The Regulatory Shift Is Now Operational What changed: The Financial Conduct Authority’s new Handbook guidance on non-financial misconduct took effect on 1 September 2026. At the same time, the scope of the Conduct Rules was expanded for individuals working at non-bank firms. This is not a cosmetic policy update. It represents a material change in how personal conduct, workplace culture and regulatory fitness may be assessed across the financial sector. Non-Financial Misconduct Is No Longer Treated as a Private HR Matter The central legal consequence: Conduct that does not directly involve customer assets, market abuse or financial reporting may nevertheless become relevant to an individual’s regulatory status. Harassment, bullying, discrimination, abuse of authority and other serious workplace misconduct can now raise questions about integrity, reputation, judgment and suitability to perform a regulated role. Fact-Specific Analysis Remains Essential There is no automatic finding of regulatory unfitness: The FCA’s approach does not convert every workplace dispute into a regulatory breach. Each case must be assessed on its facts, including the seriousness of the conduct, the evidence available, the individual’s role, the relationship between the conduct and the regulated function, and whether the behaviour reveals a wider failure of judgment or integrity. The Conduct Rules Create a Wider Accountability Net Why firms should pay attention: The expanded application of the Conduct Rules increases the number of individuals whose conduct may attract regulatory scrutiny. Firms can no longer assume that non-bank status provides meaningful insulation from expectations concerning integrity, respect, accountability and responsible behaviour. Governance Failures May Become the Real Enforcement Risk The most serious exposure may sit with the institution: A firm that ignores credible allegations, delays investigation, protects senior personnel, or applies inconsistent disciplinary standards may create a separate governance problem. The issue is no longer limited to whether an employee behaved improperly. Regulators may also examine whether the firm identified, escalated, investigated and remediated the risk in a credible manner. Employment Law and Regulatory Law Now Interlock Compliance teams must work across legal boundaries: Recent employment law changes, including a strengthened duty to prevent sexual harassment and the prospect of uncapped compensation for unfair dismissal, materially affect the handling of misconduct cases. A poorly designed regulatory investigation can create employment claims; an overly cautious employment process can leave regulatory risks unresolved. Evidence Quality Will Determine the Outcome Documentation is a control, not an administrative afterthought: Firms should preserve the complaint, investigative methodology, witness evidence, decision-making rationale, disciplinary analysis and escalation record. Conclusions must be proportionate and defensible. Unsupported assumptions, informal settlements and inconsistent treatment of comparable cases are particularly dangerous where an individual’s regulated status may be affected. Senior Status Increases the Risk of Regulatory Consequences Power and influence matter: Misconduct by a senior individual may carry greater regulatory significance because it can indicate cultural failure, abuse of authority or weak tone from the top. Seniority does not automatically establish a breach, but it can intensify the assessment of foreseeable harm, institutional impact and management responsibility. What Firms Should Do Immediately Minimum control priorities: Firms should review their conduct policies, disciplinary procedures, whistleblowing arrangements, investigation protocols and fitness assessments. They should also test whether HR, legal and compliance teams apply consistent standards, whether allegations are escalated promptly, and whether the firm can distinguish ordinary employment disputes from conduct that may affect regulatory fitness. The Critical Question for Boards Boards should ask one direct question: If the FCA reviewed the firm’s response to a serious allegation tomorrow, could the institution demonstrate a fair, independent, timely and evidence-based process? If the answer is uncertain, the weakness is not merely procedural. It may indicate a failure of governance, culture and regulatory control. Conclusion: Compliance Must Move Beyond Formal Rules The practical message is uncompromising: Non-financial misconduct is now part of the broader regulatory conversation about integrity, accountability and institutional culture. Firms that treat these cases as isolated personnel disputes will face avoidable legal and supervisory exposure. The defensible approach is disciplined fact-finding, consistent treatment, clear escalation and documented reasoning. Regulatory resilience will depend less on the existence of policies than on whether those policies operate credibly when powerful individuals are involved.
