About a-team Marketing Services
The knowledge platform for the financial technology industry
The knowledge platform for the financial technology industry

A-Team Insight Blogs

UK FSA Pokes Holes in Investment Firms’ Protection of Client Assets

Subscribe to our newsletter

This week, the UK Financial Services Authority published another “Dear CEO” letter, this time aimed at compelling insurance brokers and investment firms to improve the way they protect client assets, including record keeping considerations. The letter, sent by the FSA’s managing director of risk, Sally Dewar, warns that firms must take heed of the regulator’s client money and custody requirements (CASS) or face further action.

Dewar’s letter is a response to the findings of the regulator’s recent report into firms’ compliance with FSA Principle 10, which states that a firm must arrange adequate protection for clients’ assets when it is responsible for them. The report is itself a follow up to the FSA’s “Dear Compliance Officer” letter, issued back in March last year, in which it warned firms of the impending research into their client asset management practices.

The FSA has indicated that many of the 50 firms it surveyed during the six month research period were found wanting in terms of their control of client assets, including their recordkeeping and data management around the storage of these assets. Thus far the regulator has taken action against four firms by freezing one firms assets, banning another from taking on new business and referring two others to its enforcement division for possible disciplinary action.

This is all part of the regulator’s crackdown on the systems and controls aspects of its overall regulatory reporting regime. It is seeking to prove its seriousness in cracking down on those that are found to be lacking. “This intensive supervision will persist and we will continue to take action where we believe that client assets are not sufficiently protected,” warns Dewar in her letter.

The range of problems identified in the report must be tackled immediately and due diligence must be restored, the FSA contends. Much like the FSA’s recent letter on liquidity risk, these CEOs must now write back and confirm that they are taking heed of these problems.

The next month or so should see an increase in investment in firms’ compliance systems and controls in order to meet these demands. This will likely include an extra level of data scrutiny with regards to providing an audit trail for the storage of these client assets.

Subscribe to our newsletter

Related content

WEBINAR

Recorded Webinar: Sponsored by FundGuard: NAV Resilience Under DORA, A Year of Lessons Learned

The EU’s Digital Operational Resilience Act (DORA) came into force a year ago, and is reshaping how asset managers, asset owners and fund service providers think about operational risk. While DORA’s focus is squarely on ICT resilience and third-party dependencies, its implications extend deep into core operational processes that are critical to market integrity, investor...

BLOG

Introducing RegPass: A New Agentic Paradigm for Regulatory Change Management

After more than a decade shaped by document aggregation, workflow portals, and rule-mapping engines, a third generation of regulatory intelligence platforms is beginning to emerge. These systems move beyond collecting and classifying regulatory updates. Instead, they attempt something more ambitious: to understand, model and reason about a firm’s actual business operations, and to connect regulatory...

EVENT

RepRisk Sustainability Breakfast Roundtable London

The London sustainability breakfast is part of the global roundtable thought leadership event series hosted by RepRisk in key markets, including, New York, Toronto, London, Frankfurt, Oslo, Copenhagen, Stockholm, Hong Kong and Singapore in 2026.

GUIDE

GDPR Handbook

The May 25, 2018 compliance deadline of General Data Protection Regulation (GDPR) is approaching fast, requiring financial institutions to understand what personal data they hold, why they process it, and whether it is shared with other organisations. In line with individuals’ rights under the regulation, they must also provide access to individuals’ personal data and...