Share on LinkedInShare on LinkedIn

ARTICLE · 05 AUGUST 2026

HM Treasury Makes First Designations Under UK CTP Regime

Herbert Smith Freehills Kramer LLP
Herbert Smith Freehills Kramer LLP
Contributor
Herbert Smith Freehills Kramer LLP

Herbert Smith Freehills Kramer LLP

We have one of the largest Southeast Asia international law practices, working across the region...

View firm profile
Explore more from Herbert Smith Freehills Kramer LLP

HM Treasury has designated four major global cloud services and technology providers as critical third parties under the UK CTP regime. This marks the first designations since the regime came into force on 1 January 2025, bringing Amazon Web Services, Google Cloud, Microsoft Ireland Operations, and Oracle Corporation UK under joint oversight by the Bank of England, PRA and FCA.

United KingdomFinance and Banking

Quick read

On 10 July 2026, HM Treasury issued a press release announcing it has designated four major global cloud services and technology providers as critical third parties (CTPs).

The designations were made under the Critical Third Parties (Designation) Regulations 2026 and were the first since the UK CTP regime came into force on 1 January 2025. They took effect on 13 July 2026 and relate to the following service providers (Service Providers):

  • Amazon Web Services EMEA SARL;
  • Google Cloud EMEA Limited;
  • Microsoft Ireland Operations Limited; and
  • Oracle Corporation UK Limited.

The designations mean the Service Providers will be jointly overseen by the Bank of England (Bank), the PRA and the FCA under the UK CTP regime. 

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.

See more popular content from