FMA publishes insights report on fair conduct programmes

  • Legal update

    08 April 2025

FMA publishes insights report on fair conduct programmes  Desktop Image FMA publishes insights report on fair conduct programmes  Mobile Image

The Financial Markets Authority (FMA) has published the Fair Conduct Programme Insights Report (Report) covering their insights following the review of 38 fair conduct programmes developed by financial institutions of varying size and complexity. Overall, the Report suggests there is a strong commitment to fair conduct, but it also makes some detailed recommendations, too. 

The Report is available here. Our newsletter on the launch of CoFI is available here

Who needs to read it? Why? 

Under the CoFI regime, all financial institutions (essentially, registered banks, licensed non-bank deposit takers and licensed insurers) are required to obtain a conduct licence and to establish, implement and maintain a fair conduct programme (FCP). 

We encourage all financial institutions to read the Report. The Report’s feedback and insights will be important, especially for those financial institutions looking for additional guidance to refine their FCPs. 

What does it cover? 

The purpose of the Report is to provide key findings and observations from the FMA’s review of several different financial institution’s FCPs, highlighting areas of good practice and noting some areas recommending improvement or further consideration.

The insights are based on reviews of 38 FCPs, including nine banks, four non-bank deposit takers, six life insurers and 19 non-life insurers.

Below is a table summarising the key insights and the corresponding recommendations from the FMA:

 

Key insight

FMA findings and recommendations

The fair conduct principle

The requirement to establish, implement and maintain an FCP that complies with the fair conduct principle. This provides an opportunity for financial institutions to reflect on its conduct and culture and how it treats customers fairly.

The FMA recommends that financial institutions continually build on their FCPs as the CoFI regime matures. 

Financial institutions should reflect on what the fair conduct principle means within the context of their business, its relevance to their operations, and how it connects to their specific policies, procedures, systems and controls. 

Making the FCP relevant

An FCP needs to be relevant and proportionate to a financial institution’s business.

Considering nature, size and complexity when developing an FCP allows financial institutions to focus on what is most relevant to them.

The FMA suggest that financial institutions can demonstrate how they have considered the specific factors that characterise their business when establishing their FCP, for instance explaining their consumer base and the specific details of their services or products. 

Policies, processes, systems and controls (PPSC), and the FCP structure 

The framework that financial institutions use to support their FCP should be relevant and proportionate

As there are no prescriptive requirements regarding structure, financial institutions should design their FCP based on what works best for the business. 

The FMA recommend financial institutions consider who their FCP is written for, how easy it is to access and use relevant information, and whether information is presented in a clear way.

Products and services

The FMA want consumers to have access to appropriate products and services that meet their needs.

FCPs must include PPSCs that relate to product design, distribution and review, to ensure consumers continue to receive fair treatment and their objectives are being met

The FMA recommend financial institutions consider the impact their products and services will have on consumers and how these are designed, marketed, sold and managed – ensuring consumer outcomes are considered at all phases of the product (or service) lifecycle.

Types of consumers, including those in vulnerable circumstances 

The FMA wants to ensure consumers, especially those in vulnerable circumstances, are treated fairly by financial institutions.

Financial institutions are required in their FCP to have regard to the types of consumers they deal with, including those in vulnerable circumstances.

Financial institutions should understand who a vulnerable consumer might be in the context of their business and what fair treatment looks like for those consumers.

The FMA recommends that financial institutions regularly communicate with their consumers to monitor whether their circumstances have changed, and their objectives are being met. 

Similarly, the FMA recommend financial institutions engage with third-party support groups such as charities, counsellors, and support services, to improve their understanding of vulnerability.

Distribution methods and the use of intermediaries 

The FMA wants financial institutions to treat consumers fairly, regardless of the distribution channel they use. 

The FMA want financial institutions to have distribution methods that are fit for purpose, to maintain clear oversight of intermediaries, understand the risks associated with different distribution methods and have PPSCs in place to mitigate these risks, and record this information in their FCP.

Training

Training programmes need to be relevant, proportionate and tailored to the FI’s business. 

The primary purpose of training is to ensure employees understand the fair conduct principle and what they need to do to treat customers fairly.

The FMA recommend financial institutions have in place appropriate controls to ensure that employees have completed and understood any training, and be able to evidence this (i.e. a training register).

Complaints process

The FMA wants consumers (and others who wish to do so) to be able to make a complaint easily, and to ensure that financial institutions have processes in place to deal with these efficient, fairly and in a timely manner.

The FMA see complaints as an opportunity for financial institutions to get insights into their business and potential areas of conduct risk. 

The FMA observed most FCPs outline the complaints process but could provide more information on how financial institutions use complaints data in terms of analysis, reporting and addressing conduct risk.

The FMA also recommend that financial institutions have adequate processes for monitoring complaints from or relating to intermediaries, if applicable.

Conduct risk

The FMA want financial institutions to identify, monitor and manage conduct that fails to comply with the fair conduct principle, and to have clearly defined roles, responsibilities and accountabilities in place for managing those risks.

The FMA recommend financial institutions consider whether the PPSCs they have in place allow them to do this, in a way that is proportionate to their business. These PPSCs should be effective and enable the financial institution to respond to risks swiftly and escalate matters where necessary.

FCP governance and effectiveness

The FMA wants financial institutions to have appropriate assurance and governance processes in place to assess the effectiveness of their FCP.

These processes should be proportionate to the nature, size and complexity of the financial institution’s business and include regular reviews, as well as ad hoc reviews in response to trigger events. 

Evolving risks and the FCP

Finally, the FMA observed that treating consumers fairly is not a “set-and-forget activity”.

The FMA recommends financial institutions foster a culture that proactively identifies, monitors, and manages both current and evolving risks relevant to their business, and the implications for consumer outcomes.

As financial markets change, financial institutions must continuously assess and adapt their FCPs.


Encouragingly, the Report also reiterates the FMA’s intention to take an educative and collaborative monitoring approach to FCPs while the CoFI regime is still in its early years. As part of this approach, the FMA intends to keep open and collaborative relationships with financial institutions, spotlight examples of good practice, and identify evolving areas of risk the FMA believes all financial institutions should consider as the financial services landscape evolves. 

Our view

We welcome the FMA’s insights. The Report highlights numerous examples of good practice showing the strong commitment that financial institutions have made to fair conduct and the CoFI regime. Additionally, the detailed recommendations provide a clear snapshot of the FMA’s expectations, allowing financial institutions to consider whether their FCPs may need adjustments to align with these expectations.

It is important to note that the FMA continues to emphasise that CoFI is designed as a principles-based regime, granting financial institutions the flexibility to design their FCPs in a way that fits their business model, size and complexity. While no one particular framework or structure was prescribed, financial institutions may wish to review their FCPs against the recommendations of the FMA generally, and consider whether to make any adaptions to their FCPs.

The FMA also reiterated the importance of FCPs as “living documents” that should evolve to remain effective as consumers, business models, and key risks change. As part of this, the FMA signalled that governance bodies and other management figures should continue to be proactive in updating their FCPs to reflect novel risks brought about by changes that may impact the conduct risks faced by their business. The rapid adoption of AI, and the increasingly sophisticated nature of scams and frauds, were particular call-outs of the FMA.

If you have any questions about the Report or wish to discuss your FCP in light of the FMA’s recommendations, please reach out to one of our experts.

 

This article was co-authored by Edward Kruger an Intern in our Financial Services team.