Banks, insurers and investment firms should seek clarification from the UK's Prudential Regulation Authority (PRA) over their obligations around data when engaging outsourcing providers.

https://www.pinsentmasons.com/out-law/analysis/pra-rules-outsourcing-data