6.2 Principles-Based Regulation, Duties and Enforcement Powers

The UK's regulatory regime is principles-based, meaning regulators set high-level outcomes that firms must achieve, rather than prescribing every detail of how to achieve them. This contrasts with the rules-based approach (more common in the US) where every permissible and impermissible action is enumerated. Both have strengths: principles are flexible and outcome-focused; rules are certain and easy to enforce mechanically. The FCA uses both — the 11 (now 12) Principles for Businesses set outcomes, while detailed sourcebooks such as COBS and MCOB fill in the rules.

Principles-Based vs Rules-Based Regulation

The FCA's view is that principles plus rules together deliver better outcomes than rules alone. A firm can comply with a detailed rule but still breach a Principle if it has produced a poor consumer outcome — the FCA can use the Principle to enforce even where no specific rule was broken.

FCA's 11 Principles for Businesses (PRIN 2.1)

The Principles for Businesses are the most high-level standards in the Handbook. They apply to every authorised firm and underpin every other rule. A firm that breaches a Principle is liable to enforcement action.

1. Integrity — A firm must conduct its business with integrity
2. Skill, care and diligence — A firm must conduct its business with due skill, care and diligence
3. Management and control — A firm must take reasonable care to organise and control its affairs responsibly and effectively, with adequate risk-management systems
4. Financial prudence — A firm must maintain adequate financial resources
5. Market conduct — A firm must observe proper standards of market conduct
6. Customers' interests — A firm must pay due regard to the interests of its customers and treat them fairly
7. Communications with clients — A firm must pay due regard to the information needs of its clients, and communicate information in a way which is clear, fair and not misleading
8. Conflicts of interest — A firm must manage conflicts of interest fairly, both between itself and its customers and between a customer and another client
9. Customers: relationships of trust — A firm must take reasonable care to ensure the suitability of its advice and discretionary decisions for any customer who is entitled to rely upon its judgment
10. Clients' assets — A firm must arrange adequate protection for clients' assets when it is responsible for them
11. Relations with regulators — A firm must deal with its regulators in an open and cooperative way, and must disclose appropriately any information about which the regulator would reasonably expect notice

Principle 12 (Consumer Duty), added in 2023, requires a firm to act to deliver good outcomes for retail customers. It applies in addition to (and where it overlaps, displaces) Principles 6 and 7 for retail business. The Consumer Duty is covered in detail in section 6.6.

Regulators' Duties

The FCA and PRA have statutory duties under FSMA that govern how they exercise their powers:

• Consultation duty (s.155 FSMA) — the FCA must consult on proposed rules unless impracticable, publishing a cost-benefit analysis
• Cost-benefit analysis — the FCA must have regard to the costs and benefits of its rules
• Principles of good regulation (s.3B FSMA) — including proportionality, accountability, transparency, the desirability of sustainable growth, and senior management responsibility
• Coordination duty — the FCA and PRA must coordinate on concurrently regulated firms
• Annual reporting — both regulators report annually to Parliament

Enforcement Powers

FSMA gives the FCA a wide toolkit to respond to misconduct. Key powers include:

The FCA publishes enforcement notices and the Enforcement Guide (ENFG) sets out its decision-making procedure. Penalties are subject to a five-step process (DEPP 6) that accounts for seriousness, harm, disgorgement, mitigating factors and a 3.0x multiplier for deterrence.

Senior Manager Liability

Under the Senior Managers and Certification Regime (SMCR), individual senior managers can be held personally liable for breaches within their areas of responsibility. Each Senior Manager must have a Statement of Responsibilities that maps to their firm's Management Responsibilities Map. The Conduct Rules (COCON) apply directly to individuals, and a senior manager can be fined or prohibited for failing to take reasonable steps to prevent a breach. The FCA's Prescribed Responsibilities ensure at least one named senior manager is accountable for each key area, including compliance with the Consumer Duty.

How Principles, Rules and Enforcement Work Together

The system is layered: principles set the outcomes, sourcebooks set the rules, supervision monitors compliance, and enforcement provides deterrence. A firm can be fined for breach of a rule (e.g. a COBS 4 misstatement in a financial promotion), for breach of a Principle (e.g. PRIN 7 misleading communications), or for breach of both — and the same conduct can lead to a s.206 fine, a s.207 restitution order, and a s.166 skilled person review at the same time. The cumulative effect is what makes principles-based regulation enforceable in the UK.

Key Takeaways

• The UK regime is principles-based, supported by detailed rules in sourcebooks
• The FCA's 11 original Principles for Businesses are in PRIN 2.1; PRIN 12 (Consumer Duty) was added in July 2023
• The FCA must consult on rules and publish cost-benefit analysis (s.155 FSMA)
• Key enforcement powers include s.205 injunctions, s.206 fines, s.207 restitution, and s.166 skilled person reviews
• Senior managers are personally accountable for breaches within their areas under the SMCR