AML for Professions – Preparing for Transition to FCA Regulation

Why It Matters

The change forces firms to overhaul data collection and governance, exposing them to stricter enforcement and potential multi‑regulator penalties, while offering a chance to modernise risk analytics.

Key Takeaways

• FCA will demand comprehensive, deadline‑driven AML data submissions
• Missing or guessed data could trigger regulatory censure
• Dual regulation risk rises as legacy regulators may use FCA findings
• Individual authorisation will increase personal liability for AML compliance
• Audit systems now to capture data FCA is likely to request

Pulse Analysis

The Financial Conduct Authority’s decision to assume anti‑money‑laundering (AML) oversight of professional services marks a shift toward a more data‑centric supervisory model. Unlike the Solicitors Regulation Authority, which relies on periodic narrative reports, the FCA is expected to require firms to submit granular transaction counts, value totals, high‑risk jurisdiction metrics, source‑of‑funds details and sanctions‑match statistics on strict deadlines. This approach mirrors the regulator’s broader strategy of thematic reviews, where comprehensive datasets enable algorithmic risk scoring and early‑warning alerts. As a result, firms will need robust data‑capture infrastructure to meet the new expectations.

For firms, the immediate impact is twofold. First, any gaps, approximations or late filings will likely attract FCA censure, as the regulator has signaled a zero‑tolerance stance on incomplete records. Second, legacy regulators may repurpose FCA‑identified AML breaches as evidence of broader conduct failures, creating a de‑facto double‑regulation environment. Moreover, the FCA’s permission regime will extend authorisation to individual advisers, raising personal accountability and potentially increasing professional indemnity costs. Companies that already operate mature AML controls will find the transition smoother, while those reliant on legacy systems face costly upgrades and heightened compliance risk.

Practically, firms should begin by confirming that existing AML policies satisfy current rules, then map the additional data fields the FCA is expected to demand. System audits must verify that onboarding, transaction monitoring and sanctions screening tools capture the required metrics, and third‑party data providers should be vetted for source transparency. Ongoing monitoring of FCA guidance—through industry groups such as the Compliance Collective—will help translate regulatory updates into actionable processes. By treating the transition as an opportunity to modernise data governance, firms can not only avoid penalties but also leverage richer analytics for risk management and client‑service differentiation.