Response of Record

Responses in enforcement

Warning notices and representations before UK regulators

Last checked 7 November 2026 · 5 sources

Short answer

UK regulators must put their case to a firm before acting and let it reply. A FCA or PRA warning notice must allow at least 14 days for representations 1. The Information Commission's notice of intent must allow at least 21 days, and a penalty notice follows within six months 2. The CMA must give written notice and a chance to make representations before a Competition Act decision 3, and offer an oral hearing 4. Ofcom's provisional notification states the period for representations 5.
FCA or PRA warning notice
At least 14 days for representations 1
Information Commission notice of intent
At least 21 days for written representations 2
Penalty notice timing
Within six months of the notice of intent, or as soon as reasonably practicable 2
Penalty payment period
At least 28 days 2
CMA statement of objections
Written representations, file access and oral hearing 4
Ofcom
Period set in the section 96A notification 5

The common pattern

Each regime puts a proposed decision to the person before it is final. The person replies in writing, sometimes orally, and the regulator must consider the reply. Under the Data Protection Act 2018 the regulator must consider any oral or written representations before deciding whether to give a penalty notice and how much 2. Under the Competition Act 1998 the CMA must give written notice to those likely to be affected and an opportunity to make representations 3.

FCA and PRA

Section 387 of the Financial Services and Markets Act 2000 requires a warning notice to set a reasonable period, of not less than 14 days, for representations to the regulator concerned 1. The regulator may extend the period 1. It must then decide within a reasonable period whether to give a decision notice 1. Where the PRA receives representations in certain cases, it must give the FCA a copy or a record 1.

Information Commission

Schedule 16 of the Data Protection Act 2018 sets the steps before a data protection fine. A notice of intent must give the reasons for the proposed penalty and an indication of the amount, with aggravating and mitigating factors 2. It must say the person may make written representations and set a period of not less than 21 days. If oral representations are appropriate, the notice sets the arrangements 2.

From 5 February 2026 the Data (Use and Access) Act 2025 added a rule that, within six months of the notice of intent or as soon as reasonably practicable after, the regulator must give a penalty notice or written notice that it will not give one 2. From 30 September 2026 the text refers to the Commission in place of the Commissioner 2. A penalty notice must state whether representations were received, and payment is due in a period of at least 28 days 2.

Competition and Markets Authority

Rule 5 of the CMA's Rules requires a notice, the statement of objections, to each party the CMA proposes to find in breach 4. Rule 6 says it must state the facts, the objections, the proposed action and the reasons, and the periods for written representations on confidentiality and on substance 4.

The CMA must give a reasonable opportunity to inspect the file, with internal documents and some others withheld 4. It must offer an oral hearing chaired by a Procedural Officer not involved in the investigation. The officer reports on the fairness of the procedure to the decision makers 4. If no written representations arrive in time, the CMA may proceed without them 4. Complaints to the Procedural Officer get a decision within 20 working days, extendable by 20 more 4.

Ofcom

Under section 96A of the Communications Act 2003, where Ofcom has reasonable grounds to believe a condition has been breached, it may give a notification 5. The notification sets out the determination, the condition and contravention, the period for representations, the steps Ofcom thinks should be taken and any penalty it is minded to impose 5. Before notifying, Ofcom must consider whether proceeding under the Competition Act 1998 would be more appropriate 5.

RegulatorNoticeMinimum reply period
FCA or PRAWarning notice 114 days 1
Information CommissionNotice of intent 221 days 2
CMAStatement of objections 4Period set in the notice 4
OfcomSection 96A notification 5Period set in the notification 5

Common questions

How long does the FCA give to respond to a warning notice?

The notice must allow at least 14 days, and the FCA may extend it 1.

What is a notice of intent in UK data protection law?

The notice given before a penalty notice, with reasons, a proposed amount and at least 21 days for written representations 2.

Can a firm ask the CMA for an oral hearing?

Yes. The CMA must offer one, chaired by a Procedural Officer 4.

What happens if a firm does not reply to the CMA?

The CMA may proceed without written representations once the period ends 4.

Rules and charges change. Check the official source linked on this page before you pay or travel. Spotted an error? Email hello@responseofrecord.com.

Sources

  1. legislation.gov.uk: Financial Services and Markets Act 2000, section 387 Warning notices
  2. legislation.gov.uk: Data Protection Act 2018, Schedule 16 Penalties
  3. legislation.gov.uk: Competition Act 1998, section 31 Decisions following an investigation
  4. legislation.gov.uk: The Competition Act 1998 (Competition and Markets Authority's Rules) Order 2014, Schedule
  5. legislation.gov.uk: Communications Act 2003, section 96A Notification of contravention of condition other than SMP apparatus condition

Related