Prudential Regulation Authority Rulebook

2A.1

1. (1) 2A.2 applies to every CRR firm.
2. (2) 2A.3 – 2A.6 apply to any CRR firm that has average total gross assets exceeding £250 million, determined on the basis of the annual average amount of gross assets calculated across a rolling period of five years or, if it has been in existence for less than five years, across the period during which it has existed (in each case, calculated with reference to the CRR firm’s annual accounting reference date).

2A.2

1. (1) A firm must establish, implement and maintain appropriate and effective arrangements for the disclosure of reportable concerns by a person, including a firm’s employee, internally through a specific, independent and autonomous channel.
2. (2) The channel in (1) may be provided through arrangements with third parties, including social partners, subject to any applicable requirement under the Outsourcing Part.

[Note: Art. 71(3) of the CRD]

2A.3

A firm must inform all workers of the channel in 2A.2.

2A.4

A firm must inform all workers:

1. (1) that they may disclose directly to the PRA or to the FCA anything that would be the subject-matter of a protected disclosure;
2. (2) of what would constitute a protected disclosure;
3. (3) that the PRA or the FCA are prescribed persons under section 43F of the Employments Rights Act 1996 and the effect of making a protected disclosure to the PRA or to the FCA; and
4. (4) of the means available to make a protected disclosure to the PRA or the FCA.

2A.5

A firm must ensure that nothing in its arrangements prevents or discourages any worker from making any disclosure to the PRA or the FCA before making the disclosure through the channel referred to in 2A.2.

2A.6

A firm must ensure that nothing in any employment contract or settlement agreement, including any other related or ancillary documentation, between the firm and a worker relating to the worker’s employment with the firm, entered into after the date on which these rules come into effect, prevents or discourages the worker from:

1. (a) making a protected disclosure, including to the PRA; and
2. (b) making a further protected disclosure connected to a protected disclosure already made under (a).