The GRC Navigator
Your Bi-Weekly GRC Intelligence Briefing
Executive Summary
In late November and December 2025, the FCA finalised PS25/23, embedding non-financial misconduct (bullying, harassment, discrimination) into the fitness and propriety assessment regime through amendments to the conduct of business framework. The rules take effect on 1 September 2026 and require every authorised firm to update its SMCR training modules, reframe its HR referral processes, and expand the scope of information flowing into regulatory reference templates. For fund managers and ACDs, this moves the boundary between HR and compliance: what HR knows about people now counts as regulatory information.
The FCA also published five other papers in the period: PS25/20 on Consumer Composite Investments (effective 6 April 2026), PS25/17 removing the Systematic Internaliser regime for bonds and derivatives (effective 1 December 2025), CP25/32 proposing transaction reporting reforms, PS25/18 on motor finance complaints handling, and FS25/6 on mortgage rule modernisation. The PRA published PS25/25 on climate risk management, PS22/25 on leverage ratio adjustments, and the 2025 life insurance stress test results. Fund launches remained subdued, with three announcements including the British Business Bank's £100m commitment to SV Health Investors SV8. Enforcement brought three actions, including the Nationwide Building Society fine of £44,078,500 on 11 December for inadequate financial crime controls. The Bank of England held rates at 4% in November and cut to 3.75% in December. For boards and compliance teams, moving from cultural risk frameworks to regulatory ones is the defining governance challenge of 2026.
PS25/23: Non-Financial Misconduct Rules Expand Fitness and Propriety Framework
HIGH RISK · Sectors: All Regulated Firms
In late November and December 2025, the FCA finalised PS25/23, amending the Conduct of Business framework to embed non-financial misconduct into the regulatory fitness and propriety assessment regime. The rules take effect on 1 September 2026. Non-financial misconduct - bullying, harassment, and discrimination - is now a regulatory conduct standard affecting fitness and propriety assessments under COCON.
- Scope of change: Amends COCON to include non-financial misconduct in regulatory references and fitness/propriety assessments. The FCA's handbook amendments span Handbook Glossary (definition of misconduct), COCON (training and regulatory references), DISP (complaints handling for financial and non-financial harm), and related procedural rules.
- SMCR training requirement: Fund managers must update Senior Manager Function training to explicitly cover non-financial misconduct as a regulatory conduct standard. Training modules built around financial probity and market abuse are no longer sufficient. Bullying, harassment, and discrimination must be integrated into baseline conduct expectations.
- Regulatory reference expansion: Fund managers must update regulatory reference templates to capture assessments of non-financial conduct. References can no longer treat non-financial conduct as outside the regulator's remit. A reference must now address how an individual treats colleagues, alongside their financial honesty.
- HR integration: The rules require integration of HR processes into the regulatory reference system. Firms must redesign referral processes to ensure that findings of harassment, bullying, or discrimination flow into the regulatory reference decision-making process. The boundary between employment law and regulatory law has shifted.
- Implementation by 1 September 2026: Fund managers have approximately nine months to redesign governance frameworks, rewrite training, update policies, and integrate HR and compliance systems.
The non-financial misconduct rules are high risk because they change the definitional boundary of what counts as "conduct" for regulatory purposes. Conduct regulation in the UK has historically focused on financial probity and market abuse; these rules extend the regulator's reach into workplace behaviour. For fund boards and compliance teams, every grievance, disciplinary investigation and HR referral is now potentially regulatory information.
Fund managers should conduct a governance audit now. Ask three questions: (1) Do our SMCR training modules explicitly cover non-financial misconduct as a regulatory standard? (2) Do our HR processes feed information about findings of harassment, bullying, or discrimination into regulatory reference decisions? (3) Do our senior management identification frameworks account for the fact that non-financial misconduct can make an individual unfit? If the answer to any of these is no, remediation work should begin now, well before the FCA issues guidance or enforcement decisions.
Regulatory Updates
PS25/20: Consumer Composite Investments - New UK-Specific Disclosure Framework
MEDIUM RISK · Sectors: Asset Management, Retail Distribution
Published on 8 December 2025, PS25/20 finalises the FCA's approach to Consumer Composite Investments (CCIs) and replaces the legacy EU KID/KIID disclosure regime with a new UK-specific PRIIPS framework for retail investment products. The regime takes effect on 6 April 2026.
- What changed: PS25/20 replaces the EU's Key Information Document (KID) regime and Key Investor Information Document (KIID) regime with a new UK framework designed to improve disclosure clarity and comparability for retail investors. The framework applies to packaged retail investment products (PRIIPs) and UCITS products distributed to retail customers in the UK.
- Key information document (KID): A new standardised template that must be provided to retail customers before purchase. The KID is designed to be comprehensible to non-expert investors and covers product objectives, charges, risks, and past performance.
- Implementation date: 6 April 2026. Firms must transition from the EU KID/KIID templates to the new UK KID template by this date. Existing products must be updated; new products distributed from 6 April onwards must comply with the new regime immediately.
- Sectors affected: Asset managers, AFMs, UCITS managers, and wealth platforms distributing retail investment products must update their disclosure documentation, review charges calculations, and update investment product labelling systems.
PS25/20 is a medium-risk item because it is operationally demanding but regulatory rather than strategic. Asset managers must audit all existing retail product disclosures against the new KID template, recalculate charges presentations to meet new formatting requirements, and integrate new disclosure templates into their product information systems. With the 6 April date firm, documentation and charges changes need to be completed by Q1 2026 at the latest.
PS25/17: Systematic Internaliser Regime Removed for Bonds, Derivatives, and Structured Products
MEDIUM RISK · Sectors: Wholesale Markets, Asset Management
Published on 3 November 2025 with an effective date of 1 December 2025, PS25/17 removes the Systematic Internaliser (SI) regime for bonds, derivatives, structured products, and emission allowances. The rules also end the matched principal trading (MPT) prohibition on multilateral trading facilities (MTFs). It is a competitiveness reform that changes post-trade behaviour in wholesale markets.
- SI regime removal: Dealers can no longer use the SI classification to avoid transparent pre-trade pricing requirements for bonds and derivatives. Firms moving away from SI status must transition to either authorised OTC trading or MTF trading. The practical effect is increased pre-trade transparency in fixed income and derivatives markets.
- MPT prohibition removal: MTFs can now engage in matched principal trading (where the MTF matches buyer and seller but does not take principal risk). This was previously prohibited on MTFs but allowed for OTC trading. The removal of the ban on MTF MPT increases the types of trading models available on multilateral venues.
- Effective date: 1 December 2025. Implementation is immediate. Firms affected by the SI removal must have transitioned their business models and trading infrastructure by this date.
PS25/17 gives wholesale dealers more choice of trading model. For asset managers and investment firms with fixed income and derivatives trading operations, the practical effect is that counterparties can no longer operate as SIs with relaxed pre-trade transparency. This may increase costs or reduce execution speed in certain fixed income markets. Finance and trading teams should review their trading infrastructure and pre-trade transparency management systems to ensure compliance with the new requirements.
CP25/32: Transaction Reporting Reforms - Modernising MiFIR Reporting Infrastructure
MEDIUM RISK · Sectors: Wholesale Markets, All Regulated Firms
Published on 21 November 2025, CP25/32 proposes reforms to the UK MiFIR transaction reporting regime, including changes to reporting timelines, order reporting requirements, and trading venue obligations. The consultation aims to modernise reporting infrastructure while maintaining regulatory oversight of market activity.
- Scope: The consultation covers transaction reporting timelines (moving from close of business same day to within 30 minutes of execution), order reporting changes for non-equity instruments, and revised definitions of certain transaction types.
- Implementation impact: Firms with transaction reporting infrastructure must assess whether their systems can meet more stringent reporting timelines. For large asset managers with significant trading operations, systems upgrades may be required.
- Closing date: CP25/32 is a summer 2026 consultation, meaning responses will be due in Q2/Q3 2026 with final rules expected in late 2026 or early 2027.
PS25/18: Motor Finance Complaints Handling - Supreme Court Judgment Implementation
HIGH RISK · Sectors: Consumer Finance
Published on 3 December 2025, PS25/18 amends complaints handling rules following the Supreme Court's June 2025 judgment on undisclosed commission in motor finance. The FCA is expanding the definition of complaint to include claims arising from undisclosed commission, extending the scope of financial remedy that firms must consider when handling motor finance disputes.
- What changed: Motor finance firms must now treat undisclosed commission disputes as complaints under DISP 2, not as separate compensation claims. This requires integration of motor finance complaint handling into the standard complaints procedure, including the requirement to provide a Final Response Letter and comply with standard DISP timelines.
- Compliance requirement: Firms must update complaints handling procedures, staff training, and complaint triage systems to capture undisclosed commission disputes within the standard complaints framework.
- Implementation: Final rules are expected in Q1 2026, with a 3-month implementation period.
PS25/18 is high risk for consumer finance firms because it changes how motor finance complaints are processed. Firms that have handled undisclosed commission claims outside the formal complaints framework must now integrate them, which affects complaint triage, staff training, timelines, and governance reporting. Finance teams should begin planning for the implementation period now.
FS25/6: Mortgage Rule Review Feedback and Modernisation Roadmap
INFO · Sectors: Retail Distribution
Published on 15 December 2025, FS25/6 summarises the FCA's feedback from the 2025 mortgage rule review consultation and sets out a roadmap for modernising the mortgage rules. The FCA received over 500 responses to the consultation and is using this feedback to structure a series of consultations planned for H1 2026 and beyond.
- Roadmap: The FCA plans to publish consultation papers on: mortgage affordability assessment modernisation (covering property valuation and income verification), criteria for affordability assessment exemptions, and integration with the Consumer Duty framework. Consultations are expected in Q1 and Q2 2026.
- Themes: Key feedback includes concerns about process burden on lenders, the need to modernise affordability assessment methodologies given rising house prices, and questions about how Consumer Duty applies to mortgage distribution.
Under PS25/23, findings of bullying, harassment or discrimination now bear on an individual's fitness and propriety, so what HR knows becomes regulatory information.Asad Bukhory
PRA Developments
PS25/25: Enhanced Climate Risk Management for Banks and Insurers
MEDIUM RISK · Sectors: Banking, Insurance
Published on 3 December 2025, PS25/25 updates the PRA's supervisory statement on climate risk management, replacing SS3/19 with SS5/25. The updated guidance enhances expectations for how banks and insurers identify, assess, manage, and report climate-related risks across their operations.
- Key updates: Enhanced expectations for scenario analysis and stress testing, integration of climate risk into capital and liquidity planning, improved governance frameworks for climate risk oversight, and expanded reporting requirements for climate-related financial information.
- Scope: Applies to all PRA-regulated institutions (banks, building societies, and insurers). Asset managers are not directly in scope, but the climate risk expectations will cascade through investment management terms for PRA-regulated asset owner clients.
- Implementation: Firms should begin integrating the new expectations into their climate risk governance frameworks immediately. The PRA will incorporate the new expectations into its supervision in 2026.
PS25/25 is medium risk because it increases the PRA's scrutiny of climate risk governance. For asset managers with PRA-regulated clients (pension schemes, insurance companies), the escalating climate risk expectations from the PRA will be reflected in client terms and reporting requirements. Understand what your institutional clients are facing; they will expect your climate risk reporting to align with their PRA expectations.
PS22/25: Leverage Ratio Changes - Retail Deposits Threshold Increase
INFO · Sectors: Banking
Published on 17 November 2025, PS22/25 revises the leverage ratio framework for banks, raising the retail deposits threshold for the leverage ratio requirement from £50 billion to £75 billion with a three-year averaging period. The change is intended to reduce burden on smaller banks with significant retail deposit bases.
- Impact: Banks with retail deposits below £75 billion will have reduced leverage ratio compliance burden. The three-year averaging mechanism provides flexibility in meeting the new threshold.
- Implementation: Changes take effect in January 2026 and are retrospectively calculated using three-year averages commencing from January 2023.
Life Insurance Stress Test 2025 Results - Sector Remains Resilient
INFO · Sectors: Insurance
Published on 17 November 2025, the PRA disclosed the results of the 2025 life insurance stress test conducted across the sector. The results show the sector remains well-capitalised post-stress, with Solvency Capital Requirement (SCR) coverage ratios declining from 185% to 154% under the stress scenario, significantly above the 100% minimum requirement.
- Resilience message: The test shows the life insurance sector remains resilient to significant stress scenarios, including equity market shocks, interest rate moves, and mortality impacts. The regulator is satisfied that capital buffers remain adequate.
- 2028 stress test: The PRA has announced the next life insurance sector stress test will be conducted in 2028, providing three-year intervals between major stress testing cycles.
Fund Launches
British Business Bank Commits £100m to SV Health Investors SV8 Biotech Fund
INFO · Sectors: Private Equity, Life Sciences
On 8 December 2025, the British Business Bank announced a £100 million commitment to SV Health Investors SV8, a venture capital fund focused on scaling early-stage biotech and life sciences companies in the UK and Europe. The commitment reflects the government's continued focus on life sciences as a growth sector.
- Sector focus: SV8 targets early-stage biotech companies seeking Series A and Series B funding, with emphasis on companies developing therapeutics, medical devices, and diagnostics.
- Significance for LPs: The British Business Bank's participation reflects continued appetite for UK-based life sciences investment within the government's innovation strategy.
Hedge Fund Launches Accelerated in Q3 2025 - Record AUM at $4.98 Trillion
INFO · Sectors: Asset Management
According to Hedge Fund Intelligence data published in Q4 2025, hedge fund launches accelerated in Q3 2025, with 165 new funds launched in that quarter alone. Year-to-date 2025, the industry has seen 427 hedge fund launches, approaching record pace. The aggregate global hedge fund AUM reached $4.98 trillion as of end-Q3 2025.
- Strategy distribution: Relative Value Arbitrage strategies led with 70 launches, followed by Equity Hedge (47 launches) and Macro (41 launches). Event-driven and tactical allocation strategies also saw significant launch activity.
- Market context: The acceleration reflects investor appetite for alternative strategies in a period of geopolitical tension and macro uncertainty. The Iran conflict and oil price volatility have driven particular interest in macro and commodity-focused strategies.
UK Investment Association Reports Fund Inflows of £530m in November 2025
INFO · Sectors: Asset Management
The UK Investment Association published fund flow data for November 2025 showing total inflows of £530 million, representing a six-month high. Inflows were driven by fixed income funds (£280 million) and money market funds (£150 million), reflecting investor rotation towards yield-bearing assets amid uncertainty about the forward rate path.
- Asset class rotation: Equity fund outflows of £80 million offset the fixed income and money market gains, consistent with broader rotation trends observed in global markets during November and December.
- Fund manager implications: The November inflow data suggests investor appetite for funds offering current yield and capital stability. Managers with significant allocations in equity-heavy strategies should consider whether their positioning fits these flow trends.
Enforcement
Nationwide Building Society: £44,078,500 Fine for Inadequate Financial Crime Controls
HIGH RISK · Sectors: Banking, Financial Crime
On 11 December 2025, the FCA fined Nationwide Building Society £44,078,500 for breaches of Principle 3 (Management and control of risk), SYSC 6.1.1R (financial crime systems and controls), and SYSC 6.3.1R (anti-money laundering systems). The enforcement action centred on Nationwide's failure to maintain adequate financial crime systems and controls for customers using personal accounts for business purposes.
- Breach detail: Between 2015 and 2020, Nationwide failed to implement adequate controls to identify when customers were using personal accounts to conduct business activity, including receipt of business payments, trading activity, and commercial transactions. The firm's systems were not configured to detect such account misuse, and the firm did not investigate when customers reported business use.
- Harm assessment: Nationwide failed to file Suspicious Activity Reports (SARs) for business use cases where appropriate financial crime controls would have identified the conduct. The firm's failure exposed the financial system to potential money laundering and terrorist financing risks.
- Penalty: The FCA imposed a penalty of £44,078,500, reduced by 30% to reflect Nationwide's cooperation and early settlement discussions, from an original penalty of £62,969,286.
The Nationwide fine is high risk because it reflects the FCA's continued focus on the adequacy of financial crime systems. The case turns on systemic control failure rather than intentional misconduct. For fund managers operating retail-facing or investment platforms where customers might use accounts for business purposes, control gaps in financial crime detection systems are treated as regulatory failures. The size of the fine indicates the FCA views this as a serious control gap.
Russel Gerrity: £309,843 Fine for Market Abuse Regulation Breaches
MEDIUM RISK · Sectors: Wholesale Markets
On 19 December 2025, the FCA published its final notice imposing a fine of £309,843 on Russel Gerrity for breaches of the Market Abuse Regulation (MAR). The enforcement action focused on Gerrity's conduct as an investment professional engaged in trading and investment activity.
- Breach: Gerrity breached MAR requirements regarding market conduct and trading conduct. The specific violations related to failure to comply with market abuse prevention obligations and conduct that was inconsistent with MAR's requirements on trading integrity.
- Individual accountability: The action reinforces the FCA's commitment to individual accountability in market abuse cases, particularly for individuals with responsibility for trading or investment decision-making.
Neil Dwane: £100,281 Fine and Prohibition for Market Abuse Using Inside Information
MEDIUM RISK · Sectors: Asset Management
Published on 13 October 2025 (but noted here as context for the period under review), the FCA issued a final notice imposing a fine of £100,281 and a prohibition order on Neil Dwane for market abuse under MAR. Dwane was found to have engaged in trading using inside information, a serious breach of market abuse prevention obligations.
- Prohibition: The prohibition order prevents Dwane from performing any management function in an authorised person or a PRA-regulated firm. This is one of the FCA's most severe individual enforcement actions, effectively removing the individual from the regulated sector.
Market Developments
Bank of England MPC: November Hold at 4%, December Cut to 3.75%
HIGH RISK · Sectors: All Regulated Firms
The Bank of England's Monetary Policy Committee held interest rates at 4% in November 2025 on a 5-4 vote, and cut rates to 3.75% in December 2025 on a 5-4 vote. The December cut points to continued monetary easing, with the MPC judging that disinflationary pressures justify rate reductions despite inflation remaining above target.
- November decision: The MPC voted 5-4 to hold rates at 4% in November, with four members voting for a 25 basis point cut. The decision reflected lingering inflation concerns and uncertainty about the disinflationary trajectory.
- December cut: The MPC voted 5-4 to cut rates to 3.75% in December, moving towards the three members' preference for more aggressive easing. The vote breakdown reflects ongoing debate about the pace of rate cuts, with the Committee split between more dovish members favoring faster easing and hawkish members preferring to hold longer.
- Signals: The December cut points to the MPC's confidence that the disinflationary trend is established, allowing rate reductions despite above-target inflation. Subsequent rate decisions will depend on inflation data, employment trends, and the transmission of monetary policy to the real economy.
The split votes in November and December suggest the MPC remains internally divided about the appropriate pace of monetary easing. For fund managers with interest rate sensitivity, the forward guidance is uncertain. Rates may continue to decline gradually, but the Committee's composition and economic data could easily shift the balance towards holding or cutting more aggressively. Treasury teams should model multiple rate paths rather than assuming linear cuts.
HM Treasury Financial Services Growth and Competitiveness Strategy - Leeds Reforms
INFO · Sectors: All Regulated Firms
Published in July 2025 (noted here as context for the regulatory environment of the November-December period), HM Treasury's Financial Services Growth and Competitiveness Strategy, informally known as the "Leeds Reforms," sets out a roadmap to make the UK a top global destination for financial services by 2035. The strategy is actively shaping FCA regulatory policy, with the FCA now instructed to apply growth and competitiveness objectives to its rulemaking alongside consumer protection and systemic stability.
- FCA secondary objectives: The FCA's new secondary growth and competitiveness objective now feeds directly into its policy development. Consultations published after the strategy acknowledge the growth objective in their cost-benefit analysis and policy rationale.
- Implications: Regulations with a demonstrable growth cost may face reframing as competitive reforms rather than protective mandates. This is evident in several 2025 publications, including PS25/17 on SI regime removal and securitisation reforms.
Autumn Budget 2025 and FCA Handling of Pre-Budget Information
INFO · Sectors: All Regulated Firms
Following the government's Autumn Budget 2025, questions emerged about financial services regulatory simplification and the FCA's involvement in budget-preparation communications. The Treasury Select Committee questioned the FCA about pre-budget information sharing and the potential for regulatory policy to be driven by budget priorities rather than supervisory evidence.
- Regulatory coordination: The FCA and HM Treasury are coordinating on regulatory policy more closely, particularly where FCA rulemaking intersects with government growth strategy objectives.
- Governance transparency: The select committee scrutiny points to the need for clear governance boundaries between government growth priorities and FCA regulatory decision-making.
Regulatory Calendar
January 2026
- 7 Jan FCA fines announced: Richard Adam & Zafar Khan (Carillion investment misconduct)
- 12 Jan FCA fine: Darren Reynolds (pension transfer advice)
- 19 Jan POATRs (Pension Obligation Ascertainment Transactions Regime) takes effect: New regime for pension scheme transactions
- 20 Jan PRA PS1/26 published: Basel 3.1 final rules for UK implementation
- 23 Jan FCA CP26/4 published: Cryptoasset regime consultation
- 27 Jan FCA fines announced: Hirani & Kerai (insider dealing)
February 2026
- 4 Feb Bank of England MPC rate decision
- 11 Feb FCA PS26/1 published: Buy Now, Pay Later (BNPL) regulation final rules
- 17 Feb FCA CP26/6 and PRA CP2/26 published: Securitisation framework reforms consultation
March - April 2026
- 6 Apr 2026 PS25/20 Consumer Composite Investments regime takes effect: New UK-specific PRIIPS disclosure framework
- 1 Sep 2026 PS25/23 Non-Financial Misconduct rules take effect: COCON amendments on bullying, harassment, discrimination
Key Dates Later in 2026
- 1 Jan 2027 Basel 3.1 implementation for UK banks
- 15 Jul 2026 BNPL Regulation Day: FCA PS26/1 takes effect
- 1 Sep 2026 Non-Financial Misconduct rules effective: All COCON and regulatory reference updates must be operational
If the FCA asked your firm tomorrow to produce every regulatory reference issued in the past three years, would those references accurately reflect the conduct - including non-financial conduct - of the individuals concerned? Or would they reveal a system designed to say as little as possible?
We'd welcome your perspective. The best responses may feature in a future edition.
Insight
The FCA's Non-Financial Misconduct rules extend conduct regulation beyond the trading floor. For fund managers, a compliance framework built around financial misconduct is no longer sufficient. Bullying, harassment and discrimination now count as regulatory matters bearing on fitness and propriety. The rules treat non-financial conduct as material to fitness and propriety assessments in the same way the regulator treats dishonesty or market abuse. This creates a structural problem for many firms: their HR processes, grievance outcomes and disciplinary decisions were built to manage employment risk, not to feed into regulatory decision-making. Firms will now have to disclose more of what they know about individuals' conduct.
SMCR training modules must be rewritten to cover non-financial misconduct as a regulatory conduct standard, not a diversity initiative. HR referral processes must be redesigned to capture allegations that would previously have been handled entirely within the employment relationship. Regulatory reference templates must expand beyond financial probity and market conduct to include assessments of personal conduct across the workplace. Fund boards overseeing compliance have historically treated these as separate functions: compliance owns SMCR and regulatory references, HR owns discipline and conduct. The rules require those functions to be integrated. Firms that leave this until close to 1 September 2026 will be integrating HR and compliance in haste.
The FCA will assess fitness and propriety not only by looking at financial conduct but by asking whether an individual treats colleagues respectfully, whether there is evidence of harassment or discrimination, and whether there has been a finding of bullying. These sound like HR matters, but they are now regulatory ones. Because conduct regulation now covers non-financial misconduct, regulated firms can no longer compartmentalise. Every grievance, disciplinary outcome and HR referral is now regulatory information. Once the NFM rules take effect, firms that have not integrated HR and compliance governance will be running two parallel systems, one for employment management and one for regulatory compliance, which is not sustainable.