OpenLegislation

The Critical Third Parties (Designation) Regulations 2026

S.I. 2026/777 · Made 8 July 2026

Original text. legislation.gov.uk does not revise statutory instruments, so later amendments are not shown here. Changes made to it are listed under each provision when known.

Financial Services And Markets

Made 8th July 2026

Coming into force 13th July 2026

The Treasury make these Regulations in exercise of the power conferred by section 312L(1) of the Financial Services and Markets Act 2000f1 (“the Act”).

Having had regard to the matters in section 312L(3) of the Act, in the Treasury’s opinion, a failure in, or disruption to, the provision of services by the persons designated by these Regulations could threaten the stability of, or confidence in, the UK financial system.

Pursuant to section 312L(4) of the Act, the Treasury has—

a) consulted the Financial Conduct Authority, the Prudential Regulation Authority and the Bank of England;

b) given notice in writing to the persons to be designated by these Regulations specifying a reasonable period within which those persons may make representations in writing about the proposal; and

c) had regard to any representations made.

Annotations to the whole text

Footnotes

f1

2000 c. 8. Section 312L was inserted by section 18 of the Financial Services and Markets Act 2023 (c. 29).

Contents

  1. 1Citation, commencement and extent
  2. 2Designation of Critical Third Parties
  3. Signature
  4. Explanatory note

1Citation, commencement and extent

(1)

These Regulations may be cited as the Critical Third Parties (Designation) Regulations 2026.

(2)

These Regulations come into force on 13th July 2026.

(3)

These Regulations extend to England and Wales, Scotland and Northern Ireland.

2Designation of Critical Third Parties

Each of the following persons is designated as a critical third party with effect from the dates as detailed—

(a)

Amazon Web Services EMEA SARL from 13th July 2026;

(b)

Google Cloud EMEA Limited from 13th July 2026;

(c)

Microsoft Ireland Operations Limited from 13th July 2026;

(d)

Oracle Corporation UK Limited from 13 July 2026.

Signature

Lilian Greenwood

Deirdre Costigan

Two of the Lords Commissioners of His Majesty’s Treasury

8th July 2026

Explanatory note

(This note is not part of the Regulations)

These Regulations designate Amazon Web Services EMEA SARL, Google Cloud EMEA Limited, Microsoft Ireland Operations Limited and Oracle Corporation UK Limited as critical third parties.

A full impact assessment has not been produced for this instrument as no, or no significant, impact on the private, voluntary or public sector is foreseen.