The Financial Conduct Authority (FCA) has finalized a transformative regulatory framework that significantly expands its oversight of workplace culture, with new rules on non-financial misconduct (NFM) set to take effect on September 1. This regulatory shift marks a pivotal moment for the United Kingdom’s financial sector, as the mandate moves beyond traditional financial crimes—such as market abuse or insider trading—to encompass behavioral issues including bullying, sexual harassment, and physical violence. By bringing all firms regulated under the Senior Managers and Certification Regime (SMCR) into scope, the FCA is signaling that the "fitness and propriety" of individuals in the industry is inextricably linked to their personal conduct and the treatment of their colleagues.
Under the new requirements, non-banking financial institutions, including asset managers, insurance brokers, and investment firms, will face the same rigorous standards previously expected of major retail banks. The FCA’s guidance, detailed in the policy statement PS25/23, clarifies that firms must actively prevent and address misconduct that occurs within a work-related context. Critically, this applies even if the behavior does not directly involve a regulated financial activity. The regulator’s stance is clear: a workplace culture that tolerates harassment or bullying is a culture that is prone to poor professional judgment, increased operational risk, and ultimately, consumer harm.
The Evolution of Non-Financial Misconduct Regulation
The journey toward these new rules began in earnest following several high-profile scandals within the City of London that exposed deep-seated cultural issues. For years, the FCA has maintained that "culture and governance" are among its top priorities, but the definition of what constituted a regulatory breach remained somewhat narrow. The shift toward a broader interpretation of misconduct gained momentum in 2023, following the "Sexism in the City" inquiry conducted by the House of Commons Treasury Committee. This inquiry highlighted a "shocking" prevalence of sexual harassment and a "boys’ club" culture that discouraged whistleblowing.
In response to these findings and increasing public pressure, the FCA issued Consultation Paper CP23/20 in late 2023, proposing that non-financial misconduct be explicitly integrated into the existing regulatory handbook. The feedback from the industry was extensive, leading to the refined guidance found in PS25/23. This policy statement serves as the definitive roadmap for firms to navigate the intersection of employment law and financial regulation. It provides a clearer threshold for what constitutes a breach of the Conduct Rules and how such incidents should influence a firm’s assessment of an individual’s suitability to hold a position of responsibility.
A Chronology of the Regulatory Shift
The implementation of these rules is the culmination of a multi-year effort to modernize the UK’s financial oversight.
- December 2015: The Senior Managers and Certification Regime (SMCR) is introduced for banks, focusing on individual accountability.
- December 2019: SMCR is extended to almost all FCA-regulated firms.
- 2021–2022: The FCA begins issuing "Dear CEO" letters emphasizing that non-financial misconduct is a form of misconduct that falls within its remit.
- September 2023: The FCA and the Prudential Regulation Authority (PRA) publish joint consultation papers (CP23/20 and CP23/21) on boosting diversity and inclusion and tackling misconduct.
- March 2024: The Treasury Committee publishes its "Sexism in the City" report, urging the FCA to take more aggressive action against perpetrators of sexual harassment.
- Mid-2024: The FCA releases PS25/23, providing the final handbook guidance and confirming the September 1 implementation date.
- September 1, 2024: The new rules officially come into force, requiring firms to have updated their internal processes, training, and reporting structures.
Supporting Data: The Scale of the Problem
The FCA’s decision to intervene is backed by sobering data regarding the current state of the financial services workplace. In early 2024, the FCA conducted a comprehensive survey of over 1,000 firms to gauge the prevalence of non-financial misconduct. The results revealed a significant volume of reported incidents, with bullying and harassment accounting for approximately 65% of all non-financial grievances.
Furthermore, the data indicated that while the number of reports has increased over the last three years, the number of disciplinary actions taken by firms has not always kept pace. This "enforcement gap" suggested that many firms were treating non-financial misconduct as a purely human resources matter rather than a regulatory compliance issue. By formalizing these rules, the FCA aims to close this gap, ensuring that a finding of harassment results not only in an internal HR sanction but also in a potential mark against an individual’s regulatory record, which could effectively end their career in the sector.
The Intersection of Financial Regulation and Employment Law
One of the most complex aspects of the new FCA rules is their overlap with existing and forthcoming employment legislation. The UK government has recently moved to strengthen worker protections, most notably through the Worker Protection (Amendment of Equality Act 2010) Act 2023, which introduces a proactive duty on employers to prevent sexual harassment.
The FCA’s new rules harmonize with these legislative changes in several ways:
- Non-Disclosure Agreements (NDAs): The FCA has become increasingly critical of the use of NDAs to silence victims of misconduct. The new guidance reinforces that NDAs cannot be used to prevent individuals from reporting concerns to the regulator or from whistleblowing.
- Whistleblowing Protections: Sexual harassment and other forms of serious non-financial misconduct are now more clearly recognized as "protected disclosures." This means that employees who report such behavior are entitled to legal protections against victimization or unfair dismissal.
- Unfair Dismissal and Tribunal Rights: As firms become more aggressive in dismissing individuals for non-financial misconduct to satisfy the FCA, there is a projected increase in Employment Tribunal claims. Firms must balance their regulatory obligation to remove "unfit" individuals with the legal requirement to follow fair dismissal procedures.
Analysis of Implications for Firms and Senior Management
The implementation of PS25/23 places a significant burden of responsibility on Senior Managers. Under the SMCR, a designated individual—often the Head of Compliance or the CEO—can be held personally accountable if they fail to take reasonable steps to prevent misconduct within their area of responsibility.
Firms are now required to review their "Fitness and Propriety" (FIT) assessments. Traditionally, these assessments focused on whether a person had the technical skills and financial integrity to do their job. Moving forward, the FIT test must include a rigorous evaluation of the person’s behavior toward others. A history of bullying, even if it occurred at a previous firm, may now be grounds for a firm to refuse to certify an individual as fit and proper.
Furthermore, the "Conduct Rules" (COCON), which apply to almost all employees in financial services, are being clarified to ensure that non-financial misconduct is a breach of the requirement to "act with integrity." This means that even junior employees could face regulatory consequences for workplace harassment.
Industry Reactions and Stakeholder Perspectives
The reaction from the financial community has been a mixture of support for the principles and concern over the practicalities of implementation. Professional bodies and advocacy groups have largely welcomed the move. "For too long, technical brilliance has been used as a shield for toxic behavior," said one industry consultant specializing in workplace culture. "The FCA is finally making it clear that how you achieve your results is just as important as the results themselves."
However, legal experts have raised concerns about the "grey areas" of the guidance. For example, the definition of conduct "related to work" can be broad. Does it include behavior at an unofficial after-hours gathering? Does it include comments made on private social media accounts? While the FCA has attempted to provide clarity, many believe these boundaries will only be defined through future enforcement cases and tribunal rulings.
Law firms are currently advising their clients to undertake a "gap analysis" of their existing policies. This includes updating staff handbooks, revising codes of conduct, and implementing specialized training for managers on how to conduct investigations into non-financial misconduct that meet both HR and regulatory standards.
Looking Ahead: A Cultural Transformation
As the September 1 deadline approaches, the UK financial services sector is bracing for a period of adjustment. The FCA has indicated that it will not only monitor the number of reports but will also look at how firms are integrating these rules into their broader governance frameworks. The ultimate goal is a cultural transformation where integrity, respect, and safety are seen as fundamental components of a stable financial system.
The shift toward regulating non-financial misconduct is not merely an administrative change; it is a fundamental expansion of the social contract between financial institutions and the public. By holding individuals accountable for their behavior in the office as strictly as they are held accountable for their actions on the trading floor, the FCA is attempting to build a more resilient, inclusive, and ethical industry. Whether these rules will successfully eradicate the "boys’ club" mentality remains to be seen, but the era of the regulator looking the other way regarding workplace culture has officially come to an end.
