FCA General Rules and Guidance: Key Firm Obligations
The Financial Conduct Authority’s Handbook sets out a wide range of obligations that authorised firms must meet, spanning operational conduct, transparency, and reporting duties. While the FCA’s rulebook is organised into numerous sourcebooks, several cross-cutting obligations recur throughout: breach and notification reporting, controls on inducements, whistleblowing frameworks, and record-keeping standards. Together these form the backbone of day-to-day regulatory compliance for most regulated firms, particularly those in retail-facing sectors such as mortgage and insurance advice.
Breach Reporting
Firms have a continuing obligation to notify the FCA of significant breaches of regulatory requirements. This includes breaches of FCA rules, relevant legislative provisions, and, in some cases, breaches identified through internal audit, compliance monitoring, or whistleblowing channels. The threshold for what constitutes a reportable breach is generally tied to materiality: breaches that could affect a firm’s ability to meet threshold conditions, that involve potential harm to consumers or market integrity, or that reveal systemic weaknesses in controls are expected to be reported promptly.
Senior management bear particular responsibility here. Under the Senior Managers and Certification Regime (SMCR), individuals holding prescribed responsibilities are expected to ensure that breach identification and escalation processes are robust, and that the FCA is informed without undue delay once a firm becomes aware of a reportable matter. Delayed or incomplete breach reporting is itself treated as a serious compliance failing, separate from the underlying breach.
Notification Events
Beyond breach reporting, the FCA requires notification of a broader category of events that may affect a firm’s regulatory standing, even where no rule has technically been broken. These notification events can include material changes in a firm’s business model, significant changes in controllers or key personnel, financial difficulties such as the risk of insolvency, civil, criminal, or disciplinary proceedings against the firm or its staff, and material changes to systems and controls.
The underlying principle is that the FCA expects an open and cooperative relationship with the firms it supervises, consistent with Principle 11 of the Principles for Businesses, which requires firms to deal with their regulators in an open and cooperative way and to disclose anything relating to the firm that the regulator would reasonably expect notice of. Firms should maintain internal escalation procedures that identify notifiable events early and route them to the individual responsible for regulatory liaison, often a senior manager with the relevant prescribed responsibility.
Inducements
Rules on inducements are designed to prevent conflicts of interest that could compromise a firm’s duty to act in clients’ best interests. Generally, firms and their staff must not accept or offer inducements (whether monetary or non-monetary) that are likely to conflict with their duties to customers, unless those inducements meet specific conditions: they must be designed to enhance the quality of the service to the client, and must not impair compliance with the firm’s duty to act honestly, fairly, and professionally in the client’s best interest.
This area is particularly prominent in the insurance industry, where commission structures, gifts, hospitality, and soft commissions are common features of commercial relationships. Firms are generally expected to maintain a register of inducements given or received above a de minimis threshold, ensure transparency to clients where relevant, and have governance arrangements that allow senior management to monitor inducement practices for emerging conflicts
Whistleblowing
The FCA places significant emphasis on whistleblowing as a mechanism for surfacing misconduct, risk, and poor culture that might not otherwise come to light through formal escalation routes. Larger firms are generally required to appoint a whistleblowers’ champion, typically a non-executive director, who has responsibility for ensuring the integrity, independence, and effectiveness of the firm’s whistleblowing arrangements.
Firms must establish internal whistleblowing procedures that allow staff to raise concerns confidentially, and in some cases anonymously, without fear of detriment or retaliation. Staff should also be made aware that they may report concerns directly to the FCA, and contractual terms (such as non-disclosure agreements) must not be used to deter or prevent individuals from doing so. Effective whistleblowing arrangements are increasingly seen by the FCA as a window into firm culture, and weaknesses identified through whistleblowing handling can attract supervisory attention in their own right.
Record Keeping
Underpinning nearly all of the above obligations is a general requirement for firms to keep adequate records, sufficient to demonstrate compliance with regulatory requirements and to enable the FCA to assess that compliance through supervisory review. Record-keeping obligations apply broadly: communications with clients, decisions taken by senior management and governing bodies, training and competence records, complaints records, financial promotions, and evidence of breach and notification reporting all typically fall within scope.
Specific retention periods vary by sourcebook and the nature of the record, some retail-facing records must be kept for a minimum number of years, while certain records may need to be retained indefinitely, or for the duration of the relevant product’s life plus a further period. Firms should ensure records are stored securely, are readily retrievable on request, and are maintained in a form that allows the FCA to reconstruct key business decisions and client interactions if required during an investigation or thematic review.
These obligations, while distinct in focus, share a common regulatory purpose: ensuring firms operate transparently, manage conflicts of interest appropriately, escalate problems promptly, and maintain evidence of their conduct over time. For compliance functions, embedding these requirements into business-as-usual processes, rather than treating them as standalone box-ticking exercises, is generally the most effective way to satisfy both the letter and the spirit of FCA expectations. Firms should also remain alert to sector-specific variations, since precise thresholds, timeframes, and procedural requirements can differ depending on the regulated activities a firm undertakes.
This article is for informational purposes only and does not constitute legal or compliance advice. Brokers should consult their compliance function or a qualified regulatory adviser for guidance specific to their business.
Written by the Ecompli founder — With over 20 years in financial services and having founded Ecompli in 2006, these blogs are written by a specialist with hands-on expertise in FCA regulation across the mortgage, general insurance, equity release, and insurance claims handling sectors.
