Barclays and Lloyds breach CMA retail banking rules

The Competition & Markets Authority (CMA) has published letters it sent to Barclays and Lloyds Bank which outline a set of breaches to its Retail Banking Market Investigation Order.

The UK watchdog said that both banks failed to make continuously available "accurate, comprehensive and up to date information on its products and services" through the Open APIs, which form one part of the broader Open Banking provisions of the order.

It said that without sufficient or correct information, consumers make "wrong decisions" and may therefore choose financial products that are not best suited to their needs.

Barclays breached the rules 13 times, including when it over-stated the number of ATMs available to customers by around 200 between April 2021 and 15 July 2021.

It listed incorrect values for international payments for Business Current Accounts, with fees over-reported by around £4, while it also under-reported overdraft fees for these accounts by £20.

“We take our responsibilities under the CMA Order very seriously, and have voluntarily taken steps to fix the breaches relating to the Open API remedy, while introducing new processes to ensure we remain compliant," said a Barclays spokesperson.

Barclays has introduced manual controls that check the accuracy of the data published on a monthly basis and introduced training for staff on the requirements of compliance for Open Banking APIs, as well as other action to address the issues outlined by the CMA.

Lloyds broke the order 10 times, including when it published incorrect bank branch data for some of its branches between March 2017 and June 2021. The bank also published incorrect cash withdrawal charges for both Lloyds and Bank of Scotland SME customers.

“We’re really sorry that some information on our products and services was inaccurate when accessed through third party app and website providers using Open Banking," said a Lloyds Banking Group spokesperson. "No-one was worse off as a result of the error and we’ve taken action to ensure the information remains up to date.”

Lloyds has also taken voluntary action to end the breaches, including additional compliance training and improved frequency monitoring controls to ensure continued ongoing compliance, as well as other steps.

    Share Story:

Recent Stories


Banking's GenAI evolution: Beyond the hype, building the future
In the first episode of a three-part video podcast series sponsored by HCLTech, Sudip Lahiri, Executive Vice President & Head of Financial Services for Europe & UKI at HCLTech explores how financial institutions can navigate the transformative potential of Generative AI while building lasting foundations for innovation.

Beyond compliance: Transforming document management into a strategic advantage for financial institutions
In this exclusive fireside chat, John Rockliffe, Pre-Sales Manager at d.velop, discusses the findings of Adapting to a Digital-Native World: Financial Services Document Management Beyond 2025 and explores how FSIs can turn document workflows into a competitive advantage.

Sanctions evasion in an era of conflict: Optimising KYC and monitoring to tackle crime
The ongoing war in Ukraine and resulting sanctions on Russia, and the continuing geopolitical tensions have resulted in an unprecedented increase in parties added to sanctions lists.

Achieving operational resilience in the financial sector: Navigating DORA with confidence
Operational resilience has become crucial for financial institutions navigating today's digital landscape riddled with cyber risks and challenges. The EU's Digital Operational Resilience Act (DORA) provides a harmonised framework to address these complexities, but there are key factors that financial institutions must ensure they consider.