The Financial Conduct Authority (FCA) has finalized a comprehensive regulatory framework that significantly broadens the scope and enforcement of non-financial misconduct (NFM) rules, set to take effect on September 1. This regulatory shift marks a pivotal moment for the UK financial services sector, moving beyond a traditional focus on market integrity and capital adequacy toward a robust mandate centered on corporate culture and workplace behavior. Under the new rules, all firms regulated by the Senior Managers and Certification Regime (SMCR)—not just major banking institutions—will be held to strict standards regarding the prevention of bullying, harassment, and violence within the workplace. This expansion ensures that thousands of investment firms, insurance brokers, and consumer credit providers are now under the same scrutiny as the nation’s largest lenders.
The core of the FCA’s new guidance, detailed in Policy Statement PS25/23, clarifies that non-financial misconduct is a direct reflection of an individual’s fitness and propriety to work in the financial sector. The regulator has made it clear that conduct occurring outside of strictly regulated activities, provided it is related to work, can still trigger regulatory intervention. This includes behavior at off-site training sessions, work-related social events, or even interactions on digital platforms used for professional communication. By formalizing these expectations, the FCA aims to eliminate "toxic" cultures that can lead to poor decision-making, risk-taking, and the eventual erosion of public trust in the financial system.
The Evolution of Regulatory Oversight: A Chronology
The journey toward these new standards began several years ago as the FCA recognized that financial misconduct is often preceded or accompanied by a breakdown in cultural standards. In 2016, the Senior Managers and Certification Regime (SMCR) was introduced for banks, designed to increase individual accountability. By 2019, the regime was extended to cover almost all firms regulated under the Financial Services and Markets Act. However, until recently, the definition of "misconduct" was largely interpreted through the lens of financial crimes, such as insider trading, market manipulation, or mis-selling.
The catalyst for the current expansion was a series of high-profile scandals involving sexual harassment and bullying within prominent City firms. These incidents prompted the House of Commons Treasury Committee to launch the "Sexism in the City" inquiry, which highlighted systemic issues regarding how firms handle internal grievances and the frequent use of non-disclosure agreements (NDAs) to silence victims. In September 2023, the FCA published Consultation Paper CP23/20, proposing that non-financial misconduct be explicitly integrated into the "Fitness and Propriety" (F&P) assessments and the Conduct Rules. Following a period of industry feedback, the FCA issued its final guidance in PS25/23, setting the stage for the September 1 implementation.
Understanding the Scope of Non-Financial Misconduct
The new rules redefine the parameters of professional behavior by explicitly linking workplace culture to regulatory compliance. The FCA’s guidance focuses on three primary areas:
- Fitness and Propriety (F&P) Assessments: Firms must now consider non-financial misconduct when assessing whether an individual is "fit and proper" to perform their role. If a senior manager or certified employee is found to have engaged in bullying or harassment, it may be determined that they lack the integrity or reputation required to remain in their position.
- The Conduct Rules: The FCA has clarified that serious non-financial misconduct can constitute a breach of the individual conduct rules. This allows the regulator to take direct enforcement action against individuals, including fines or banning them from the industry.
- Threshold Conditions: For firms as a whole, the presence of widespread non-financial misconduct may suggest that the business is not being managed in a sound and prudent manner, potentially threatening its regulatory authorization.
The inclusion of "work-related" conduct that occurs outside the office is a significant development. The FCA has indicated that it will look at whether the conduct took place on firm premises, involved colleagues or clients, or was facilitated by the firm (such as at a sponsored event). This holistic view recognizes that a professional’s behavior in a social setting can be just as indicative of their character as their behavior at a trading desk.
Supporting Data and the Cost of Toxic Culture
The move toward stricter NFM rules is supported by a growing body of data suggesting that poor culture is a leading indicator of financial risk. According to a 2023 report by the Banking Standards Board, firms with lower scores for "psychological safety"—where employees feel afraid to speak up about bullying—also showed higher rates of compliance failures. Furthermore, a survey conducted during the "Sexism in the City" inquiry revealed that 68% of women in the financial sector had experienced some form of harassment at work, yet only a small fraction felt comfortable reporting it through official channels.
The financial implications of non-financial misconduct are also substantial. Beyond potential regulatory fines, firms face significant "soft" costs, including high staff turnover, increased recruitment expenses, and loss of productivity. Legal experts estimate that the cost of defending a single complex employment tribunal claim involving sexual harassment can exceed £100,000, not including potential settlement figures or the reputational damage that can deter investors and clients. By mandating a proactive approach to preventing such misconduct, the FCA is effectively requiring firms to mitigate these operational and reputational risks.
Convergence with Legislative Changes
The FCA’s new rules do not exist in a vacuum; they are part of a broader shift in the UK’s legal and legislative landscape regarding employment rights. One of the most significant changes is the Worker Protection (Amendment of Equality Act 2010) Act 2023, which introduces a proactive duty for employers to take "reasonable steps" to prevent sexual harassment of their employees. This aligns perfectly with the FCA’s expectation that firms implement robust preventative measures.
Additionally, the regulatory environment is tightening around the use of non-disclosure agreements. Both the FCA and the Solicitors Regulation Authority (SRA) have warned that NDAs must not be used to prevent individuals from reporting crimes or whistleblowing to regulators. Under the new framework, if a firm uses an NDA to cover up a serious instance of non-financial misconduct, it could be viewed as a failure of governance and a breach of the firm’s duty to be open and cooperative with the regulator.
Whistleblowing protections are also being strengthened. In many cases, reporting sexual harassment or bullying may now qualify as a protected disclosure, shielding the whistleblower from detriment or dismissal. This creates a dual-pressure environment where firms must answer to both the FCA and the employment tribunal system.
Implications for Governance and Investigation Processes
For firms, the September 1 deadline necessitates an immediate and thorough review of internal processes. The "Fitness and Propriety" assessment, which was previously often a "tick-box" exercise conducted annually, must now become a dynamic and evidence-based process. Human Resources (HR) and Compliance departments will need to work in closer alignment than ever before.
Investigations into misconduct must be handled with a new level of rigor. The FCA expects firms to have clear, transparent procedures for reporting and investigating allegations. Crucially, the regulator will look at how firms handle "grey area" behaviors—those that may not meet the threshold for a criminal offense but nonetheless undermine the culture of the firm. Documentation will be essential; firms must be able to demonstrate to the FCA that they have taken appropriate action when misconduct is identified, whether through disciplinary measures, retraining, or, in the most serious cases, dismissal.
Governance arrangements must also be updated to ensure that boards and senior management have oversight of NFM trends within their organizations. The FCA has suggested that boards should receive regular reports on grievance data, exit interview feedback, and the results of culture surveys to identify potential "hotspots" of misconduct before they escalate.
Official Responses and Industry Reaction
The industry’s reaction to the new rules has been a mix of support for the underlying principles and concern regarding the practicalities of implementation. In a statement, the FCA’s Executive Director of Consumers and Competition emphasized that "healthy cultures are a prerequisite for a healthy financial services sector," and that the new rules are designed to "give firms the clarity they need to take decisive action against individuals who do not meet our standards."
Trade bodies, such as UK Finance and the Investment Association, have expressed broad support for the initiative but have called for further clarity on how firms should handle conduct that occurs in an employee’s private life. There is a lingering concern that the "work-related" definition could lead to intrusive monitoring of employees outside of office hours. Legal experts have also pointed out the potential for conflict between regulatory requirements and employment law, particularly if a firm is pressured to dismiss an employee for NFM before a full and fair internal investigation has been completed.
Despite these concerns, the consensus is that the "wait and see" approach is no longer viable. The FCA has signaled its intent to be an active supervisor in this area, and firms that fail to adapt risk not only regulatory sanctions but also being left behind in a market that increasingly values social responsibility and ethical conduct.
Conclusion: A New Standard for the City
The implementation of the FCA’s non-financial misconduct rules on September 1 represents a transformative step in the regulation of the UK financial services industry. By bridging the gap between employment law and financial regulation, the FCA is asserting that "how" a firm does business is just as important as "what" business it does. The focus on bullying, harassment, and violence serves as a clear directive: a toxic workplace is a regulated risk.
As firms move toward the implementation date, the priority must be on cultural transformation rather than mere compliance. Reviewing policies, enhancing training for managers, and ensuring that investigation processes are robust and fair will be the hallmarks of firms that successfully navigate this new regulatory era. The FCA has laid the groundwork; it is now up to the firms themselves to build a culture that is fit for the future of global finance.
