Material outsourcing
Also called critical or important outsourcing, material third-party arrangement
Material outsourcing is an outsourcing arrangement so important that its weakness or failure would cast serious doubt on a firm's ability to meet its threshold conditions or regulatory principles. UK regulators use the term to decide which outsourcings need prior notification, stronger contracts, tested exit plans and closer board oversight.
How it works
Firms run a materiality assessment before signing and at each review. The test looks at the service's link to important business services, the volume of customer data involved, how hard the provider is to replace and the impact of an outage. Arrangements judged material are notified to the regulator in advance, carry mandatory contract terms such as audit and access rights, and sit on the board's outsourcing register.
The label drives cost and effort. A material outsourcing needs fuller due diligence, a documented exit plan and stressed business continuity testing. Supervisors review these arrangements closely because a failure at one provider can stop payments or claims handling across a firm. From 18 March 2027 UK firms also notify material third-party arrangements under a joint PRA and FCA regime.
The rules
Sets PRA expectations for outsourcing, defines the material outsourcing test and requires notification, due diligence and exit plans for material arrangements.
Banks, building societies, PRA-designated investment firms and insurersIntroduces notifications for material third-party arrangements and a related register, applying from 18 March 2027.
PRA-regulated and FCA-regulated firmsEU guidelines use the equivalent term critical or important functions and set stricter governance for outsourcing them. EBA/GL/2026/09 will repeal them once it applies.
Credit institutions, investment firms, payment and e-money institutionsCommon questions
Who decides whether an outsourcing is material?
The firm decides, using a documented assessment approved through its governance. The PRA and FCA can challenge the conclusion in supervision. A firm that wrongly classes an arrangement as non-material risks missing notification and contract requirements.
Is material outsourcing the same as critical or important outsourcing?
They are close equivalents. The PRA chose material outsourcing to avoid confusion with other meanings of critical. EU rules under the EBA guidelines and DORA use critical or important functions for the same tier of arrangements.
Does intragroup outsourcing count?
Yes. PRA SS2/21 says intragroup arrangements are not inherently less risky than those with outside providers. A service supplied by a group company can be material and then follows the same notification and contract expectations.
What changes in 2027?
From 18 March 2027 the PRA and FCA require notification of material third-party arrangements, including some that are not outsourcing. Firms also keep a register of those arrangements and submit it through a shared regulatory portal.
