Business scope and permission boundaries
The future UK equities CT covers shares, ETF, depositary receipts, certificates and other similar instruments, and is intended to consolidate post-trade data and best bid and offer quotes with identifiable sources. It forms part of the CTP asset-class arrangements, not another general-purpose equities data licence immediately open to any applicant; as at 2026-11-07, it should not be advertised as a live service.[10] [25]
Application value and choice of route
Select the minimum sufficient combination of permissions that lawfully supports the actual business, client scope and financial responsibilities, rather than treating the broadest permissions or fastest approval as the sole objective.
ARM integrates institutional clients' transaction data validation, submission and feedback into a traceable process, helping reduce omissions, duplicate reporting and formatting errors. Engaging ARM does not mean investment firms may stop reconciling front-office transaction records with the data received by FCA; responsibilities must be implemented through service agreements and daily reconciliation.[3] [6]
APA provides a unified post-trade disclosure channel, helping market participants access prices and volumes and improving the quality of public information through data validation. Disclosure timing and deferral arrangements depend on the instrument and current transparency rules; commercial service agreements cannot arbitrarily replace regulatory requirements.[6] [16]
CTP reduces the cost of piecing together fragmented market data, providing a more complete basis for price comparisons, trade analysis and market research. The UK bond CT began operating on 2026-06-22, while the equity CT is still under development; their data coverage, selection stages and revenue arrangements must be explained separately.[9] [10] [11]
Application conditions and entry requirements
CP26/31 on 2026-07 confirmed the basic framework, while the inclusion of SI quotes and certain contractual requirements still require further implementation. FCA plans to publish key procurement documents in early 2027. On 2026-10-29, CP26/39 opened a consultation on revenue allocation and enhanced CTP incident reporting, closing on 2026-12-17. These proposals must not all be treated as conditions already in force.[10] [11]
Shareholders, directors and key personnel
Shareholder and group arrangements should be transparent, explaining actual funding support, material connected relationships and whether shareholder-controlled data sources or technology platforms create conflicts of interest. The CTP financial assessment considers the benefits, liabilities and risks arising from significant shareholders, group connections and important contracts; merely presenting a registered capital certificate without explaining funds availability is insufficient.[7] [15]
Directors and those effectively directing the business must be of good repute. Members of the management body must provide information on experience, education and training, criminal or other fitness disclosures, intended time commitment and conflicts of interest. The DRSP management form for FCA is MAR 9 Annex 2. Standalone DRSP should not, solely because of that status, invariably be required to submit Form A for SMF1, SMF3, SMF16 and SMF17. If the same entity also conducts Part 4A business, the SM&CR requirements should be assessed separately.[2] [5] [8] [14]
The compliance function must have clear arrangements for policy ownership and maintenance, monitoring, escalation of breaches and reporting to management. The technology operations lead must understand reporting deadlines, error correction, service recovery and incident notification. Staffing should be proportionate to business volumes and the scope of services. Current DRSP rules do not prescribe a universally applicable fixed complement of “at least two UK directors plus one full-time MLRO”.[6] [14]
Local substance should consist of UK services capable of supervision, actual management capability, adequate records and effective contact arrangements, rather than merely a rented mailing address. Overseas branches of ARM and APA form part of the overseas applicant and have no separate legal personality; CTP cannot simply rely on this overseas branch exception and must meet the UK establishment conditions.[2]
Capital and financial resources
The CTP financial resources framework requires resources commensurate with continued performance, operational risk and orderly exit; there is no uniform fixed minimum capital figure that can be published. Specific procurement commitments and fees for the future equity CT must be confirmed in formal documents; fees from old bond tenders or capital figures from other markets must not be used to promise a quotation.[7] [10] [15]
Registered office and operational substance
UK-established applicants must have their head office in the UK and, where they have a registered office, that office must also be in the UK. Overseas ARM or APA applicants must have a UK operating branch that actually provides data reporting services. A company’s registered address, UK branch registration and FCA authorisation for data reporting services are distinct matters; obtaining Companies House registration does not constitute permission to conduct ARM or APA business.[2]
Address arrangements should align with personnel, system access, regulatory contact and record locations; material address changes must be notified using MAR 9 Annex 5. Not all servers must be physically located in the UK, but ARM use of data centres outside the UK is expressly a material information change requiring assessment and notification, with evidence that data security, FCA access and business continuity are not impaired.[8]
Application document checklist
The MAR 9 Annex 1 application form and Annex 2 management body member form are the core forms for authorisation or verification, and specify the services for which ARM, APA or CTP is sought. Information on the applicant and designated contact must be consistent. Provide LEI where applicable and identify other non-DRSP business.[1] [8] [14]
Provide the organisational structure, a description of the UK entity or branch, group and control relationships, and the human, technical and legal resources allocated to the business. Governance documents must explain the procedures for appointing, assessing the performance of and removing senior executives and management members, reporting lines and the governing body's rights of access to documents.[2] [14]
Submit management body members’ career histories, relevant training and suitability information, including criminal record materials or declarations and authorisations for checks permitted by the forms. Specify each person’s time commitment, proposed role, potential conflicts of interest and how they will be managed; qualifications for other activities, such as CeMAP, should not be treated as a uniform statutory qualification for ARM.[14]
Compliance policies should cover data quality, conflicts of interest, outsourcing, business continuity, information security and breach reporting. They must identify the person responsible for policy maintenance, monitoring and implementation methods, and measures to be taken when breaches may affect authorisation conditions.[6] [14]
Submit system architecture, receipt and transmission interfaces, access permissions, backup facilities, and capacity and stress testing evidence. ARM must demonstrate FCA reporting connectivity and error correction mechanisms; APA must demonstrate machine-readable publication, receipt acknowledgements and public data reconciliation arrangements.[6] [14]
List all outsourced functions, providers and oversight resources, attaching key contracts, provider continuity information and regulatory cooperation clauses. For critical functions, provide internal or external oversight reports and explain fallback arrangements and data migration paths in the event of provider failure.[6] [14]
Use financial plans to explain capital, cash, ongoing operating costs and support arrangements under adverse conditions, avoiding treating the notional transaction values reported for clients as the applicant's credit-risk assets. CTP must also provide evidence of resources under MAR 9.2C, operational resilience information under SYSC 15A, and governance and complaint investigation arrangements.[7] [14] [15]
At the CTP bidding stage, the operating plan, pricing, service levels and licensing structure information required by the procurement must all be prepared, followed separately by financial regulatory authorisation or verification. Winning the tender is no substitute for regulatory approval; procurement commitments and statutory requirements should be listed separately in the documentation.[2] [12] [15]
This is provided as a reference for organising the project; it cannot replace current official application forms or case-specific requests for additional materials. Please do not send identity documents or customer records through website forms.
Application process and key steps
First map transaction and data flows, determine whether the activity involves regulatory transaction reporting, public market disclosure or a consolidated tape, and assess the UK entity or overseas branch route. For existing institutions operating trading venues, separately assess whether the verification conditions are met; holding a FCA licence is not a substitute for that assessment.[1] [2] [3]
Discuss the specific business and documentation requirements with the relevant market data team at FCA. The routine DRSP contact email is MDIS@fca.org.uk. Institutions intending to participate in a future equity CTP competition should contact FCAProcurement@FCA.org.uk under the FCA procurement arrangements. General pre-application discussions cannot be promoted as having secured candidate status.[1] [10]
Establish management and operational teams, complete policies, systems and continuity arrangements, and produce verifiable data quality testing evidence. Prepare the relevant fee budget. ARM and APA must separately assess MDP access procedures and fees to avoid omitting technical launch costs from the authorisation budget.[1] [6] [14]
In accordance with the current DRSP overview from FCA, submit completed Annex 1, Annex 2 and supporting materials to MDIS@fca.org.uk, and pay the applicable fee. The original page’s statement that all DRSP applications must be submitted through Connect is inaccurate; follow the relevant FCA instructions for specific payment procedures and processes for other concurrent business activities.[1] [8]
FCA assesses statutory conditions, management suitability and operational controls, and may request further information and impose restrictions. Where a tender direction applies, CTP must first become the preferred bidder. Regulatory authorisation or verification is an independent assessment and does not guarantee that all successful bidders will ultimately be approved.[2] [15]
After approval, confirm the services, restrictions and effective date stated in the notice, and check the public registration and technical connection status. After launch, maintain compliance with annual notification, material change and incident reporting requirements; apply to vary services to add DRSP services through Annex 3, and apply for cancellation of all services through Annex 4.[2] [8]
Approval deadlines and project timelines
Article 9 of the 2024 Regulation requires FCA to make a decision within six months of receiving a complete DRSP application; Article 7 also applies this rule to compliance verification applications. The statutory deadline is not a promise of approval: FCA may still refuse an application or impose restrictions. Neither the start of preparations nor the first submission of documents automatically starts the clock for a complete application.[2]
Article 9 allows FCA to determine an incomplete application where it considers this appropriate, but does not establish a separate, generally applicable twelve-month decision period for incomplete DRSP applications. The original page’s description of “six months for limited permission / twelve months for full authorisation” as a statutory rule should be deleted. General authorisation periods for other FSMA business must not be transplanted into this topic either.[2]
Preparation time is an internal project planning matter. An initial allowance of three to six months may be advisable for integrating teams, policies and systems, but this is not an average preparation period or service commitment published by FCA. Building platforms from scratch, cross-border branches and major outsourcing arrangements may take longer. Milestones should include completed interface testing, evidence of financial resources and governance documents. For CTP, procurement, regulatory assessment and actual launch must also be calculated separately.[6] [14] [15]
The bond CT contract was signed on 2026-01 and went live on 2026-06-22; the expected launch date of 2026-03 in the old tender documents should no longer be cited. As of 2026-11-07, the equity CT remained at the procurement preparation stage. FCA plans to publish key procurement documents in early 2027, targeting operation in 2027 or early 2028. These are regulatory plans, not guaranteed authorisation timelines for applicants.[9] [10] [15]
Changes to shareholders, directors and permissions
Changes to members of the management body should be notified to FCA using MAR 9 Annex 6 before taking effect. Where prior notification is genuinely impossible, notification must be made within ten working days after the change. Fitness and propriety requirements must continue to be met. This procedure must not be misdescribed as requiring all DRSP directors to obtain approval through SMF Form A, or all departures to use Form C for controller approval.[5] [8]
Assess whether changes in control, ownership, group structure or material funding support arrangements constitute a material change to information provided at authorisation. Notify promptly using Annex 5 and engage with FCA early. A standalone DRSP must not mechanically apply all ownership thresholds and control approval forms for Part 4A firms solely because of its DRSP status. Entities that also have Part 4A status must separately check the FSMA control regime, and transaction documents should include corresponding regulatory conditions.[2] [7] [8]
Adding ARM, APA or other permitted data services, or discontinuing some services, requires a variation of authorisation under regulation 11 of the 2024 Regulations and Annex 3. Discontinuing all services requires an application for cancellation under regulation 10 and Annex 4. Material IT, critical outsourcing and address changes are not all the same type of VoP. CTP must also consider procurement contracts, exclusive operating rights and successor handover requirements.[2] [8] [12]
Ongoing compliance and annual maintenance
The basic framework confirms that the equity CTP must share part of its revenue with data contributors, but the specific proportion is proposed for inclusion in the five-year concession contract, and the allocation mechanism remains under consultation. FCA aims to begin operating in 2027 or early 2028. Once operations actually begin, the ongoing requirements of DRSP and CTP must also be met; this is a future operating plan, not a standard maintenance calendar that can already be followed using a template.[10] [11]
Acquisition due diligence and transaction considerations
Before acquisition, check each ARM, APA or CTP service and restriction recorded by FCA, and distinguish buying shares in the same legal entity from transferring the business to another entity. Data services authorisation is not a commodity that can be resold separately from the approved entity. Failure to provide authorised services for six consecutive months is a circumstance in which FCA may cancel authorisation. For any purported “shell licence”, investigate the actual continuing business.[2]
Data due diligence should examine original customer inputs, validation logs, FCA acceptance and rejection records, information actually published and historical cancellations and resubmissions, checking whether unresolved systemic errors span multiple customers. Particular attention should be paid to five-year record availability, reported errors and omissions, outstanding supplementary reporting, reconciliation backlogs and related compensation or contractual liabilities, rather than merely annual financial statements and ownership charts.[3] [6] [22]
Technical and contractual due diligence should cover platform intellectual property, data licences, supplier transfer restrictions, overseas data centres, backup sites and records of major disruptions. It must test whether UK management capability, FCA access and actual operational personnel will remain after the acquisition. Transferring control of group-shared platforms may change conflicts of interest and outsourcing arrangements.[6] [8] [14]
CTP must in particular examine the remaining procurement contract term, service metrics, data licensing structure and successor handover obligations; the legislation permits an initial contract of up to five years, with an extension of no more than two years only under limited conditions. The bond CT is already operated by the selected provider. Acquiring ARM or APA does not confer the exclusive right to operate the bond CT; procurement for the equity CT has not yet been completed, and there is no established equity CT licence available for sale on that basis.[2] [9] [10] [12] [15]
View the complete process for acquiring a licensed companyBusiness segments and applicable regimes
The following are specific permissions, organisational models or statutory categories covered by this topic. They do not necessarily each constitute a separate financial licence.
Frequently asked questions
Can ARM, APA and CTP substitute for one another?+
No. ARM submits reportable transactions to FCA, APA publishes post-trade information to the market, and CTP then consolidates the corresponding market data. One institution may be permitted to provide multiple DRSP services, but must apply or vary its status according to the actual services. It cannot claim to be APA or CTP on the strength of ARM status.[1] [2]
Are there both full authorisation and limited permission categories for UK ARM?+
The FCA DRSP regime has no ARM limited permission category for retailers and car dealers as claimed on the original page. The service scopes of ARM, APA and CTP and the separate authorisation/compliance verification routes should be distinguished; consumer credit full or limited permission cannot be transplanted into this regime.[1] [2]
Must an overseas company establish a UK subsidiary to apply?+
Overseas entities with a UK branch may apply for ARM and APA; not every overseas applicant must establish a separate UK subsidiary. This branch exception does not apply to CTP, which must meet UK establishment conditions and, where tender arrangements apply, first pass the relevant selection process.[2]
Is an exemption available if reporting services are provided only to businesses?+
DRSP primarily serves institutional markets; B2B customer status, customer wealth or instalment payment arrangements cannot exempt it from authorisation requirements. The assessment should be based on whether data reporting services as defined in the regulations are actually provided; the high-net-worth and interest-free instalment exemptions on the original page are not ARM rules.[1] [2]
Does an investment firm need to become ARM to report its own transactions directly?+
Article 26 of UK MiFIR permits investment firms to submit their own reports directly through FCA MDP, or through ARM or a compliant trading venue acting on their behalf. Fulfilling one's own reporting obligations differs from commercially providing ARM services to other investment firms; not all entities subject to reporting obligations can be required indiscriminately to apply for ARM.[3]
Who is responsible for reporting errors after delegating to ARM?+
Investment firms should still verify that reports of their own transactions are complete and accurate and reconcile them regularly against FCA data samples, rather than relying entirely on supplier acknowledgements. ARM must identify obvious client errors, address their own errors and omissions, and fulfil their own correction and notification responsibilities. Contracts should clearly allocate responsibilities for input data and transmission stages.[3] [6]
What are the respective statutory deadlines for complete and incomplete applications?+
A decision on a complete DRSP application must be made within six months of FCA receiving the complete materials; verify the corresponding applicable procedure. The 2024 Regulations allow decisions on incomplete applications but do not establish a separate general twelve-month deadline; the original page was incorrect to treat the twelve months for full authorisation as the statutory DRSP deadline.[2]
Are all DRSP applications submitted through Connect?+
The current FCA topic overview requires completed Annex 1, Annex 2 and supporting documents to be sent to MDIS@fca.org.uk. Technical connectivity, fee payment and additional business activities may involve separate system processes and should follow the specific guidance; it is incorrect to state that all DRSP applications must invariably use Connect.[1] [8]
Is the minimum capital £5,000 or €3,200,000?+
No. There is no dedicated fixed minimum capital amount under DRSP that can be cited uniformly for ARM and APA. CTP must at all times have sufficient financial resources to meet its obligations, assessing liquidity, operational risk and orderly exit. A six-month cost-based capital formula cannot be applied automatically either.[6] [7]
Must every DRSP have a SMF17 approved by FCA?+
DRSP management members are subject to suitability and member notification requirements, but standalone DRSP status alone does not establish that an application for SMF17 or the full SM&CR is required. The applicability of MLR and of SM&CR should be assessed separately according to the specific legal status and other activities conducted; ancillary data operations of banks or investment firms particularly require separate analysis.[2] [8] [14] [23] [24]
Must APA publish all bond and derivative transactions in real time?+
No. The non-equity transparency regime effective from 2025-12-01 specifies the bonds and derivatives in scope and provides corresponding deferral arrangements. Over-the-counter transactions in non-designated instruments are not universally subject to public reporting obligations. APA must establish specific controls for instrument identification, rule scope and publication deferrals.[16]
Is it still possible to apply to become another UK bond CTP?+
The current bond CT is selected on a single-provider basis, and the ETS Connect UK service launched on 2026-06-22. While the relevant contract remains valid, others may not provide the CT service awarded under that contract. Potential competitors must monitor re-tendering rather than submit an ordinary additional ARM application.[2] [9] [12]
Is the equity CT already operating, and have revenue allocation proportions been determined?+
As of 2026-11-07, FCA is still preparing procurement for the equity CT, targeting operation in 2027 or early 2028. The high-level requirement to share part of the revenue with contributors has been confirmed, but the proportion is intended to be determined by contract; detailed allocation and enhanced incident reporting remain at the CP26/39 consultation stage.[10] [11]
Does every director change require prior SMF approval?+
A standalone DRSP should notify changes in management members under Annex 6 before they take effect, or within ten working days after the change where advance notification is not possible. If the entity also conducts Part 4A business subject to SM & CR, personnel approvals under that status must also be checked, but the other regime cannot replace DRSP member notification.[8] [14]
Can customer data centres and business functions be outsourced overseas?+
Overseas facilities are not prohibited outright, but security, ongoing oversight, FCA cooperation and continuity arrangements are required. Outsourcing cannot transfer DRSP regulatory responsibility. The use of data centres outside the UK and outsourcing of critical functions by ARM constitute material information changes; prior notification and specific controls should be assessed.[6] [8]
Which annual reports must be submitted, and how long must records be retained?+
Complete the DRSP annual ongoing compliance notification in accordance with the authorisation anniversary and three-month window, and retain records demonstrating compliance for at least five years. There is no uniform checklist requiring all DRSP to submit RMAR, quarterly capital reports and an annual Consumer Duty report. Requirements arising from other statuses and specific CTP requirements should be added separately.[6] [8]
Can new data services begin immediately after purchasing a licensed company?+
Existing permitted services, restrictions, actual operations and material change notifications must be checked. Authorisation cannot be assumed to transfer automatically when business moves to another legal entity. Acquisitions should particularly examine historical errors, outstanding late filings, data and technology licences, and the remaining term of the CTP contract and conditions for handover to a successor.[2] [3] [6] [12]
Official basis and verification sources
Primarily based on FCA, PRA / Bank of England, GOV.UK and current legislation. Older third-party guides supplied by users are used to organise business material and do not override the latest official requirements.
Tang Shangyong (Mr Tang / Drew) · Business Manager
Global financial licence application, transaction and ongoing compliance services