Issued jointly by the FSCA and the Prudential Authority on 25 July 2025 for financial institutions under the Financial Sector Regulation Act (except Lloyd's and branches of foreign reinsurers). It sets out recommended practice on governance, data protection and due diligence for cloud computing and data offshoring, and says a regulatory instrument and Joint Standard will follow for consultation. It contains no binding requirements.
This site uses only the cookies it needs to work, such as keeping you logged in. It uses no advertising or tracking cookies.
Read the Cookie Notice.
Suggest a correction or addition
Spotted something wrong, missing or worth adding? Tell our editors. Every submission
is reviewed and verified against its source before anything changes — nothing you send appears on the
site automatically.
Thank you — our editors will review this
Your suggestion has been received. Contributions from practitioners keep these profiles accurate. Nothing appears on the site until an editor has verified it against its source.
