Requirements FCA Authorization Requirements
Obtaining FCA authorization requires meeting rigorous organizational, financial, and operational standards. The FCA applies a thorough assessment to ensure firms meet the Threshold Conditions for authorization, including requirements for effective supervision, appropriate resources, suitability, and business model viability.
Capital Requirements
Minimum initial capital of GBP 730,000 for IFPRU 730K firms (dealers and market makers) or GBP 125,000 for IFPRU 125K firms. Beyond minimum requirements, firms must complete an Internal Capital Adequacy Assessment Process (ICAAP) considering wind-down costs, operational risk, credit risk, and market risk. The FCA may impose Individual Capital Guidance (ICG) requiring capital above the minimum. Firms must maintain capital adequacy ratios and submit regular capital reporting.
Organizational Structure
The FCA requires a UK-based establishment with adequate local presence. Senior management must include FCA-approved persons in key roles including the Chief Executive (SMF1), Chief Finance Officer (SMF2), Chief Risk Officer (SMF4), Head of Compliance (SMF16), and Money Laundering Reporting Officer (SMF17). Under the Senior Managers and Certification Regime (SM&CR), all senior managers must demonstrate fitness and propriety and hold specific Statements of Responsibilities.
Compliance Framework
A comprehensive compliance framework aligned with FCA Handbook requirements including COBS (Conduct of Business Sourcebook), SYSC (Senior Management Arrangements, Systems and Controls), CASS (Client Assets Sourcebook), and SUP (Supervision Manual). Firms must implement robust AML/CTF procedures under the Money Laundering Regulations, maintain detailed complaints handling processes, conduct regular compliance monitoring, and ensure adequate management information reporting to the board.
IT Infrastructure
Robust technology infrastructure meeting FCA expectations for operational resilience. This includes comprehensive disaster recovery and business continuity plans, cybersecurity frameworks aligned with FCA guidance, data protection measures compliant with UK GDPR, transaction reporting systems for MiFIR and EMIR UK reporting obligations, secure client communication channels, and regular penetration testing. Systems must support regulatory reporting through FCA RegData and other designated channels.