UK: SM&CR For Solo-Regulated Firms: Are You Ready?

Executive Summary

The UK regulatory Senior Managers and Certification Regime (SM&CR) came into force in March 2016 to replace the UK Financial Conduct Authority (FCA) Approved Persons Regime (APR) for firms that are subject to dual regulation by the UK Prudential Regulatory Authority (PRA) and the FCA (e.g, banks, building societies and UK designated investment firms) ("dual-regulated firms").

Beginning on 9 December 2019, the SM&CR will replace the APR for all FCA "solo-regulated" firms. The SM&CR aims to promote a culture of effective governance by encouraging the relevant authorised firm's staff to take personal responsibility for their actions, improving conduct at all levels, and ensuring firms and staff clearly understand and can show who is allocated what role.

To a "solo-regulated" firm operating in the UK, e.g., an asset manager, a solo-regulated financial services firm or an insurance intermediary preparing for the SM&CR to become applicable from 9 December 2019, this client alert will be helpful in summarising the UK financial regulatory context within which the SM&CR will apply as well as certain additional obligations the firm will face when hiring individuals subject to the SM&CR and various recommended changes to the firm's internal HR policies.

MoFo would be very happy to help your firm comply with the SM&CR. Please do not hesitate to contact Yulia Makarova to discuss financial service regulatory queries or Annabel Gillham for the employment and data privacy queries.


The following is the SM&CR timeline:


  1. Who does SM&CR apply to?

1.1 The SM&CR currently applies to dual-regulated banking sector firms and insurers.

1.2 From 9 December 2019, the SM&CR will apply to FCA solo-regulated firms which are broken down into three categories: core firms, limited scope firms and enhanced firms.

2. What are the key SM&CR regimes?

2.1 Senior Managers Regime (SMR): covers a senior manager that is carrying out a senior management function (SMF) under s.59ZA of FSMA. The SMR aims to ensure that there is an individual senior manager accountable for the relevant aspects of regulated activity within the firm. Anyone who performs an SMF must be approved by the relevant regulator before he or she can start his or her role. SMR details that:

(a) prescribed responsibilities are assigned to individuals with SMFs;

(b) all applications for approval as a senior manager must contain, or be accompanied by, a statement of responsibilities; and

(c) there must be a duty of responsibilities where the FCA can take action against a senior manager if he or she is responsible for the management of any activities in his or her firm, in relation to which the firm contravenes a regulatory requirement.

2.2 The SMR also details obligations for solo-regulated firms in the form of:

(a) Certification regime — A firm must take reasonable care to ensure that no employee performs any certification functions without having been certified as fit and proper to do so, both at the point of recruitment and on an annual basis.

(b) Conduct rules — The FCA's conduct rules reflect the core standards expected of staff who work in the solo-regulated firms within the scope of the SM&CR regime.

(c) Criminal record checks — Firms need to declare if a candidate for SMFs has a criminal record and undertake a criminal records check as part of each senior manager application for approval.

(d) Regulatory references — Firms seeking to appoint someone to either a senior management or certification function must request a regulatory reference from all previous employers.

(e) Financial services directory — The FCA is introducing a new directory of financial services workers. It will operate alongside the Financial Services Register and will make information public on additional individuals carrying out a wider range of roles, including those whom the FCA does not need to approve.

2.3 Extra requirements are applicable to enhanced firms in the form of handover procedures and a management responsibilities map.

3. How will SM&CR apply to you as a solo-regulated firm?

The SM&CR introduces three types of firms, namely: core firms, limited scope firms and enhanced firms. Each type of firm will have different obligations under the SM&CR:

(a) Core firms — Baseline SM&CR requirements will apply to these firms. New obligations under the SM&CR include the allocation of prescribed responsibilities to senior managers and the submission of a statement of responsibilities to the FCA when applying for a senior manager to be approved.

(b) Limited scope firms — These firms will have fewer requirements than core firms. Limited scope firms SMFs mirror how the APR currently applies to these firms. This details that all candidates must be fit and proper to carry out SMFs, but no prescribed responsibilities are applicable to limited scope firms. In addition, these firms must submit a statement of responsibilities to the FCA when applying for a senior manager to be approved.

(c) Enhanced firms — These firms will include a small proportion of solo-regulated firms that will have to apply extra rules. In addition to the SMFs above that are applicable to core firms, there are an additional 17 SMFs and seven prescribed responsibilities applicable to senior managers for enhanced firms. Further, the FCA will apply additional obligations in the form of an "overall responsibility" requirement to all enhanced firms and a responsibilities map.

(d) EEA and third-country branches — For EEA branches, there are no prescribed responsibilities; however, for third-country branches, there are eight specific responsibilities that must be given to senior managers and an additional responsibility for authorised fund managers (AFMs).

4. How will the certification regime apply to you as a solo-regulated firm?

The FCA will not approve individuals within the certification regime, but firms have a responsibility to certify that they are fit and proper to perform their role at least once a year. Firms should take into account whether the individual has obtained a qualification, undergone or is undergoing training and possesses a level of competence.

5. How will the conduct rules apply to you as a solo-regulated firm?

The conduct rules apply to a firm's regulated and unregulated financial services activities (including any activities carried on in connection with a regulated activity). These conduct rules apply to all senior managers, all certified functions, all non-executive directors who are not senior managers and all other employees who perform a role specific to financial services. Firms must notify the FCA when they have taken formal disciplinary action against a person for breaching conduct rules.


1. What issues may arise during the recruitment stage?

If an organisation is planning to hire someone who would be subject to SM&CR, then the organisation should pay attention to the issues below:

(a) Hiring decisions should be subject to conditions precedent — The organisation can make offers of employment conditional to its assessment of the candidate's fitness and propriety.

(b) Clear demarcation of responsibilities in hiring decisions is neccessary — There should be an individual within the organisation who carries the responsibility of reviewing background checks and references for candidates applying for SM&CR roles.

(c) Additional obligations must be fulfilled relating to references — If an external candidate is applying for a senior management position, a certification position or a non-approved non-executive director position, then the organisation must check references for the candidate's last six years of employment.

(d) Data privacy concerns for background checks and criminal record checks must be addressed — The FCA's policy statement does not require organisations to carry out criminal record checks for any candidate falling in the certification function. Furthermore, as there is no regulatory obligation to process criminal records data, organisations must identify a lawful basis before doing so, as required by the General Data Protection Regulation and Data Protection Act 2018.

2. What is a whistleblowers' champion?

A whistleblowers' champion (WSC) is a director or a senior manager within an organisation with the responsibility of 'ensuring and overseeing the integrity, independence and effectiveness of the organisation's policies and procedures on whistleblowing'. Furthermore, the WSC is responsible for ensuring that internal policies are sufficient to protect whistleblowers from potential victimisation. An organisation in the insurance business must appoint a director or a senior manager as its WSC, while for non-insurers, the FCA expects the organisation to appoint a non-executive director as its WSC.

3. Should there be changes in my organisation's internal rules and procedures?

An organisation should consider amending its policies and procedures relating to the following issues to comply with the SM&CR regime:

(a) Right to suspend — A senior manager who underperforms may pose a risk to the organisation by not fulfilling SM&CR requirements. Therefore, the organisation should have the ability to suspend underperforming staff members subject to the SM&CR.

(b) The requirement to notify regulators — Under the SM&CR, if an organisation finds an individual subject to the SM&CR of misconduct or to have breached conduct rules, then it must notify the appropriate regulators. Therefore, it would be prudent for the organisation to outline, in its disciplinary policy, the types of behaviours and sanctions which trigger notifying regulators.

(c) Resignation during the disciplinary process — The organisation should make employees subject to the SM&CR aware that resigning during the disciplinary process does not automatically terminate potential liabilities under the SM&CR.

(d) Record retention — Organisations subject to the SM&CR must keep records relating to a former employee's conduct, fitness & propriety for six years following the termination of employment. Therefore, the organisation should ensure that its record retention policies are sufficient for this purpose and are in compliance with the relevant data protection legislations.

4. Should there be changes in the employment contracts of individuals subject to the SM&CR?

To comply with the regime, an organisation should consider adding the following clauses to the employment contract of an individual subject to the SM&CR:

(a) Warranty (conduct) - The candidate should warrant that, in the past, he or she has not been investigated or disciplined for conduct which could be a breach of conduct roles or which could impact his or her fitness and propriety.

(b) Standard of fitness and propriety - The contract should set an obligation requiring the senior manager to meet and maintain a standard of fitness and propriety throughout her employment.

(c) Temporary reallocation of duties - The contract should contain a right for the organisation to allocate the senior manager's duties to someone else during any temporary leaves of absence.

(d) Clear titles and duties - For senior managers, the contract should refer to their obligations outlined in the 'statement of responsibilities'.

(e) Express termination rights - The contract should contain express termination rights if the individual fails to satisfy any of the rules or requirements connected to his or her role.

Impact of Brexit

In the event of a no-deal Brexit, there will be a temporary permissions regime for certain EEA firms that currently operate in the U.K. For such firms, the FCA intends to maintain the current requirements that apply to EEA branches under the SM&CR throughout their time in the temporary permissions regime.

If there is an agreed implementation period post-exit day, as passporting rights are likely to continue, it is envisaged that the current SM&CR requirements will remain in effect for that period.

The scope of employment matters for EEA firms as a result of Brexit will depend on the situation described above and such, the matters described in this alert for employment will largely remain unchanged.


The extension of the SM&CR to the FCA solo-regulated firms will place greater scrutiny on people working within financial services. This will result in firms providing greater clarity on the roles and responsibilities of senior managers and a sharper focus on outlining a firm's compliance with conduct and risk issues. A number of employment-related matters will also need to be taken into account.

Struan Clark and Tom Macintosh Zheng, Trainee Solicitors in the London Office, contributed to the drafting of this client alert.

Because of the generality of this update, the information provided herein may not be applicable in all situations and should not be acted upon without specific legal advice based on particular situations.

© Morrison & Foerster LLP. All rights reserved

To print this article, all you need is to be registered on

Click to Login as an existing user or Register so you can print this article.

Similar Articles
Relevancy Powered by MondaqAI
In association with
Related Topics
Similar Articles
Relevancy Powered by MondaqAI
Related Articles
Related Video
Up-coming Events Search
Font Size:
Mondaq on Twitter
Mondaq Free Registration
Gain access to Mondaq global archive of over 375,000 articles covering 200 countries with a personalised News Alert and automatic login on this device.
Mondaq News Alert (some suggested topics and region)
Select Topics
Registration (please scroll down to set your data preferences)

Mondaq Ltd requires you to register and provide information that personally identifies you, including your content preferences, for three primary purposes (full details of Mondaq’s use of your personal data can be found in our Privacy and Cookies Notice):

  • To allow you to personalize the Mondaq websites you are visiting to show content ("Content") relevant to your interests.
  • To enable features such as password reminder, news alerts, email a colleague, and linking from Mondaq (and its affiliate sites) to your website.
  • To produce demographic feedback for our content providers ("Contributors") who contribute Content for free for your use.

Mondaq hopes that our registered users will support us in maintaining our free to view business model by consenting to our use of your personal data as described below.

Mondaq has a "free to view" business model. Our services are paid for by Contributors in exchange for Mondaq providing them with access to information about who accesses their content. Once personal data is transferred to our Contributors they become a data controller of this personal data. They use it to measure the response that their articles are receiving, as a form of market research. They may also use it to provide Mondaq users with information about their products and services.

Details of each Contributor to which your personal data will be transferred is clearly stated within the Content that you access. For full details of how this Contributor will use your personal data, you should review the Contributor’s own Privacy Notice.

Please indicate your preference below:

Yes, I am happy to support Mondaq in maintaining its free to view business model by agreeing to allow Mondaq to share my personal data with Contributors whose Content I access
No, I do not want Mondaq to share my personal data with Contributors

Also please let us know whether you are happy to receive communications promoting products and services offered by Mondaq:

Yes, I am happy to received promotional communications from Mondaq
No, please do not send me promotional communications from Mondaq
Terms & Conditions (the Website) is owned and managed by Mondaq Ltd (Mondaq). Mondaq grants you a non-exclusive, revocable licence to access the Website and associated services, such as the Mondaq News Alerts (Services), subject to and in consideration of your compliance with the following terms and conditions of use (Terms). Your use of the Website and/or Services constitutes your agreement to the Terms. Mondaq may terminate your use of the Website and Services if you are in breach of these Terms or if Mondaq decides to terminate the licence granted hereunder for any reason whatsoever.

Use of

To Use you must be: eighteen (18) years old or over; legally capable of entering into binding contracts; and not in any way prohibited by the applicable law to enter into these Terms in the jurisdiction which you are currently located.

You may use the Website as an unregistered user, however, you are required to register as a user if you wish to read the full text of the Content or to receive the Services.

You may not modify, publish, transmit, transfer or sell, reproduce, create derivative works from, distribute, perform, link, display, or in any way exploit any of the Content, in whole or in part, except as expressly permitted in these Terms or with the prior written consent of Mondaq. You may not use electronic or other means to extract details or information from the Content. Nor shall you extract information about users or Contributors in order to offer them any services or products.

In your use of the Website and/or Services you shall: comply with all applicable laws, regulations, directives and legislations which apply to your Use of the Website and/or Services in whatever country you are physically located including without limitation any and all consumer law, export control laws and regulations; provide to us true, correct and accurate information and promptly inform us in the event that any information that you have provided to us changes or becomes inaccurate; notify Mondaq immediately of any circumstances where you have reason to believe that any Intellectual Property Rights or any other rights of any third party may have been infringed; co-operate with reasonable security or other checks or requests for information made by Mondaq from time to time; and at all times be fully liable for the breach of any of these Terms by a third party using your login details to access the Website and/or Services

however, you shall not: do anything likely to impair, interfere with or damage or cause harm or distress to any persons, or the network; do anything that will infringe any Intellectual Property Rights or other rights of Mondaq or any third party; or use the Website, Services and/or Content otherwise than in accordance with these Terms; use any trade marks or service marks of Mondaq or the Contributors, or do anything which may be seen to take unfair advantage of the reputation and goodwill of Mondaq or the Contributors, or the Website, Services and/or Content.

Mondaq reserves the right, in its sole discretion, to take any action that it deems necessary and appropriate in the event it considers that there is a breach or threatened breach of the Terms.

Mondaq’s Rights and Obligations

Unless otherwise expressly set out to the contrary, nothing in these Terms shall serve to transfer from Mondaq to you, any Intellectual Property Rights owned by and/or licensed to Mondaq and all rights, title and interest in and to such Intellectual Property Rights will remain exclusively with Mondaq and/or its licensors.

Mondaq shall use its reasonable endeavours to make the Website and Services available to you at all times, but we cannot guarantee an uninterrupted and fault free service.

Mondaq reserves the right to make changes to the services and/or the Website or part thereof, from time to time, and we may add, remove, modify and/or vary any elements of features and functionalities of the Website or the services.

Mondaq also reserves the right from time to time to monitor your Use of the Website and/or services.


The Content is general information only. It is not intended to constitute legal advice or seek to be the complete and comprehensive statement of the law, nor is it intended to address your specific requirements or provide advice on which reliance should be placed. Mondaq and/or its Contributors and other suppliers make no representations about the suitability of the information contained in the Content for any purpose. All Content provided "as is" without warranty of any kind. Mondaq and/or its Contributors and other suppliers hereby exclude and disclaim all representations, warranties or guarantees with regard to the Content, including all implied warranties and conditions of merchantability, fitness for a particular purpose, title and non-infringement. To the maximum extent permitted by law, Mondaq expressly excludes all representations, warranties, obligations, and liabilities arising out of or in connection with all Content. In no event shall Mondaq and/or its respective suppliers be liable for any special, indirect or consequential damages or any damages whatsoever resulting from loss of use, data or profits, whether in an action of contract, negligence or other tortious action, arising out of or in connection with the use of the Content or performance of Mondaq’s Services.


Mondaq may alter or amend these Terms by amending them on the Website. By continuing to Use the Services and/or the Website after such amendment, you will be deemed to have accepted any amendment to these Terms.

These Terms shall be governed by and construed in accordance with the laws of England and Wales and you irrevocably submit to the exclusive jurisdiction of the courts of England and Wales to settle any dispute which may arise out of or in connection with these Terms. If you live outside the United Kingdom, English law shall apply only to the extent that English law shall not deprive you of any legal protection accorded in accordance with the law of the place where you are habitually resident ("Local Law"). In the event English law deprives you of any legal protection which is accorded to you under Local Law, then these terms shall be governed by Local Law and any dispute or claim arising out of or in connection with these Terms shall be subject to the non-exclusive jurisdiction of the courts where you are habitually resident.

You may print and keep a copy of these Terms, which form the entire agreement between you and Mondaq and supersede any other communications or advertising in respect of the Service and/or the Website.

No delay in exercising or non-exercise by you and/or Mondaq of any of its rights under or in connection with these Terms shall operate as a waiver or release of each of your or Mondaq’s right. Rather, any such waiver or release must be specifically granted in writing signed by the party granting it.

If any part of these Terms is held unenforceable, that part shall be enforced to the maximum extent permissible so as to give effect to the intent of the parties, and the Terms shall continue in full force and effect.

Mondaq shall not incur any liability to you on account of any loss or damage resulting from any delay or failure to perform all or any part of these Terms if such delay or failure is caused, in whole or in part, by events, occurrences, or causes beyond the control of Mondaq. Such events, occurrences or causes will include, without limitation, acts of God, strikes, lockouts, server and network failure, riots, acts of war, earthquakes, fire and explosions.

By clicking Register you state you have read and agree to our Terms and Conditions