FCA Enforcement Trends: What SMF Holders Need to Know

Individual Accountability Is No Longer the Exception

In the years immediately after the SMCR’s introduction, enforcement action against named individuals remained relatively rare — most cases still resolved at firm level, with individual SMF accountability more a theoretical backstop than an active enforcement tool. That balance has shifted. The FCA has increasingly pursued individual senior managers directly, particularly where a firm’s own governance failure can be traced to a specific, identifiable gap in that individual’s oversight. Anyone taking on an SMF designation today should assume the personal accountability attached to it is a live enforcement risk, not a theoretical one.

The FCA publishes its decisions as final notices, and its enforcement pages set out how it approaches investigations. Read together, the cases involving individuals show consistent themes about what the regulator expects of a Senior Manager, and they are worth knowing whether you hold an SMF today or are about to take one on.

What the Pattern of Cases Actually Shows

The “reasonable steps” defence is narrower than it sounds

The Duty of Responsibility requires an SMF holder to show they took reasonable steps to prevent a regulatory breach within their area. In practice, “reasonable steps” has been interpreted more narrowly than many senior managers initially assume. Delegating a task isn’t itself a defence if the individual failed to follow up on whether it was actually being done properly. Being unaware of a problem isn’t a defence if a reasonably diligent person in that role should have known. The bar is active oversight, not passive good intentions.

Documentation gaps are treated as substantive failures

A recurring theme across enforcement cases is that poor documentation of decision-making — no clear record of what was considered, what was challenged, what was escalated — is treated by the regulator as evidence the oversight itself was inadequate, not simply as an administrative shortcoming. SMF holders who can produce a clear paper trail of genuine challenge and escalation are in a materially stronger position than those who can only assert, after the fact, that appropriate oversight occurred.

Committee chairs are not shielded by collective decision-making

Board and committee decisions are, by design, collective. Enforcement action has nonetheless targeted committee chairs specifically where the chair’s own conduct of the committee — inadequate challenge, insufficient escalation, a failure to ensure the committee actually had the information it needed — fell short, independent of what the rest of the committee did. This is a direct, practical illustration of why SMF9, SMF10, SMF11, SMF12 and SMF14 holders can’t rely on “the board decided” as a shield.

Control function independence gets specific scrutiny

Where enforcement action has touched SMF4, SMF5 or SMF16 holders, a common thread is a control function that lacked genuine independence from the business lines it was meant to be overseeing — either through a compromised reporting line or through the individual’s own insufficient willingness to escalate uncomfortable findings. This reinforces a point we make across our designation guides: independence has to be structurally real, not simply asserted.

Financial crime failures reach the MLRO personally

Anti-money laundering failings remain one of the most common sources of enforcement action, and they increasingly reach the individual as well as the firm. Where customer due diligence, transaction monitoring or suspicious activity reporting has failed for a long period, the MLRO’s own oversight, escalation and reporting to the board are examined closely. See our guides to transaction monitoring and the annual MLRO report.

Prohibition follows serious failures of integrity

Where a case shows a lack of honesty or integrity, rather than a competence failing, the FCA can prohibit the individual from working in financial services, as well as fining them. Our guide to FCA prohibition orders explains how that works.

The Five Lessons for Any SMF Holder

Our guide to the duty of responsibility and reasonable steps covers each in more detail.

What This Means for Recruitment, Not Just for Incumbents

These patterns matter directly to how firms should approach an SMF search. A candidate’s prior experience of actually documenting genuine challenge and escalation — not simply attending meetings where challenge was theoretically possible — is a meaningfully better predictor of how they’ll perform under the Duty of Responsibility than general seniority. Reference conversations that probe specifically for this — “tell me about a time you escalated something the business didn’t want to hear, and show me how that was recorded” — surface far more useful signal than a standard competency-based reference check.

It also means firms should think about the infrastructure around an SMF appointment, not just the individual. A strong candidate placed into a firm with poor governance documentation practices, or a reporting structure that compromises their independence, is being set up to carry personal accountability for a structural problem that predates their appointment. Part of a properly run search is flagging this to the firm before the appointment is made, not leaving the incoming SMF holder to discover it on their own.

Firms that want an independent view of whether their structure would hold up can use our governance and SMF structure review before making an appointment.

Why This Reinforces Rather Than Changes Our Approach

None of this changes the fundamentals we build into every search — the fit and proper assessment shaping the shortlist, sector-specific rather than general regulatory experience, and genuine independence rather than formal independence on paper. It does reinforce why those fundamentals matter as much as they do: the gap between a candidate who looks right on paper and one who will genuinely hold up under the Duty of Responsibility is exactly the gap that recent enforcement activity has made visible.

It is why we test for documented challenge in every search, whether for a compliance officer, an MLRO, a Chief Risk Officer or a board chair or committee chair.

Frequently Asked Questions

Can a Senior Manager be fined personally?

Yes. The FCA can fine and censure individuals, and in serious cases prohibit them from working in financial services.

What is the duty of responsibility?

It allows the FCA to take action against a Senior Manager where the firm breached a requirement in their area and they did not take reasonable steps to prevent it.

Does a good firm-wide culture protect individuals?

It helps, but each Senior Manager is judged on their own oversight of their own area. Documented challenge and follow-up are what count.

Should a candidate ask about enforcement history before accepting a role?

Yes. Our guide to accepting an SMF role covers the due diligence a candidate should do before saying yes.