Employment in Financial Services

Different notification procedures exist before employees may take up their roles.

Investment firms may only entrust employees to provide investment advice if they are knowledgeable and have demonstrated the required reliability – as evidenced, inter alia, by not having a relevant and unspent prior criminal record. Furthermore, such employees’ identities must be disclosed to BaFin before they commence their activities. The active registration of employees is intended to impart upon employers the significance of employee selection and responsibility for their decisions.

Representatives of regulated entities of the financial services sector (typically, members of management) must be approved by BaFin before they can take up their role (colloquially known as BaFin’s “driver’s licence”). To obtain approval, a request must be filed with BaFin, showing the experience and suitability of the candidate for the role. Depending on the financial services delivered by the company, information that must be filed include the following:

• a CV (including information on professional training, career, and references);
• information on reliability (a form or summary to be completed by the manager, including, for example, mandatory declarations on prior criminal or administrative offences);
• a "certificate of good conduct for submission to an authority", a "European certificate of good conduct for submission to an authority", or "corresponding documents" from abroad (depending on the countries of residence in the last 10 years);
• an extract from the central commercial register;
• an overview of other mandates as a managing director or in administrative and supervisory bodies; and
• information about the manager’s ability to dedicate sufficient time to the role.

Non-management employees responsible for specific key functions at an insurance provider are subject to a similar notification process. Further, financial services employers must perform a risk analysis under the Anti-Money Laundering Act and take internal security measures, which also includes assessing the reliability of employees.

In the DIFC, an individual who performs a “licensed function” must be approved in advance by the DFSA.   The roles which fall within the meaning of an authorised person for the DFSA includes someone appointed as:

• the Senior Executive Officer, who has ultimate responsibility for the day-to- day management, supervision and control of one or more (or all) of an authorised firm’s financial services carried on, in or from the DIFC;
• the Finance Officer;
• Compliance Officer;, and
• Money Laundering Reporting Officer. 

Where a firm proposes to appoint an authorised individual, an application to the DFSA must be made in advance; the DFSA will make an assessment of the  individual in order to satisfy itself that they are fit and proper to be an authorised individual. The Regulator will consider the individual’s integrity, competence and capability, financial soundness, their proposed role, and any other relevant matters.  That individual may not be considered as fit and proper where they have been declared bankrupt, convicted for a serious criminal offence, or incapable - through mental or physical incapacity - of managing their affairs.

In the ADGM, an individual who performs a “controlled function” must be approved in advance by the ADGM.  A controlled function includes someone appointed as the Senior Executive Officer, Finance Officer, Compliance Officer, and Money Laundering Reporting Officer.

Where a firm proposes to appoint someone in a controlled function, an application to the ADGM must be made in advance, The ADGM will make an assessment of  that individual in order to satisfy itself that they are fit and proper to be an approved individual.  The Regulator will consider the individual’s integrity, competence and capability, financial soundness, their proposed role and any other relevant matters.  That individual may not be considered as fit and proper where they have been declared bankrupt, convicted for a serious criminal offence, or incapable - through mental or physical incapacity - of managing their affairs.

German law does not treat financial services employees differently from employees of other industries, in that an employment agreement does not necessarily have to be in writing to come into existence. It is, however, common (best) practice and highly recommended for risk mitigation and transparency reasons that parties enter into a written employment agreement. For some provisions to be valid, such as a post-contractual non-compete or a fixed-term agreement, a qualified electronic or wet-ink signature is mandatory.

Further, employers must also provide employees with a wet-ink signed certification document summarising the essential conditions of employment under the German Evidence Act. Failure to provide such a document does not render the employment contract invalid, but a breach of the documentation requirement constitutes an administrative offence that may trigger fines. The German government has proposed an Act to modify the wet-ink signature requirement and also allow for electronic signatures, but has not provided a clear timeline for it coming into force yet.

Remuneration is typically governed under the employment contract and references a firm’s remuneration policy, which must be put in place for regular staff as well as identified risk-takers, with a dedicated set of rules varying per industry sub-sector.

Finally, depending on the case, certain documentation may need to be filed with BaFin before an employee can take up their tasks (see question 2).

Employees must be provided with an employment contract across the different jurisdictions in the UAE.  This applies to all employees, regardless of whether they work in the financial services industry.

In the DIFC, the DIFC Employment Law requires employers to provide their employees with a written contract that must specify the following:

• the parties’ names;
• the start date;
• the salary and any allowances to be provided to the employee;
• the applicable pay period;
• hours and days of work;
• vacation leave and pay;
• notice to be given by either party to terminate employment; 
• the employee’s job title;
• confirmation as to whether the contract is for an indefinite period or for a fixed term;
• the place of work;
• applicable disciplinary rules and grievances procedures;
• the probation period;
• a reference to any applicable policies and procedures (including any codes of conduct) and where these can be accessed; and
• any other matter that may be prescribed in any regulations issued under the DIFC Employment Law.

In the ADGM, the ADGM Employment Regulations requires employers to provide their employees with a written contract that must specify the following:

• the parties’ names;
• the start date;
• remuneration;
• the applicable pay period;
• hours and days of work; and
• any terms and conditions relating to:
  • vacation leave and pay, national holiday entitlement and pay;
  • sick leave and sick pay;
  • the notice period that either party is required to give to the other in order to terminate employment;
  • the employee’s job title;
  • whether the employment is for an indefinite or fixed term;
  • the place of work;
  • any disciplinary rules or grievance procedures applicable to the employee; and

any other matter that may be prescribed by the employer.

Taking on certain tasks requires prior proof of competence, which varies depending on the financial services sector and the role. As an example, investment services must notify BaFin of investment advisors, sales representatives, and compliance officers, who in each case must be knowledgeable and reliable, and whose expertise must be reviewed at least annually (section 87, WpHG and the corresponding Employee Notification Ordinance). Institutions must deliver proof of professional suitability (ie, sufficient theoretical and practical knowledge of the relevant business and management experience) and reliability for certain key employees, managing directors, and members of the supervisory or administrative board (sections 25c paragraph 1 and 25d paragraph 1 KWG, sections 20 and 21 WpIG).

As noted in question 2 -, employees undertaking certain regulated roles must obtain the pre-approval of the relevant regulatory authority.  The regulators in each case will assess the fitness and propriety of the relevant individual.
 

Employees who qualify as risk-takers have enhanced responsibilities due to their influence on an institution’s risk profile, including documentation requirements. Investment brokers advising private clients are also subject to strict rules and extensive documentation requirements, inter alia, on the investment advice provided and how the investment was tailored to the preferences, investment objectives, and other characteristics of the investor.

There are no provisions that lay down enhanced responsibilities for a particular category of employees in the financial services sector.
 

Yes. Investment firms must disclose the identities of employees providing investment advice, as well as sales representatives and compliance officers, to BaFin, which maintains a non-public database of registered employees (section 87 WpHG).

As a first step of the registration process, companies need to register on the MVP notification and publication platform. After successful registration, they can apply for admission to the employee and complaints register. Different notification procedures are available, depending on whether employees are notified for the first time or amendments are being made.

There is no public register of authorised individuals.

Yes, there are specific sets of rules on remuneration in the financial services sector, varying in detail per sub-sector. Rules are particularly strict for material risk-takers of significant institutions in light of the increased risk profile of their activities for the entire organisation.

Variable and fixed remuneration must have an appropriate ratio to each other. For financial institutions, the ratio is appropriate if the variable remuneration both complies with an upper limit of 100% of the fixed remuneration (up to 200% maximum based on a shareholders’ resolution) and provides an effective behavioural incentive. Further, variable remuneration may need to be spread over deferral periods. Depending on the sector, remuneration may have to be made subject to malus, holdback or clawback provisions in case specific risks materialise or the employee is found guilty of misconduct. Further, certain remuneration elements must be granted in instruments instead of cash payments, with restrictions around this element again varying by sub-sector.

Both the DFSA General Rulebook and FSRA General Rulebook contain Best Practice Guidance for remuneration structure and strategies of authorised entities. In particular, the guidance identifies that the governing body of an authorised entity ought to consider the risk to which the firm could be exposed to as a result of the conduct or behaviour of its employees, and to consider the ratio and balance between fixed and variable remuneration components, the nature of the duties and functions performed by the relevant employees, the assessment criteria against which performance based components of remuneration are to be awarded, and the integrity and objectivity of any performance assessment against that criteria.

Qualification requirements exist for specific roles (eg, traders), and employers must ensure they comply with them by only contracting employees with the required skills, certifications and experience. The expertise of employees providing investment advice, sales representation, and compliance advice must also be continuously maintained and regularly updated.

The DFSA General Rulebook requires authorised entities to ensure that the Senior Executive Officer, Compliance Officers, and Money Laundering Reporting Officer, must complete a minimum of 15 hours of continuing professional development in each calendar year.  This continuing professional development must be relevant to the employee’s role and professional skill and knowledge, and consist of structured activities, such as courses, seminars, lectures, conferences, workshops, web-based seminars or e-learning, which require a commitment of 30 minutes or more.  The employee must also ensure that they maintain adequate records to be able to demonstrate that these requirements have been met.

The FSRA General Rulebook requires an authorised entity to ensure that its directors and senior managers are fit and proper and its guidance suggests that whether any training has been untaken or is required should be considered.  In addition, an authorised entity should satisfy itself that an employee continues to be competent and capable of performing the role, has kept abreast of market, product, technology, legislative and regulatory developments that are relevant to the role, through training or other means, and is able to apply this knowledge.

Employees must conduct themselves in line with their respective roles and responsibilities, which in client-facing roles indirectly leads to them being subject to specific behavioural obligations (such as having to adhere to certain procedures and documentation obligations before selling a service or product to a client). In addition, company policies required by the regulator (eg, on sustainability or equal treatment) often include behavioural standards.

In addition, there are voluntary standards adopted by various professional associations, such as the Code of Conduct of the Federal Association of Financial Services, which apply to their respective members.

In the DIFC, the DFSA General Rulebook provides that authorised individuals must adhere to six principles, as follows:

• Principle 1 – Integrity
• Principle 2 – Due skill, care and diligence
• Principle 3 – Market conduct
• Principle 4 – Relations with the DFSA
• Principle 5 – Management, systems and control
• Principle 6 – Compliance
   

In the ADGM, the FSRA General Rulebook provides that authorized individuals must adhere to eleven principles, as follows:

• Principle 1 – Integrity
• Principle 2 – Due skill, care and diligence
• Principle 3 – Management, systems and control
• Principle 4 – Resources
• Principle 5 – Market conduct
• Principle 6 – Information and interests
• Principle 7 – Conflicts of Interest
• Principle 8 – Suitability
• Principle 9 – Customer assets and money
• Principle 10 – Relations with regulators
• Principle 11 – Compliance with high standards of corporate governance

Yes. Under section 87 WpHG, investment firms must notify BaFin of any changes regarding employees providing investment advice, sales representation, and compliance advice. This includes, for example, personal data or a change of the responsible sales representative, but also the termination of the activity. Changes must be communicated to BaFin within one month.

Further, investment firms must notify BaFin as soon as a substantial customer complaint is made against one or more employees based on his or her activities in connection with investment advice. This applies, for example, to allegations of incorrect investment advice. The notification to BaFin must be submitted within six weeks of receipt of the complaint. Details on the content of the notification are governed by section 8 paragraph 4 of the Securities Trading Act Employee Notification Ordinance.

There are further notification obligations if there are doubts about an employee‘s reliability under the relevant statutory rules. For example, in their initial declaration of reliability under section 24 paragraph 1 No. 1 KWG and section 5b Ordinance on Notifications and Submission of Documents under the KWG, future managing directors and persons acting as sole representatives of credit institutions and financial services institutions must immediately report to BaFin in writing any subsequent changes that may be relevant to their reliability. This applies to all facts that were also relevant for the initial reliability assessment (eg, because an employee was convicted of certain financial crimes). In addition, BaFin must also receive notifications of preliminary proceedings, indictments and convictions of certain financial sector employees according to the Order on Notifications in Criminal Matters.

Both the DFSA General Rulebook and FSRA General Rulebook provide that where an authorised firm requests the withdrawal of an authorised individual, they must provide to the regulator details of any circumstances in which they consider the individual is no longer fit and proper.  Where the individual is to be dismissed or has requested to resign, the firm must provide to the regulator a statement of the reason, or reasons, for the dismissal or resignation.

In addition, the DFSA and FSRA General Rulebooks contain broad obligations on any authorised firm to report to the regulator if it becomes aware of a range of occurrences, including any matter which could have a significant adverse effect on the authorised firm’s reputation, or a matter in relation the authorised firm which could result in serious adverse financial consequences to the financial system or to other firms, or a significant breach of a rule by the authorised firm or its employees.

Employers are generally required under German law, regardless of their industry, to exercise a duty of protection regarding their employees. If they become aware of allegations of employee harassment, the employer must investigate and take appropriate steps to either dispel the suspicion (and protect the employee incorrectly accused of harassment) or sanction the perpetrator. As such, many employers have a process or policy in place governing this.

From July 2023, employers must observe the mandatory regulations of the Whistleblower Protection Act, implementing the EU Whistleblower Directive. This regulation applies automatically to many institutions in the financial sector, and beyond that to others based on their number of employees (starting with a headcount of over 50) or by virtue of belonging to the public sector. In corporate groups, multiple employers can set up a joint office to receive reports and conduct further investigations. Public sector employers must, in principle, establish an internal reporting office regardless of the number of employees. In addition, employees will also have the option to report breaches externally. The purpose of the new legislation is to strengthen the protection of whistleblowers and ensure that they do not face any disadvantages within the framework of the legal requirements – including, inter alia, where the whistleblowing concerns matters such as breaches of European law concerning financial services, financial products and financial markets, as well as the prevention of money laundering and terrorist financing.

An office at the Federal Ministry of Justice will be established as the governing body for the new law. In addition, the Federal Antitrust Office and BaFin will be responsible for sanctioning certain breaches under their respective remit (antitrust and financial services, respectively).

Whistleblowing

In the DIFC, whistleblowing is addressed both by the DFSA, who introduced its regulatory regime for whistleblowing in 2022 through amendment to its Regulatory Law 2004, as well as the more general obligations contained in the Operating Law of the DIFC Authority.

Under the Regulatory Law, any person who makes a qualifying disclosure to a specified person is entitled to protection under the law.  Similar provisions are contained in the Operating Law.

The disclosure may be made internally within the company, for example, to a director, officer or any person in a management position of the relevant company, or any person designated by that company to receive the disclosure of such information; or externally, for example, to the Registrar, Financial Services Regulator, Office of Data Protection, or criminal law enforcement agency in the UAE.

The qualifying disclosure must relate to the disclosure of information made in good faith, that relates to a reasonable suspicion that a regulated entity, or any of its employees or officers, has or may have, contravened a provision of legislation administered by the DFSA, or has engaged in money laundering, fraud, or other financial crime.

A person making a protected disclosure shall not be subject to any civil or contractual liability for making the disclosure, nor shall they be dismissed or otherwise suffer a detriment or disadvantage in connection with making the disclosure. 

The corresponding DFSA module sets out the DFSA’s expectations that companies should implement appropriate written policies in order to facilitate the reporting of any regulatory concerns by whistleblowers, and to assess, and, where appropriate, escalate regulatory concerns reported to it. 

The ADGM published Guiding Principles on Whistleblowing in December 2022, which whilst non-binding, were designed to assist entities and individuals in the ADGM in establishing whistleblowing frameworks and ensure that potential whistleblowers were encouraged to speak up and were fairly treated when they did so.  In March 2024, the ADGM announced a public consultation on proposals for a whistleblowing framework, which will lead to the introduction of Whistleblower Protections Regulations and amendments to the Employment Regulations.

Harassment

Harassment is not dealt with in the regulatory framework outlined above, but is contained in the applicable employment legislation.

Employment relationships with risk-takers of significant institutions whose annual fixed remuneration exceeds three times the contribution assessment ceiling for general pension insurance can be terminated more easily, in return for a severance payment, even if a unilateral dismissal is not socially justified. For this purpose, the institution needs to file a motion to the labour court to terminate the employment relationship during an ongoing dismissal protection dispute. The court will then terminate the employment relationship and award a severance payment of up to 12 months‘ salary.

Where employers wish to amicably terminate an employment relationship, they will usually offer a termination agreement that provides for a severance payment as consideration for the job loss. Severance payments offered by institutions under the German Banking Act are, in principle, treated as variable remuneration from a regulatory perspective. Unless certain exceptions and privileges apply, this means that severance payments are subject to the regulatory remuneration rules that apply to variable remuneration, meaning that, for example, the bonus cap and ex-post risk adjustment mechanisms of IVV apply (section 5 paragraph 6 sentence 1 IVV). Exceptions are permissible, inter alia, if severance payments are granted in line with the company’s general policy on severance payments, payments to which there is a legal entitlement, and severance payments to be made based on a final judgment or court settlement.

As noted in question 7, the DFSA General Rulebook and FSRA General Rulebook contain Best Practice Guidance for remuneration structure and strategies of authorised persons.  In this regard, both sets of guidance provide that where an authorised entity provides discretionary payouts on termination of employment (either by way of severance payments, or other payments, such as “golden parachutes”), these should be subject to appropriate limits or shareholder approval.  In addition, they should be aligned with the firm’s overall financial status and performance.

Post-contractual non-compete obligations will typically only be binding when a severance payment is agreed upon that amounts to at least 50% of the pro-rated annual remuneration that the employee received before the obligation comes into force). It is advisable to regularly review for which roles such arrangements are agreed upon as they can be costly, and a unilateral waiver does not automatically eliminate the obligation to pay compensation, only if sufficient advance notice is given.

In the financial services sector, the severance payment for non-competition covenants is considered variable remuneration and subject to the same regulatory compensation rules (for example, section 5 paragraph 6 sentence 1 IVV, section 6 paragraph 4 No. 2 Investment Firm Remuneration Ordinance). However, severance payments do not have to be factored into the ratio of variable to fixed remuneration according to section 25a paragraph 5 sentences 2 to 5 KWG if, subject to section 74 paragraph 2 of the German Commercial Code, the payments do not exceed the total fixed remuneration originally owed.

The DFSA and FSRA Rulebooks do not regulate the use of post-termination restrictive covenants. It is fairly typical for financial services firms in both free zones to include non-dealing, non-solicitation, non-compete and similar restrictive covenants in their employment contracts. These are subject to the same common law rules on interpretation and enforceability as in any other sector.  In addition, whilst the courts in both the DIFC and ADGM will award injunctive relief, there is no similar right in the federal courts.  This means that the enforceability of an injunctive order outside of the geographic scope of the two free zones is uncertain.