HSBC, Nationwide and TSB breach retail banking rules

HSBC, TSB and Nationwide have broken the Competition and Markets Authority's (CMA) retail banking rules.

Under part 5 of the Retail Banking Order, banks are required to send payment transaction histories to any business current account (BCA) customer that closes their account with a turnover of less than £6.5 million.

The measure is designed to make switching between BCAs easier for SMEs, with some smaller businesses concerned that by moving to a new current account provider they could lose access to their banking history, which is often required by lenders when offering credit.

The Order addresses this by requiring banks and building societies to provide each customer whose BCA has been closed with a full payment transaction history.

However, HSBC failed to send an estimated 12,200 payment transaction histories to former BCA holders between when part 5 of the Retail Banking Order came into effect in February 2018 and December 2022.

The regulator said that it was “unacceptable” that a large, regulated entity such as HSBC “manifestly failed to implement an effective process” to make sure BCA customers that had closed their accounts would be provided with their payment transaction history.

“This failure led to breaches which have been ongoing since the Order came into force, and HSBC’s processes, systems and staff were not capable of detecting and reporting these breaches until December 2022,” added Colin Garland, CMA director of remedies, business and financial analysis, in a letter to the bank. “In addition, the inability for HSBC to determine the scale of these breaches due to the inadequacy of its systems and processes is a further concern.”

The regulator also said that TSB failed to send over 105,000 payment transaction histories to former BCA and personal account customers between April 2022 and 20 March this year, while Nationwide failed to provide these to around 51,000 former personal current account holders during the period between when the rule was enforced and May this year.

The competition watchdog said that because all three banks have taken steps to end the breaches and prevent a recurrence, it will take no further action.

    Share Story:

Recent Stories


Safeguarding economies: DNFBPs' role in AML and CTF compliance explained
Join FStech editor Jonathan Easton, NICE Actimize's Adam McLaughlin and Graham Mackenzie of the Law Society of Scotland as they look at the role Designated Non-Financial Businesses and Professions (DNFBPs) play in the financial sector, and the challenges they face in complying with anti-money laundering and counter-terrorist financing regulations.

Ransomware and beyond: Enhancing cyber threat awareness in the financial sector
Join FStech editor Jonathan Easton and Proofpoint cybersecurity strategist Matt Cooke as they discuss the findings of the State of the Phish 2023 report, diving into key topics such as awareness of cyber threats, the sophisticated techniques being used by criminals to target the financial sector, and how financial institutions can take a proactive approach to educating both their employees and their customers.

Click here to read the 2023 State of the Phish report from Proofpoint.

Cracking down on fraud
In this webinar a panel of expert speakers explored the ways in which high-volume PSPs and FinTechs are preventing fraud while providing a seamless customer experience.

Future of Planning, Budgeting, Forecasting, and Reporting
Sage Intacct is excited to present FSN The Modern Finance Forum’s “Future of Planning, Budgeting, Forecasting, and Reporting Global Survey 2022” results. With participation from 450 companies around the globe, the survey results highlight how organisations are developing their core financial processes by 2030.