Gibraltar Law (PCCGL) common mistakes
Gibraltar Law (PCCGL) · Understand the traps and how to avoid them.
Treating the Gibraltar Financial Services Commission (GFSC) as a single-role body and collapsing its prudential, conduct, and market-conduct functions into one answer, so the candidate names the wrong regulator or the wrong statutory power when asked who supervises a particular activity.
Candidates revise from general UK FCA/PRA material and assume the Gibraltar architecture mirrors it, without mapping the Financial Services Act 2019 and the Financial Services (Investment and Fiduciary Services) framework to the specific functions.
What to do instead
Build a one-page regulator map: for each function (prudential supervision, conduct, anti-money-laundering supervision, market abuse, insurance, banking, e-money, DLT) write the GFSC role and the enabling statute. Test yourself by covering the statute column and recalling it from the function.
Confusing the Financial Services Act 2019 permission categories and the regulated-activity definitions, so the candidate says a firm needs a permission it does not need, or misses one it does.
The Act replaced earlier legislation and reorganised permissions; candidates rely on older summaries and never check whether a described activity falls within a specified regulated activity.
What to do instead
Work through the Act's regulated-activity schedule and permission categories with worked examples: for ten short fact patterns, decide whether a permission is needed and which category applies. Note the boundary cases (advisory vs arranging, custody vs safeguarding) explicitly.
Answering anti-money-laundering questions from generic FATF principles rather than Gibraltar's specific regime, missing the Proceeds of Crime Act, the GFSC AML/CFT guidance notes, and the role of the Gibraltar Financial Intelligence Unit.
AML is the most heavily generalised topic in study material; candidates learn the risk-based approach as a concept and never learn which Gibraltar body receives suspicious activity reports or which guidance note applies to their sector.
What to do instead
Memorise the reporting chain (firm MLRO to GFIU), the statutory basis for reporting, and the sector-specific guidance notes. Practise two full scenarios: one requiring an internal report and one requiring an external SAR, and write the exact steps and timeframes.
Mixing up the senior-manager and fitness-and-propriety approval routes, naming the wrong approval body or the wrong form of application, and failing to distinguish approved persons from notified roles.
Candidates treat governance approval as a single concept and do not separate who must be approved, by whom, and on what statutory basis, because the terminology overlaps across regimes.
What to do instead
Create a table of controlled functions and key function holders with columns for approval route, approving body, statutory source, and continuing obligations. Rehearse with short scenarios asking 'who must approve this appointment and why'.
Describing the compliance function's role as merely advisory and omitting the second line's monitoring and challenge duties, so answers on governance structures are too thin to score.
Candidates learn the three-lines-of-defence model as a diagram and never convert it into Gibraltar-specific obligations, reporting lines, and board responsibilities.
What to do instead
Write out the compliance officer's duties under the relevant Gibraltar rules: monitoring plan, risk assessment, reporting to the governing body, and escalation. Then answer a board-reporting scenario in full sentences naming the recipient, content, and frequency.
Ignoring the fit-and-proper and corporate-governance requirements for directors and shareholders, including changes in qualifying holdings and the notification duties that follow.
Ownership and control questions look like company-law trivia, so candidates skip them, not realising they are core regulatory approvals with strict notification triggers.
What to do instead
Learn the qualifying-holding thresholds, the notification and approval process, and the consequences of failing to notify. Practise a change-of-control scenario from initial acquisition through to post-completion notification.
Applying UK or EU rules by default where Gibraltar has its own equivalent, for example on market abuse, client-asset safeguarding, or complaints handling, and citing the wrong instrument.
Most published study material is UK-centric, and Gibraltar's post-Brexit position means some regimes were retained, modified, or replaced; candidates never verify which version applies.
What to do instead
For each major topic, write the Gibraltar instrument name and its key differences from the UK analogue. Keep a 'do not assume' list and check it before every practice question on market conduct or client money.
Treating the Gibraltar Financial Services Tribunal and the regulator's internal decision process as interchangeable, so the candidate misstates the appeal route, the time limit, or who may refer a decision.
Enforcement and appeals are under-revised because they feel procedural; candidates skim the section and rely on memory of the regulator's name only.
What to do instead
Map the enforcement lifecycle: supervisory action, decision notice, internal review, reference to the Tribunal, and onward appeal. Record who can refer, the deadline, and the grounds. Then answer a procedural scenario end to end.
Giving generic answers on outsourcing, cloud, and operational resilience without naming the Gibraltar notification and approval expectations, the materiality test, and the board's accountability.
These are newer topics with less settled study material, so candidates fall back on general principles and cannot cite the specific expectations the examiner wants.
What to do instead
Summarise the outsourcing rules: what counts as material, when the GFSC must be notified or consulted, what the written agreement must contain, and who on the board owns the risk. Apply them to a cloud-provider scenario with a worked answer.
Failing to apply the rules to the facts, writing a textbook description of a regime instead of a decision on the scenario, and so losing the application marks even where the law is correct.
Candidates memorise definitions under time pressure and never practise converting them into a reasoned conclusion, which is how the higher-scoring questions are marked.
What to do instead
For every practice question, force a structure: identify the issue, state the rule and its source, apply it to the named facts, then give a clear conclusion. Time yourself so the application paragraph is never the one cut for time.