Responses in enforcement
Warning notices and representations before UK regulators
Short answer
- FCA or PRA warning notice
- At least 14 days for representations 1
- Information Commission notice of intent
- At least 21 days for written representations 2
- Penalty notice timing
- Within six months of the notice of intent, or as soon as reasonably practicable 2
- Penalty payment period
- At least 28 days 2
- CMA statement of objections
- Written representations, file access and oral hearing 4
- Ofcom
- Period set in the section 96A notification 5
The common pattern
Each regime puts a proposed decision to the person before it is final. The person replies in writing, sometimes orally, and the regulator must consider the reply. Under the Data Protection Act 2018 the regulator must consider any oral or written representations before deciding whether to give a penalty notice and how much 2. Under the Competition Act 1998 the CMA must give written notice to those likely to be affected and an opportunity to make representations 3.
FCA and PRA
Section 387 of the Financial Services and Markets Act 2000 requires a warning notice to set a reasonable period, of not less than 14 days, for representations to the regulator concerned 1. The regulator may extend the period 1. It must then decide within a reasonable period whether to give a decision notice 1. Where the PRA receives representations in certain cases, it must give the FCA a copy or a record 1.
Information Commission
Schedule 16 of the Data Protection Act 2018 sets the steps before a data protection fine. A notice of intent must give the reasons for the proposed penalty and an indication of the amount, with aggravating and mitigating factors 2. It must say the person may make written representations and set a period of not less than 21 days. If oral representations are appropriate, the notice sets the arrangements 2.
From 5 February 2026 the Data (Use and Access) Act 2025 added a rule that, within six months of the notice of intent or as soon as reasonably practicable after, the regulator must give a penalty notice or written notice that it will not give one 2. From 30 September 2026 the text refers to the Commission in place of the Commissioner 2. A penalty notice must state whether representations were received, and payment is due in a period of at least 28 days 2.
Competition and Markets Authority
Rule 5 of the CMA's Rules requires a notice, the statement of objections, to each party the CMA proposes to find in breach 4. Rule 6 says it must state the facts, the objections, the proposed action and the reasons, and the periods for written representations on confidentiality and on substance 4.
The CMA must give a reasonable opportunity to inspect the file, with internal documents and some others withheld 4. It must offer an oral hearing chaired by a Procedural Officer not involved in the investigation. The officer reports on the fairness of the procedure to the decision makers 4. If no written representations arrive in time, the CMA may proceed without them 4. Complaints to the Procedural Officer get a decision within 20 working days, extendable by 20 more 4.
Ofcom
Under section 96A of the Communications Act 2003, where Ofcom has reasonable grounds to believe a condition has been breached, it may give a notification 5. The notification sets out the determination, the condition and contravention, the period for representations, the steps Ofcom thinks should be taken and any penalty it is minded to impose 5. Before notifying, Ofcom must consider whether proceeding under the Competition Act 1998 would be more appropriate 5.
Common questions
How long does the FCA give to respond to a warning notice?
The notice must allow at least 14 days, and the FCA may extend it 1.
What is a notice of intent in UK data protection law?
The notice given before a penalty notice, with reasons, a proposed amount and at least 21 days for written representations 2.
Can a firm ask the CMA for an oral hearing?
Yes. The CMA must offer one, chaired by a Procedural Officer 4.
What happens if a firm does not reply to the CMA?
The CMA may proceed without written representations once the period ends 4.
Rules and charges change. Check the official source linked on this page before you pay or travel. Spotted an error? Email hello@responseofrecord.com.
Sources
- legislation.gov.uk: Financial Services and Markets Act 2000, section 387 Warning notices
- legislation.gov.uk: Data Protection Act 2018, Schedule 16 Penalties
- legislation.gov.uk: Competition Act 1998, section 31 Decisions following an investigation
- legislation.gov.uk: The Competition Act 1998 (Competition and Markets Authority's Rules) Order 2014, Schedule
- legislation.gov.uk: Communications Act 2003, section 96A Notification of contravention of condition other than SMP apparatus condition
Related
- Responses in regulatory enforcement processes
How the reply step works before a regulator decides: US Wells submissions, UK warning notices and EU statements of objections.
- Replying to a statement of objections
How replies to a statement of objections work at the European Commission and the UK CMA: time limits, file access, oral hearings and extensions.
- Wells notices and Wells submissions explained
How the SEC, CFTC and FINRA Wells process works: what the notice says, time to reply, page limits, meetings and who reads the reply.
- Glossary: notices and replies in enforcement
Plain definitions of official notices that invite a reply in enforcement cases, from warning notices to statements of objections and FDA letters.