Financial Services Regulation in the United Kingdom

Introduction

Financial services regulation in the United Kingdom is governed by the Financial Services and Markets Act 2000 (FSMA 2000), which established the framework for the authorisation, supervision, and enforcement of financial services firms. Following the global financial crisis of 2007–2008, the regulatory architecture was fundamentally restructured. The Financial Services Authority was abolished and replaced by the Financial Conduct Authority (FCA) and the Prudential Regulation Authority (PRA), creating a twin peaks model of regulation. The Bank of England was given overarching responsibility for financial stability.

The Twin Peaks Model

The twin peaks model, implemented through the Financial Services Act 2012, separates prudential regulation from conduct regulation. The Prudential Regulation Authority, operating as a subsidiary of the Bank of England, is responsible for the safety and soundness of banks, building societies, credit unions, insurers, and major investment firms. The PRA’s statutory objectives are to promote the safety and soundness of the firms it regulates and to contribute to securing an appropriate degree of protection for policyholders.

The Financial Conduct Authority is responsible for regulating the conduct of all financial services firms, including those not regulated by the PRA. The FCA’s operational objectives are to protect consumers, to protect and enhance the integrity of the UK financial system, and to promote effective competition in the interests of consumers. The FCA has a broader remit than the PRA, covering conduct regulation, market supervision, and competition enforcement across the financial sector.

The Senior Managers and Certification Regime

The Senior Managers and Certification Regime (SM&CR) was introduced by the Financial Services (Banking Reform) Act 2013 and extended to all FSMA-authorised firms in 2019. The SM&CR replaced the Approved Persons Regime with a more rigorous framework for individual accountability. The regime applies to senior managers — individuals performing designated senior management functions — and certified persons — employees whose roles could cause significant harm to the firm or its customers.

Senior managers must have a statement of responsibilities clearly setting out their areas of responsibility. The SM&CR imposes a duty of responsibility on senior managers: if a firm contravenes a regulatory requirement, the senior manager responsible for that area may be held personally liable if they did not take such steps as a person in their position could reasonably be expected to take to avoid the contravention occurring. This duty reverses the evidential burden, requiring the senior manager to show that they took reasonable steps.

The certification regime requires firms to assess the fitness and propriety of employees in certified functions at least annually. Firms must issue certificates confirming that the employee is fit and proper to perform the function. The regime also includes conduct rules applicable to all employees except ancillary staff, setting minimum standards of individual behaviour.

Authorisation and Supervision

FSMA 2000 prohibits carrying on regulated activities in the United Kingdom without authorisation or exemption. Regulated activities are defined in the Financial Services and Markets Act 2000 (Regulated Activities) Order 2001 and include accepting deposits, effecting contracts of insurance, dealing in investments, arranging deals in investments, managing investments, and advising on investments.

The FCA and PRA operate authorisation regimes for firms seeking to carry on regulated activities. The FCA grants authorisation to firms that satisfy the threshold conditions set out in FSMA 2000, including legal status, location of offices, close links with other persons, adequacy of resources, and suitability. The PRA grants authorisation to banks, insurers, and other PRA-regulated firms, applying additional conditions relating to prudential soundness.

Market Abuse and Enforcement

The FCA is responsible for investigating and enforcing market abuse under the Market Abuse Regulation and Part 8 of FSMA 2000. Market abuse includes insider dealing, unlawful disclosure of inside information, market manipulation, and other behaviour that undermines confidence in the financial markets. The FCA has power to impose unlimited financial penalties, to issue public censures, and to seek injunctions and restitution orders.

The FCA also has power to prosecute criminal offences, including insider dealing under the Criminal Justice Act 1993, fraud under the Fraud Act 2006, and money laundering under the Proceeds of Crime Act 2002. The FCA’s enforcement powers have been used in high-profile cases involving benchmark manipulation, mis-selling, and financial crime.

Consumer Protection

Consumer protection in financial services is a core FCA objective. The FCA requires firms to treat customers fairly and to provide clear, balanced, and not misleading information. The FCA has specific rules governing the sale of retail investment products, mortgages, insurance, and consumer credit. The suitability requirements under the FCA Handbook require firms to assess the suitability of products for individual customers based on their knowledge, experience, financial situation, and objectives.

The Financial Ombudsman Service provides an alternative dispute resolution mechanism for consumer complaints against financial services firms, with the power to make binding awards up to £415,000 (as of 2025–2026). The FCA also operates the Financial Services Compensation Scheme, which protects consumers when authorised firms fail, covering deposits up to £85,000 per person per institution.

Conclusion

The UK financial services regulatory framework, built on the FSMA 2000 and the twin peaks model, provides comprehensive supervision of the financial sector. The FCA and PRA exercise distinct but complementary responsibilities, supported by the SM&CR’s focus on individual accountability. The regime balances the objectives of consumer protection, market integrity, and financial stability, adapting to the evolving challenges of technological innovation and international regulatory standards.