Structuring a Pillar 3 Disclosure Under CRR for PRA-Regulated Firms

Pillar 3 is where capital, risk, and remuneration meet the market. Done well, it reinforces investor and counterparty confidence and demonstrates that the firm's internal risk picture matches its external story. Done badly, it reads as either a compliance dump or a selectively edited brochure, and the PRA will notice both. The judgement call for PRA-regulated firms is not whether to disclose, but how to disclose fully and clearly while handling genuinely sensitive information through the mechanisms CRR provides.

Start with the framework, not the content

The PRA's Disclosure (CRR) Part of the Rulebook, together with the EBA's implementing technical standards on uniform disclosures, sets the templates, frequencies, and definitions. Before any drafting begins, confirm which disclosure category the firm sits in (large, other, small and non-complex, listed or not), because this drives which templates apply and at what frequency. Firms routinely waste cycles producing disclosures they do not owe, or missing ones they do.

Map every required template to a data owner, a reviewer, and a source system. If the risk function cannot point to the ledger, model output, or regulatory return that each number ties back to, the control environment is weak before the first word is written.

Treat confidentiality and proprietary exemptions as a governed decision

CRR Article 432 permits omission of information that is immaterial, proprietary, or confidential. This is the clause most often misused. Good practice looks like this:

• A written policy defining what the firm considers proprietary or confidential, with examples and thresholds.
• A case-by-case assessment for each proposed omission, documented contemporaneously, signed off at least at risk committee level.
• Disclosure of the fact of omission, the reason, and more general information in its place, as the CRR requires.

What goes wrong: firms claim proprietary status for entire risk categories, offer no general information in substitution, and leave no audit trail. When the PRA asks why a particular counterparty concentration or model parameter is absent, "commercial sensitivity" without a governed rationale is not an answer.

Reconcile the narrative across documents

Pillar 3 sits alongside the annual report, the ICAAP, the recovery plan, and board risk appetite reporting. Supervisors read these together. If RWAs move materially between periods, the drivers in Pillar 3 should match the explanation given to the board and to investors. If the ICAAP identifies a concentration as a Pillar 2A driver, Pillar 3 should not present the same book as diversified.

Build a reconciliation pack as part of the production process: Pillar 3 totals to regulatory returns (COREP), to the financial statements, to internal MI. Any gaps should be understood and explainable before publication, not after a supervisor flags them.

Get the remuneration disclosures right

Remuneration is the section that attracts the most external scrutiny and the most internal nervousness. The templates require aggregate data by senior management and material risk taker population, fixed and variable splits, deferred amounts, and severance. The temptation to aggregate aggressively to mask individual outcomes is understandable but risky: the EBA templates are specific, and firms that group categories to obscure data invite questions.

Good practice: align the MRT identification methodology with the Remuneration Part of the PRA Rulebook, document the population reconciliation, and let the numbers speak. If the committee is comfortable with the decisions, the disclosure should be straightforward.

Governance and sign-off

The board, or a delegated committee, must formally approve the disclosure. This is not a formality. The approval paper should set out: scope and frequency applied, material changes from prior period, any omissions claimed under Article 432 with rationale, the reconciliation summary, and legal and audit sign-off status. Minutes should record genuine challenge.

Next action

Before the next reporting cycle, commission a gap assessment against current EBA templates and Article 432 governance. If your firm cannot produce, within a day, a documented rationale for every omitted or aggregated data point, that is the work to do now.

Frequently Asked Questions

How material does an item need to be before it must be disclosed?

Materiality under Article 432 is assessed from the perspective of a user of the information making economic decisions. It is not a quantitative threshold set by the firm alone. Document the test applied, including both quantitative and qualitative factors, and revisit annually.

Can we delay disclosure of sensitive information rather than omit it?

The CRR does not provide a general deferral mechanism. If information is genuinely proprietary or confidential, the Article 432 route applies, with substitute general information. Selective timing to coincide with market events is not a legitimate approach.

How should we handle disclosures where internal models produce the numbers?

Model-based disclosures must reflect the approved model output as used for regulatory capital. If there are known model limitations or pending changes under PRA review, the qualitative narrative should acknowledge them. Presenting outputs the firm does not itself rely on internally is the fastest route to supervisory concern.

Who should own Pillar 3 production end to end?

Typically the CFO or CRO, with a named production lead in finance or treasury and risk providing the qualitative content. What matters is that one accountable executive owns the reconciliation and the Article 432 decisions, and presents the package to the board.