Employment in Financial Services

Articles 5 and 123 of the Constitution of the United Mexican States provide express protection of labour rights and establish that legal rights are protected by the Federal Labour Law (the FLL).

Pursuant to article 5 thereof, no-one can be stopped from providing services in industry, commerce, or any other activity, provided it is not illegal; thus, individuals may only be prohibited from performing their duties as financial services employees if there is a legal justification. The activity may only be prohibited by a judicial declaration. Also, the law will define occupations that require a licence, the conditions to be met to obtain that licence and the issuing authorities.

Furthermore, no contract or provision that affects an individual’s freedom will be enforced.

All employers and employees within the private financial services sector are primarily subject to the FLL. Additionally, financial entities and their employees are subject to different laws and general provisions depending on the entities’ core business and activities, such as:

• Law to Regulate Finance Associations;
• Credit Institutions Law;
• General Provisions of Credit Institutions, issued by the supervisory authorities;
• Law to Regulate Credit Information Entities;
• General Law of Auxiliary Credit Organizations and Activities;
• Investment Funds Law;
• Popular Savings and Credit Law;
• Law to Regulate Technological Finance Institutions;
• General Provisions of Technological Finance Institutions, issued by the supervisory authorities;
• Law of Transparency and Promotion of Competition in Guaranteed Credit;
• Securities Market Law;
• Law for the Transparency and Regulation of Financial Services;
• Federal Law for the Prevention and Identity of Transactions with Illegally Obtained Resources;
• General Provisions applicable to securities operations carried out by counsel, managers and employees of financial entities and other obligated parties, issued by the supervisory authorities;
• Insurance and Bonding Institutes Law; and
• Insurance and Bonding Agents Regulations.

Some of the financial entities regulated are the following (Financial Entities):

• controlling entities (controlling entities of financial groups);
• credit institutions;
• credit information entities;
• multiple purpose financial entities;
• exchange bureaus and brokerage houses;
• auxiliary credit organisations;
• technological finance institutions;
• investment funds;
• financial cooperative associations and community finance entities; and
• insurance and bond institutes.

Authorities that regulate and supervise the compliance of financial laws and provisions are the National Banking and Securities Commission (CNBV), National Insurance and Bonding Commission (CNSF), National Commission of Retirement Savings Fund (CONSAR), National Commission for Financial Service Consumer Protection, Bank of Mexico, and the Ministry of Finance and Public Credit (SHCP).

In the UK, there are two main regulators responsible for the supervision of financial institutions. These are:

• The Prudential Regulation Authority (the PRA) – The PRA supervises over 1,500 financial institutions, including banks, building societies, credit unions, insurance companies and major investment firms. It creates policies for these institutions to follow and watches over aspects of their business.
• The Financial Conduct Authority (the FCA) – The FCA regulates the conduct of approximately 50,000 firms, prudentially supervises 48,000 firms, and sets specific standards for around 18,000 firms.

Some financial institutions are regulated by both the PRA and FCA (dual-regulated). Those financial institutions must comply with rules set down by the PRA in its rulebook (the PRA Rulebook) and by the FCA in its handbook (the FCA Handbook). Other firms are regulated solely by the FCA (solo-regulated) and must comply with the FCA handbook alone. Different rules can apply depending on the nature and size of the firm. The PRA and FCA work closely on certain issues and firms, but the FCA focuses specifically on ensuring fair outcomes for consumers.

The Senior Managers and Certification Regime (SM&CR) sets out how the UK regulators oversee people in businesses supervised and regulated by them, and how those people must act. As the FCA has summarised, “The SM&CR aims to reduce harm to consumers and strengthen market integrity by making individuals more accountable for their conduct and competence” (https://www.fca.org.uk/firms/senior-managers-certification-regime).

SM&CR consists of three elements:

• The Senior Managers Regime (SMR) – This applies to the most senior people in a firm (senior managers) who perform one or more senior management functions (SMFs). These functions are specified in the PRA Rulebook and the FCA Handbook. Senior managers must be pre-approved by the PRA or FCA before starting their roles. Each senior manager must also have a “Statement of Responsibilities” (that sets out what they are responsible and accountable for), which may include (depending on the firm) certain responsibilities prescribed by the regulator known as “Prescribed Responsibilities”. Every year, senior managers must be certified as fit and proper to carry out their role by their firm.
• The Certification Regime (CR) – This applies to employees who, because of their role, could pose a risk of significant harm to the firm or its customers, such as employees who offer investment advice (certified staff). For solo-regulated firms, these roles are generally called certification functions. Firms must certify that these employees are fit and proper for their roles both at the outset of their employment and continuously.
• The Conduct Rules – The Conduct Rules set minimum standards of individual behaviour in financial services in the UK. They apply to almost all employees of a firm. They also include particular rules applicable only to senior managers.

Certain parts of SM&CR apply to particular firms only. This is outside the scope of this note, which sets out the general position under SM&CR.

For employees with general positions, there are no pre-screening measures. Under article 1 of the Constitution and article 21 of the FLL, discrimination is prohibited. Furthermore, article 21 of the FLL establishes that distinctions will not be deemed discriminatory if certain qualifications are required for certain work. Specifically, if there is no legal ground or work-related justification to request criminal records for a determined position, conditioning the position on that information may be deemed discriminatory.

For example, financial entities must include a list of the expected members of the board of directors, general manager, and main officers, including their respective professional and academic backgrounds, in the filing to obtain authorisation of the CNBV (except insurance and bond institutions) to start operations. These positions require certain special requirements, and thus financial entities must verify – by prior appointment and thereafter, at least every year – that general managers and officers:

• have a standing reputation;
• have expertise in legal, financial and management matters;
• have a satisfactory credit record and credit eligibility;
• are residents in Mexico (for credit entities); and
• have no other legal impediment (see below).

All financial entities must guarantee that high-level employees are capable, experienced and not subject to any procedure involving conduct contrary to financial stability or compliance with business or financial business standards. General managers and officers in controlling entities and auxiliary credit organisations, and in exchange bureaus and brokerage houses, and general managers in insurance and bonding institutions must have at least five years’ experience at a high decision-making level that required financial and management expertise.

Also, these individuals must not have any of the following legal impediments:

• a pending dispute with the financial entity or any other financial entities in the group;
• a conviction for a wilful economic crime;
• a disqualification from owning a business, public service positions or the Mexican financial system;
• declared bankruptcy or insolvency;
• carried out regulation, inspection, and monitoring of the financial entity or any other financial entities in the group; or
• participated in the board of directors of the financial entities.

Additionally, for exchange bureaus and brokerage houses, such individuals must not have been an external auditor of the exchange bureau or related entity in the 12 months before their appointment.

Specifically, in credit organisations, general managers and officers must not:

• be a partner or have a position within entities or associations that render services to the entity or its related entities;
• be a client, provider, debtor, creditor, partner, member of the board of directors or employee of an entity that is a client or provider (whose services or sales represent more than 10% of the client’s services or sales), or a debtor or creditor (of which the debt is higher than 15% of the assets);
• be an employee of a foundation, association or civil society that receive important contributions from the entity (which represent more than 15% of the total contributions received by such entities in a fiscal year).
• be a general manager, officer, or employee of another entity that is part of the financial group;
• be a spouse or domestic partner of any individual mentioned above, or be in a cohabiting relationship with them; or
• carry out regulation duties of credit organisations and exchange bureaus.

Financial entities must inform the CNBV, CNSF, or CONSAR, as applicable, of general managers’ and officers’ appointments, resignations or removals, within five business days of such events. Meanwhile, controlling entities, brokerage houses, surety deposit institutions and compensation chambers must inform the CNBV, CNSF, or CONSAR within 10 days of the same.

There are also limits to employees participating in the board of directors of these companies. Only the general manager and officers two levels below may be members, and no other employees may occupy these positions.

According to the Insurance and Bonds Regulations, officers and employees of credit institutions, insurance institutions, bond institutions, brokerage houses, stock market specialists, auxiliary credit organisations, investment companies, operating companies of investment companies, exchange houses, financial commissioners, retirement fund managers, specialised investment companies of retirement funds, and controlling companies with 10% or more of representative shares of such companies will not be authorised to act as insurance or bond agents.

For employees subject to the SMR, anyone performing an SMF must be pre-approved by the relevant regulator before they can start their role. Generally, firms that wish to employ a senior manager must first carry out sufficient due diligence to satisfy themselves that the candidate is a fit and proper person to perform their proposed functions. In this regard, firms must consider the individual’s qualifications, training, competency and personal characteristics. The firm must also carry out a criminal records check. They may then apply to the relevant regulator for that candidate’s pre-approval. In the firm’s application, all matters relating to the candidate’s fitness and propriety must be disclosed. The firm must also enclose a statement of that individual’s proposed responsibilities and (depending on the firm) the latest version of the firm’s management responsibilities map.

For employees subject to the CR, before the appointment and annually thereafter, these employees must be certified by the employing SM&CR firm as being fit and proper. Certification does not involve pre-approval by the FCA or PRA.

Additionally, firms must comply with the regulatory reference rules for all candidates subject to either the SMR or CR before their employment. These rules require employing firms to request a regulatory reference from all previous employers covering the past six years of employment. Information must be shared between regulated firms using a particular template, which includes information relevant to assessing whether a candidate is fit and proper. Firms are also expected to retain records of disciplinary and fit and proper findings going back six years for their employees (or longer for findings of gross misconduct), and they must update regulatory references that they have previously given where new significant information comes to light that would impact the content of a previously given regulatory reference.

According to article 25 of the FLL, the following information must be included in an employee’s contract: full name, date of birth, nationality, gender, marital status, address, Federal Taxpayers Registry number, and Unique Population Registration Key. To verify such information, employers may ask employees to provide their official identification, proof of address, Tax Identification Card, and professional and academic records, among other documents as deemed necessary. 

Furthermore, given the requirements to be met by the general manager and officers, it is common practice in Mexico to include a statement in their employment contracts whereby they state that they:

• are in good standing;
• are resident in Mexico;
• have legal, financial and management expertise;
• have satisfactory credit record and credit eligibility; and
• have no legal impediment to occupying such positions and rendering their services.

Additionally, the general manager of controlling entities and brokerage houses must provide a written document stating that he or she:

• has no impediment to being appointed as general manager or officer;
• is up to date with his or her credit obligations and of any other nature; and
• acknowledge all rights and obligations to be assumed as a consequence of his or her appointment.

As a matter of general UK employment law, employers must give employees written particulars of certain terms and conditions of employment. This is known as a “section 1 statement” after section 1 of the Employment Rights Act 1996, which sets out the mandatory information that employers must give to employees no later than the first day of their employment. This includes fundamental information such as the names of the employer and employee; the date of commencement of employment; the rates and timing of pay; and working hours. Other prescribed particulars (such as information regarding pensions, collective agreements and training) can be provided to employees in instalments within two months of commencement of employment. Typically, a written employment contract will contain the relevant information to satisfy these requirements.

Financial services employers should ensure that, in addition, their employment contracts reinforce the requirements of SM&CR. This will help the employer manage the employment relationship in a manner compliant with SM&CR and demonstrate to the relevant regulators the employer’s commitment to compliance with SM&CR. The employment contract will usually include, therefore, additional provisions regarding the completion of SM&CR-compliant background checks; confirmation of the employee’s regulated function (eg, their SMF or certification function); required regulatory standards of conduct; cooperation with fitness and propriety assessments; and tailored termination events.

In addition, all senior managers must have a statement of responsibility setting out their role and responsibilities. Certain firms must also allocate certain regulator-prescribed responsibilities (prescribed responsibilities) among senior managers. It is common to set out a senior manager’s regulatory responsibilities in their employment contract.

Dual-regulated firms must also ensure that individuals approved to carry out a PRA-designated SMF are subject to any specific contractual requirements required by the PRA. For example, depending on the type of firm, a firm may be required to ensure that the relevant individual is contractually required to comply with certain standards of conduct, such as to act with integrity and with due care and skill (among other requirements).

Employees in general positions are not required to obtain specific certification to perform their duties within financial entities. However, in brokerage houses, individuals involved in operations with the public, counselling, promotion and, if applicable, acquisition and sale of securities, must be authorised by the CNBV and obtain a certification issued by a regulated body recognized by the CNBV.  

The CNBV and CNSF, as applicable, may caution, remove, adjourn, or disqualify board members and the general manager if they believe the individual does not comply with legal requirements to occupy such positions or if their conduct constitutes a breach of applicable laws and regulations.

See question 2.

All individuals performing an SMF, as classified by the FCA or PRA, will be subject to the SMR. SMFs are described in the Financial Services and Markets Act 2000 (FSMA) as functions that require the person performing them to be responsible for managing one or more aspects of a firm’s affairs authorised by the FSMA, and those aspects involve, or might involve, a risk of serious consequences for the firm or business or other interests in the UK. As noted, any individual performing an SMF will need to be pre-approved by the relevant regulator before they can start their role, and thereafter they must be certified as fit and proper by their firm annually. Applications to the regulator for pre-approval must disclose all matters relating to a candidate’s fitness and propriety and be accompanied by a statement of responsibilities. Firms must carry out a criminal records check as part of the application for approval.

Additionally, employees of firms who are not senior managers but who, because of their role, could still pose a risk of significant harm to the firm or any of its customers, may be subject to the CR. The certification functions that place an employee within the ambit of the CR are different under the rules of the FCA and the PRA but include persons such as those dealing with clients or those subject to qualification requirements. These employees must be certified by their firm as fit and proper for their roles both at the outset of their employment and on an annual basis thereafter (certified staff). Firms are not required to carry out criminal records checks for certified staff, but firms can choose to do so to the extent it is lawful.

The regulators have set out detailed guidance for firms to consider when assessing an individual’s fitness and propriety. This includes assessing an individual’s honesty, integrity and reputation; competence and capability; and financial soundness.

All employees, including general managers and officers, must keep information and documents confidential and may only provide information to the competent authorities or authorised parties, with the prior express authorisation of the user or client.

Also, employees must:

• not stop internal committees from carrying out their functions;
• disclose to the financial entity all information regarding the use of illegal resources, or any act against goods, services, an individual’s life, or physical or emotional integrity, the use of toxic substances, or terrorist acts, so that the financial entity may provide the SHCP with a report on the subject; and
• in insurance or bonding Institutes, not offer discounts, reduce premiums or grant different benefits than those outlined in the corresponding policy.

General managers and officers must provide reports and information to the board of directors and the corresponding authorities periodically. The general manager must also provide precise data and reports to assist the board of directors in making prudent decisions.

General managers must develop and present to the board of directors, for its approval,  adequate policies for employment and the use of material and human resources, including restrictions on the use of goods, supervision and control mechanisms, and the application of resources to the company’s activities consistent with their business purposes.  

Insurance and bond companies will respond to the conduct of the general manager and officers, without prejudice to the civil and criminal liabilities that they may personally incur.

Also, if any conflict of interest exists or arises, general managers and officers must inform their employers immediately and suspend any activity within the scope of the contract that gives rise to the conflict until the matter is addressed.

Additionally, general managers and officers must verify the compliance of all individuals under their responsibility with all applicable legal provisions for financial services. These include: confidential obligations; the development of reports; informing their direct superior, officers, general manager or board of directors if there is a conflict of interest; informing the SCHP and Prosecutor’s Office if there is an act, operation or service using illegal resources, or an act that may harm the company, or the health or wellbeing of an individual or the general public.

Specifically, general managers in brokerage houses must:

• design and carry out a communications policy regarding identifying contingencies;
• implement and distribute the continuity business plan within the brokerage house and establish training programmes;
• inform the CNBV of contingencies in any of the systems and channels for clients, authorities and central securities counterparties;
• ensure that the continuity business plan is submitted for efficiency testing; and
• inform the CNBV in writing of the hiring or removal of the responsible party for internal audit functions.

Every senior manager under the SMR has a “duty of responsibility” concerning the areas for which they are responsible. If a firm breaches a regulatory requirement, the senior manager responsible for the area relevant to the breach could be held accountable for the breach if they failed to take reasonable steps to prevent or stop the breach.

In addition, for most firms, the FCA requires that certain responsibilities – “prescribed responsibilities” – are allocated to appropriate senior managers. These responsibilities cover key conduct and prudential risks. They include, among others, responsibility for a firm’s performance of its obligations under the SMR; responsibility for a firm’s performance of its obligations under the CR; and responsibility for a firm’s obligations around conduct rules training and reporting. Firms must give careful thought to the best person to allocate each prescribed responsibility.

Under the FLL, all employees must be registered with the Social Security Mexican Institute (IMSS) to receive social security benefits.

Except for stock operators or employees that are granted proxies in brokerage houses, in financial entities employees are not required to be registered other than with the IMSS.

To obtain the authorisation of the CNBV to act as a stock operator or representative within a brokerage house, an individual must:

• pass the technical quality certification exams, and comply with the specific requirements outlined in the internal regulations of the stock market in which the individual intends to participate;
• prove before the regulatory body that he or she has a satisfactory credit record and is in good standing; and
• file before the regulatory body a writ of a brokerage house, credit institution, or the operating company of investment companies and retirement funds managers, establishing their wish to hire the individual as soon as he or she obtains an authorisation.

Within five days, the self-regulated body must file an application with the CNBV. They will then have 20 calendar days to issue the corresponding authorisation.

Stock operators and representatives, once authorised and provided with powers of attorney, must be registered before the Mexican Association of Stock Brokers (AMIB).

Brokerage houses must display, in a public place, a list of authorised proxies and stock operators, as well as on the website of the CNBV so this information may be verified.

Finally, financial entities must inform the CNBV, CNSF or CONSAR, as applicable, of the appointment and removal of general managers and officers within five calendar days for financial entities, or ten calendar days for controlling entities, brokerage houses, surety deposit institutions and compensation chambers. Also, a list of general managers and officers must be provided within the filing to operate as a financial entity.   

The FCA maintains a public list of authorised firms and the activities for which each firm has permission. This list is known as the Financial Services Register. The register also includes a directory of certified and assessed persons working in financial services – this includes for each firm (as applicable) senior managers; certified staff; directors (executive and non-executive) who are not performing SMFs; and other individuals who are sole traders or appointed representatives.

Firms are responsible for keeping the directory up to date. Firms must report certain information to the FCA about persons included in the register and directory, including information on an individual's role, their workplace location, and the types of business they are qualified to undertake. The FCA provides guidance and Q&As to assist firms with navigating the register and directory.

Brokerage houses must implement a compensation system under the general provisions set forth by the CNBV. This system must include all compensation provided and must contain the responsibilities of the boards that implement the compensation schemes, ordinary and extraordinary compensation policies, and periodic reviews of payment policies. The board of directors must incorporate a special committee for compensation.

Under article 9 of the general provisions applicable to brokerage houses, account management fees may be paid to stock proxies provided that they comply entirely with the applicable laws in the exercise of their duties. Stock operators must not execute operations with the public or receive any remuneration or account management fees, except if, with the proxy’s authorisation, they execute orders of institutional investors in the brokerage house’s reception and allocation system.

Brokerage houses must not pay fees, commissions, and other remuneration of third parties that act as promoters, sellers, associates, independent commissioners, investment advisors or any similar roles. This also applies to proxies of the investor client without being proxies of the brokerage house, or those who have a conflict of interest to receive fees, commissions, or any other remuneration from the investor client.

If there is a critical event, such as a control measure, the CNBV may order the brokerage house to suspend the payment of extraordinary compensation and bonuses to the general manager and senior officers. This includes preventing the granting of new compensation until the matter is properly resolved. This should be included in employment contracts, to avoid labour-related disputes should the extraordinary measure of the CNBV is enacted.

The remuneration of financial services employees working at certain firms (such as banks, building societies, asset managers and investment firms) is heavily regulated. The relevant rules can be found in various FCA “Remuneration Codes” (each Code tailored to different firms) and also (for dual-regulated firms) in specific remuneration parts of the PRA Rulebook and directly applicable retained EU law.

The remuneration rules are complex and their application is dependent on each firm. The key principle of the rules, however, is that firms subject to them must ensure that their remuneration policies and practices are consistent with and promote sound and effective risk management.

Some elements of the rules apply to all staff, whereas others apply only to material risk-takers within a particular firm.

By way of a snapshot, the rules generally cover such matters as:

• the appropriate ratio between fixed pay and variable pay, to ensure that fixed pay is a sufficiently high proportion of total remuneration to allow for the possibility of paying no variable pay;
• the amount of any discretionary bonus pool, which should be based on profit, adjusted for current and future risks, and take into account the cost and quantity of the capital and liquidity required;
• performance-related bonuses, which should be assessed based on a variety of factors, including the performance of the individual, the relevant business unit and the overall results of the firm;
• restrictions on guaranteed variable pay and payments on termination of employment; and
• malus and clawback requirements.

In terms of articles 132, 153-A to 153-X of the FLL, employers must provide employees with training so they can render their services and comply with the duties of their positions, and employees should receive such training under the plans and programmes formulated by mutual agreement of the employer and employees. Nevertheless, as indicated in previous questions, for employees to occupy certain positions, they must meet the requirements, and for brokerage houses proxies must be authorised to exercise their duties under their position within the brokerage houses.  

According to article 117 bis 9 of the general provisions applicable to brokerage houses, general managers are responsible for implementing, maintaining and distributing the continuity plan of the business within the brokerage house. Therefore, the general manager must establish a training programme outlining the actions to be carried out if an operation contingency arises.

On the other hand, the AMIB provides courses and training for interested individuals to obtain the necessary skills and capacity to perform the activities of proxies in brokerage houses, and thereafter, to obtain authorisation from the AMIB and CNBV to act and perform the corresponding duties of the position.  

A Finance Educational Committee has been created by several financial institutions, authorities, and the Bank of Mexico and is presided over by the SHCP. This committee is in charge of, among other things, defining a finance educational policy; preparing a national strategy for financial education and guidelines; and identifying new work areas and proposing new actions and programmes in financial education.

The PRA and FCA training and competence regimes set the minimum standards that must be achieved by individuals working in the financial services industry. These regimes aim to ensure that authorised firms have arrangements in place to satisfy themselves that their employees are competent.

All FSMA-authorised firms are required to have adequately trained and competent senior management and employees. The training and competence requirements include:

• Threshold conditions on suitability – All firms must show that persons connected with the firm are fit and proper, taking into account all the circumstances. When assessing the suitability threshold of an employee, the FCA and the PRA will consider:
  • the nature of the regulated activity the firm carries on or is seeking to carry on;
  • the need to ensure that the firm's affairs are conducted soundly and prudently;
  • the need to ensure that the firm's affairs are conducted appropriately, considering especially the interests of consumers and the integrity of the UK financial system; and
  • whether those who manage the firm's affairs have adequate skills and experience and act with probity.

• FCA Principles for Businesses or PRA Fundamental Rules – These rules lay out the parameters of the “fit and proper” standard set for firms in the threshold condition on suitability, and require firms to undertake the following:
  • recruit staff in sufficient numbers;
  • provide employees with appropriate training, with competence assessed continuously;
  • make proper arrangements for employees involved with carrying on regulated activities to achieve, maintain and enhance competence; and
  • train employees to pay due regard to the interests of a firm’s customers and treat them fairly.

• Competent employees rule in chapters 3 and 5 of the Senior Management Arrangement Systems and Controls Sourcebook – This is the main employee competence requirement in the training and competence regime under the FSMA and applies to individuals engaged in a regulated activity in UK-regulated firms. The application of this rule can be complex and dependent upon the firm and the activities it undertakes, but in general, it provides that firms must employ personnel with the skills, knowledge and expertise necessary for the discharge of the responsibilities allocated to them.

• Detailed training and competence requirements in the FCA’s training and competence handbook (TC) – The TC rules are designed to supplement the competent employees rule, especially concerning retail activities carried on by firms. Among others, these rules include the following:
  • rules on assessing and maintaining competence;
  • supervision of employees who have not yet been assessed as competent;
  • appropriate qualifications; and
  • recordkeeping and reporting for firms within its scope, including how a firm assessed its employees as competent, and how it has ensured that its employees remain competent.

Financial entities must establish, implement and apply, among other things:

• confidentiality policies;
• policies for internal control to confirm the acts, operations and services of individuals are carried out in an ethical, professional and legal manner;
• policies regarding the prevention of acts and operations with illegal resources;
• policies to prevent psychological risk factors;
• policies that allow the identification, follow-up and control of risks inherent to operations; and
• conflict of interest resolution policies.

Under the general provisions applicable to operations with securities carried out by members of the board of directors, officers and employees of financial entities and other obligated parties, the principles that must be complied with are the following:

• transparency in operations;
• equal opportunity before all other market participants in sureties operations;
• compliance with fair stock market customs and practices;
• absence of a conflict of interest; and
• prevention of improper behaviour that may have as its origin the use of privileged or confidential information.

Policies, manuals and codes must also include guidelines for the resolution of potential conflicts of interest, as well as the mechanisms to avoid the existence of such conflicts.

Financial entities must inform the CNBV annually, within 15 days, a report on the conduct, operations, and services of individuals. If any act or operation with illegal resources is detected, financial entities must inform the authorities immediately, including the CNBV and the SHCP.

The board of directors of operating companies of investment funds, distribution entities, and stock appraisers of investment funds must approve a code of conduct, which must consider:

• activities in compliance with the applicable laws;
• internal control rules for the compliance of provisions and policies contained in the code, including investment provisions issued by the CNBV;
• security mechanisms to ensure confidential information is used solely for authorised purposes and security measures to protect clients’ files from fraud, robbery or misuse;
• an obligation on the general manager, officers and employees to conduct themselves in a fair, honest and professional manner in the performance of their activities; and
• a prohibition on officers, employees and proxies executing any type of operation with the public that contravenes market practices.

Members of the board of directors, the general manager, officers, regulatory comptrollers, proxies, and other employees must immediately report the existence of illegal or unethical conduct or activity to the regulatory comptroller.

Yes. Both the FCA and PRA have established their own high-level required standards of conduct known as the Conduct Rules. The FCA’s conduct rules are set out in the FCA’s Code of Conduct sourcebook. The PRA’s conduct rules are set out in the PRA Rulebook (and different versions apply to different types of PRA-regulated firms).

The FCA’s conduct rules apply to most individuals working at an SM&CR firm. The PRA’s conduct rules apply to more limited individuals working at dual-regulated SM&CR firms: senior managers (approved by the PRA or FCA); individuals within the PRA’s certification regime; key function holders; and non-executive directors.

The Conduct Rules apply to conduct relating to the carrying out of an individual’s role. They do not extend to conduct within an individual’s private life, provided that the conduct is unrelated to the activities they carry out for their firm. Nevertheless, an individual’s behaviour outside of work can still be relevant to the separate consideration of their fitness and propriety.

There are two tiers of Conduct Rules: a first tier of rules applicable to all individuals subject to the Conduct Rules; and a second tier applicable to senior managers only.

The rules of the first tier are:

• Rule 1 – You must act with integrity.
• Rule 2 – You must act with due skill, care and diligence.
• Rule 3 – You must be open and cooperative with the FCA, PRA and other regulators.
• Rule 4 – You must pay due regard to the interests of the customer and treat them fairly.
• Rule 5 – You must observe proper standards of market conduct.

The rules of the second tier (applicable to senior managers) are:

• SC1 – You must take reasonable steps to ensure that the business of the firm for which you are responsible is controlled effectively.
• SC2 – You must take reasonable steps to ensure that the business of the firm for which you are responsible complies with the relevant requirements and standards of the regulatory system.
• SC3 – You must take reasonable steps to ensure that any delegation of your responsibilities is to an appropriate person and that you oversee the discharge of the delegated responsibility effectively.
• SC4 – You must disclose appropriately any information for which the FCA or PRA would reasonably expect notice.
• SC5 (certain dual-regulated firms only) – When exercising your responsibilities, you must pay due regard to the interests of current and potential future policyholders in ensuring the provision by the firm of an appropriate degree of protection for their insured benefits.

Firms must notify the FCA if they take disciplinary action against an individual for a breach of the Conduct Rules.

Pursuant to the Federal Law for the Prevention and Identity of Transactions with Illegally Obtained Resources, all acts carried out by financial entities are considered a vulnerable activity; therefore, financial entities must:

• set forth measures and procedures to prevent and detect acts and operations;
• file reports to the SHCP regarding acts, operations and services carried out by clients and employees if they suspect illegal resources are involved; and
• keep for at least 10 years any information and documents related to the identification of clients and users.

Given the above, if any action, operation or service is identified as undertaken with illegal resources or there is a breach of any of the provisions outlined in the above law, employers must inform the SHCP and prosecutor.

Also, if officers and general managers no longer comply with the legal requirements to occupy their positions (eg, not having a satisfactory credit record, or no longer being in good standing), financial entities may inform the CNBV or CNSF, as applicable, so the authorities may disqualify or remove those individuals from their positions.

Furthermore, if there is a breach of the code of conduct, the regulatory comptroller must inform the board of directors and keep such information available to the CNBV at all times. The board of directors will be in charge of establishing disciplinary measures.

Finally, if employees breach psychological risk prevention obligations (see question 11), employers must inform the labour authorities to impose corresponding sanctions.

Yes. There are multiple potential reporting obligations with various timing imperatives. We include below a snapshot of some of the key obligations:

• under FCA Principle 11, firms have a general duty to inform the FCA of matters about which it would reasonably expect notice;
• a firm must notify the FCA immediately it becomes aware, or has information which reasonably suggests, that a matter which could have a significant adverse impact on the firm’s reputation has occurred, may have occurred or may occur in the foreseeable future;
• a firm must notify the FCA immediately it becomes aware, or has information which reasonably suggests, that a significant breach of a rule (including a significant breach of a Conduct Rule) has occurred, may have occurred or may occur in the foreseeable future; and
• a firm must also notify the FCA if it takes disciplinary action against an individual for a breach of the Conduct Rules. Where the relevant individual is a senior manager, the notification must be made within seven business days. Where the relevant individual is certified staff, the notification must be made in the firm’s annual reporting.

In addition to the obligations previously described, employers and employees are subject to Official Mexican Rule NOM-035-STPS-2018 Employment Psychological Risks – Identification, Analysis and Prevention.

The purpose of NOM-035 is to establish the criteria to identify, analyse and prevent psychosocial risks; and to promote a favourable organisational environment in the workplace.

NOM-035 establishes specific obligations for employers, including:

• informing employees about policies to prevent psychosocial risk factors and labour violence, and promoting a favourable organisational environment;
• identifying and analysing factors of psychosocial risk;
• assessing the organisational environment;
• adopting measures to prevent psychosocial risk and promote a favourable organisational environment;
• adopting corrective actions when identifying psychosocial risk factors;
• identifying workers that could have been exposed to traumatic events and providing help; and
• keeping records of the analysis and identification of psychosocial risks, evaluations of the organisational environment, and corrective action.

To prove compliance, employers must adopt the following measures:

• develop a psychosocial risk policy;
• establish a complaints channel to receive and deal with reports of possible practices preventing a favourable organizational environment and report acts of workplace violence;
• conduct surveys to identify employees that have been exposed to psychosocial risks;
• conduct surveys to identify psychosocial risk factors and potential threats to the organisational environment; and
• create intervention programmes with specific actions based on the results obtained.

The Ministry of Labour and Social Welfare is the authority that inspects compliance with these obligations. NOM-035 does not establish specific sanctions for non-compliance, but inspectors may apply fines derived from the FLL. Also, employers must regularly carry out evaluations, research and follow-up on complaints. They must also prepare regular reports on the subject.

These provisions apply to all employers and there are no particular provisions regarding the prevention of harassment in financial entities.

Whistleblowing

In addition to the requirements of the SM&CR outlined above which relate to the prevention of wrongdoing (including the Conduct Rules, fitness and propriety assessments, Senior Managers’ Duty of Responsibility, the certification and approvals processes and associated training requirements), the PRA and the FCA maintain rules on whistleblowing. These are intended to encourage whistleblowers to come forward to report wrongdoing and protect them from retaliation when they do.

For certain types of SM&CR firms, the rules mandate measures that employers must implement, for others they provide guidance on measures to consider.

The key measures are as follows:

• Whistleblowers’ champion – a non-executive director and senior manager with responsibility for whistleblowing compliance within the firm, including oversight of internal policies and procedures and certain reporting requirements.

• Whistleblowing channel – a system which allows whistleblowers to report concerns confidentially and anonymously, and which allows such concerns to be assessed, addressed, and escalated where appropriate.

• Notification regarding external whistleblowing channels – that is, making staff aware of their right to report matters directly to the PRA and FCA and explaining how they can do so.

• Whistleblowing training – this must cover arrangements on whistleblowing within the firm and be provided (and tailored) to employees based in the UK, their managers, and employees responsible for operating the firm’s whistleblowing arrangements.

Prevention of harassment

Harassment and related unacceptable workplace behaviours (such as bullying and discrimination) are not specifically addressed in the SM&CR rules on individual accountability. However, it is clear from regulators’ public statements that the culture of firms (in its broadest sense) is central to their approach. Having a healthy firm culture is seen as critical to consumer protection and well-functioning markets, and firms with healthy cultures are considered to be less prone to misconduct.

Firms that are subject to the SM&CR need to be alive to the possibility that instances of harassment and other non-financial misconduct could amount to breaches of the individual accountability regime or trigger certain requirements under it, such as a requirement to investigate, reassess an individual’s fitness and propriety, or notify certain matters to the regulators. The same could apply to any failure by relevant staff to investigate and deal appropriately with allegations of this kind, such as a senior manager who turns a blind eye to reports of sexual harassment or workplace bullying. While there have been relatively few instances of non-financial misconduct resulting in an enforcement action to date, this is likely to become an emerging trend.

Under the Constitution and the FLL, an employee has the right to secure employment (employment stability right) and an employer cannot terminate an employment contract without legal cause.

An employer may only dismiss an employee under one or more of the legal causes provided for in article 47 of the FLL (eg, lack of ethics, dishonesty, violence, harassment, absence more than three times in a month without authorisation, disobedience, and intoxication). Dismissal should be carried out within the one month after the employer becomes aware of the legal cause for termination (statute of limitations).

The FLL requires employers to provide the employee with a written notice of dismissal in which the date and causes are expressly described. A lack of written notice makes the termination unlawful and triggers the severance obligation described below.

In addition, financial entities may end the employment of individuals without notice in the following circumstances:

• if a general manager or officer no longer complies with the legal requirements to occupy their position (see question 2);
• if the CNBV or the CNSF, as applicable, disqualifies, removes, or relieves individuals from their positions; and
• if a brokerage house’s proxies are no longer authorised by the CNBV.

If there are no legal grounds to justify the termination and an employee is dismissed, the dismissal is wrongful and the employee has the right to:

• be reinstated (article 49 of the FLL establishes the cases where an employer is exempt from reinstating an employee, for example employees of trust); or
• a severance payment (three months of salary, plus 12 days of salary for each year of service capped at twice the general minimum wage of the geographic area where the employee rendered services, plus 20 days of salary per year of service, and, if applicable, back pay.

These obligations are only enforceable (reinstatement and payment of severance) if the dismissal is deemed wrongful by the labour authorities in their corresponding resolution. Nevertheless, if there are no legal grounds that justify the termination, it is common practice to pay the severance in advance if there is no intention to reinstate the employee after termination.

When termination occurs, financial entities must inform the self-regulated bodies to revoke powers of attorney within five days. The self-regulated body must then inform the CNBV of the revocation. For the removal or resignation of the general manager and officers, financial entities must inform the corresponding authority within five to ten days, depending on the type of financial entity.

For the termination of employment of employees in general positions, there is no particular document to execute other than a termination document (resignation or employment termination agreement and release).

Settlement agreements

The whistleblowing measures outlined above are complemented by mandatory requirements for SM&CR firms concerning settlement agreements, namely that any such agreement must include a term stating that it doesn’t prevent the individual from making a protected disclosure, and must not require the individual to warrant that they have not made a protected disclosure or that they do not know of any information which could lead to them doing so (a “protected disclosure” is a type of disclosure recognised in English employment law that gives the person making it legal protection from retaliatory detrimental treatment).

SM&CR firms entering into settlement agreements must also ensure that they are not drafted in a way that is incompatible with other relevant regulatory requirements. For example, there is a specific prohibition in the FCA Handbook on firms entering into any arrangements or agreements with any person that limit their ability to disclose information required by the regulatory reference rules (see question 2). As such, terms relating to confidentiality and the provision of employment references should allow the firm sufficient flexibility to comply with regulatory reference requirements, which could include a requirement to update such a reference. In addition, any obligations of confidentiality should include a carve-out to permit relevant regulatory disclosures and reports.

Handover procedures

The SM&CR includes requirements designed to ensure that adequate handovers take place between outgoing and incoming senior managers. Firms must take all reasonable steps to ensure that senior managers (and anyone who has management or supervisory responsibilities for them) have all the information and material that they could reasonably expect to have to perform their responsibilities effectively and under the requirements of the regulatory system. This applies when someone becomes a senior manager and when an existing senior manager takes on a new job or new responsibilities (or when their responsibilities or job are being changed).

Firms must have a handover policy in place to ensure compliance with these requirements. They must also make and maintain adequate records of steps taken to comply with them.

The information and material handed over should be practical and helpful, with an assessment of what issues should be prioritised, and judgement and opinion as well as facts, figures and records. It should also include details about unresolved or possible regulatory breaches and any unresolved concerns expressed by the FCA, the PRA or any other regulatory body.

The format and arrangements of a handover should allow for an orderly transition, which should include the outgoing senior manager contributing to the handover everything that it would be reasonable to expect them to know and consider relevant, including their opinions. This could be achieved by requiring outgoing senior managers to prepare a handover certificate, but the FCA recognises that this will not always be practical.

To ensure that these requirements are satisfied, it is good practice to include in senior managers’ employment contracts (and settlement agreements) specific obligations relating to handovers.

Reallocating senior managers’ responsibilities

In addition to ensuring that adequate handovers take place between outgoing and incoming senior managers, firms should also ensure on the departure of a senior manager that their responsibilities are reallocated and that this is recorded in a way that is compliant with relevant regulatory requirements. This may include temporary reallocation to one or more existing senior managers where the replacement does not take over immediately on the departure of the departing senior manager, as well as updating the firm’s management responsibilities map and statements of responsibilities.

Reporting requirements

When an individual ceases to perform an SMF, the firm must generally notify the relevant regulatory within seven business days.

SM&CR firms must notify the relevant regulators if certain types of disciplinary action are taken, which can include dismissal – see question 10.

There are no particular rules or legal provisions concerning the use of post-termination restrictive covenants. Nevertheless, it is common practice to execute termination agreements with officers and general managers whereby non-disclosure, non-compete and non-solicitation provisions are set forth by the parties. The use of non-compete and non-solicitation provisions in termination agreements is only recommended for very specific employees and must be negotiated when the employment is terminated.

Plain non-compete and non-solicitation provisions binding employees after termination are not enforceable under Mexican law, because the Mexican Constitution grants individuals the right to perform any job, industry, commerce or work as long it is legal and not prohibited by a judicial or governmental decision.

Post-employment non-compete obligations, which are treated as an exception, must be agreed upon in connection to specific activities that may be deemed unfair competition, and may be enforced with economic compensation.

The period of enforceability must be proportional to:

• the number of years of employment;
• the level of information and importance of the position;
• the economic compensation; and
• the scope of the non-compete obligations.

Unfair competition and solicitation – either for business, or to induce other individuals to leave the company, while the employment contract between an individual and employer is in effect – may be considered misconduct. This misconduct is a cause of termination without notice for the company, and therefore it is feasible to enforce it.

The terms and conditions must be specifically addressed in writing, within the employment termination agreement, making express reference to the importance of the information, potential competition, activities that may be deemed unfair competition, intellectual property, and commercial advantages. The compensation paid is usually similar to or above the income of the employee while he or she was active with the company. Clawback and damages payments for breach of contract are standard practices.

The SM&CR does not regulate the use of post-termination restrictive covenants for employees in the financial services sector. It is fairly typical for financial services firms in the UK to include non-dealing, non-solicitation, non-compete and similar restrictive covenants in their employment contracts. These are subject to the same common law rules on interpretation and enforceability as in any other sector. The only caveat to this is that firms should ensure that such terms do not include any provision that might conflict with the regulatory duties of either the firm or the employee. This will be a rare occurrence in practice for most types of restrictive covenant, but could arise in respect of post-termination contractual obligations that are closely associated with restrictive covenants, namely those relating to confidentiality. As such, firms should ensure that confidentiality clauses in employment contracts or other agreements such as NDAs include appropriate carve-outs.

Non-disclosure provisions under Mexican law are applicable and enforceable. All information to which employees have access, given their position and services, regarding third parties and deemed sensitive or confidential (ie, non-public information) may not be disclosed at any time after the termination of employment or used for any other purposes.

The breach of non-disclosure obligations of confidential information and trade secrets may lead to economic sanctions or imprisonment. The disclosure of confidential information or using it to an employer’s detriment is an offence under criminal law. Also, employees that breach confidential obligations may have to pay damages to the affected party.

Pursuant to article 186 of the general provisions applicable to brokerage houses, internal policies must be in place to establish guidelines and procedures for the use, management, conservation and, as applicable, destruction of books, records, documents, and other information; and must guarantee the adequate use and control of documents containing the confidential information of clients. Also, these entities must establish strict controls to avoid the improper use of books, records, and documents in general.

According to the Law to Regulate Technological Finance Institutions, entities must include measures and policies to control operational risks within their filing for authorisation at the CNBV. They must also provide information security and confidentiality policies, with evidence of secure, trustable and precise technological support for their clients and with minimum standards of security to ensure the confidentiality, availability and integrity of information, as well as to prevent fraud and cyberattacks.

Additionally, financial entities must guarantee the security and integrity of the information, and implement security measures to preserve the integrity and confidentiality of the information generated, stored, or processed.

Lastly, under the Federal Law for the Prevention and Identity of Transactions with Illegally Obtained Resources, filing notices, information and documentation related to vulnerable activities to the SHCP does not qualify as a breach of confidentiality obligations.

NDAs (also known as confidentiality agreements) are potentially lawful and enforceable in the UK. It is common to include NDAs in employment contracts (to protect the confidential information of the employer during and after employment) and in settlement agreements (to reiterate existing confidentiality obligations and to keep the circumstances of the settlement confidential).

NDAs do not need to follow a particular form, but they must be reasonable in scope. Following #MeToo, there has been considerable government, parliamentary, and regulatory scrutiny of the use of NDAs and their reasonableness in different circumstances.

The following limitations on NDAs should be noted:

• By law, any NDA purporting to prevent an individual from making a “protected disclosure” as defined in the Employment Rights Act 1996 (ie, blowing the whistle about a matter) is void.

• The regulatory body for solicitors in England and Wales, the Solicitors Regulation Authority (SRA), has issued a detailed warning notice and guidance to practitioners setting out – in its view – inappropriate or improper uses of NDAs. Failure to comply with the SRA’s warning notice may lead to disciplinary action. The SRA lists the following as examples of improper use of NDAs:

• • using an NDA as a means of preventing, or seeking to impede or deter, a person from:
    • cooperating with a criminal investigation or prosecution;
    • reporting an offence to a law enforcement agency;
    • reporting misconduct, or a serious breach of the SRA’s regulatory requirements, to the SRA, or making an equivalent report to any other body responsible for supervising or regulating the matters in question; and
    • making a protected disclosure;
    • using an NDA to influence the substance of such a report, disclosure or cooperation;
    • using an NDA to prevent any disclosure required by law;
    • using an NDA to prevent proper disclosure about the agreement or circumstances surrounding the agreement to professional advisers, such as legal or tax advisors, or medical professionals and counsellors, who are bound by a duty of confidentiality;
    • including or proposing clauses known to be unenforceable; and
    • using warranties, indemnities and clawback clauses in a way that is designed to, or has the effect of, improperly preventing or inhibiting permitted reporting or disclosures being made (for example, asking a person to warrant that they are not aware of any reason why they would make a permitted disclosure, in circumstances where a breach of warranty would activate a clawback clause).
       
• The Law Society of England and Wales, a professional association representing solicitors in England and Wales, has issued similar guidance (including a practice note) on the use of NDAs in the context of the termination of employment relationships.
• Other non-regulatory guidance on the use of NDAs has also been issued, including by the Advisory, Conciliation and Arbitration Service and by the UK Equality and Human Rights Commission.

Care should be taken accordingly to ensure that the wording of any NDA complies with prevailing guidance, especially from the SRA.