Employment in Financial Services

Different notification procedures exist before employees may take up their roles.

Investment firms may only entrust employees to provide investment advice if they are knowledgeable and have demonstrated the required reliability – as evidenced, inter alia, by not having a relevant and unspent prior criminal record. Furthermore, such employees’ identities must be disclosed to BaFin before they commence their activities. The active registration of employees is intended to impart upon employers the significance of employee selection and responsibility for their decisions.

Representatives of regulated entities of the financial services sector (typically, members of management) must be approved by BaFin before they can take up their role (colloquially known as BaFin’s “driver’s licence”). To obtain approval, a request must be filed with BaFin, showing the experience and suitability of the candidate for the role. Depending on the financial services delivered by the company, information that must be filed include the following:

• a CV (including information on professional training, career, and references);
• information on reliability (a form or summary to be completed by the manager, including, for example, mandatory declarations on prior criminal or administrative offences);
• a "certificate of good conduct for submission to an authority", a "European certificate of good conduct for submission to an authority", or "corresponding documents" from abroad (depending on the countries of residence in the last 10 years);
• an extract from the central commercial register;
• an overview of other mandates as a managing director or in administrative and supervisory bodies; and
• information about the manager’s ability to dedicate sufficient time to the role.

Non-management employees responsible for specific key functions at an insurance provider are subject to a similar notification process. Further, financial services employers must perform a risk analysis under the Anti-Money Laundering Act and take internal security measures, which also includes assessing the reliability of employees.

RFSPs must satisfy themselves that all CF and PCF candidates or employees comply with the F&P Standards. Pre-employment due diligence must be performed, including asking the candidate to certify they will comply with the F&P Standards and notify the RFSP immediately of any change in circumstance that may mean they no longer comply. Employers must continue to ensure that in scope employees comply with the F&P Standards and must complete an annual declaration to this effect. This means that due diligence must continue throughout the employment relationship and not just at the recruitment stage.

Candidates for PCF roles must complete an online individual questionnaire, which is submitted to the CBI in advance of appointment to the role through the Central Bank portal. The CBI must grant its approval for the PCF appointment before a candidate can take up the role. Any PCF offer of employment must be conditional on that approval being obtained. The CBI may request applicants attend an interview as part of the approval process.

Employers should take all reasonable steps to secure references from previous employers in order to due diligence the candidate's compliance with the F&P Standards and their suitability for the role. However, an employer is not obliged to issue a reference in respect of a former employee which means that a prospective employer may not be able to secure a reference from a previous employer.  The CBI does not oblige employers to either issue or obtain a reference as part of screening checks, however employers must make good efforts to do so.

There are material obstacles from a data privacy and practical perspective to employers conducting criminal background checks in relation to prospective employees. Data relating to criminal convictions is special category data under the GDPR. Employers would need to satisfy both Article 6 and Article 9 requirements under the GDPR to justify the processing of this data. In terms of Article 9, this means employers would need to show reasons of substantial public interest or that they are carrying out their legal obligations in processing the data.  In terms of Article 6 the employer will need to show that the processing is necessary to comply with a legal obligation to which the employer is subject or the processing is necessary for the employer's legitimate interests for example to ensure the suitability and honesty of its employees and to protect its reputation. Employers are also prevented from asking candidates about "spent convictions" which are usually minor criminal offences dating back over seven years.

Pre-employment medical checks must also have a clear legal basis justifying the processing of an employee's medical and health information.

Under Dutch law, all financial services sector companies must make substantiated assessments on the reliability and integrity of candidates to be appointed in integrity-sensitive positions. However, in practice, almost all financial services sector companies have made a pre-employment screening mandatory for all candidates (for any position).

The exact pre-screening process differs per financial service industry and company. In general, the following components are part of the pre-screening process: proof of identity; insolvency check; highest level of education; work experience (reference check); certificate of conduct (VOG, see question 3); and an integrity questionnaire.

Reference checks that go back five years are common in the financial services sector.

German law does not treat financial services employees differently from employees of other industries, in that an employment agreement does not necessarily have to be in writing to come into existence. It is, however, common (best) practice and highly recommended for risk mitigation and transparency reasons that parties enter into a written employment agreement. For some provisions to be valid, such as a post-contractual non-compete or a fixed-term agreement, a qualified electronic or wet-ink signature is mandatory.

Further, employers must also provide employees with a wet-ink signed certification document summarising the essential conditions of employment under the German Evidence Act. Failure to provide such a document does not render the employment contract invalid, but a breach of the documentation requirement constitutes an administrative offence that may trigger fines. The German government has proposed an Act to modify the wet-ink signature requirement and also allow for electronic signatures, but has not provided a clear timeline for it coming into force yet.

Remuneration is typically governed under the employment contract and references a firm’s remuneration policy, which must be put in place for regular staff as well as identified risk-takers, with a dedicated set of rules varying per industry sub-sector.

Finally, depending on the case, certain documentation may need to be filed with BaFin before an employee can take up their tasks (see question 2).

The following documents should be in place:

• written statement of terms of employment e.g., a written contract of employment that complies with the Terms of Employment (Information) Act 1994-2014 and the European Union (Transparent and Predictable Working Conditions) Regulations 2022;
• grievance and disciplinary policy;
• protected disclosures policy;
• dignity at work policy (anti-harassment and bullying prevention);
• safety statement; and
• where possible, an employee handbook that details all the statutory leave policies and other bespoke policies of the RFSP.

All employees must provide identity documentation and required diplomas to the financial services sector employer (including relevant Wft diploma(s), see question 4).

Before entering into an employment agreement, almost all financial services sector companies require a certificate of conduct (VOG). A VOG is a document by which the Dutch minister of legal protection declares that a candidate's (judicial) past does not constitute an obstacle to fulfilling a specific task or position. When assessing a VOG application, the Dutch minister of legal protection checks whether a candidate has criminal offences to his name that pose a risk to the position or purpose for which he is applying for the VOG.

Taking on certain tasks requires prior proof of competence, which varies depending on the financial services sector and the role. As an example, investment services must notify BaFin of investment advisors, sales representatives, and compliance officers, who in each case must be knowledgeable and reliable, and whose expertise must be reviewed at least annually (section 87, WpHG and the corresponding Employee Notification Ordinance). Institutions must deliver proof of professional suitability (ie, sufficient theoretical and practical knowledge of the relevant business and management experience) and reliability for certain key employees, managing directors, and members of the supervisory or administrative board (sections 25c paragraph 1 and 25d paragraph 1 KWG, sections 20 and 21 WpIG).

Yes, under the Minimum Competency Regime (see question 1), employees who perform certain prescribed functions and roles in prescribed RFSPs such as insurance businesses and credit unions, must meet the required competencies and qualifications standards.

The 2023 Act also introduces a new requirement that persons can only be permitted to perform a CF role (including a PCF role) where a certificate of compliance with the F&P Standards given by the firm is in force (Certification Regime).

As part of the Certification Regime, a certificate of compliance may only be given if:

1. the firm is satisfied on reasonable grounds that the person complies with the F&P Standards; and
2. the person has agreed to abide by the F&P Standards and to notify the firm without delay if for any reason they no longer comply with the F&P Standards.

According to Dutch law, financial services sector companies must guarantee the quality of their services. This means, among other things, that they must have skilled employees for the subjects on which they advise. After all, the consumer must be able to trust that an employee has the right knowledge and skills to provide appropriate advice.

Therefore, all financial services sector employees with substantive customer contact must have up-to-date professional competence at all times. This means that employees must be skilled, aware of current developments in their field, and can apply these in their work. The obligation to maintain up-to-date professional competence at all times is an open standard. Financial services companies may, therefore, decide for themselves how to implement this standard.

There is, however, a mandatory Wft diploma requirement for employees who provide financial advice. Which products and services an employee may provide advice on depends on the specific Wft diplomas he or she has obtained (after passing an exam). A Wft diploma is valid for a definite period (with a maximum of three years). To renew a Wft diploma, an employee must pass a new exam.

Furthermore, all candidates who will (co-)determine the policy of a financial services company must also be assessed by local authorities and will be tested for reliability and suitability.

Employees who qualify as risk-takers have enhanced responsibilities due to their influence on an institution’s risk profile, including documentation requirements. Investment brokers advising private clients are also subject to strict rules and extensive documentation requirements, inter alia, on the investment advice provided and how the investment was tailored to the preferences, investment objectives, and other characteristics of the investor.

Yes. Common Conduct Standards and Additional Conduct Standards were introduced by the 2023 Act and employers need to update employees' contractual documents to reflect same.

The Common Conduct Standards set out standards of behaviour expected of individuals carrying out Controlled Functions (CFs) within firms. The Common Conduct Standards are basic standards such as acting with honesty and integrity with due skill, care and diligence and in the best interest of customers. An individual that is subject to the Common Conduct Standards will be expected to take reasonable steps to ensure that the Common Conduct Standards are met.

In addition, senior executives, which includes individuals performing PCF roles (e.g. the directors, designated persons) and other individuals who exercise significant influence on the conduct of a firm's affairs (CF1) will also have Additional Conduct Standards related to running the part of the business for which they are responsible. An individual who performs a PCF/CF1 role should take reasonable steps to ensure that the Additional Conduct Standards are met.

When SEAR comes into effect, those performing senior executive functions will be required to have detailed statements of responsibility setting out the scope of their role. The Duty of Responsibility which the PCF will have under SEAR is extensive. The duty extends to taking any step that is reasonable in the circumstances to avoid a breach by their firm of its obligations in relation to an aspect of the firm's affairs for which the PCF is responsible.

There are a number of General Prescribed Responsibilities that will need to be assigned to PCFs:

(a)   Performance by the Firm of its obligations under SEAR

(b)   Performance by the Firm of its obligations under the F&P framework

(c)   Performance by the Firm of its obligations under the new Conduct Standards

(d)   Responsibility for overseeing the adoption of the firm’s policy on diversity and inclusion.

The reliability, propriety and fitness of (supervisory) directors and executives in the financial services sector, as well as employees in an integrity-sensitive position, must be “beyond doubt”. This is also assessed by local authorities.

Yes. Investment firms must disclose the identities of employees providing investment advice, as well as sales representatives and compliance officers, to BaFin, which maintains a non-public database of registered employees (section 87 WpHG).

As a first step of the registration process, companies need to register on the MVP notification and publication platform. After successful registration, they can apply for admission to the employee and complaints register. Different notification procedures are available, depending on whether employees are notified for the first time or amendments are being made.

No.

There is no mandatory register for Dutch financial services employees.

Companies in the financial sector, however, must have a licence to provide financial services. Local regulators are responsible for the issuance of such licences. Companies in the financial sector with a license are published by the local regulator on a public register.

Yes, there are specific sets of rules on remuneration in the financial services sector, varying in detail per sub-sector. Rules are particularly strict for material risk-takers of significant institutions in light of the increased risk profile of their activities for the entire organisation.

Variable and fixed remuneration must have an appropriate ratio to each other. For financial institutions, the ratio is appropriate if the variable remuneration both complies with an upper limit of 100% of the fixed remuneration (up to 200% maximum based on a shareholders’ resolution) and provides an effective behavioural incentive. Further, variable remuneration may need to be spread over deferral periods. Depending on the sector, remuneration may have to be made subject to malus, holdback or clawback provisions in case specific risks materialise or the employee is found guilty of misconduct. Further, certain remuneration elements must be granted in instruments instead of cash payments, with restrictions around this element again varying by sub-sector.

There are prescriptive, sector-specific requirements, which apply to the remuneration of specified categories of employees or directors, and which apply in the asset management, investment services, banking, and insurance sectors.

Employers in these sectors are tasked with ensuring that the remuneration paid to material risk takers (individuals whose professional activities have a material impact on an RFSP's risk profile) or identified staff align with the RFSP risk profile.

There are detailed rules with technical guidance (emanating from EU law) specific to each sector, but at a high level they (to differing degrees) set out rules on; variable remuneration composition, ratios or other metrics to compare variable to fixed remuneration to ensure it is appropriate; malus requirements, which would allow the RFSP to cancel or reduce the employee's variable remuneration before it is paid out; and clawback provisions which allow RFSPs to recover variable remuneration after it has been awarded. It is important to ensure that employees' contracts of employment acknowledge that any variable remuneration will be subject to all regulatory restrictions and rules and may be clawed back in certain circumstances.

The CBI's 2014 Guidelines on Variable Remuneration Arrangements for Sales Staff also emphasise the importance of remuneration structures to have sufficient deterrents built into them (such as malus and clawback mechanisms) to avoid incentivising undesirable/risky behaviours from sales staff in the banking, insurance and investment services sectors.

Remuneration policy

Under Dutch law, financial services companies must implement an internal remuneration policy. Financial services companies must explain in the management report the relationship between the remuneration policy and the social function of the company.

Variable remuneration

The variable remuneration that a financial services company awards to an employee amounts to a maximum of 20% of that person's fixed annual remuneration. There are a (very) limited number of exceptions to this maximum.

Five-year statutory retention period for shares and other financial instruments

Financial services employees whose fixed remuneration consists of shares or related instruments may only sell them after five years.

Adjustment or recovery of bonuses (claw-back)

Adjustment or recovery of bonuses is mandatory if a financial services employee has failed to meet appropriate standards of competence and proper conduct or has been responsible for conduct that led to a significant deterioration in the company's position.

Severance payments

Paying out severance payments by financial services companies is not allowed if the employee leaves voluntarily or if there are seriously culpable acts or omissions in the performance of the function. Severance payments for directors (or other policymakers) may not exceed more than 100 per cent of their fixed annual salary.

Qualification requirements exist for specific roles (eg, traders), and employers must ensure they comply with them by only contracting employees with the required skills, certifications and experience. The expertise of employees providing investment advice, sales representation, and compliance advice must also be continuously maintained and regularly updated.

Yes. A CF employee, subject to the Minimum Competency regime, will be required to complete CPD training. Evidence of meeting that CPD requirement is also a factor in determining a person's F&P. RFSPs must maintain records of CPD training provided to CFs to demonstrate compliance with the minimum competency regime.

The 2023 Act also introduces new training obligations for those subject to the Common and Additional Conduct Standards, with firms being required to train those persons on how these obligations apply to them and their new duties of responsibility. Attendance at, or completion of, training in respect of the Conduct Standards should be mandatory and such attendance should be carefully documented with refresher training rolled out periodically.

Employers within the scope of the Criminal Justice (Money Laundering and Terrorist Financing) Acts 2010 - 2021 (including RFSPs) are required to provide annual training to relevant staff and directors on its requirements and the RFSP must have procedures in place to comply with that legislation and associated guidance.

Depending on the RFSP's business, additional mandatory training may be needed annually, for example, on topics such as market abuse.

The designated person for responding to protected disclosures should be trained and competent in the identification and handling of protected disclosures.

Please see question 4.

Employees must conduct themselves in line with their respective roles and responsibilities, which in client-facing roles indirectly leads to them being subject to specific behavioural obligations (such as having to adhere to certain procedures and documentation obligations before selling a service or product to a client). In addition, company policies required by the regulator (eg, on sustainability or equal treatment) often include behavioural standards.

In addition, there are voluntary standards adopted by various professional associations, such as the Code of Conduct of the Federal Association of Financial Services, which apply to their respective members.

Yes there are. They are:

• the F&P Standards;
• the minimum competency regime; and
• the IAF and SEAR (see question 1).

There are also sector-specific conduct of business requirements in legislation and codes, including the Consumer Protection Code 2012, the MiFID II regime, and other regulatory requirements applicable to RFSPs based on their industry sector that apply and deal with matters such as:

• error handling,
• disclosures to customers,
• acting in the best interests of customers; and
• complaints handling.

Under Dutch law, financial services companies must maintain integrity and ensure safety, stability and integrity within their company. This also means that financial services companies must prevent their employees from committing criminal offences, other violations of the law or socially inappropriate behaviour that undermines confidence in the financial services sector or financial markets. For these reasons, it is common to implement company-specific codes of conduct.

There are many statutory general regulations and standards of behaviour that financial services employees are expected to adhere to. Moreover, all industries have their own specific industry-wide guidelines and codes of conduct.

An important statutory obligation for directors, (other) policymakers and employees with customer contact is to take an oath or promise before entering into employment. The oath or promise contains a declaration that – among other things – the employee will perform his or her duties with care and integrity, will put customer interests first and will make every effort to maintain and promote confidence in the financial services sector.

In addition to the oath or promise as mentioned above, there is also the “banker's oath”. This oath goes further than the oath or promise mentioned above and is mandatory for all employees who work for banks.

Breaching guidelines, codes of conduct or the statutory oath could lead to disciplinary sanctions being taken by the company itself (such as termination of the employment contract) or by disciplinary supervisors (such as a reprimand or a fine).

Yes. Under section 87 WpHG, investment firms must notify BaFin of any changes regarding employees providing investment advice, sales representation, and compliance advice. This includes, for example, personal data or a change of the responsible sales representative, but also the termination of the activity. Changes must be communicated to BaFin within one month.

Further, investment firms must notify BaFin as soon as a substantial customer complaint is made against one or more employees based on his or her activities in connection with investment advice. This applies, for example, to allegations of incorrect investment advice. The notification to BaFin must be submitted within six weeks of receipt of the complaint. Details on the content of the notification are governed by section 8 paragraph 4 of the Securities Trading Act Employee Notification Ordinance.

There are further notification obligations if there are doubts about an employee‘s reliability under the relevant statutory rules. For example, in their initial declaration of reliability under section 24 paragraph 1 No. 1 KWG and section 5b Ordinance on Notifications and Submission of Documents under the KWG, future managing directors and persons acting as sole representatives of credit institutions and financial services institutions must immediately report to BaFin in writing any subsequent changes that may be relevant to their reliability. This applies to all facts that were also relevant for the initial reliability assessment (eg, because an employee was convicted of certain financial crimes). In addition, BaFin must also receive notifications of preliminary proceedings, indictments and convictions of certain financial sector employees according to the Order on Notifications in Criminal Matters.

The CBI expects RFSPs to be open and transparent in their engagement, including concerning compliance with the F&P Standards and the Common Conduct Standards. While early versions of the IAF regulations and related guidance contained an obligation on a RFSP to report to the CBI if disciplinary action had been taken against an individual, the obligation was removed from the latest version of the draft legislation. The Guidance indicated that the CBI would expect that they would have already received relevant details as it provides that firms and persons performing PCF roles are required to report to the CBI where they suspect that a "prescribed contravention" may have occurred for the purposes of the CBI legislative framework and the CBI states that a breach of the Common Conduct Standards and/or Additional Conduct Standards is a "prescribed contravention" for these purposes.

Financial services companies must report to local regulators any behaviour or event that poses a serious threat to the ethical conduct of the business of the company or may affect the reliability of policymakers, sound and controlled business operations and continuity.

Furthermore, there are several local disciplinary authorities where reports can be made about financial services employees who fail to comply with Dutch law, guidelines and rules of conduct.

Employers are generally required under German law, regardless of their industry, to exercise a duty of protection regarding their employees. If they become aware of allegations of employee harassment, the employer must investigate and take appropriate steps to either dispel the suspicion (and protect the employee incorrectly accused of harassment) or sanction the perpetrator. As such, many employers have a process or policy in place governing this.

From July 2023, employers must observe the mandatory regulations of the Whistleblower Protection Act, implementing the EU Whistleblower Directive. This regulation applies automatically to many institutions in the financial sector, and beyond that to others based on their number of employees (starting with a headcount of over 50) or by virtue of belonging to the public sector. In corporate groups, multiple employers can set up a joint office to receive reports and conduct further investigations. Public sector employers must, in principle, establish an internal reporting office regardless of the number of employees. In addition, employees will also have the option to report breaches externally. The purpose of the new legislation is to strengthen the protection of whistleblowers and ensure that they do not face any disadvantages within the framework of the legal requirements – including, inter alia, where the whistleblowing concerns matters such as breaches of European law concerning financial services, financial products and financial markets, as well as the prevention of money laundering and terrorist financing.

An office at the Federal Ministry of Justice will be established as the governing body for the new law. In addition, the Federal Antitrust Office and BaFin will be responsible for sanctioning certain breaches under their respective remit (antitrust and financial services, respectively).

Yes. Concerning the prevention of wrongdoing, RFSPs should implement a written protected disclosures/whistleblowing policy that explains the secure and confidential internal and external reporting channels available to workers who wish to report relevant wrongdoings. The anti-retaliation protection should be explained and workers should understand from the policy how a report of relevant wrongdoing will be dealt with by the RFSP.

RFSPs should ensure that they have clear, up-to-date and fully compliant policies governing:

• dignity at work (including anti-harassment and anti-bullying measures); and
• grievance and disciplinary policies.

RFSPs should ensure that employees are trained on the RFSP's dignity at work (anti-bullying and harassment) policies to ensure that the RFSP's values, culture and commitment to preventing harassment and bullying are clear regarding their rights and obligations.

Financial services companies must create a safe and healthy work environment. Furthermore, financial services sector companies have a statutory responsibility to protect consumers from unethical, unprofessional and negligent behaviour and services. In this regard, it is advisable (and common) to implement an internal code of conduct.

Under Dutch law, financial services companies must set up an internal reporting procedure (with specific requirements) where suspected misconduct can be reported.

Post-contractual non-compete obligations will typically only be binding when a severance payment is agreed upon that amounts to at least 50% of the pro-rated annual remuneration that the employee received before the obligation comes into force). It is advisable to regularly review for which roles such arrangements are agreed upon as they can be costly, and a unilateral waiver does not automatically eliminate the obligation to pay compensation, only if sufficient advance notice is given.

In the financial services sector, the severance payment for non-competition covenants is considered variable remuneration and subject to the same regulatory compensation rules (for example, section 5 paragraph 6 sentence 1 IVV, section 6 paragraph 4 No. 2 Investment Firm Remuneration Ordinance). However, severance payments do not have to be factored into the ratio of variable to fixed remuneration according to section 25a paragraph 5 sentences 2 to 5 KWG if, subject to section 74 paragraph 2 of the German Commercial Code, the payments do not exceed the total fixed remuneration originally owed.

No there are no bespoke rules that apply. Post termination restrictions in Ireland are void as being in restraint of trade unless it can be shown that the restrictions are necessary to protect an employer's legitimate proprietary interest and they are proportionate and reasonable in their scope and duration to achieve that protection[i].

[i] Law as of 15 April 2024

There are no particular rules that apply concerning the use of post-termination restrictive covenants for financial services employees.