Study guide
6.2 Principles-Based Regulation, Duties and Enforcement Powers
CeMAP Module 1 Financial Services, Regulation and Ethics
Track your progress as you read
Finished sections get a check mark.
1 Introduction
1.1 About the CeMAP Module 1 (FSRE) Exam 1.2 How to Use This Study Guide
2 UK Financial Services Industry and the Wider Economy
2.1 Purpose and Role of Money and Financial Markets 2.2 Structure of UK and International Financial Markets 2.3 Types of Main Markets and Market Participants 2.4 Asset Classes and Their Characteristics 2.5 The UK Government, EU Influence and International Standards 2.6 Bank of England, Financial Institutions and Financial Crime
3 Serving the Retail Consumer
3.1 Consumer Perceptions and Firm Obligations 3.2 Consumer Financial Needs and How They Are Met 3.3 Product Types and Their Functions
4 Legal Concepts for Financial Advice
4.1 Legal Entities and Powers of Attorney 4.2 Law of Contract and Agency 4.3 Property Ownership, Insolvency and Bankruptcy 4.4 Wills and Intestacy 4.5 Trusts: Structure, Purpose and Types
5 Development of UK Financial Services Regulation
5.1 History of UK Regulation 1986–2021 5.2 The UK Regulatory Framework and Other Regulators 5.3 Additional Oversight: Senior Management, Auditors, Trustees and External Compliance
6 The FCA and PRA and Their Handbook
6.1 FCA and PRA: Statutory and Operational Objectives 6.2 Principles-Based Regulation, Duties and Enforcement Powers 6.3 Purpose and Structure of the FCA Handbook 6.4 High-Level Standards and the Training and Competence (T&C) Regime 6.5 Prudential Standards, CASS and the SMCR 6.6 Conduct of Business (COBS) Rules 6.7 Regulatory Processes, Regulated Activities and Authorisation
7 Advising Clients: Skills and Process
7.1 Communication Skills for Advisers 7.2 Gathering Information and the Fact-Find 7.3 Assessment, Analysis and Identifying Appropriate Solutions 7.4 Recommendations, Conclusions and Insistent Clients
8 Principles for Businesses and Conduct Rules
8.1 Principles for Businesses and Conduct of Business Rules 8.2 Preventing Harm, the Market Conduct Code (MAR) and Conduct Risk 8.3 Corporate Culture, Leadership and Senior Management Responsibilities 8.4 Consumer Rights and Unfair Contract Terms
9 Regulatory Framework Rules and Consumer Protection
9.1 Record Keeping, Reporting and Notification Requirements 9.2 Anti-Money Laundering and Proceeds of Crime 9.3 Data Protection and Data Security 9.4 Complaint Handling and the Financial Ombudsman Service 9.5 FSCS, Treating Customers Fairly and Conduct Risk
10 The Regulatory Advice Framework
10.1 Client Relationships, Adviser Responsibilities and Types of Clients 10.2 Fiduciary Relationships and Types of Service Provision 10.3 Disclosure Requirements and Adviser Charging 10.4 Limitations to Authority, Cancellation Rights and Vulnerable Clients 10.5 Regulated Advice Standards and Due Diligence on Products 10.6 Monitoring and Reviewing Client Circumstances
11 Ethics and Professional Behaviour
11.1 Core Ethical Theories, Principles and Values 11.2 Impact of Ethical Principles and Professional Codes of Conduct 11.3 The Code of Ethics and Resolving Ethical Dilemmas 11.4 Business Ethics, Whistleblowing and Ethical Culture 11.5 Professionalism, CPD and Ethical vs Compliance-Driven Behaviour
6.2 Principles-Based Regulation, Duties and Enforcement Powers
Key Takeaways Explain This Topic AI
The UK regime is principles-based: high-level outcomes are set by the FCA, with detailed rules in sourcebooks such as COBS and MCOB filling in the application
The FCA's 11 original Principles for Businesses (PRIN 2.1) cover integrity, skill, care, diligence, management, financial prudence, market conduct, customers' interests, communications, conflicts, suitability, clients' assets, and relations with regulators
Principle 12 (Consumer Duty), detailed in PRIN 2A, requires firms to act to deliver good outcomes for retail customers
FSMA gives the FCA enforcement powers including s.205 injunctions, s.206 financial penalties, s.207 restitution orders, and s.166 skilled person reviews
Under the SMCR, individual senior managers can be held personally liable for breaches within their areas of responsibility
Last updated: September 2026
The UK's regulatory regime is principles-based , meaning regulators set high-level outcomes that firms must achieve, rather than prescribing every detail of how to achieve them. This contrasts with the rules-based approach (more common in the US) where every permissible and impermissible action is enumerated. Both have strengths: principles are flexible and outcome-focused; rules are certain and easy to enforce mechanically. The FCA uses both — the 11 (now 12) Principles for Businesses set outcomes, while detailed sourcebooks such as COBS and MCOB fill in the rules.
Principles-Based vs Rules-Based Regulation
- Feature Principles-Based Rules-Based
- Form High-level, outcome-focused Detailed, prescriptive
- Flexibility Adapts to new products and business models Lags market innovation
- Enforcement Regulator must show harm to principle Often strict-liability breach
- Certainty Lower — firms must interpret Higher — explicit compliance steps
- Risk Box-ticking culture if over-detailed Outcomes ignored if literal compliance
The FCA's view is that principles plus rules together deliver better outcomes than rules alone. A firm can comply with a detailed rule but still breach a Principle if it has produced a poor consumer outcome — the FCA can use the Principle to enforce even where no specific rule was broken.
FCA's 11 Principles for Businesses (PRIN 2.1)
The Principles for Businesses are the most high-level standards in the Handbook. They apply to every authorised firm and underpin every other rule. A firm that breaches a Principle is liable to enforcement action.
- Integrity — A firm must conduct its business with integrity
- Skill, care and diligence — A firm must conduct its business with due skill, care and diligence
Management and control — A firm must take reasonable care to organise and control its affairs responsibly and effectively, with adequate risk-management systems
- Financial prudence — A firm must maintain adequate financial resources
- Market conduct — A firm must observe proper standards of market conduct
- Customers' interests — A firm must pay due regard to the interests of its customers and treat them fairly
Communications with clients — A firm must pay due regard to the information needs of its clients, and communicate information in a way which is clear, fair and not misleading
Conflicts of interest — A firm must manage conflicts of interest fairly, both between itself and its customers and between a customer and another client
Customers: relationships of trust — A firm must take reasonable care to ensure the suitability of its advice and discretionary decisions for any customer who is entitled to rely upon its judgment
Clients' assets — A firm must arrange adequate protection for clients' assets when it is responsible for them
Relations with regulators — A firm must deal with its regulators in an open and cooperative way, and must disclose appropriately any information about which the regulator would reasonably expect notice
Principle 12 (Consumer Duty) , added in 2023, requires a firm to act to deliver good outcomes for retail customers. Under PRIN 3.2.10, Principles 6 and 7 do not apply to a firm’s activities to the extent the Consumer Duty applies; they continue to apply outside that scope. The Consumer Duty is covered in detail in section 6.6.
Regulators' Duties
The FCA and PRA have statutory duties under FSMA that govern how they exercise their powers:
Consultation duty (s.155 FSMA) — the FCA must consult on proposed rules unless impracticable, publishing a cost-benefit analysis
Cost-benefit analysis — the FCA must have regard to the costs and benefits of its rules
Principles of good regulation (s.3B FSMA) — including proportionality, accountability, transparency, the desirability of sustainable growth, and senior management responsibility
- Coordination duty — the FCA and PRA must coordinate on concurrently regulated firms
- Annual reporting — both regulators report annually to Parliament
- Enforcement Powers
FSMA gives the FCA a wide toolkit to respond to misconduct. Key powers include:
Power Statutory Source Effect
Injunctions and restitution s.205 FSMA The FCA can apply to court for an injunction or restitution order where a firm has breached requirements
Financial penalties s.206 FSMA The FCA may impose a financial penalty on an authorised firm or approved person for misconduct
Restitution orders s.207 FSMA The FCA may require a firm to pay restitution to consumers harmed by a rule breach
Skilled persons reviews s.166 FSMA The FCA may appoint a skilled person to investigate or report on a firm's activities; costs borne by the firm
Withdrawal of authorisation s.4 FSMA The FCA may refuse or withdraw authorisation where a firm no longer meets the Threshold Conditions
Prohibition orders s.56 FSMA The FCA may prohibit an individual from performing regulated functions
The FCA publishes enforcement notices and the Enforcement Guide (ENFG) sets out its decision-making procedure. Penalties are subject to a five-step process (DEPP 6) that accounts for seriousness, harm, disgorgement, mitigating factors and a 3.0x multiplier for deterrence.
Senior Manager Liability
Under the Senior Managers and Certification Regime (SMCR) , individual senior managers can be held personally liable for breaches within their areas of responsibility. Each Senior Manager must have a Statement of Responsibilities that maps to their firm's Management Responsibilities Map . The Conduct Rules (COCON) apply directly to individuals, and a senior manager can be fined or prohibited for failing to take reasonable steps to prevent a breach. The FCA's Prescribed Responsibilities ensure at least one named senior manager is accountable for each key area, including compliance with the Consumer Duty.
How Principles, Rules and Enforcement Work Together
The system is layered: principles set the outcomes , sourcebooks set the rules , supervision monitors compliance , and enforcement provides deterrence . A firm can be fined for breach of a rule (e.g. a COBS 4 misstatement in a financial promotion), for breach of a Principle (e.g. Principle 7 misleading communications where Principle 7 applies), or for breach of both — and the same conduct can lead to a s.206 fine, a s.207 restitution order, and a s.166 skilled person review at the same time. The cumulative effect is what makes principles-based regulation enforceable in the UK.
- Key Takeaways
- The UK regime is principles-based, supported by detailed rules in sourcebooks
The FCA's 11 original Principles for Businesses are in PRIN 2.1; Principle 12 (Consumer Duty), detailed in PRIN 2A, was added in July 2023
The FCA must consult on rules and publish cost-benefit analysis (s.155 FSMA)
Key enforcement powers include s.205 injunctions, s.206 fines, s.207 restitution, and s.166 skilled person reviews