The Financial Conduct Authority (FCA) has finalized a transformative regulatory framework that significantly broadens the definition and oversight of non-financial misconduct (NFM) within the United Kingdom’s financial services sector. Effective September 1, 2024, these new rules transition from being primarily focused on the banking sector to encompassing all firms regulated under the Senior Managers and Certification Regime (SMCR). This regulatory shift signals a definitive move by the FCA to treat cultural failings—such as bullying, sexual harassment, and discrimination—with the same gravity as financial crimes like market abuse or insider trading. Under the new guidance, firms are mandated to integrate NFM assessments into their core compliance frameworks, ensuring that an individual’s personal conduct is a primary factor in determining their "fitness and propriety" to work in the industry.
The implementation of Policy Statement PS25/23 marks the culmination of a multi-year effort to modernize the FCA Handbook. For years, the regulator has faced pressure from parliamentary committees and advocacy groups to address "toxic" work environments that were seen as detrimental to market integrity and consumer protection. By expanding the scope to all SMCR-regulated firms, the FCA is bringing asset managers, insurers, and investment platforms into a regime where private conduct can have professional consequences. The core of the change lies in the explicit inclusion of non-financial behavior within the Conduct Rules (COCON) and the Suitability (FIT) sections of the FCA Handbook, making it clear that misconduct occurring outside of specific regulated activities—but within a professional or work-related context—is subject to regulatory scrutiny.
The Evolution of Non-Financial Misconduct Regulation
The journey toward the September 1 implementation began in earnest following high-profile scandals within the City of London that highlighted systemic issues of harassment and exclusionary behavior. The FCA’s consultation process, initiated via CP23/20, sought to clarify how NFM impacts a firm’s operational resilience and risk profile. The regulator’s stance is predicated on the belief that a culture which tolerates bullying or harassment is one where employees are less likely to speak up about financial risks or unethical practices.
Historically, the FCA focused almost exclusively on "financial" misconduct—fraud, money laundering, and mis-selling. However, the 2023 "Sexism in the City" inquiry by the Treasury Select Committee acted as a catalyst for faster reform. The inquiry revealed that despite years of "diversity and inclusion" initiatives, many women in the sector still faced significant barriers and predatory behavior. The committee’s findings suggested that the lack of a clear regulatory definition for NFM allowed firms to settle harassment claims quietly using non-disclosure agreements (NDAs), often leaving the perpetrators free to move to other firms without a blemish on their regulatory record. The new rules aim to close these loopholes by requiring firms to report such incidents and consider them during the mandatory annual "fitness and propriety" certifications.
Chronology of the Regulatory Rollout
The timeline for these changes reflects a deliberate and phased approach by the FCA to allow firms to adjust their internal policies. In September 2023, the FCA published its initial consultation paper (CP23/20), which laid out the proposed changes to the COCON, FIT, and COND (Threshold Conditions) sections of the Handbook. Throughout late 2023 and early 2024, the regulator engaged in extensive dialogue with industry bodies, legal experts, and whistleblowing charities.
In early 2024, the FCA released its findings from a sector-wide survey on NFM, which served as a benchmark for the current state of the industry. This data provided the empirical evidence needed to justify a more heavy-handed approach. By the time PS25/23 was published, the industry had been given several months of lead time to prepare for the September 1 "go-live" date. This period was essential for firms to update their internal disciplinary procedures, as the new rules require a closer alignment between Human Resources (HR) departments and Compliance teams—two functions that have traditionally operated in silos.
Supporting Data and the Scale of Impact
The scale of the FCA’s intervention is immense. There are approximately 45,000 firms regulated by the FCA in the UK, the vast majority of which fall under the SMCR. While the largest banks have already been navigating these waters for several years, thousands of smaller boutique firms, hedge funds, and insurance brokers are now facing these requirements for the first time.
Recent data from the FCA’s own investigations indicates a rising trend in NFM reporting. Between 2021 and 2023, the number of whistleblowing reports related to culture and behavior increased by nearly 25%. Furthermore, a 2023 industry survey revealed that 1 in 5 financial services employees had witnessed or experienced bullying that went unreported because of a lack of confidence in the firm’s internal processes. The FCA expects that by formalizing NFM as a regulatory breach, the volume of reports will initially increase as "under-the-radar" misconduct is brought to light.
The financial implications for non-compliance are also significant. The FCA has the power to levy unlimited fines and, more importantly, to "prohibit" individuals from working in the financial sector entirely. For a Senior Manager, a finding of NFM could result in the loss of their "Certified" status, effectively ending their career in a regulated role.
Convergence with Employment Law and New Legislation
The September 1 implementation does not exist in a vacuum. It coincides with a broader legislative shift in the UK regarding workplace safety and employee rights. One of the most critical intersections is with the Worker Protection (Amendment of Equality Act 2010) Act 2024, which introduces a proactive duty for employers to prevent sexual harassment. Under this law, firms can no longer be passive; they must demonstrate they took "reasonable steps" to prevent misconduct.
Additionally, the FCA’s new rules align with recent changes to the use of NDAs. The government and regulators have signaled that NDAs cannot be used to prevent an individual from reporting a crime or whistleblowing to a regulator. For financial firms, this means that a private settlement with an aggrieved employee cannot bypass the requirement to report the underlying misconduct to the FCA if it relates to a breach of the Conduct Rules.
Furthermore, the legal threshold for what constitutes "work-related" conduct has been clarified. The FCA guidance specifies that misconduct does not have to occur within the four walls of an office to be relevant. Conduct at a work-sponsored holiday party, on a business trip, or even on social media—if it impacts the professional environment or the firm’s reputation—can now be categorized as NFM.
Official Responses and Industry Reactions
The FCA’s leadership has been vocal about the necessity of these changes. Nikhil Rathi, the Chief Executive of the FCA, has repeatedly stated that "culture is a key pillar of supervision." In public forums, FCA officials have argued that firms with poor cultures are "inherently riskier" because they suppress the "psychological safety" required for employees to challenge bad decisions.
Industry reactions have been mixed. While major industry bodies like UK Finance have expressed support for the principles of diversity and inclusion, there have been concerns regarding the practical application of the rules. Some legal experts have questioned how firms should handle "gray areas"—conduct that is unpleasant but perhaps doesn’t reach the legal definition of harassment. There is also the concern of "regulatory overreach," with some firms worried about the burden of policing employees’ private lives.
In response to these concerns, the FCA’s PS25/23 handbook guidance provides more granular examples of what constitutes a breach. It emphasizes that the rules are not intended to police "private thoughts" but rather "demonstrable behaviors" that affect the workplace or the integrity of the financial system.
Broader Implications for the Financial Sector
The long-term impact of the September 1 changes will likely be a fundamental restructuring of how financial firms approach governance. The "Senior Manager" responsible for the firm’s culture will now face direct accountability for NFM incidents within their department. This puts pressure on firms to invest heavily in sophisticated reporting systems and independent investigation units.
Furthermore, the integration of NFM into the "Fitness and Propriety" (F&P) assessments means that the hiring process in the City will become more rigorous. Regulatory references—the documents passed between firms when an employee moves—will now need to include details of any NFM findings. This "regulatory passporting" of misconduct is designed to prevent "bad apples" from moving from one firm to another without consequence.
From an investment perspective, ESG (Environmental, Social, and Governance) criteria are also driving this change. Institutional investors are increasingly looking at a firm’s "S" (Social) credentials, including their record on diversity and workplace culture. A firm that falls foul of the FCA’s NFM rules is likely to see its ESG rating plummet, potentially leading to a withdrawal of capital or a decline in share price.
Conclusion and Outlook for Firms
As the September 1 deadline passes, the burden of proof shifts to the firms. They must ensure that their policies are not merely "paper-thin" compliance measures but are deeply embedded in their operational DNA. This involves updating employee handbooks, conducting specialized training for managers on how to handle NFM reports, and ensuring that whistleblowing channels are robust and anonymous.
The FCA has signaled that it will not hesitate to take enforcement action to set an example in the early stages of the new regime. Firms that fail to adapt risk not only heavy fines but also a permanent stain on their reputation in an industry where trust is the primary currency. The intersection of employment law and financial regulation has created a new landscape where the "how" of business is just as important as the "what." In this new era, the FCA is making it clear that a firm’s culture is no longer a "soft" issue—it is a hard regulatory requirement.
