# The Payment Services Regulations 2017, Regulation 99: Incident reporting


(1) If a payment service provider becomes aware of a major operational or security incident, the payment service provider must, without undue delay, notify the FCA.
(2) A notification under paragraph (1) must be in such form and manner, and contain such information, as the FCA may direct.
(3) If the incident has or may have an impact on the financial interests of its payment service users, the payment service provider must, without undue delay, inform its payment service users of the incident and of all measures that they can take to mitigate the adverse effects of the incident.
(4) Upon receipt of the notification referred to in paragraph (1), the FCA must notify any other relevant authorities in the United Kingdom.
(5) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

---
Source: https://www.legislation.gov.uk/uksi/2017/752/regulation/99 (the official version)
Page: https://openlegislation.uk/payment-services-regulations-2017/regulation-99
Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives.