What are the FCA's rules on non-financial misconduct?

Last reviewed

Short answerRegulated financial services firms

Since 1 September 2026, the FCA's Code of Conduct (COCON) has applied to serious bullying, harassment and violence by conduct rules staff towards colleagues in firms other than banks, as it already did in banks. New FCA guidance explains when such behaviour breaches the conduct rules and how it bears on fitness and propriety.

What the new rule covers

The FCA describes non-financial misconduct (NFM) as behaviour that is not clearly financial in nature, such as bullying, harassment and violence. The new rule, COCON 1.1.7FR, applies to firms under the Senior Managers and Certification Regime other than SMCR banking firms, where the conduct rules already had wider scope. It extends COCON to unwanted conduct by conduct rules staff that has the purpose or effect of violating a colleague's dignity or creating an intimidating, hostile, degrading, humiliating or offensive environment for them, and to conduct that is violent.

The people protected include the firm's employees and those of its group, people who perform its functions, and people who provide services to it. The FCA says the rule applies where there is a sufficient work-related link and does not apply retrospectively.

When it breaches the conduct rules

FCA guidance in COCON 4.3 says the rule only covers conduct that is serious. Behaviour breaches Individual Conduct Rule 1 if it shows a lack of integrity, or Rule 2 if it shows a failure to act with due skill, care and diligence.

  • Whether the conduct is repeated or part of a pattern, and how long it lasted
  • The size of the impact on the person affected
  • The seniority of the person responsible, and any power they have over the other person's career
  • A single incident can be enough, and physical violence is covered as well as words and messages

What firms should and need not do

The FCA says firms should have considered whether to update staff policies, conduct breach reporting, fit and proper assessments and regulatory references, and make sure staff and managers understand the changes.

It also says firms do not need to re-examine past conduct breach decisions or past fitness and propriety assessments, monitor employees' private lives or social media, investigate trivial, implausible or irrelevant allegations about private lives, or do anything contrary to privacy, employment or other law. A fair investigation and disciplinary process under the Acas Code still applies.

Sources

General information for employers in Great Britain, not legal advice. Check the official sources for your situation.

Key dates1 key date

  1. COCON 1.1.7FR and the FCA's NFM guidance came into force

Future dates are expected dates and depend on Parliament.

What employers can do

  • Confirm which staff are conduct rules staff and brief them on the new rule
  • Update bullying, harassment and violence policies to refer to the conduct rules
  • Add NFM to your conduct breach assessment and reporting process
  • Train managers to recognise and escalate serious allegations
  • Review how NFM findings feed into fitness and propriety and regulatory references
  • Keep investigations fair, documented and consistent with employment and privacy law
Get help with this Workplace investigations

Want a second pair of eyes on this?

HRjoy can help: Workplace investigations. Tell us what’s happening and we’ll reply to talk through scope.

Start this brief