Blog

The FCA’s latest proposals on non-financial misconduct (NFM) will add an additional factor to corporate transactions in the financial services sector. With new rules extending the regulatory spotlight to a wider range of firms, acquirers should consider NFM risks and policies as part of their due diligence processes. This development is set to influence risk assessment and post-completion integration, making NFM compliance a concern for buyers and sellers alike.

On 2 July 2025, the Financial Conduct Authority (FCA) published Consultation Paper CP 25/18, outlining new rule changes and proposals to tackle NFM in the financial services industry. NFM refers to the type of serious misconduct described in the new rules and covers behaviour such as bullying, violence and sexual harassment which do not involve financial wrongdoing but can breach regulatory standards and seriously undermine workplace culture. The publication follows concerns being raised by the regulator about NFM behaviours going unchallenged in certain pockets of the industry.

Previously, only banks were subject to wider scope rules. The new final rules extend the scope of the Code of Conduct (COCON) sourcebook and align the rules more closely between banks and non-banks, so that COCON now applies the conduct rules to staff of all FSMA firms holding a Part 4A permission (eg insurers, consumer credit lenders, asset managers etc) when they are performing tasks for their regulated employer, irrespective of whether or not those tasks are part of the firm’s regulated activities (SMCR financial activities).

The revised rules have also been adjusted to align more closely with employment law and in particular the definition of ‘harassment’ as set out in the Equality Act 2010.

The rule changes will come into force on 1 September 2026 and will not apply retrospectively.

Proposals for consultation include:

• COCON – The FCA’s proposed amendment to the rules on NFM in COCON. In addition, the FCA will consider providing additional guidance in COCON on how NFM can be a breach of the COCON rules with examples of scenarios illustrating the boundary between work and private life, when conduct is outside of a firm’s SMCR financial activities and when NFM may be out of scope in a non-bank.
• Fit and Proper test for Employees and Senior Personnel (FIT) – The FCA proposes including explanatory material on how various types of conduct, including NFM, are relevant to fitness and propriety and form part of the FIT section of the FCA Handbook, including the relevancy of similarly serious behaviour in a person’s private or personal life.

What does this mean?

• Risk and exposure – The extension of NFM rules means that regulatory risk in relation to workplace conduct will be relevant to a much wider range of transactions. Failure to comply and subsequently address any issues of non-compliance relating to NFM could expose a regulated firm and, as a consequence, a buyer to possible regulatory scrutiny and reputational damage.
• Due diligence – Buyers considering the acquisition of a financial services business should now assess whether the target has effective policies and procedures in place to address NFM, including checking staff awareness and training. If such policies are absent post-September 2026, it would be advisable to recommend their introduction post-completion and to align the target’s compliance, HR and governance (eg board) with the buyer’s on NFM going forward to ensure regulatory compliance.
• Integration and governance – Firms should ensure that NFM compliance is integrated into any target’s policies, systems, board reporting and senior management attestations. This will help demonstrate ongoing commitment to regulatory standards and mitigate future risks of both employment claims and regulatory scrutiny, as well as ensuring that a safe workplace culture is being promoted.
• Communication to staff – Although the COCON rule change does not come into effect until next year, firms are reminded of their duty under section 64B of the Financial Services and Markets Act 2000 to notify staff about the conduct rules and take all reasonable steps to make sure they understand how they apply to them. Firms are expected to keep these requirements under review and will need to update internal conduct documents and training materials to properly reflect the new rules and guidance.

What’s next?

The consultation closed on 10 September 2025. The FCA is currently reviewing feedback and is expected to set out its final regulatory approach before the end of the year.