This Practice Note explains the private rights of action (PROA) under the Financial Services and Markets Act 2000 (FSMA 2000) held by certain categories of person to sue authorised firms in circumstances in which they have suffered a loss. The relevant legislative provisions are found in FSMA 2000, ss 20, 71 and 138D FSMA 2000 and are supplemented by the Financial Services and Markets Act 2000 (Rights of Action) Regulations 2001, SI 2001/2256 (the Rights of Action Regulations). The following causes of action for damages against firms under the FSMA 2000 are addressed in this Practice Note: • a firm has breached FCA or PRA rules (FSMA 2000, s 138D) • a firm has acted outside the scope of its permission (FSMA 2000, s 20) • a firm has used a prohibited person to perform a controlled function or delegated performance of a controlled function without appropriate regulatory approval (FSMA 2000, s 71) Note, as a result of Brexit, a previous right of action against an incoming EEA firm