Supervision and regulation

1. United Kingdom

1.1 Authorised firms in the Group

The UK Financial Services Authority (FSA) is the consolidated supervisor of the Group and the Royal Bank. As at 31 December 2007, 31 companies in the Group (excluding subsidiaries of the ABN AMRO Group), spanning a range of financial services sectors (banking, insurance and investment business), were authorised to conduct financial activities regulated by the FSA.

The UK authorised banks in the Group include the Royal Bank, NatWest, Coutts & Co and Ulster Bank Ltd. Wholesale activities, other than Group Treasury activities, are concentrated in the Group's Corporate Markets division and are undertaken under the names of the Royal Bank and NatWest. UK retail banking activities are managed by the Retail Markets division. The exception is Ulster Bank Ltd, which is run as a separate division within the Group. Ulster Bank Ltd provides banking services in Northern Ireland while the banking service to the Republic of Ireland is provided by Ulster Bank Ireland Ltd which is primarily supervised by the Irish Financial Services Regulatory Authority.

Investment management business is principally undertaken by companies in the Retail Markets division, including Adam & Company Investment Management Limited, and in the Corporate Markets division, RBS Asset Management Limited.

General insurance business is principally undertaken by companies in the RBS Insurance division, including Direct Line Insurance plc and Churchill Insurance Company Limited. Life assurance business is undertaken by Royal Scottish Assurance plc and National Westminster Life Assurance Limited (with the Group's partner, the AVIVA Group) and Direct Line Life Insurance Company Limited.

1.2 Regulatory developments and implementation.

Basel II is the most significant change to regulation of the banking industry for many years and will have a lasting effect on our relationships with customers, investors and other key stakeholders. The FSA in the UK has endorsed the Group's approach to managing credit risk under Basel II. This puts us among the small number of UK financial services organisations that are using Advanced Internal Ratings Based approach for the calculation of credit risk capital requirements from 1 January 2008. From 2008, the Group will apply the Standardised Approach for operational risk, migrating to the Advanced Measurement Approach (AMA) in line with the US timescales. The Group has implemented Pillar 2 and Pillar 3 in line with regulatory requirements.

In addition, the Group successfully implemented the Markets in Financial Instruments Directive ('MiFID') by the implementation date of 1 November 2007. MiFID established a comprehensive legislative framework at the European level, which is now implemented in the UK, for the establishment and conduct of investment firms, multilateral trading facilities and regulated markets.

The FSA's high level principles require all regulated firms to treat their customers fairly and a specific industry wide project on Treating Customers Fairly (& 'TCF') was launched in 2004. The FSA emphasised that TCF will be a key area of focus for the regulator over the coming years. In the summer of 2007 it followed this up by setting out specific targets that it would expect all firms to meet during 2008 in relation to management information required to evidence TCF embeddedness. The Group already had several underlying principles built into the existing customer proposition which clearly demonstrated the concept of fairness in action. These fundamental business values include demonstrating fairness, transparency and honesty throughout the whole relationship with our customers, ensuring that any representations we make are clear, fair and not misleading, and having mechanisms in place to avoid things going wrong and correct any deficiencies.

UK FSA authorised firms must also comply with rules designed to reduce the scope for firms to be used for financial crime and in particular money laundering. Revised Joint Money Laundering Steering Group Guidance Notes were issued on 13 November 2007 to take into account the new Money Laundering Regulations 2007. These Regulations came into force on 15 December 2007 and implemented the EU's Third Money Laundering Directive. Amongst their other provisions, the Regulations endorse a risk based approach to combating money laundering, while also prescribing 'enhanced due diligence' for non face to face customers, 'politically exposed persons' (PEPs) and correspondent banking. Whilst for all material purposes the Group is already compliant – these provisions having been anticipated in industry guidance for some time – internal processes are continually reviewed to ensure best practice standards are met. In particular, the Group has issued new internal policy guidelines based on the regulations and supporting industry guidance against which all divisions have undertaken a gap analysis as a basis for further action plans where necessary.

1.3 Information Commissioners Office

The Information Commissioner's Office (ICO) is the UK's independent public body set up to promote access to official information and to protect personal information. The ICO enforces the Data Protection Act 1998, the Freedom of Information Act 2000, the Privacy and Electronic Communications Regulations 2003 and the Environmental Information Regulations 2004, regulating the organisations that come within their remits. They promote awareness of information rights and obligations and ensure compliance. The Commissioner reports directly to Parliament and has the power to order compliance, using enforcement and prosecution. The Group takes data protection very seriously and follows the guidance provided by the ICO. The Group continues to improve its processes in line with changing guidelines and in order to meet customers increasing expectations in relation to information security.

2. International

2.1 ABN AMRO

The consolidated supervisor of ABN AMRO is the Dutch central bank, De Nederlandsche Bank (DNB). It operates partly as the Dutch central bank and prudential supervisor of banks and insurance companies; and also as part of the European System of Central Banks. Following the acquisition of ABN AMRO the Group now operates in over 50 countries.

2.2 United States

The Group is both a bank holding company and financial holding company within the meaning of the US Bank Holding Company Act of 1956. As such, it is subject to the regulation and supervision of the Board of Governors of the Federal Reserve System (the “Federal Reserve”). Among other things, the Group's direct and indirect activities and investments in the United States are limited to those that are 'financial in nature' or 'incidental' or 'complementary' to a financial activity, as determined by the Federal Reserve. The Group is also required to obtain the prior approval of the Federal Reserve before acquiring, directly or indirectly, the ownership or control of more than 5% of any class of the voting shares of any US bank or bank holding company.

Under current Federal Reserve policy, the Group is required to act as a source of financial strength for its US bank subsidiaries. Among other things, this source of strength obligation could require the Group to inject capital into any of its US bank subsidiaries if any of them became undercapitalised.

The Group's US bank and non-bank subsidiaries and RBS's US branches are also subject to supervision and regulation by a variety of other U.S. regulatory agencies. As of 1 September 2007, Citizens Financial Group's state-chartered bank subsidiaries (with the exception of its bank subsidiary in the State of Pennsylvania) were merged and consolidated into a single nationally chartered bank, RBS Citizens, NA. As a result, RBS Citizens, NA is now supervised by the Office of the Comptroller of the Currency, a bureau of the US Department of the Treasury charged with the regulation and supervision of nationally chartered banks. Citizens Financial Group remains under the supervision of the Federal Reserve as a bank holding company. Citizens Bank of Pennsylvania is subject to the regulation and supervision of the Pennsylvania Department of Banking and the US Federal Deposit Insurance Corporation. RBS's New York branch is supervised by the New York State Banking Department, and its Connecticut branch is supervised by the Connecticut Department of Banking. Both branches are also subject to supervisory oversight by the Federal Reserve, through the Federal Reserve Bank of Boston.

The Group's US insurance agencies are regulated by state insurance authorities. The Group's US broker dealer, Greenwich Capital Markets, Inc., is subject to regulation and supervision by the US Securities and Exchange Commission and the Financial Industry National Regulatory Association (FINRA) with respect to its securities activities. With respect to its futures activities, Greenwich Capital Markets, Inc. is also subject to regulation and oversight by the US Commodity Futures Trading Commission and the Chicago Board of Trade.

The Group is subject to extensive regulations that impose obligations on financial institutions to maintain appropriate policies, procedures and controls to detect, prevent and report money laundering and terrorist financing and to ensure compliance with US economic sanctions against designated foreign countries, nationals and others. Anti-money laundering, anti-terrorism and economic sanctions regulations have become a major focus of US government policy relating to financial institutions and are rigorously enforced by US government agencies.

2.3 Other jurisdictions

The Group and Bank of China have established an exclusive strategic partnership. The Group and Bank of China have agreed to co-operate across a range of business activities, building on Bank of China's distribution strength and the Group's product skills in areas including credit cards, wealth management, corporate banking and personal lines insurance. The Group also continues to grow its other Asian activities, having recently set up new branches in the Middle East and Far East. As in all jurisdictions in which the Group undertakes business, it considers regulatory risk as a key component of is new products approval process to ensure that it meets with local regulatory requirements.

Department of Justice investigation

As previously disclosed by ABN AMRO, the United States Department of Justice has been conducting a criminal investigation into ABN AMRO's dollar clearing activities, Office of Foreign Assets Control compliance procedures and other Bank Secrecy Act compliance matters. ABN AMRO has cooperated and continues to cooperate fully with the investigation. Prior to the acquisition by the Group, ABN AMRO had reached an agreement in principle with the Department of Justice that would resolve all presently known aspects of the ongoing investigation by way of a Deferred Prosecution Agreement in return for a settlement payment by ABN AMRO of US$500 million (which amount was accrued by ABN AMRO in its interim financial statements for the six months ended 30 June 2007). Negotiations are continuing to enable a written agreement to be concluded.

Sub-prime exposures

Certain of the Group's subsidiaries have received requests for information from various US governmental agencies and self-regulatory organisations including in connection with sub-prime mortgages and securitisations, collateralised debt obligations and synthetic products related to sub-prime mortgages. The Group and its subsidiaries are cooperating with these various requests for information and investigations.