Introduction
On 10 March 2026, the PRA imposed a £10.625 million penalty on UK Insurance Limited, Direct Line Group's principal underwriting subsidiary, for breaches of PRA Fundamental Rule 6 and various reporting requirements. This is the first use of the PRA's Early Account Scheme (“EAS”), which offers enhanced settlement discounts for early cooperation.
The breach arose from a double-counting error in the firm's Solvency II balance sheet following a quota share reinsurance arrangement that was the firm's first transaction of this type and scale. The error caused Own Funds to be overstated by £19.7 million initially, growing to £99.9 million by year-end 2023.
UK Insurance Limited is a Category 2 insurer, meaning its size and complexity give it the capacity to cause some disruption to the UK financial system. Under the PRA's January 2024 penalty matrix, Category 2 firms face Step 2 ranges of £15-45 million for Level 1 seriousness, £45-75 million for Level 2, and over £75 million for Level 3. This case was assessed at Level 1 seriousness, with a Step 2 figure of £25 million before adjustments.
Breach
Project Athena was a three-year 10% whole account quota share reinsurance agreement entered into between the firm and two reinsurers in January 2023. Under its terms, the firm would share 10% of the premiums it underwrote with the reinsurers in exchange for those reinsurers assuming 10% of losses on the policies written during the covered period. Preparatory work for the transaction began in 2020; the project was managed by a dedicated working group overseen by an executive steering group and the Board.
The PRA found that while the firm considered the financial accounting treatment of Project Athena and engaged external consultants, it did not adequately consider Solvency II reporting with the result that a double-counting error arose: elements of the contract were accounted for twice, once in the Solvency II balance sheet as an asset, and again as an offsetting asset in Technical Provisions.
The error compounded over time. Because the reinsurance asset reflected 10% of all business written, it grew in line with underwriting activity. By year-end 2023, the firm was reporting its SCR Coverage Ratio as 170% when the true figure was 161%, reflecting an Own Funds overstatement of £99.9 million. At group level, Direct Line Group incorrectly reported its SCR Coverage Ratio as 197% when the true figure was 188%.
Key Takeaways for Firms
Governance
The PRA found that no consideration was given by the working group, steering group, or Board as to whether existing controls would remain adequate for Project Athena, or whether additional controls were needed and the Solvency II reporting implications of the arrangement were not considered as part of the change programme. An independent root cause analysis commissioned by the firm found that the absence of “sufficiently robust foundations” undermined the effectiveness of financial controls and the ability of governance functions to assess the transaction's impact.
Prior PRA Engagement
PRA enforcement often follows a pattern: issues identified during supervision, inadequate remediation, then enforcement. Here, the PRA had raised concerns about the firm's control environment in its 2023 PSM letter. External consultants had also highlighted significant issues.
This is a pattern we have seen in prior PRA Notices (e.g. MS Amlin) and firms should track and evidence remediation of regulatory concerns with clear ownership and accountability for delivery. Failing to show progress following PRA engagement increases enforcement risk and will be reflected in the severity of any penalty.
Resourcing
Resourcing deficiencies are common in PRA and FCA enforcement. Here, the firm's finance and actuarial teams were overstretched and under-resourced, exacerbated by IFRS 17 changes. The firm had never undertaken such a reinsurance arrangement before, and plans for accounting for Project Athena were not fully developed.
External consultants found staff unable to answer role-appropriate questions, lacking knowledge of accounting concepts, and without adequate training. Bottlenecks arose where few individuals had knowledge to deal with queries, and preparer / reviewer segregation was not possible leading to a deterioration in controls.
Similar patterns appear in other cases where restructurings have led to the loss of subject matter experts in certain parts of a business and scheduled leave resulting in inadequate resourcing at key points.
The lesson here is that firms should consider carefully how to resource control functions with contingency for major projects, remediation programmes, and periods of significant change and not only business-as-usual. Over-reliance on a small number of key individuals creates concentration risk that can materialise rapidly when those individuals are unavailable or their attention is diverted.
Skills and Training
The PRA identified that staff were often unable to answer role-appropriate questions, lacked knowledge of accounting concepts and group policies, and had not been given adequate training. Basic skills such as minute-taking were not prevalent and training recommendations were not consistently implemented. The PRA concluded that there was a gap between the control environment required for a Category 2 insurer and the capability deployed.
Firms should establish competency frameworks with documented training requirements and periodic assessment, particularly when individuals take on new roles or when there is significant change to processes or regulatory requirements.
Failure of Internal Controls
The main preventative control was a ‘data exchange file’ which was managed by the External Reporting and Corporate Actuarial teams. The PRA found that this control was ineffective due to lack of understanding about which balances should be adjusted whilst detective controls operated at too high a level so that material transactions were not disaggregated.
The PRA found that the firm did not consider introducing additional controls for Project Athena. The Finance Risk team was not involved because, according to later interviews, they "didn't know anything about reinsurance" and a Finance Change Readiness Certificate which was prepared by the Finance Risk team noted "full assurance not done" and rated the control environment amber.
Further, opportunities to detect the error were missed. Senior staff requested a double-check at the August 2023 Reserving Oversight Committee, but there was no systematic follow-up of action items.
The lesson here is that novel or material transactions should trigger a formal assessment of control adequacy, with explicit consideration of whether existing controls remain fit for purpose and whether additional preventative or detective mechanisms are required. This assessment should be documented and subject to independent review before go-live.
Record Keeping and Risk Acceptances
The firm lacked documentation of risk acceptances made before proceeding with Project Athena, particularly regarding operational capacity. Although operational readiness risks were categorised as amber/red, there was no clear record of risk acceptances or transition actions.
Risk acceptance decisions should be formally documented with clear articulation of the residual risk being accepted, the rationale, the approving authority, and any compensating controls or time-limited mitigations. This documentation serves both as a control and as evidence of appropriate governance after the event when staff may have left and memories have faded.
The Early Account Scheme
This is the first use of the EAS, which became part of the Bank of England's enforcement policy for PRA firms in January 2024. The scheme provides a mechanism for subjects of PRA investigations to provide a full account, along with all relevant material, to inform the investigation.
Subjects may inform the PRA within 28 days of notice of investigation that they wish to participate. The account must be produced within six months, supported by all contemporaneous materials, interview transcripts, and detailed methodology. A senior manager must attest to the robustness of the process.
The key benefit of the EAS for firms is the ability to secure up to a 50% discount on penalties imposed. The 50% discount requires participation in the scheme, comprehensive and accurate information to be provided to the PRA, material assistance to be given to the PRA, admissions of facts and breaches, prompt cessation, and adequate remediation.
In this case, the PRA found that the firm had engaged proactively and candidly, providing a comprehensive, timely, and accurate account that materially assisted the investigation. Crucially, the firm made admissions shortly after producing its account and before any PRA settlement proposal, thereby securing the full 50% discount and reducing the penalty from £21.25 million to £10.625 million.
