> ## Content Index
> Fetch the complete content index at: https://sovereigntymonitor.eu/llms.txt
> Use this file to discover other available public pages before exploring further.

# UK finalises rules on reporting incidents at critical tech suppliers
- URL: https://sovereigntymonitor.eu/news/2026-03-18-uk-operational-incident-third-party-reporting-rules/
- Published: 2026-03-18T12:00:00.000Z
- Updated: 2026-09-02T09:20:41.000Z
- Description: The Bank of England, PRA and FCA published final rules requiring UK financial firms to report operational incidents and register material third party arrangements, including cloud and tech suppliers, with compliance due by 18 March 2027.
- Author: Reidar Balstad
- Tags: Policy and law, #news, #verified

Verified [Financial Conduct Authority, Policy Statement PS26/2, 18 March 2026 (issued alongside the Bank of England and PRA's PS7/26)](https://www.fca.org.uk/publications/policy-statements/ps26-2-operational-incident-third-party-reporting?ref=sovereigntymonitor.eu)

**What it does not test.** Does not establish that any specific cloud or tech supplier has been designated critical, since the duty falls on firms rather than naming providers.

**How this item counts.** No movement: no answer to who owns, who operates, whose law governs or who made the parts changes. Weight 0\. Reporting duty on UK firms only, doesn't change supplier own/operate/law/parts. [European Sovereignty Index](https://sovereigntymonitor.eu/sovereignty-index/)