What after Basel 3.1? Navigating UK banking's next chapter

The Basel 3.1 rulebook: The road to January 2027

The centerpiece of the UK's current regulatory agenda is the new, dual-framework capital regime, which goes live in January 2027. For large firms, Basel 3.1 introduces more robust methods for calculating risk-weighted assets (RWAs), notably the revised Standardized Approach, restrictions on Internal Model usage, and the introduction of the Output Floor. For smaller, domestic-focused firms, the "Strong and Simple" (SDDT) framework offers a proportionate path with simpler capital and reporting rules.

However, the road to 2027 is proving to be a monumental task. The industry is grappling with four key challenges:

• Data: This is the biggest and most underestimated hurdle. Sourcing the granular data needed for the new calculations, ensuring its quality, and proving its lineage is a massive undertaking.
• Technology: The new rules are a catalyst for overhauling legacy systems, outdated technology, and platforms that are simply not fit for purpose.
• Operating models: Firms are managing the complexity of running new and old systems in parallel, creating significant operational strain and "second-order" effects that are easy to miss.
• Multi-jurisdictional complexity: For firms operating across the UK and EU, navigating two diverging rulebooks adds another layer of cost and complexity.

The next frontier: What after Basel 3.1?

Even as banks race towards the 2027 deadline, the critical point is that Basel 3.1 is not the finish line. And while most of Basel 3.1 lands in 2027, the timeline for the significant market risk changes under the Fundamental Review of the Trading Book (FRTB) is still pending, meaning another major implementation is on the horizon.

The regulatory agenda is already moving on. The PRA is pushing firms into new territory, demanding a fundamental shift in how they manage non-financial risks. The Operational Resilience framework (PS7/26) assumes disruptions are inevitable and forces firms to prove they can continue serving customers through a crisis. This proactive stance also applies to the Resolution Framework (PS9/26), designed to end the "too big to fail" era by ensuring firms can fail in an orderly way without taxpayer support.

This focus on resilience has been sharpened by recent events. The rapid collapse of Silicon Valley Bank (SVB) in 2023 served as a stark reminder that new risks are continually emerging, prompting the PRA to respond with two key supervisory priorities. First, SVB’s failure highlighted how technology can accelerate a bank run, prompting the PRA to modernize its liquidity rules (CP5/26), with proposals for a new one-week stress test to ensure firms can withstand rapid deposit outflows and are operationally ready to access cash in a crisis. Second, SVB’s downfall became a textbook case of mismanagement of interest rate risk in the banking book (IRRBB), putting a laser focus on how all firms govern and stress-test for interest rate exposure in a new macroeconomic environment.

Preparing for a future of continuous change

The message from regulators is clear: the era of one-off compliance projects is over. The UK's financial system is now in a state of perpetual motion, requiring a permanent state of readiness. Success is no longer just about meeting the next deadline, but about building a truly agile and resilient organization. This demands strategic investment in modern technology to manage data and reporting efficiently, as well as a culture of proactive risk management championed by the board.

The firms that thrive will be those that build a coherent data and analytics foundation that connects their risk, finance, and regulatory reporting functions. The ability to run sophisticated 'what-if' scenarios is critical, allowing firms to instantly model the impact of a new business strategy on their RWAs under Basel 3.1, or test their resilience against the PRA's new liquidity stress tests. This integrated approach transforms a regulatory burden into a powerful tool for strategic decision-making, turning compliance into a source of valuable business intelligence.