The Appointed Representative (AR) regime has been under intense FCA scrutiny since the regulator identified systemic weaknesses in how principals oversee their AR networks. Through PS22/11 and subsequent supervisory interventions, the FCA has introduced enhanced reporting requirements, issued detailed guidance on oversight expectations and taken enforcement action against principals that fail to maintain adequate control over their appointed representatives. This article examines the current regulatory position and provides practical guidance for principals.
Background: Why the FCA Intervened
The AR regime allows firms to carry on regulated activities under the authorisation of a principal firm, without obtaining their own FCA authorisation. While the regime provides a flexible route to market, the FCA identified significant risks: principals were appointing ARs without adequate due diligence, failing to monitor AR activities on an ongoing basis, and not taking timely action when compliance failures were identified.
The FCA's thematic review of the AR regime found that some principals were treating AR appointment as a revenue-generating activity with minimal oversight, creating a channel for poor conduct, mis-selling and financial crime to enter the regulated system through the back door.
Enhanced Regulatory Requirements
REP017 annual return. Principals must now submit an annual return (REP017) providing the FCA with detailed information on their AR networks. This includes: the number of ARs, the regulated activities each AR performs, the oversight activities conducted during the period, any compliance failures identified, remedial actions taken and the principal's assessment of each AR's ongoing suitability.
Pre-appointment due diligence. The FCA expects principals to conduct thorough due diligence before appointing an AR, including assessment of the AR's competence, financial standing, compliance history and business model. The due diligence must be proportionate to the risk presented by the AR's proposed activities.
Ongoing monitoring. Principals must implement a structured ongoing monitoring programme covering: regular review of AR activities and customer outcomes, compliance testing, complaint analysis, financial monitoring and periodic fitness and propriety reassessment of AR key individuals.
Complaints and redress. Principals are responsible for handling complaints about their ARs and must ensure that customers receive fair outcomes. The FCA expects principals to analyse complaint data for systemic issues and to take corrective action where patterns emerge.
Common Compliance Failures
The FCA has identified several recurring failures in principal oversight:
- Pre-appointment due diligence that is superficial or formulaic.
- Monitoring programmes that are infrequent, narrow in scope or poorly documented.
- Failure to act on identified compliance issues — tolerating non-compliance rather than requiring remediation or terminating the appointment.
- Inadequate systems for tracking AR activities and customer outcomes.
- REP017 returns that are inaccurate or incomplete.
Enforcement Risk
The FCA has made clear that principals will be held directly responsible for the regulatory compliance of their appointed representatives. Enforcement action against principals for AR failings has increased, with penalties including financial fines, requirements to restructure AR networks, and restrictions on appointing new ARs.
What Principals Should Do Now
- Conduct a comprehensive review of your AR oversight framework against FCA expectations and recent enforcement findings.
- Assess the adequacy of your pre-appointment due diligence process.
- Review and strengthen your ongoing monitoring programme.
- Ensure REP017 reporting is accurate, complete and submitted on time.
- Analyse complaint data for systemic themes and implement corrective action.
- Consider whether your current AR network is appropriately sized and managed for your oversight capacity.
Regulatory Counsel advises principal firms on AR oversight frameworks, REP017 compliance and regulatory risk management. Contact us for a free initial consultation.
Frequently Asked Questions
An annual return that principals must submit to the FCA, providing detailed information on their AR networks, oversight activities, compliance findings and remedial actions.
Yes. Principals are directly responsible for the regulatory compliance of their appointed representatives and can face enforcement action for oversight failures.
The AR's competence, financial standing, compliance history, business model, key individuals' fitness and propriety, and the suitability of the AR for the proposed regulated activities.
The FCA expects ongoing monitoring proportionate to the risk — typically including quarterly compliance reviews, annual full assessments and real-time transaction monitoring where appropriate.