Purchase regulatory templates and policies

This document sets out the key regulatory requirements relating to vulnerable customers and details the systems and controls you can implement to meet these requirements.

This document details how you should deal with customers in financial difficulties and sets out the steps that you need to take as part of your arrears management process.  The policy also includes a Customer Affordability Calculator for staff.

This document meets the FCA CONC requirements and explains how you can ensure that you lend responsibly to customers.

This document sets out the core FCA and compliance requirements which apply to a FCA regulated business. 

This document sets a framework to enable you to identify and manage the security risks relating to your payment services.

This documents sets out an approach for identifying, managing and where required reporting operational and security incidents to the FCA.

This document details how your firm can manage the money laundering risks relating to your payment services.

This document sets out a process you can adopt to wind-down your business where necessary.  It includes a list of wind-down triggers, potential resolution points and a wind-down implementation process. 

This document sets out the core FCA and compliance requirements which apply to your payment services business. 

This document sets out the high level CD obligations, the roles and responsibilities of key stakeholders  and provides a framework to enable you to demonstrate CD compliance.

This procedure sets out the steps for approving new products and services as well as any major changes to them in line with the FCA Consumer Duty Outcome 1.  The checklist lists the specific elements you need to review as part of the launch of a new product or service.

This procedure explain how you can review the performance of a FCA regulated product or service from a regulatory perspective.  The checklist lists the specific elements you should review to determine whether your product and service is continuing to deliver good outcomes. 

This template enables you to conduct your own fair value assessment for your FCA regulated business.

This PowerPoint presentation explains what Consumer Duty is and what it means.  It  includes practical examples as well as a test to assess the employee's understanding.

The document explains the actions you need to take following a data protection breach and explains when you may need to notify the incident to the ICO.

The document sets out the key data protection requirements and explains how you can meet them. 

This document enables you to conduct a data protection impact assessment and provides you with step by step guidance notes.

This document sets out the core record keeping regulatory requirements and includes a record keeping schedule which contains suggested retention periods for the various business and employee records you may have.

This document meets the FCA CMCOB requirements and provides a standard contract for a claims management company which includes the key information you have to provide to a customer at the outset.

This document meets the FCA CMCOB 4 requirements and provides a summary of the firm's services, fees, claims process, cancellation rights etc which a firm can personalise to their needs.

This template has been designed to meet the FCA's DISP rules and sets out how you should handle complaints fairly.  The wording can be personalised to reflect your internal organisation structure.

This document sets out the core FCA and compliance requirements which apply to your business. 

This policy explains the requirements relating to receiving and providing regulatory references and sets out the approach you need to follow.

This document sets out a process for determining and reporting  conduct rules breaches to the FCA.  

This is a PowerPoint presentation which explains what the conduct rules mean and includes practical examples as well as a test to assess the employee's understanding.

This is an annual attestation which is completed by the SMF role holder or the certified role holder to confirm that they remain fit and proper to continue their role.  The attestation includes various statements relating to the ongoing suitability of the role holder which they need to confirm.

This staff manual explains the key compliance requirements which relate to a SMCR firm and sets out how you can meet these requirements.

This template has been designed to meet FCA FPCOB requirements and includes an example wording which you can amend to create your own Funeral Plan summary for your products 

This document meets the FCA FPCOB wind down requirements and sets out how you can wind-down a funeral planning company which you can update to reflect your own business. 

This document sets out the key regulatory requirements relating to vulnerable customers and details the systems and controls you can implement to meet these requirements. 

This template has been designed to meet FCA FPCOB 9 and includes an example wording which you can amend to create your own Nominated Representative Document for your products.

This template has been designed to meet the FCA's DISP rules and sets out how you should deal with complaints fairly.  The wording can be personalised to reflect your internal organisation structure.

This document sets out the core FCA and compliance requirements which apply to your business. 

This policy explains the key FCA requirements and responsibilities relating to the design and approval of financial promotions and how you can meet them internally.

This document sets out a process for receiving and accepting corporate hospitality and gifts for a FCA regulated firm.  It explains what kind of behaviour is acceptable and the types of gifts and hospitality which should be refused to protect the interests of the company.

This policy is designed to protect FCA regulated firms against potential risks arising from poor and ineffective of material outsourced providers.  This document sets out the process for conducting supplier due-diligence, selecting, overseeing and monitoring material outsourcing arrangements in a FCA regulated firm.

This policy sets out the approach firms can adopt to enable employees to raise their concerns internally and to the FCA. It explains what a protected disclosure is, how employees can raise their concerns and the steps the company will take to investigate the matter. 

The policy explains the FCA's DISP rules relating to complaints handling and details the steps you will take to comply with the requirements.  The procedure provides additional guidance to staff who are involved in identifying, reporting and resolving complaints as well letter templates for responding to customers.

The CMP lists the various regulatory checks you need to take to ensure that you are able to meet your ongoing FCA obligations. It also includes the frequency of the checks and suggests potential role holders who will undertake the checks. The CMP will need to be enhanced to reflect your specific FCA business permissions.

The document provides you with a business continuity plan template which you can use in the event of an interruption to your day to day business activities. 

This policy sets out the governance, responsibilities, systems and controls a principal firm should maintain to oversee its appointed representatives throughout the AR lifecycle.

This manual provides appointed representatives with practical guidance on regulatory scope, conduct standards, Consumer Duty, complaints, financial promotions, record keeping, reporting and escalation.

This form collects information about a proposed AR’s business model, regulated activities, governance, customers, financial position, competence and control environment.

This form collects the personal, conduct, competence and fitness information required to assess an individual proposed for a CF1 role within an appointed representative.

This procedure sets out the checks, responsibilities, approval stages and escalation requirements that apply when assessing and appointing an AR or IAR. It supports the AR Due Diligence Form. 

This document explains how a principal firm should assess the regulatory, conduct, Consumer Duty, financial crime, operational, financial and governance risks associated with a proposed AR. It includes a risk assessment template for recording inherent risks, control measures, residual risk ratings, required actions and the final appointment decision.

This template documents the appointment of an AR, including its permitted activities, responsibilities, restrictions, information requirements, oversight arrangements and termination provisions.

This document establishes a risk-based framework for monitoring appointed representatives and includes an annual schedule of oversight activity and a file review checklist. It covers the scope and frequency of reviews, responsible owners, file testing, management information, reporting, ratings, escalation and remediation tracking.

This procedure explains how a principal firm should reassess each AR’s continuing suitability, activities, risk profile, competence, controls and customer outcomes at least annually. It includes an assessment template.

This procedure enables a principal firm to assess whether its governance, resources, expertise, systems and controls remain adequate for the number, type and risk profile of its appointed representatives. It includes an assessment template.

This document sets out the annual and event-driven process for reassessing the fitness, propriety, competence and continuing suitability of CF1 role holders. It includes the role holder’s declaration, the principal firm’s assessment, verification checks, challenge, final outcome and approval.

This PowerPoint training presentation explains the AR regime, principal and AR responsibilities, onboarding, financial promotions, Consumer Duty, monitoring, management information, escalation and annual review. It includes an assessment to test understanding.

This procedure sets out how a principal firm should manage the restriction, suspension or termination of an AR or IAR, including governance decisions, FCA notifications, customer communications, financial promotions, records and outstanding matters.