◆

The GRC Navigator

Your Bi-Weekly GRC Intelligence Briefing

Issue 261 August – 15 August 2026

PS26/17, published by the FCA on 13 August 2026, is the fortnight's main rule change for fund managers. It finalises the CP25/38 liquidity proposals for UK UCITS schemes and non-UCITS retail schemes (NURS): from 1 February 2027 every authorised fund manager of those funds must have an anti-dilution mechanism and assess, at least annually, how far its decisions to use it, or not, treated unitholders fairly. The one-year derogation for newly issued securities awaiting admission to an eligible market shrinks to 20 business days. PS26/15 (3 August) finalised the Handbook transaction reporting regime that replaces the UK MiFIR reporting articles on 3 April 2028, cutting fields from 65 to 52 and the default back-reporting period from five years to three; the shorter period applies now under the FCA's flexible supervisory approach. PS26/16 (5 August) removed the seven-day wait for connected research in UK equity IPOs.

Two former executives of Blue Horizon Asset Management were fined and banned: Paul Taylor (£489,000) and Esmeralda Toni (£121,200). They presented a client's bond portfolio of over €200 million as Mr Taylor's own to support his bid for a UK bank; Mr Taylor knew the FCA and PRA would rely on the material, and Ms Toni understood that was likely. His penalty was tripled at the deterrence step. The Upper Tribunal upheld bans on Richard Fenech and Heather Dunne but cut their penalties to £16,046 and £41,230, and in a separate decision refused to stop publication of the Finch decision notices. The FCA also tightened Annex 1 registration, published findings from its high-growth pilot and said its T+1 supervision will become "increasingly intrusive", with the buy-side a particular concern.

Top Story

PS26/17 makes anti-dilution tools mandatory for UCITS and NURS and cuts the new-issue window to 20 business days

HIGH RISK · Sectors: Asset Management, Wealth Management, Retail Distribution

On 13 August 2026 the FCA published PS26/17: Enhancing fund liquidity risk management, its final rules and guidance on liquidity risk management for UK UCITS schemes and NURS. The Collective Investment Schemes Sourcebook (Liquidity Management) Instrument 2026 (FCA 2026/54), made by the FCA Board on 30 July 2026, comes into force on 1 February 2027. It follows CP25/38, published in December 2025, which drew nine responses before closing on 23 February 2026. The rules bind authorised fund managers (AFMs) of UCITS schemes and NURS; the FCA also names MiFID investment managers holding delegated portfolio management, and depositaries, as affected. Proposals for unauthorised AIFs, which would bring small AIFMs within explicit liquidity rules for the first time, are in CP26/28, which we covered in Issue 25.

Anti-dilution protection stops being optional. Today COLL 6.3.8R(1)(c) expressly permits an AFM to neither require a dilution levy nor make a dilution adjustment. From 1 February 2027 COLL 6.3.7AR, a rule, requires policies and procedures that identify dilution and assess its likely impact at each valuation point, and an anti-dilution mechanism the AFM will use once it "has assessed reasonably" that dilution "poses a material risk to unitholders". For a single-priced fund the mechanism is a dilution levy or dilution adjustment. For a dual-priced fund it is the allocation of portfolio transaction costs when setting unit prices, together with the ability to make provision for large deals. COLL 6.3.8BR, also a rule, then requires a retrospective assessment, at least annually, of each decision to apply or refrain from applying the mechanism and of "the extent to which those decisions have resulted in the fair treatment of all unitholders".

Under COLL 6.3.7CG, AFMs should calibrate by reference to explicit and implicit liquidity costs, calculated on a pro-rata apportionment of scheme property across all unitholders (the "vertical slice"), including an estimate of the price impact of selling a significant quantity of a security to meet redemptions. COLL 6 Annex 5.29G adds that thresholds and calibration should be set scheme by scheme, taking account of market impact. The PS cites a 2020 survey with the Bank of England covering 272 funds at 51 AFMs: funds with different strategies often used the same swing thresholds, and only 13 of the 272 said market impact was considered in their swing factors.

Against CP25/38, the final text changed in these respects:

  • CP25/38 proposed deleting the derogation in COLL 5.2.8R(3)(e), which lets a scheme hold a recently issued transferable security provided admission to an eligible market is secured within a year of issue, so that new issues would count against the 10% (UCITS) or 20% (NURS) limit for unapproved securities. After bond-market feedback the FCA kept the derogation but cut the window to 20 business days.
  • The dual-priced mechanism was redrafted after two respondents said the consultation misdescribed where a dual-priced AFM's discretion sits.
  • The "material risk" trigger moved from guidance into COLL 6.3.7AR itself.
  • Vertical slicing now serves only as a calibration baseline; AFMs keep discretion over how to execute individual trades, and the reference to the "true cost" to the scheme was removed from COLL 6.3.7CG.
  • COLL 6.3.8BR was redrafted to ask how far past decisions produced fair treatment, after a respondent pointed out that a retrospective review cannot itself guarantee it.
  • A proposed rule on the AFM's incentive to hold less liquid assets was dropped; the rule on conflicts between redeeming and remaining unitholders is kept as COLL 6.6.3R(5). Feeder funds asked for an exemption from mandatory tools and did not get one.

COLL 6.12.11R(2) also loses its "where appropriate" qualifier, so a UCITS AFM must stress test liquidity under normal as well as exceptional conditions. The UK version of the 2020 ESMA liquidity stress testing guidelines now sits in COLL 6 Annex 6 as guidance for UCITS and NURS AFMs, and FUND 3.6.3AG points the AIFM of a NURS to it. Two departures from the ESMA text change practice: testing "at least quarterly" (COLL 6 Annex 6.16G) and reverse stress testing without a "where appropriate" let-out (COLL 6 Annex 6.22G). An AFM should also not assume it can liquidate at the full average daily traded volume of an asset without empirical evidence (COLL 6 Annex 6.30G(2)).

For host AFMs, COLL 6 Annex 6.13G says an AFM that delegates portfolio management should avoid "reliance on, or influence by, the third party's own liquidity stress testing". The FCA declined to write new rules for host AFM arrangements, pointing instead to its Woodford decision notices, and says it will engage with host AFMs on a targeted basis. Depositaries get clarification rather than new duties: under COLL 6 Annex 6.63G and 6.66G they verify that a stress testing programme exists and need not replicate or challenge it.

The rules apply from 1 February 2027, but an AFM need not update its prospectus under COLL 4.2.5R(18) until the earlier of its next update or 1 August 2027. A security issued before 1 August 2026 can stay under the old one-year derogation; one issued between 1 August 2026 and 31 January 2027 must be admitted by 1 August 2027; new issues bought from 1 February 2027 have 20 business days.

Soft closure is untouched: it still counts as a significant change needing 60 days' notice. The FCA will not collect swing factors or levy rates, though its FRAME proposals would collect data on how tools are used. A further consultation on NURS invested in inherently illiquid assets, including notice periods, is promised "soon". Meanwhile COLL 6 Annex 5.5G already states that material exposure to real estate, infrastructure, private equity or private debt in a daily-dealt scheme without a notice period "would be likely to mean" that strategy, liquidity profile and redemption policy are not aligned.

In my view COLL 6.3.8BR is the provision that will change behaviour. It turns every decision not to swing into something the AFM revisits, with reasons, each year, and COLL 6 Annex 5.17G(5) expects its controls to include adjustments to calibration. A range that applies one threshold to funds with different strategies, as the 2020 survey found, will struggle to justify it on a vertical-slice analysis. The 20-business-day window is the operational pinch, especially for bond funds, and last year's new-issue allocations are the obvious test data. On my reading of "at least annually", the first retrospective assessment falls within twelve months of 1 February 2027.

A swing threshold copied across a fund range is now a decision the AFM must revisit each year, fund by fund.
Asad Bukhory

Regulatory Updates

PS26/15 finalises the 2028 transaction reporting regime, with three-year back reporting from 3 August

MEDIUM RISK · Sectors: Investment Firms, Wholesale Markets, Hedge Funds, Asset Management

The FCA's PS26/15: Improving the UK transaction reporting regime, published on 3 August 2026, sets final rules that move transaction reporting out of UK MiFIR and into the Handbook at MAR 13, 14 and 15 once HM Treasury repeals Articles 25 to 27 of UK MiFIR and the related technical standards. The instrument (FCA 2026/52), made on 30 July 2026, comes into force on 3 April 2028. It follows CP25/32 of November 2025. The FCA puts the current cost of MiFIR transaction reporting at £493m a year and, in its press release, expects that to fall to about £385m.

The package cuts fields from 65 to 52, takes about 7 million instruments tradeable only on EU venues out of scope, and removes FX derivatives and most corporate actions. FCA FIRDS becomes the "golden source": if an instrument or its underlying is not in FIRDS within seven working days of the trade, the firm may conclude it is not reportable (MAR 14.5.3G). Back reporting defaults to three years (MAR 14.15.4G). The FCA keeps the power to direct up to five, and record-keeping under COBS 11 and SYSC 9 is unchanged.

Whether an asset manager is caught depends on a defined term. A "transaction reporting firm" is a MiFID investment firm, excluding a collective portfolio management investment firm, or a third-country firm acting from a UK establishment. Full-scope AIFMs and UCITS management companies with MiFID top-up permissions therefore stay outside, as CP25/32 proposed; the FCA says it is considering reporting for CPMI firms within its FRAME consultation (CP26/26). MiFID portfolio managers remain within the definition.

Changes from consultation are modest. A trust must be identified by its LEI where one exists (MAR 14.13.10G(2)). The proposal to report a venue's segment MIC for unknown counterparties was dropped in favour of the existing CCP LEI practice, and the seven-day FIRDS test now applies wherever the trade was executed. New guidance at MAR 14.15.5G expects an incident management framework covering triage, root-cause analysis, remediation, escalation and notification, with no materiality threshold for breach reports. Conditional single-sided reporting goes ahead although most respondents called it unworkable: MAR 14.10.1R requires a written agreement between sending and receiving firm, and the FCA declined to make either party fully responsible for the data.

Part of the relief starts now. Under a flexible supervisory approach running from 3 August 2026 until the rules take effect, the FCA will not act against firms that stop reporting EU-only instruments or that limit back reporting to three years unless instructed otherwise. Firms may also drop FX derivatives if they report them under UK EMIR; UK branches of third-country firms, which do not, must carry on. Validation rules will be relaxed, and a draft schema and Transaction Reporting User Pack published, in October 2026.

Back reporting is where the saving is immediate: an open remediation that reaches beyond three years can be re-scoped now, once the firm has checked that no FCA instruction already covers it. The CPMI question isn't closed, only moved into the FRAME review, whose consultation runs to 22 September. Buy-side firms that hoped CSSR would lift their own obligation won't find relief there; it's optional, and the FCA called buy-side data "critical".

FCA tightens Annex 1 registration and sends information requests to around 900 registered firms

MEDIUM RISK · Sectors: Financial Crime, Private Credit, All Regulated Firms

In a statement on 7 August 2026 the FCA said it is applying increased scrutiny to Annex 1 firms, the unregulated lenders, safe custody providers, money brokers and financial leasing companies that must register with it for anti-money laundering purposes. It has sent an information request to around 900 Annex 1 firms which, with the 300 it contacted in late 2025, covers every registered Annex 1 firm, and it warns that registration applications will take longer.

The statement adds no new obligation. Annex 1 firms are registered for anti-money laundering purposes only: the FCA's March 2026 statement explained that its powers over the roughly 1,200 such firms are limited to anti-money laundering, that its wider rulebook does not apply, and that their customers cannot use the Financial Ombudsman Service. The August statement criticises firms that rely too heavily on a parent's financial crime controls: each firm in a group must assess whether those controls suit its own risks, governance and operations, and cannot rely on off-the-shelf procedures written for another company. It is also concerned about unregulated lending "often conducted through complex structures, including special purpose vehicles".

That concern is relevant to private credit managers. The FCA's registration guidance lists lending, including financing commercial transactions, as an Annex 1 activity and says an authorised firm need not register. A special purpose vehicle involved in lending needs to register only if it is the original lender, not where it merely acquires the legal or beneficial interest in loans. Whether lending is carried on "as a business" turns, on the FCA's published approach, on the commercial element, the commercial benefit, the activity's weight against the firm's other business, and its regularity. A fund's lending vehicle that originates loans as a business in the UK can therefore be an Annex 1 firm even though its manager is authorised, and the criticism of borrowed group controls then applies to it directly.

Regulated firms dealing with Annex 1 firms were told in March to seek direct confirmation of registration status and to understand the counterparty's business. The August statement repeats that.

I'd want a private credit manager to hold, for each lending vehicle, a short written analysis of whether it originates loans as a business in the UK, and for any registered vehicle a risk assessment written for that vehicle rather than a copy of the manager's manual. Since the FCA now warns that applications will take longer, a new vehicle's registration should be planned into its launch timetable.

FCA's high-growth pilot found governance at some fast-growing firms had not kept pace with the business

MEDIUM RISK · Sectors: Asset Management, Wealth Management, Payments

The FCA's Early and High Growth Oversight pilot, whose good and poor practice findings were published on 10 August 2026, ran from July 2025 to March 2026 and engaged 15 firms across asset management, wealth management and payments. The FCA picked firms from data, looking at growth in revenue, expenditure and staff and at changes in permissions or control, and has given each firm individual feedback. The findings come from a sample of 15 and are neither rules nor guidance, though they show what supervisors examined in growing firms.

At some firms the FCA found:

  • board and committee structures that had not kept pace, thin independent challenge, and responsibilities held by a few people;
  • incomplete minutes, missing attendance, quorum, conflicts, decisions or follow-up actions;
  • dependence on key individuals without succession planning or cross-training;
  • suitability frameworks not reviewed when the target market changed, and management information that still referred to superseded documents or meetings;
  • conflicts from group relationships, co-manufacturing, shared resources and combined senior roles not identified;
  • wind-down plans that were not current, practical or proportionate, with the FCA reminding firms of their duties under SUP 15, including SUP 15.3.1R's requirement to notify immediately a matter that could mean failing the threshold conditions;
  • too little weight on customer outcomes, including fair value.

The stronger firms added independent non-executives as they grew, used risk committees with defined appetites, stress tested their cost base, and in some cases delayed moving into new regulated activities until controls for existing business were stronger. The FCA says it will use the pilot to shape how it engages with high-growth firms and will look at how data can identify emerging risks earlier. The same week it added five solo-regulated firms to its Scale-up Unit, none of them asset managers.

Of these findings, the minutes point is the easiest for a growing manager to test this month. Pull the board and committee minutes from eighteen months ago and see whether attendance, quorum, declared conflicts, decisions and owners of actions are recorded. Minutes are also the plainest evidence a firm holds of the "robust governance arrangements" SYSC 4.1.1R requires.

PS26/16 ends the seven-day wait for connected IPO research with immediate effect

LOW RISK · Sectors: Wholesale Markets, Investment Firms, Asset Management, Listed Companies

PS26/16: Changes to information flows for UK equity IPOs, published by the FCA on 5 August 2026, took effect the same day through the Changes to Information Flows for UK Equity IPOs Instrument 2026 (FCA 2026/53). It implements CP26/14 of April 2026 as proposed; almost all of the 12 respondents agreed.

Until 5 August, COBS 11A.1.4FR stopped a syndicate bank disseminating connected research on an IPO until one day after publication of the approved registration document or prospectus if unconnected analysts had joined its analysts' communications with the issuer, and seven days after otherwise. COBS 11A.1.4BR to 11A.1.4ER required the bank to give a range of unconnected analysts the same access and information as its own, with five-year records. Those provisions are deleted. COBS 11A.1.4FR now only bars dissemination until the approved prospectus or registration document is published. The scope test in COBS 11A.1.4AR is unchanged: it catches underwriting or placing of shares to be admitted to trading on a UK regulated market for the first time where an approved prospectus is required, so admissions to an MTF such as AIM were never within it. The FCA's reason for the change is that the 2018 rules produced little unconnected research while adding execution risk and cost for issuers; respondents added that the seven-day wait had become the default on deals and left the UK out of line with other listing venues.

The instrument also corrects COBS 12.2.21R(1)(f) to its original MiFID Org Reg wording: where a draft contains a recommendation or target price, issuers, relevant persons other than the analysts, and anyone else may not review it, whether to check facts or for any purpose other than verifying the firm's legal compliance. Two respondents opposed the main change, arguing that unconnected analysts need access to the issuer to give the market an independent view.

For fund managers buying IPO stock, I think the practical effect is that the first published view will usually be the syndicate's, and independent research, if it comes at all, will depend on terms negotiated commercially. An investment committee that counted unconnected research as part of its IPO process now needs another source for an independent view. The rest of the 2018 package, including the rule that approved documents come before connected research and the COBS 12 guidance on pre-mandate analyst contact, drew critical feedback, but the FCA is not consulting on either for now.

Bank of England & PRA

AI Consortium members say generative AI is often rated high risk under SS1/23, which limits proportionate controls

INFO · Sectors: Banking, Asset Management, All Regulated Firms

Minutes of the Artificial Intelligence Consortium's meeting on 3 June 2026, published by the Bank of England on 5 August, record its fourth quarterly meeting, co-chaired by Sarah Breeden of the Bank and David Geale of the FCA. The minutes record members' views under the Chatham House Rule and state that they are not the views of the Bank or the FCA and "should not be taken as an indication of future policy".

Four workshops reported. The explainability group said generative AI systems are often classified as high risk under SS1/23, the PRA's model risk management principles for banks, which may limit proportionate application of controls. It suggested managing model risk at the level of the whole "AI model system", because most uses combine several models and components that can be updated independently, and it flagged limited transparency from third-party providers. The concentration group located the dependency at the model and compute levels, where alternatives are few, and noted that software-as-a-service provision reduces substitutability, a concern where AI supports important business services. A third workshop, on contagion, separated fast failures such as a provider outage from slow, correlated errors that only show up when firms are compared. The fourth, on edge cases, proposed a four-step response: identify the type of failure, detect it through observable signals, set the minimum evidence needed to diagnose it, and apply pre-defined containment controls.

SS1/23 is written for banks, so it does not bind a solo-regulated asset manager. The system-level point applies regardless: an AI inventory that lists models but not the prompts, retrieval layers and third-party services around them cannot answer the questions these workshops are asking. The general discussion added that human review of outputs is widely relied upon but not practical everywhere, and some members suggested standardised AI incident reporting. The workshop outputs will be consolidated into a final publication later in the year, before a second phase of the Consortium.

Fund Launches & Capital Raises

Tritax Big Box REIT raises £350m below NAV, which needs a shareholder vote under UKLR 11.4.18R

INFO · Sectors: Asset Management, Listed Companies

Tritax Big Box REIT plc, a London-listed real estate investment trust, announced on 5 August 2026 an equity issue to fund its data centre development pipeline and confirmed on 6 August that it had raised gross proceeds of about £350 million. The 213,414,634 new shares, about 7.9% of its existing share capital, were priced at 164p through an accelerated bookbuild, a retail offer via RetailBook and a subscription by the directors and some PDMRs. NTA per share at 30 June 2026 was 185.9p.

The deal is conditional because the price is below net asset value. UKLR 11.4.18(1)R bars a closed-ended investment fund from issuing shares of an existing class for cash below NAV per share unless its shareholders authorise it or the shares are first offered pro rata to existing holders, so the company has called a general meeting, expected on or around 24 August, with admission to follow on or around 26 August. No prospectus was needed: the placing relied on exemptions under the Public Offers and Admissions to Trading Regulations 2024 and the FCA's PRM sourcebook, and the retail offer announcement was a financial promotion approved by Retail Book Limited under section 21 of FSMA. The company's external manager is authorised and supervised by the FCA.

In my view the evidence a board needs for a sub-NAV issue is on allocation. The company reports that placing shares allocated outside soft pre-emption went preferentially to existing holders and wall-crossed investors, and that retail allocations also favoured existing shareholders.

Seraphim Space Investment Trust puts its first C share money into two companies it already owns

INFO · Sectors: Asset Management, Private Equity

Seraphim Space Investment Trust plc, listed on the Main Market and managed by UK-based Seraphim Space Manager LLP, announced on 4 August 2026 the first deployment of the £137 million it raised through a C share issue in May: follow-on investments of $25 million (£18.6 million) in Pixxel and $3.6 million (£2.7 million) in Zeno Power. Both companies are already held in the ordinary share portfolio. The manager says it remains on track to begin a partial conversion of the C shares into ordinary shares after the end of the current quarter.

A C share class normally holds new money in a separate pool until it is invested and converted, so existing shareholders avoid the cash drag. The difficulty comes when that pool buys into companies the ordinary pool already owns, because the price of the follow-on round bears on the value of the ordinary shareholders' existing stakes as well as on what the C shareholders pay, and the conversion is normally set by reference to the two pools' values. With one manager acting for both classes, I'd want to know who tested those round prices, and against what.

Puma AIM VCT plans a £10m September offer and Calculus VCT supplements its offer prospectus

INFO · Sectors: Asset Management, Retail Distribution

Puma AIM VCT plc announced on 3 August 2026 that it intends to launch an offer for subscription in September to raise up to £10 million, with an over-allotment facility of up to a further £10 million; the terms will be in a prospectus published at launch. On 14 August Calculus VCT plc published an FCA-approved supplementary prospectus to its offer prospectus of 3 October 2025. It says the supplement was issued under the Prospectus Regulation Rules following publication of its audited accounts for the year to 31 March 2026, which show net assets of £52.21 million, NAV per share of 56.43p and dividends of 2.82p per share for the year.

Both offers rest on a prospectus, and Calculus's supplement shows the disclosure cycle running while an offer is open. For platforms and advisers distributing VCT offers this autumn, the practical check is whether their suitability and target-market material reflects the supplemented document rather than the original.

Enforcement Watch

Blue Horizon's former CEO and MD fined £489,000 and £121,200 and banned for faking proof of funds in a bid for a UK bank

MEDIUM RISK · Sectors: Asset Management, Banking, Financial Crime

Paul Taylor and Esmeralda Toni, formerly chief executive and managing director of Blue Horizon Asset Management (BHAM), have been fined £489,000 and £121,200 under section 66 of FSMA and prohibited from any function in relation to regulated activity under section 56, by final notices dated 12 August and published by the FCA on 14 August 2026. Mr Taylor founded BHAM, an asset and fund manager for professional and institutional clients, held SMF1 and SMF3 there, and controlled it through his 100% holding in its parent, Blue Group. Ms Toni held SMF3. Both settled at stage 1. The breach found in each case is Individual Conduct Rule 1, COCON 2.1.1R ("You must act with integrity"), and the FCA found both acted dishonestly.

In December 2023, to secure exclusivity in a bid for a UK start-up bank, BHAM told the target that Blue Group, then called Moontreasure, was the ultimate beneficial owner of a government bond portfolio worth over €200 million. The portfolio belonged to one of BHAM's four clients, an overseas bank, under a discretionary mandate. Ms Toni gave that confirmation after the target's chief executive said the regulator would ask him to "attest" to it. In July 2024, when the regulators required documentary proof of funds as a condition of approving the change in control, Mr Taylor asked Ms Toni for a nominee agreement dated "just after the acquisition of Bolt" and naming Bolt Markets as custodian "as this will look more authentic". She built a letter of good standing on a pre-existing letter from the client's chief executive and copied his signature onto a nominee agreement backdated to 12 January 2022; the target sent both to the FCA and PRA on 26 and 30 July 2024. BHAM repeated the claim to the FCA on 14 October 2024 and withdrew it on 30 October, after further questions. Mr Taylor also used the claim to support a bid for Reading Football Club.

Under the five DEPP 6.5B steps, Mr Taylor's Step 1 was nil because the FCA identified no financial benefit. Because his breach ran for less than twelve months, his relevant income was the £582,188.58 he earned in the year to 30 October 2024; at level 5 (40%) Step 2 came to £232,875.43, with no Step 3 adjustment. Step 4 then multiplied the figure by three, to £698,626.29, under DEPP 6.5B.4G(1)(a), (c) and (e). The FCA relied on his statement that it is "common practice for people to purport to have funds to purchase businesses and then try to raise it subsequently", and on his owning "assets of high value". The 30% stage 1 discount under DEPP 6.7.3G gave £489,000. For Ms Toni, relevant income of £216,430 at 40% gave £86,572, doubled at Step 4 to £173,144 and discounted to £121,200.

Mr Taylor is found to have known the documents would reach the regulators; Ms Toni is found to have been reckless as to that, while knowingly dishonest in what she said and made. The notices identify no financial benefit and record no loss to BHAM's client. The FCA says its references to BHAM and others are not criticism, and records that BHAM commissioned an independent law firm review and gave the report to the FCA. Ms Toni's breach also covers her conduct in that review: she sat on the committee to which the investigators reported until 13 December 2024, and in a January 2025 interview falsely denied having seen Mr Taylor's email or the documents. She admitted it in FCA interviews in December 2025 and March 2026.

The example given in DEPP 6.5B.4G(1)(e) is someone with a small income and valuable assets. The FCA applied the paragraph to a chief executive earning about £582,000 a year, so for senior managers with wealth outside their salary, relevant income does not cap a deterrence uplift. Two controls bear on this conduct: compliance sign-off for any use of client portfolio records outside the mandate, and investigation terms of reference that keep anyone whose conduct is in scope off the committee receiving the investigators' reports.

Warning Notice Statement 26/5 alleges an SMF sold control of a small firm to a disqualified director

MEDIUM RISK · Sectors: All Regulated Firms, Financial Crime, Retail Distribution

On 4 August 2026 the FCA published Warning Notice Statement 26/5, about a warning notice it gave on 29 April 2026 to an unnamed individual, Individual A, who held senior management functions at a small authorised firm, including chief executive and responsibility for compliance oversight and financial promotions. A warning notice is not a final decision. Individual A can make representations to the Regulatory Decisions Committee and, if a decision notice follows, refer it to the Upper Tribunal.

The FCA alleges that between 21 October 2019 and 28 January 2025 Individual A sold effective control of the firm to Individual B, a director disqualified for fraudulent activity who would not have been approved for a senior management function. The sale, it says, was "structured to conceal the true beneficial ownership and seek to avoid the FCA's statutory change-in-control regime". It alleges that he then held his functions in name only while others ran the business. He also, on the FCA's case, allowed the firm's authorised status to act as a "halo" for high-risk unlisted bonds it marketed and issued, on which investors lost nearly £4.4 million, and repeatedly gave the FCA false or misleading information about ownership and control. The proposed basis is Statement of Principle 1 and Individual Conduct Rule 1. The period begins before 9 December 2019, when the conduct rules reached senior managers of FCA-authorised firms (the date the Blue Horizon notices record for COCON's application), which would explain why the FCA relies on both.

The statement appeared in the same fortnight as the Blue Horizon notices, and both concern what regulators were told about who owns or funds a regulated business. On the FCA's case, the transaction here was structured to avoid the change-in-control regime in Part XII of FSMA. For a small firm, the records that would show the pattern alleged are a register of beneficial owners reconciled to the share register and to the controllers the FCA has approved, and minutes showing who takes business decisions.

Market Developments

Upper Tribunal upholds Fenech and Dunne bans but cuts their penalties to £16,046 and £41,230

MEDIUM RISK · Sectors: Wealth Management, Retail Distribution, All Regulated Firms

The Upper Tribunal has upheld prohibition orders on Richard Fenech and Heather Dunne but directed the FCA to cut their penalties from £270,646 and £399,817 to £16,046 and £41,230, an outcome the FCA announced on 4 August 2026. The penalty decision, [2026] UKUT 00281 (TCC), was given on 27 July 2026 by Judge Anne Redston sitting with two members. Ms Dunne was a pension transfer specialist and appointed representative of Financial Solutions Midhurst Ltd, the firm Mr Fenech owned and ran.

The liability decision of 27 April 2026, [2026] UKUT 00162 (TCC), found that both had dishonestly given the FCA a backdated AR agreement, in breach of Statement of Principle 1. Ms Dunne also breached Statement of Principle 2. Mr Fenech breached Statement of Principle 7 by failing to supervise her, but the Tribunal found he was not reckless. The FCA's case was that all Ms Dunne's advice was non-compliant. Its reviewer had found 8 of 17 sampled files suitable; the FCA "recalibrated" them rather than enlarge the sample. The Tribunal found 10 of 16 suitable and, with a 95% confidence interval of 18% to 62%, would find only that at least 18% of her clients had been advised unsuitably.

The 18% finding set the disgorgement figures. Step 1 was limited to the benefit from the wrongdoing, 18% of the pension transfer income, not all of it. For Mr Fenech's Step 2, the FCA used all his income from the firm, first put at £455,446 and later agreed at £240,033. The Tribunal used only the £36,269 derived from the AR arrangement: the DEPP 6.5B rationale of pay "commensurate with" responsibilities fits employees, it held, better than an owner whose other income came from separate work. At level 4 (30%) that gave £10,881, plus £5,165 disgorgement. No interest was added, because the FCA left gaps totalling about three years unexplained and issued its warning notices two days before the six-year limit in section 66(5ZA)(b) of FSMA expired. Ms Dunne's penalty is disgorgement only because the FCA accepted serious financial hardship.

The bans stand because, as the Tribunal accepted, the FCA must be able to rely on those it regulates "at all times", including under pressure. Mr Fenech's dishonesty was found to be "a one-off action which was out of character", and a remittal would still have produced a prohibition.

The relevant-income ruling helps an owner-manager facing a DEPP 6.5B penalty only where, as here, the regulated work is separate from the rest of their income. It won't help an employee: the Tribunal said the whole-income approach remains right where the regulatory role is part of the job. The sampling point applies more widely. An FCA case extrapolated from a file review can prove only what its sample supports, so a firm answering one should examine how the sample was sized and whether outcomes were changed after the review.

Finch v FCA: Upper Tribunal refuses to stop publication of referred decision notices

INFO · Sectors: All Regulated Firms, Insurance

On 5 August 2026 the Upper Tribunal published Finch v FCA [2026] UKUT 00217 (TCC), a decision of Judge Mark Baldwin released on 12 June 2026. It dismissed applications by Alec and Robert Finch for directions under rule 14 of the Tribunal Procedure (Upper Tribunal) Rules 2008 that the FCA not publish the decision notices it gave them on 4 July 2025, and under paragraph 3(3) of Schedule 3 that their references be kept off the Tribunal register. We covered the notices in Issue 25; this decision explains why they were public while the references are pending.

The notices rest on a High Court judgment of 27 September 2023 finding that the Finches committed a major fraud and misused client money at AFL Insurance Brokers. On that basis the FCA decided to publish statements of misconduct under section 66 of FSMA and make prohibition orders under section 56, and waived penalties for serious financial hardship. The Finches, who are trying to set the judgment aside as obtained by fraud (a claim struck out at first instance and now under appeal), argued that publication would prejudge that claim and cause severe and irreparable harm to their livelihoods.

Applying the principles summarised in Kingsbridge Capital Advisers v FCA [2023] UKUT 000103 (TCC), the Tribunal started from the presumption in favour of publication in section 391 of FSMA and open justice, and required cogent evidence of unfairness, such as a significant likelihood of severe damage to livelihood. The merits of the reference were irrelevant. It found no such evidence. The judgment was already public and had been reported; the notices showed that the FCA relied on the judgment rather than endorsed it, and they carry a marking that they are referred and provisional. Nor was there a "qualitative leap" from being found by a High Court judge to have been the architects of a fraud.

The decision applies settled principles, and where the underlying findings are already public it leaves an applicant little room to show that a decision notice adds harm. The question it left for the substantive hearing, listed for 7 and 8 September 2026, is whether the FCA was entitled to rely on the judgment without investigating the facts itself. That is a live question for any firm whose staff face civil findings the FCA could adopt.

FCA blog on T+1 readiness says buy-side progress is a concern and supervision will become more intrusive

MEDIUM RISK · Sectors: Asset Management, Investment Firms, Wholesale Markets

An FCA blog published on 13 August 2026, by Jamie Bell of its infrastructure and exchanges team, assesses readiness for the UK's move to T+1 securities settlement on 11 October 2027. The blog, a supervisory update with no new requirements, reports what the FCA found in its engagement with firms and restates the expectations in its Dear CCO letter to asset management and alternatives firms, which set end-2026 for implementing changes and 2027 for testing.

Most participants met the FCA's expectations, but some were "considerably behind" and, without urgent remediation, unlikely to be ready; a very small number had not read the Accelerated Settlement Taskforce's implementation plan. The FCA singles out the buy-side, citing a Value Exchange survey from the first quarter of 2026 that found most buy-side firms had not begun implementation, and that two-thirds of firms did not think their service providers were ready. It will "pay particular attention to buy-side firms' progress" and, as October 2027 approaches, "take an increasingly intrusive approach".

The dated milestone is the end of December 2026, when the Taskforce expects trades to be allocated and confirmed on trade date and standard settlement instructions shared to the FMSB standard. Roughly half the firms the FCA spoke to already allocate and confirm on trade date. The FCA expects settlement data from Euroclear UK & International soon and will ask firms with poor settlement performance to explain it. On funds, it notes the IA, PIMFA and AIMA recommendation to move fund settlement to T+2 on or before 11 October 2027: most managers intended to, and only a minority had concrete plans.

For a fund board, I'd start with the settlement failures. Well-prepared firms could tell the FCA their failure rate and its main causes; some could not. A COO should be able to produce that figure by counterparty and by cause before Euroclear's data lets the FCA produce it first, and the Dear CCO letter is clear that outsourcing settlement does not move the responsibility.

Regulatory Calendar

August 2026

  • 21 Aug FCA CP26/24, simplifying consumer investment disclosures, closes.
  • 24 Aug FCA CP26/20, self-invested personal pensions, closes.
  • Late Aug PRA 2026 Firm Feedback Exercise survey opens (second half of August, per the July Regulatory Digest).
  • 31 Aug Deadline to register interest in the FCA's prudential roundtable on the fund manager prudential regime (CP26/28).

September 2026

  • 1 Sep COCON 1.1.7FR in force: for SMCR firms other than banks, the conduct rules reach unwanted conduct towards colleagues and others connected with the firm.
  • 14 Sep FCA prudential roundtable on CP26/28, London, 4pm to 6pm.
  • 16 Sep FCA CP26/27, remuneration rules for solo-regulated firms, closes.
  • 17 Sep MPC announcement on Bank Rate.
  • 18 Sep FCA CP26/23 (Consumer Duty scope) closes, as do the CP26/28 discussion chapters other than prudential.
  • 21 Sep Inside information declaration form required with first submissions of equity documents to the FCA.
  • 22 Sep FCA CP26/26, Fund Reporting for Asset Management Entities (FRAME), closes.

October 2026

  • Oct FCA to publish draft transaction reporting schema, validation rules and user pack, and consult on transitional provisions (PS26/15).
  • 14 Oct FCA CP26/28 (UK AIFM regime) and its prudential discussion chapter close; FCA CP26/29 and PRA CP11/26 (captive insurance) and PRA CP10/26 (ring-fenced bodies) close.
  • 16 Oct FCA CP26/30, equity market transparency, closes.
  • 22 Oct PRA CP12/26, friendly society amalgamations and transfers, closes.

Key dates later in 2026 and beyond

  • 5 Nov 2026 MPC announcement with Monetary Policy Report.
  • 31 Dec 2026 Accelerated Settlement Taskforce deadline for trade-date allocation and confirmation and the FMSB SSI standard.
  • 1 Jan 2027 PRA rules for the Overseas Prudential Requirements Regime take effect with Basel 3.1 (PS16/26).
  • 1 Feb 2027 PS26/17 liquidity rules for UCITS schemes and NURS in force.
  • 1 Aug 2027 PS26/17 transitional provisions for prospectuses and recently issued securities expire.
  • 11 Oct 2027 UK moves to T+1 securities settlement.
  • 3 Apr 2028 New UK transaction reporting regime in MAR 13 to 15 in force (PS26/15).
Question of the Week

If the FCA asked for your dilution file covering the first year after 1 February 2027, could you produce, fund by fund, each valuation point at which you chose not to swing or charge a levy, the explicit and implicit cost estimate behind that choice, and the calibration changes your COLL 6.3.8BR review made, together with the committee minutes that approved them?

We’d welcome your perspective. The best responses may feature in a future edition.

Three enforcement items in this issue turn on the same act: putting false information or documents in front of a regulator. Mr Taylor and Ms Toni dressed a client's bond portfolio up as proof of funds for a change in control; Individual A, on the FCA's allegations, sold control of a firm to a disqualified director, kept the title and misled the FCA about who owned it; Mr Fenech and Ms Dunne gave the FCA a backdated AR agreement. The Tribunal's reasoning in Fenech explains why a single, out-of-character act still ends a career: the FCA has to be able to rely on what firms tell it, including under pressure.

On policy, the FCA is leaving choices with firms and asking for evidence of how they made them. PS26/17 leaves the activation and calibration of anti-dilution tools to the AFM, then requires an annual assessment of every decision not to swing. Conditional single-sided reporting is optional too, with a written agreement as the price of using it.

So the fortnight cuts both ways. In Fenech the Tribunal held the FCA to what its evidence proved, and the penalties fell with it. The new rules ask firms to account for their own discretionary calls in a similar way. I think that's a fair bargain, provided firms treat the record as part of the decision and not as paperwork assembled afterwards: a choice not to swing at a valuation point, or to stop back reporting at three years, needs its numbers and reasons written down on the day it's made.

Asad Bukhory | Founder, Artizan Governance

To receive our bi-weekly regulatory insights directly in your inbox