risk, liquidity crisis). Market misconduct, mis-selling, and conflicts of interest are the FCA’s domain. In practice, this split means the PRA cares about whether a bank will fail; the FCA cares about whether it will cheat its customers. Most large firms face scrutiny from both regulators.

The PRA also applies Basel III standards (later Basel 3.1)—international capital and liquidity rules—and has added stricter UK rules on top. British banks must hold more equity capital relative to assets than many global peers, and the PRA imposes sector-specific rules for insurance and investment firms. Post-Brexit, the PRA can now adjust these rules without EU consensus, though it generally aligns with international standards to avoid competitive disadvantage.

Supervisory approach and stress tests

The PRA operates a “proactive” supervision model. Firms are assessed along multiple dimensions: governance, capital management, liquidity risk, market risk, operational resilience, and environmental/social/governance (ESG) exposure. Larger firms face more intensive examination; the PRA has dedicated supervisor teams embedded in big banks, reviewing quarterly results and stress scenarios.

Annual stress-testing is central to PRA oversight. Each major bank is subjected to a hypothetical scenario—say, a steep yield curve inversion, property market collapse, and sharp unemployment rise—and must demonstrate it can survive with capital above regulatory minimums. If a bank fails the test, the PRA can require capital raises, divestiture of assets, or dividend restrictions. These tests are public (results are published), which creates market discipline and press scrutiny.

The PRA also requires firms to produce living wills—detailed plans for orderly resolution in the event of failure. A bank cannot operate in the UK unless it can demonstrate a plausible path to resolution without causing systemic contagion. This is distinct from a statutory bankruptcy; the PRA wants evidence that the firm can fail safely, with losses absorbed by equity holders and senior debt, not taxpayers.

Capital and liquidity standards

The PRA’s primary regulatory tools are quantitative. It sets minimum capital ratios—the ratio of high-quality capital (equity and retained earnings) to risk-weighted assets. British banks typically must hold Common Equity Tier 1 (CET1) capital at 10.5 per cent of risk-weighted assets (a mixture of regulatory minimum plus buffers for systemic importance and domestic exposures).

Liquidity rules require banks to hold enough liquid assets to survive a 30-day stress scenario where depositors withdraw funds and wholesale funding dries up. The Liquidity Coverage Ratio (LCR) mandates that high-quality liquid assets cover short-term liabilities; the Net Stable Funding Ratio (NSFR) ensures a minimum of stable funding over a one-year horizon. These are binding constraints: a bank cannot lend or invest beyond these limits.

Interest rate risk in the banking book is another focus area. As central banks raised rates after decades of near-zero policy, banks’ deposit base came under pressure (deposits are often low-rate liabilities). The PRA now stress-tests banks for large, sustained interest rate shocks and requires capital buffers against interest rate repricing risk.

Enforcement and removal

When a firm breaches PRA rules, the PRA has a graduated toolkit. Minor breaches trigger supervisory recommendations, escalating to formal directions if ignored. Major breaches—persistent capital shortfall, fraudulent reporting, reckless risk-taking—can result in fines, asset restrictions, or forced divestiture. In rare cases, the PRA can recommend the FCA withdraw a firm’s authorisation, effectively closing it.

The PRA has imposed large fines: Barclays paid £50 million in 2015 for inadequate interest rate risk management; Deutsche Bank’s UK subsidiary faced major enforcement actions for risk governance failures. These cases establish that the PRA is willing to punish even the largest and most politically connected firms, though critics argue enforcement is slower and less aggressive than post-2008 sentiment demanded.

Relationship to the Bank of England and global context

The PRA is owned by the Bank of England, but it operates under its own statutory mandate. The Bank’s Governor chairs the PRA board, creating unified leadership. The PRA reports to Parliament and publishes an annual report, giving it democratic accountability whilst insulating day-to-day decisions from political interference.

Globally, the PRA’s model is influential. The US lacks a direct equivalent; the Federal Reserve and OCC share prudential regulation, and no single entity handles capital rules for all banks. The EU, after the crisis, created the Single Supervisory Mechanism (SSM) within the European Central Bank, similar in spirit to the PRA. The model of embedding prudential regulation in the central bank is now standard among major jurisdictions.

Brexit and future independence

Post-Brexit, the PRA has gained rule-making autonomy but faces alignment pressures. Major international banks have subsidiaries in both London and EU centres, and regulators expect consistency to avoid regulatory arbitrage. The PRA has largely kept UK rules aligned with Basel 3.1 and EU standards (which evolved separately), but divergence is possible and is a long-term strategic question for UK financial competitiveness.

The PRA has also taken on climate and resilience priorities, publishing expectations on how firms should model financial risks from climate change, cyber attacks, and outsourcing. These are emerging prudential concerns that the Basel framework doesn’t yet fully codify, giving the PRA room to lead.

See also