Harper James advises ambitious businesses on financial services regulation under the laws of England and Wales, including FCA authorisation and the systems needed to operate responsibly. Authorisation is not simply an application form. It is a business readiness exercise covering the proposed activities, governance, financial resources, customer outcomes and day-to-day controls.
Start by defining exactly what the business will do, who it will serve and how it will earn revenue. Activities such as arranging investments, advising on investments, managing client money, providing consumer credit, operating payment services or dealing in insurance products each have specific regulatory treatment. Some activities fall within an exemption, while others require FCA permission or, for deposit-taking and certain prudential activities, PRA authorisation with FCA involvement.
The analysis should cover appointed representative arrangements, financial promotions, outsourcing and group structures. The FCA’s perimeter guidance and current application materials provide a useful starting point. Businesses researching the detail should also review this practical regulatory resource before committing to a launch timetable.
A strong application explains how the business will operate in practice. It normally includes a regulatory business plan, ownership structure, financial forecasts, governance arrangements, compliance monitoring, complaints handling, financial crime controls, information security and an orderly wind-down plan. The FCA assesses whether the applicant satisfies its threshold conditions, including appropriate resources, suitability and the ability to conduct business in a way compatible with its regulatory objectives.
Senior managers and controllers require careful attention. The firm should identify each Senior Managers and Certification Regime responsibility, prepare clear statements of responsibilities and evidence the relevant experience of proposed individuals. The application must match the organisation’s actual capability. Policies copied from another business often leave gaps around client money, conflicts, vulnerable customers, outsourcing or record keeping.
Authorisation is the start of regulatory obligations, not the end of the project. The Consumer Duty requires firms to evidence good outcomes across products and services, price and value, consumer understanding, and customer support. Operational resilience also requires important business services, impact tolerances, important third parties and testing to be documented and maintained.
Before submission, businesses should create an evidence pack containing board approvals, ownership documents, financial information, compliance policies, customer journeys, complaints procedures, training records and supplier contracts. They should also assign responsibility for FCA returns, notifications, annual fees and regulatory change. The practical next step is a permission and readiness review that maps each proposed activity to the relevant rule, document and accountable person.