(1) A contravention -
(a) which is to be taken to have occurred by virtue of regulation 21 (authorised payment institutions, small payment institutions and registered account information service providers acting without permission);
(b) of a requirement imposed by regulation 23 (safeguarding requirements); or
(c) of a requirement imposed by or under Part 6 (information requirements for payment services) or 7 (rights and obligations in relation to the provision of payment services),
is actionable at the suit of a private person who suffers loss as a result of the contravention, subject to the defences and other incidents applying to actions for breach of statutory duty.
(2) A person acting in a fiduciary or representative capacity may bring an action under paragraph (1) on behalf of a private person if any remedy -
(a) will be exclusively for the benefit of the private person; and
(b) cannot be obtained by way of an action brought otherwise than at the suit of the fiduciary or represent
…