SI 2026/777 - The Critical Third Parties (Designation) Regulations 2026

Status: This is the original version (as it was originally made). This item of legislation is currently only available in its original format.

STATUTORY INSTRUMENTS 2026 No. 777 FINANCIAL SERVICES AND MARKETS The Critical Third Parties (Designation) Regulations 2026 Made - - - - 8th July 2026 Coming into force - - 13th July 2026 The Treasury make these Regulations in exercise of the power conferred by section 312L(1) of the Financial Services and Markets Act 2000(1) (“the Act”).

Having had regard to the matters in section 312L(3) of the Act, in the Treasury’s opinion, a failure in, or disruption to, the provision of services by the persons designated by these Regulations could threaten the stability of, or confidence in, the UK financial system.

Pursuant to section 312L(4) of the Act, the Treasury has— a) consulted the Financial Conduct Authority, the Prudential Regulation Authority and the Bank of England; b) given notice in writing to the persons to be designated by these Regulations specifying a reasonable period within which those persons may make representations in writing about the proposal; and c) had regard to any representations made.

Citation, commencement and extent

1.—(1) These Regulations may be cited as the Critical Third Parties (Designation) Regulations

2026.

(2) These Regulations come into force on 13th July 2026.

(3) These Regulations extend to England and Wales, Scotland and Northern Ireland.

Designation of Critical Third Parties

2. Each of the following persons is designated as a critical third party with effect from the dates as detailed—

(a) Amazon Web Services EMEA SARL from 13th July 2026;

(b) Google Cloud EMEA Limited from 13th July 2026;

(c) Microsoft Ireland Operations Limited from 13th July 2026;

(1) 2000 c. 8. Section 312L was inserted by section 18 of the Financial Services and Markets Act 2023 (c. 29).Document Generated: 2026-07-10

Status: This is the original version (as it was originally made). This item of legislation is currently only available in its original format.

(d) Oracle Corporation UK Limited from 13 July 2026.

Lilian Greenwood Deirdre Costigan Two of the Lords Commissioners of His 8th July 2026 Majesty’s Treasury 2Document Generated: 2026-07-10

Status: This is the original version (as it was originally made). This item of legislation is currently only available in its original format.

EXPLANATORY NOTE (This note is not part of the Regulations) These Regulations designate Amazon Web Services EMEA SARL, Google Cloud EMEA Limited, Microsoft Ireland Operations Limited and Oracle Corporation UK Limited as critical third parties.

A full impact assessment has not been produced for this instrument as no, or no significant, impact on the private, voluntary or public sector is foreseen.

3