PREVIEW · NOINDEXOFFICIAL-SOURCE LEARNING RECORD · NOT A PARTICIPANT RECORD

Bank of Scotland — Sanctions screening configuration and escalation lessons

EXACT SUBJECT: Bank of Scotland plc
AUTHORITY: Office of Financial Sanctions Implementation
OFFICIAL DATE: 10 November 2025
LAST REVIEWED: 28 August 2026

OFFICIAL MONETARY PENALTY · PUBLISHED LESSONS

OFSI imposed a £160,000 monetary penalty on Bank of Scotland plc. Its published lesson material described an automated screening failure involving a spelling variation and highlighted configuration, contingency, human escalation, training and voluntary disclosure as practical learning points.

Mandatory RCEF boundaryThis official-source learning record summarises identified published material and maps it retrospectively to RCEF learning domains. It is not a contemporaneous RMCA assessment, participant record, audit, legal opinion, additional regulatory finding or prediction of current or future conduct.

A · CONTROLLED SOURCE LAYER

Official facts

OFSI imposed a £160,000 monetary penalty on Bank of Scotland plc.
OFSI’s published lesson material states that automated screening failed to detect a spelling variation of a designated individual’s name.
OFSI highlighted screening data and configuration, contingency and human escalation, training, and voluntary disclosure as practical lessons.

B · ATTRIBUTED SOURCE LAYER

What the authority published

OFSI’s material separates the formal monetary penalty from subsequently published practical lessons about screening configuration, escalation, training and disclosure.

C · RETROSPECTIVE EDUCATIONAL LAYER

RCEF learning map

Descriptive website learning domains — not formal RCEF scoring criteria.

Data quality, systems configuration and coverage

Screening effectiveness depends on data, matching logic, spelling variation and list coverage.

Screening, matching and list management

Automated tools require calibrated matching and periodic validation.

Human escalation, challenge and exception handling

Automation requires explicit contingency and escalation procedures.

Training and operational competence

Published lessons emphasised updated staff guidance and awareness.

Incident response, disclosure and regulatory cooperation

Prompt voluntary disclosure and remediation are distinct evidence considerations.

D · NEUTRAL INSTITUTIONAL QUESTIONS

Practical questions for institutions

Does screening test spelling and transliteration variation?
Is list and data coverage validated?
What happens when automation does not match?
Are escalation and disclosure decisions documented?

E · SOURCE CONTROL

Sources and limitations

CASE-S1 · OFSI / GOV.UK · Imposition of monetary penalty: Bank of Scotland plc

Publication / outcome date: 26 January 2026
Source last checked: 28 August 2026
Archive status: Incomplete · hash not recorded
Official URL: https://www.gov.uk/government/publications/imposition-of-monetary-penalty-bank-of-scotland-plc

CASE-S2 · OFSI · Sanctions compliance in practice: lessons from OFSI’s £160,000 Bank of Scotland penalty

Publication / outcome date: 23 February 2026
Source last checked: 28 August 2026
Archive status: Incomplete · hash not recorded
Official URL: https://ofsi.blog.gov.uk/2026/02/23/sanctions-compliance-in-practice-lessons-from-ofsis-160000-bank-of-scotland-penalty/

Scope limitation

This record concerns the published OFSI penalty and lessons only. It is not a general assessment of Bank of Scotland or Lloyds Banking Group controls outside that official scope or period.

CORRECTIONS & RIGHT OF REPLY

Challenge this record

The dedicated corrections, right-of-reply and challenge policy is not yet published. Until that gate is complete, this page remains preview/noindex. General concerns about RMCA may be raised through the existing complaints route.

RMCA complaints route

MATERIAL CHANGE HISTORY

Controlled history

28 August 2026: Controlled data reviewed; preview record prepared. No official procedural-state change recorded.