Home › Blog › UK conduct and compliance

The FCA Appointed Representative Regime in 2026: Principal Firm Obligations

Published 24 August 2022 · Last reviewed 17 October 2026 · Buckingham Capital Consulting
Contents
  1. What an appointed representative is
  2. From proposals to rules in force
  3. Who can be an AR and what it can do
  4. Before appointing an AR
  5. Ongoing oversight
  6. The annual review and self-assessment
  7. Notifications and data reporting
  8. Financial resources, insurance and complaints
  9. The Consumer Duty and ARs
  10. Ending an appointment or moving to direct authorisation
  11. AR or direct authorisation: which route
  12. What a principal needs in place
  13. Frequently asked questions
Key takeaways
  • An appointed representative (AR) carries on regulated activities under the responsibility of an FCA-authorised principal firm, which is responsible for the AR's conduct as if it were its own.
  • The FCA's AR rules in PS22/11 were published on 2 August 2022 and have applied since 8 December 2022; they are the rules in force today.
  • At the end of March 2026 there were 2,431 principal firms and 33,347 ARs: 20,728 full ARs and 12,619 introducer ARs.
  • A principal must notify the FCA at least 30 days before an appointment takes effect, at least 10 calendar days before an AR's regulated activities change, and within 10 business days of other changes.
  • Each AR must be reviewed at least every 12 months, and the principal's governing body must sign off an annual self-assessment that is kept for at least 6 years.
  • Principals report complaints and revenue data for each AR every year on REP025, within 60 business days of the annual reporting date.

What an appointed representative is

An appointed representative is a business that carries on regulated activities without its own FCA authorisation, under the responsibility of an authorised firm called the principal. Section 39 of the Financial Services and Markets Act 2000 exempts the AR from the general prohibition, and makes the principal responsible for what the AR does in carrying on that business, to the same extent as if the principal had expressly permitted it.

The model lets a business start regulated activity quickly under an established firm's permissions and controls. It is common for insurance and mortgage intermediaries, financial advisers, investment advisers and arrangers, credit brokers and firms offering finance at the point of sale.

Full ARs and introducer ARs

There are two types. A full AR can carry on any of the activities its principal permits within the scope of the Appointed Representatives Regulations. An introducer AR (IAR) is limited to making introductions and distributing financial promotions, and some notification requirements are lighter for IARs, although the principal must still oversee them.

FCA population, end March 2026Number
Principal firms2,431
Appointed representatives in total33,347
Full appointed representatives20,728
Introducer appointed representatives12,619

The figures come from the FCA's appointed representatives data, published on 5 June 2026.

From proposals to rules in force

The changes this article first described in 2022 as proposals are now the rules. The FCA published its final rules in policy statement PS22/11 on 2 August 2022 and they took effect on 8 December 2022. They strengthened principals' responsibilities, required more information about each AR and introduced new notification forms.

DateChange
2 August 2022PS22/11 final rules published
8 December 2022New principal obligations and AR notification forms in force
8 to 12 December 2022FCA sent principals a section 165 request for information about their ARs, with responses due by 28 February 2023
31 July 2023Consumer Duty applied to open products, including those distributed through ARs
31 July 2024Consumer Duty applied to closed products

The notice period for a new appointment, which the 2022 proposals described as moving from 60 days to 30, is now 30 days. The annual review, the annual self-assessment and the annual complaints and revenue reporting described in the proposals are all live obligations. The detail is in chapter 12 of the FCA's Supervision manual (SUP 12) and on the FCA's principals and appointed representatives page.

Who can be an AR and what it can do

The activities an AR can carry on are set by the Appointed Representatives Regulations 2001. They cover arranging and advising across insurance, investments, home finance and consumer credit broking, among others, but not activities such as accepting deposits or effecting contracts of insurance. The AR's agreement with its principal sets the exact scope, and the AR can only act within both.

  • Multiple principals: an AR can have more than one principal, but the principals must agree how responsibility is shared, and a new principal triggers an extra review.
  • Authorised firms as ARs: an authorised firm can be an AR for activities outside its own permission.
  • Payment and e-money businesses: the AR regime is an FSMA regime. Agents of payment institutions and distributors of e-money are registered under the Payment Services Regulations 2017 and the Electronic Money Regulations 2011 instead, and the principal institution remains responsible for them.
  • Regulatory hosting: a principal whose business model is to host ARs that are unconnected to its own business must give the FCA at least 60 days' notice before it starts providing that service.

Before appointing an AR

The principal's responsibility starts before the appointment. It assesses whether the AR is fit and proper, financially stable and suitable for the activities, and whether the principal itself has the skills and resources to oversee it.

  1. Due diligence: review the AR's business model, ownership, senior managers, finances, regulatory history and the regulated and unregulated activities it carries on.
  2. Fitness and propriety: assess the competence, capability, honesty and financial soundness of the AR's senior management and the people who will carry on regulated activities.
  3. Written agreement: set out the permitted business, the principal's rights of access and control, reporting obligations, and how and when the relationship can be ended.
  4. Resources check: confirm the principal's compliance, monitoring and financial resources cover the new AR's business.
  5. Notification: notify the FCA on Connect at least 30 days before the appointment takes effect, with the information the forms require, which is fuller for full ARs than for IARs.
  6. Approved persons: where the AR's individuals need approval, such as for certain senior roles, apply for it before they start.

Ongoing oversight

The FCA expects principals to oversee ARs to the same standard as their own employees. Its guidance groups the obligations into five areas.

AreaWhat the principal does
PeopleAssesses the fitness, propriety, competence and capability of the AR's senior management, and keeps that assessment current
Delegation safeguardsManages conflicts of interest, applies enhanced monitoring where needed, and extends financial crime policies and procedures to the AR
Controls and resourcesAssesses regularly whether its controls and resources are adequate; if they are not, notifies the FCA and postpones or ends appointments
Risk of harmMonitors the risk the AR poses to consumers and market integrity, using complaints, file reviews and management information
StandardsHolds the AR to the same standards as its own staff, including the Consumer Duty

In practice that means a documented monitoring plan for each AR, regular file reviews, sales and complaints data reviewed against thresholds, mystery shopping where appropriate, and a clear process for escalating and remedying issues. Where an issue is significant, the principal tells the FCA under Principle 11, which requires firms to be open and cooperative with the regulator.

Worked example: a principal with 20 insurance intermediary ARs

A general insurance broker acts as principal to 20 ARs. Its monitoring plan rates each AR by volume, complaints and product type. Higher-rated ARs receive quarterly file reviews and monthly sales and complaints data; lower-rated ARs receive a half-yearly review. Each AR has a written annual review covering its senior management, its finances and the adequacy of the principal's oversight, and the board signs off one self-assessment for the network each year. When one AR's complaints double in a quarter, the principal carries out an additional review, restricts the products it may sell until the cause is fixed, and records the decision for the FCA.

The FCA publishes separate guidance for principals with larger networks, where the scale of the network calls for dedicated oversight teams and systems.

The annual review and self-assessment

Annual review of each AR

Each AR must be reviewed at least every 12 months. The review covers the fitness and propriety of the AR's senior management, the AR's financial position and whether the principal's controls and resources are still adequate for it. It is recorded in writing, and significant issues are escalated to the principal's governing body.

An additional review is needed when an AR changes its business model or regulated activities, is appointed by another principal, or has a significant rise in complaints.

Annual self-assessment

The principal prepares a single self-assessment document covering its AR network, which its governing body reviews and signs off at least every 12 months. It identifies risks and any gaps in compliance, is kept for at least 6 years and is provided to the FCA on request. For a principal with many ARs, it is the document that shows the board understands the network it is responsible for.

Notifications and data reporting

Principals report through Connect and RegData. The main deadlines are below.

EventDeadline
New AR appointmentAt least 30 days before it takes effect
Change to an AR's regulated activitiesAt least 10 calendar days before the change
Other changes to AR detailsWithin 10 business days of the change
Starting regulatory hostingAt least 60 days before
Annual complaints and revenue data for each AR (REP025)Within 60 business days of the annual reporting date

REP025 asks for each AR's complaints and its revenue, split between regulated and unregulated business. Keeping that data accurate through the year, rather than assembling it once a year, also gives the principal the management information it needs for oversight.

Financial resources, insurance and complaints

A principal's financial resources must reflect the business its ARs carry on, including IARs, because the principal is responsible for that business and any redress that follows. Where the principal's permissions require professional indemnity insurance, the cover must extend to the activities of current and former ARs.

Customers of an AR complain to the principal, which handles the complaint under its own procedures and the DISP rules, and the Financial Ombudsman Service treats the principal as responsible. Complaints data feeds both the REP025 return and the principal's monitoring of each AR.

The Consumer Duty and ARs

The Consumer Duty applies to activities ARs carry on for retail customers, and to principals whose ARs materially influence or determine outcomes for retail customers even without a direct relationship. The principal's board needs to see how products sold through ARs meet the Duty's four outcomes: products and services, price and value, consumer understanding and consumer support. The firm's guide to Consumer Duty compliance sets out the board's annual report and the monitoring behind it.

Ending an appointment or moving to direct authorisation

The agreement should say when and how either side can end the relationship. When an AR is terminated, the principal notifies the FCA, arranges for existing customers to be looked after and keeps responsibility for business the AR carried on while it was appointed. Where an oversight review finds concerns the principal cannot resolve, the FCA expects it to remedy them or end the appointment.

Many ARs move to direct authorisation as they grow, to gain control over their own permissions and economics. The application follows the full authorisation process, and the AR's record under its principal is part of the evidence the FCA reviews. The firm's guide to applying for FCA authorisation covers that route.

AR or direct authorisation: which route

FactorAppointed representativeDirect authorisation
Time to startFrom 30 days after the principal notifies the FCAFCA target of 4 months for a complete application; statutory maximum 6 months
Regulatory responsibilityCarried by the principalCarried by the firm
Control of permissions and productsLimited to what the principal allowsSet by the firm's own permission
Ongoing costFees to the principalFCA fees, own compliance staff, capital and reporting
Best suited toNew entrants, firms where regulated activity is incidental, fund launchesFirms at scale or with a distinct business model

Credit brokers face the same choice; the firm's consumer credit authorisation guide covers when brokers apply directly.

What a principal needs in place

  • An AR onboarding procedure with due diligence and fitness and propriety checks.
  • A standard AR agreement that sets scope, access, reporting and termination.
  • A risk-based monitoring plan for each AR, with file reviews and data thresholds.
  • A register of ARs reconciled to the FCA's records and updated within the notification deadlines.
  • An annual review template, an annual self-assessment signed off by the board, and records kept for at least 6 years.
  • REP025 data collected through the year.
  • Financial resources and professional indemnity cover that reflect the network.
  • A senior manager accountable for AR oversight, recorded in their statement of responsibilities under the Senior Managers and Certification Regime.

The firm's regulatory compliance service reviews principal firms' AR frameworks against SUP 12 and builds the monitoring, review and reporting that the rules require.

Frequently asked questions

What is an appointed representative?

A business that carries on regulated activities without its own FCA authorisation, under the responsibility of an authorised principal firm that answers for its conduct.

Are the 2022 AR changes still proposals?

No. The FCA's final rules in PS22/11 were published on 2 August 2022 and have applied since 8 December 2022.

How much notice does a principal give the FCA before appointing an AR?

At least 30 days before the appointment takes effect, through Connect.

How often must a principal review its ARs?

At least every 12 months, with an extra review if the AR changes its business or activities, takes on another principal or has a significant rise in complaints.

What is REP025?

The annual return in which principals report complaints and revenue data for each AR, due within 60 business days of the annual reporting date.

Can a payment institution appoint ARs?

No. Payment institutions and e-money institutions use registered agents and distributors under the Payment Services Regulations 2017 and Electronic Money Regulations 2011; the AR regime applies to FSMA activities.

What is the difference between an AR and an introducer AR?

An introducer AR can only make introductions and distribute financial promotions, while a full AR can carry on the wider activities its principal permits.

References

  1. FCA: Appointed representatives and principals
  2. FCA: PS22/11 Improving the appointed representatives regime
  3. FCA Handbook: SUP 12 Appointed representatives
  4. FCA: Appointed representatives data
  5. FCA: REP025 data item FAQs
  6. Financial Services and Markets Act 2000, section 39 (legislation.gov.uk)
  7. Financial Services and Markets Act 2000 (Appointed Representatives) Regulations 2001 (legislation.gov.uk)

About Buckingham Capital Consulting

Buckingham Capital Consulting has obtained FCA authorisations since 2013 and advises principal firms on building and running their appointed representative networks, and ARs on moving to direct authorisation. The firm sets up the onboarding, monitoring, annual review and REP025 reporting that SUP 12 requires, and prepares the authorisation application when an AR is ready to stand alone.

Speak to an expert: WhatsApp +44 7563 115980, Telegram @buckinghamcapital or info@buckinghamcapitalconsulting.co.uk.

This article is general information, reviewed against the regulator’s published requirements on the date shown. It is not legal advice; the regulator’s current publications take precedence.