How to Structure a Pillar 3 Disclosure That Balances Transparency With Competitive Sensitivity
This guide sets out how to build a Pillar 3 disclosure that meets supervisory expectations for transparency while handling genuinely sensitive commercial information with care. After reading, you will know how to sequence the drafting process, where judgement calls sit, and how to defend the choices you have made.
Pillar 3 is often treated as a compliance artefact produced by the regulatory reporting team and signed off with minimal challenge. That is a mistake. It is one of the few documents where your capital position, risk appetite, and business model are described in your own words to analysts, competitors, counterparties, and supervisors simultaneously. Done well, it builds credibility. Done poorly, it raises questions you did not intend to invite.
Start With What the Rules Actually Require
Before any drafting, map your firm against the current disclosure requirements: the relevant PRA rulebook chapters, the CRR Part Eight tables and templates, and any firm-specific expectations from recent supervisory correspondence. Distinguish between the fixed templates (where format and content are prescribed) and the narrative sections (where you have genuine editorial discretion). The confusion between these two is where most Pillar 3 documents go wrong. Teams over-edit the templates and under-invest in the narrative.
If you are a large or listed institution, confirm your disclosure frequency obligations by template. Quarterly, semi-annual, and annual requirements differ, and the sequencing of sign-off needs to match.
Treat Competitive Sensitivity as a Narrow, Evidenced Exception
The framework permits omission of specific information where it is proprietary or confidential, but the bar is high and the reasoning must be documented. In practice, very little of what sits in Pillar 3 meets that threshold. Portfolio-level RWAs, capital composition, leverage, liquidity ratios, and standard risk breakdowns are not competitively sensitive in any meaningful sense. Your competitors can model them.
Where genuine sensitivity exists, typically around specific model parameters, concentrated exposures, or early-stage portfolio strategies, the right response is not silence. It is to disclose at a level of aggregation that meets the regulatory intent without revealing the specific commercial detail, and to note explicitly where and why you have done so. Supervisors are far more concerned by unexplained gaps than by well-reasoned aggregation.
Build the Narrative Around Movements, Not Just Levels
The most common weakness in Pillar 3 documents is that they present numbers without explanation. A CET1 ratio moved 40 basis points. RWAs rose 8 percent. Credit risk exposures shifted between IRB and standardised. What drove it? Was it business growth, model change, methodology update, regulatory add-on, or FX? Readers, including the PRA, will form their own view if you do not offer one. That view is rarely the one you would have chosen.
Good practice: for every material movement, provide a one or two sentence explanation that ties the number to a business or methodology driver. This is where the document earns its credibility.
Sequence the Sign-Off Properly
Pillar 3 should not be a single-pass document. A workable sequence: finance and risk draft the templates, treasury and the CRO review for coherence with ICAAP and ILAAP narratives, investor relations and communications review the tone and consistency with annual report disclosures, legal and compliance check against regulatory requirements, and the board or a designated committee formally approves. The disclosure should be internally consistent with every other document the firm has published in the same cycle. Inconsistencies between Pillar 3, annual report, and investor presentations are a reliable trigger for supervisory questions.
What Good Looks Like
A strong Pillar 3 reads as if a senior person has actually thought about what a sophisticated external reader needs to understand. It uses the templates faithfully, explains the drivers behind the numbers, acknowledges areas of judgement, and signals continuity or change in approach from the prior period. It does not hide behind boilerplate. It does not over-claim. It reads like the firm knows its own risk profile.
Your Next Decision
Before the next reporting cycle, ask one question: if a supervisor, an analyst, and a competitor read our last Pillar 3 cold, would they reach the same understanding of our risk profile that we hold internally? If not, the fix is in the narrative, not the numbers.
Frequently Asked Questions
How much narrative is too much?
If the narrative starts to read as marketing, it has gone too far. The test is whether every sentence helps a reader understand a number, a methodology, or a risk. Remove anything that does not.
Can we cross-refer to the annual report?
Yes, and you should, where the same information is presented. Cross-referencing reduces duplication and the risk of inconsistency. Be explicit about where the reader should look and ensure the referenced content genuinely covers the disclosure requirement.
What should we do if we identify an error in a prior Pillar 3?
Correct it transparently in the next publication, explain what changed and why, and inform your supervisor directly if the error is material. Quiet restatements are noticed and damage credibility more than the original error would have.
Who should own Pillar 3 internally?
Ownership typically sits with the CFO or CRO, but drafting authority should be clearly assigned to a named individual with the seniority to challenge contributions from across the firm. Diffuse ownership produces diffuse documents.
How do we handle disclosures during a period of significant change?
Explain the change, its drivers, and the expected direction of travel. Supervisors and markets accept transition. They do not accept opacity about it.
Frequently asked questions
How much narrative is too much?
If the narrative starts to read as marketing, it has gone too far. The test is whether every sentence helps a reader understand a number, a methodology, or a risk. Remove anything that does not.
Can we cross-refer to the annual report?
Yes, and you should, where the same information is presented. Cross-referencing reduces duplication and the risk of inconsistency. Be explicit about where the reader should look and ensure the referenced content genuinely covers the disclosure requirement.
What should we do if we identify an error in a prior Pillar 3?
Correct it transparently in the next publication, explain what changed and why, and inform your supervisor directly if the error is material. Quiet restatements are noticed and damage credibility more than the original error would have.
Who should own Pillar 3 internally?
Ownership typically sits with the CFO or CRO, but drafting authority should be clearly assigned to a named individual with the seniority to challenge contributions from across the firm. Diffuse ownership produces diffuse documents.
How do we handle disclosures during a period of significant change?
Explain the change, its drivers, and the expected direction of travel. Supervisors and markets accept transition. They do not accept opacity about it.
Related guides
How to Prepare a Recovery Plan That Withstands PRA Scrutiny
A practical guide to building a Recovery Plan the PRA will accept as credible, usable, and genuinely owned by the firm. Readers will finish with a clear view of what strong looks like, where plans typically fail scrutiny, and what to fix before the next submission.
How to Prepare an FCA Dear CEO Letter Response That Holds Up
This guide sets out how to run a credible, well-governed response to an FCA Dear CEO letter, from first read to board sign-off. After reading it, you will know how to structure the work, where firms typically fall short, and what supervisors expect to see in a response that satisfies them.
How to Prepare an ICAAP That Anticipates PRA Challenge
This guide sets out how to build an ICAAP that stands up to PRA scrutiny on its own merits, from scenario design through board ownership. After reading, you will know where supervisors typically push hardest and how to demonstrate the quality of thinking they expect.
How to Prepare a Solvency II ORSA That Satisfies PRA Expectations
A practical guide for insurance CROs, CFOs and board members on building an ORSA that demonstrates genuine risk ownership and withstands PRA review. After reading, you will know what the PRA actually looks for, where ORSAs commonly fall short, and how to structure the process so the output reflects real decision-making.
Responding to a Section 166 Review: A Practical Guide
This guide sets out how to run an effective response to a Section 166 skilled person review, from scoping through to remediation. After reading, you will know how to resource the review properly, manage the skilled person relationship, and position findings in a way that strengthens your standing with the regulator.
Where a specific question needs an outside answer, quickly
Polar Insight's Expert Network connects leadership teams with practitioners who can speak to a precise regulatory, commercial, or stakeholder question before a decision is finalised.
Explore Expert Network