Employment in Financial Services

Financial services employees are primarily subject to general employment law, such as the Employment Contracts Act of 3 July 1978.

Moreover, sectoral collective bargaining agreements (CBAs) also apply. The main concerned joint committees (JCs) are JC No. 310 for banks (including savings banks and stockbroker companies) and JC No. 341 for banking and investment services intermediaries

JC No. 309 for stockbroker companies is abolished since 1 July 2023 and the employees who were covered by it are now covered by joint committee No. 310. A specific CBA was adopted to regulate employees’ rights following this change (Collective bargaining agreement of 3 July 2023 concluded within the Joint Commission for Banks concerning the transfer of stockbroker companies from JC No. 309 to JC No. 310).

Due to the peculiarities of the financial sector, they are also governed by specific regulations, such as Regulation (EU) No. 468/2014 of the European Central Bank; Directive 2013/36/EU on access to the activity of credit institutions and the prudential supervision of credit institutions and investment firms; Directive 2014/65/EU on markets in financial instruments; the Status and Supervision of Credit Institutions Act of 25 April 2014, the Prevention of Money Laundering and Terrorist Financing Act of 18 September 2017; and the Supervision of the Financial Sector and on Financial Services Act of 2 August 2002.

Finally, the regulations adopted by supervisory authorities, such as the National Bank of Belgium (NBB), the European Central Bank and the Financial Services and Markets Authority (FSMA), apply to the sector. The Belgian Financial Sector Federation (Febelfin) also issues guidelines.

The Employment Act 2006 and the Equality Act 2017 prescribe general employment rights and obligations for both employers and employees, including those in the financial services industry.

The Isle of Man Financial Services Authority (IoM FSA) is responsible for the regulation and supervision of financial services providers in the Isle of Man. Among other things, regulated financial institutions must comply with the rules set down by the IoM FSA in its Financial Services Rule Book 2016 (as amended) (the Rule Book). The IoM FSA applies “fitness and propriety” criteria to holders of certain key roles within a licence holder. This entails the IoM FSA assessing an individual’s integrity, financial standing, competency and capacity to undertake the role.

The requirement for an individual to be “fit and proper” depends on the nature of the role rather than their job title, but generally applies to key person or senior managerial roles (also known as Controlled Functions), where the individual has significant influence or control over the regulatory matters of the financial institution or to roles that have a bearing on the regulatory objectives of the IoM FSA and its ability to meet them.

In the UK, there are two main regulators responsible for the supervision of financial institutions. These are:

• The Prudential Regulation Authority (the PRA) – The PRA supervises over 1,500 financial institutions, including banks, building societies, credit unions, insurance companies and major investment firms. It creates policies for these institutions to follow and watches over aspects of their business.
• The Financial Conduct Authority (the FCA) – The FCA regulates the conduct of approximately 50,000 firms, prudentially supervises 48,000 firms, and sets specific standards for around 18,000 firms.

Some financial institutions are regulated by both the PRA and FCA (dual-regulated). Those financial institutions must comply with rules set down by the PRA in its rulebook (the PRA Rulebook) and by the FCA in its handbook (the FCA Handbook). Other firms are regulated solely by the FCA (solo-regulated) and must comply with the FCA handbook alone. Different rules can apply depending on the nature and size of the firm. The PRA and FCA work closely on certain issues and firms, but the FCA focuses specifically on ensuring fair outcomes for consumers.

The Senior Managers and Certification Regime (SM&CR) sets out how the UK regulators oversee people in businesses supervised and regulated by them, and how those people must act. As the FCA has summarised, “The SM&CR aims to reduce harm to consumers and strengthen market integrity by making individuals more accountable for their conduct and competence” (https://www.fca.org.uk/firms/senior-managers-certification-regime).

SM&CR consists of three elements:

• The Senior Managers Regime (SMR) – This applies to the most senior people in a firm (senior managers) who perform one or more senior management functions (SMFs). These functions are specified in the PRA Rulebook and the FCA Handbook. Senior managers must be pre-approved by the PRA or FCA before starting their roles. Each senior manager must also have a “Statement of Responsibilities” (that sets out what they are responsible and accountable for), which may include (depending on the firm) certain responsibilities prescribed by the regulator known as “Prescribed Responsibilities”. Every year, senior managers must be certified as fit and proper to carry out their role by their firm.
• The Certification Regime (CR) – This applies to employees who, because of their role, could pose a risk of significant harm to the firm or its customers, such as employees who offer investment advice (certified staff). For solo-regulated firms, these roles are generally called certification functions. Firms must certify that these employees are fit and proper for their roles both at the outset of their employment and continuously.
• The Conduct Rules – The Conduct Rules set minimum standards of individual behaviour in financial services in the UK. They apply to almost all employees of a firm. They also include particular rules applicable only to senior managers.

Certain parts of SM&CR apply to particular firms only. This is outside the scope of this note, which sets out the general position under SM&CR.

Members of management should at all times be of good repute and possess sufficient knowledge, skills and experience to perform their duties (article 91, Directive 2013/36/EU; and article 9, Directive 2014/65/EU).

Anyone in an executive position (i.e. members of the legal administrative body, the effective management and independent controllers) at a financial institution must exclusively be natural persons and must at all times have the necessary professional standing and expertise to perform their duties (article 19, Act of 25 April 2014). Since 2023, it is specified that “in particular, these persons must demonstrate honesty, integrity and independence of mind which, in the case of members of the legal administrative body, enable them to effectively evaluate and, if necessary, question the decisions of the actual management and to ensure the effective supervision and monitoring of the management decisions taken” (Art. 19, Act of 25 April 2014).

In addition, they must not have been convicted of any of the offences listed in article 20 of the Act of 25 April 2014. This concerns convictions with a professional ban and violations of financial legislation, company codes and insurance law.

The NBB will verify that these persons meet the conditions listed above. Forms for a new appointment, additional elements during the employment, termination of an appointment or renewal of an appointment are available on the NBB website (www.nbb.be). These forms require information mainly regarding education, past financial services experience, training, any criminal or administrative or civil proceedings or investigations, disciplinary decisions, bankruptcy, insolvency, potential conflicts of interest, and time commitments for the new appointment.

The NBB will assess the ability of the person based on five criteria:

• expertise, covering knowledge, experience and skills;
• professional repute;
• independence of mind;
• time commitment; and
• collective suitability for the board (ie, to verify whether the expertise within the said body is sufficiently guaranteed, given the person’s knowledge, experience and skills (NBB Fit & Proper Handbook of 22 December 2022, 2:26, p. 16)).

Concerning "N-1" effective managers (managers who exercise direct and decisive influence over the management of the institution, but who are not members of the management committee) other than branch managers, the supervisory authority does not have to authorise them (NBB Fit & Proper Handbook of 22 December 2022, 2:9, p. 14). This does not mean that these persons must not have the required expertise and professional reputation, but only that the NBB will not conduct an assessment.

There is a general obligation on employers in the Isle of Man to undertake legal working checks to ensure that the prospective employee has the right to work lawfully in the Isle of Man.

In addition, financial institutions must take reasonable steps to ensure that individuals who perform any regulated activity in the course of their employment, or under any contract with the financial institution, are fit and proper for the tasks they perform, by providing adequate training and supervision and (where necessary) undertaking additional checks. Where the financial institution wishes to employ an individual in a Controlled Function, the financial institution must carry out sufficient due diligence to satisfy itself that the candidate is fit and proper to perform the proposed functions.

There are two types of Controlled Functions, those that require notification to, and acceptance by, the IoM FSA and those that require notification only. In either case, the financial institution is required to notify the IoM FSA of the appointment or intended appointment of certain key roles at least 20 business days before the appointment takes effect. Where the Controlled Function also requires acceptance, the financial institution will require the IoM FSA’s consent to the appointment of a prospective candidate to a particular role. It is recommended that job offers in such circumstances are made subject to the written acceptance of the IoM FSA.

While the IoM FSA does not specify any particular pre-screening measures, it provides guidance on the nature of the expected due diligence that it would expect a financial institution to carry out, particularly where the individual will be undertaking a key role. Such due diligence includes carrying out a professional body check (ie, any memberships held and if disciplinary action has been taken), capacity check[1], criminal record check, credit check and website checks. The financial institution should also consider the individual’s qualifications, training and competency.

The IoM FSA may ask for evidence of the due diligence carried out by the financial institution at any time, either remotely or during a supervisory visit.

The IoM FSA recommends financial institutions request a reference from the prospective candidate’s current employer and previous employers covering, as a minimum, the past ten years of employment.

For employees subject to the SMR, anyone performing an SMF must be pre-approved by the relevant regulator before they can start their role. Generally, firms that wish to employ a senior manager must first carry out sufficient due diligence to satisfy themselves that the candidate is a fit and proper person to perform their proposed functions. In this regard, firms must consider the individual’s qualifications, training, competency and personal characteristics. The firm must also carry out a criminal records check. They may then apply to the relevant regulator for that candidate’s pre-approval. In the firm’s application, all matters relating to the candidate’s fitness and propriety must be disclosed. The firm must also enclose a statement of that individual’s proposed responsibilities and (depending on the firm) the latest version of the firm’s management responsibilities map.

For employees subject to the CR, before the appointment and annually thereafter, these employees must be certified by the employing SM&CR firm as being fit and proper. Certification does not involve pre-approval by the FCA or PRA.

Additionally, firms must comply with the regulatory reference rules for all candidates subject to either the SMR or CR before their employment. These rules require employing firms to request a regulatory reference from all previous employers covering the past six years of employment. Information must be shared between regulated firms using a particular template, which includes information relevant to assessing whether a candidate is fit and proper. Firms are also expected to retain records of disciplinary and fit and proper findings going back six years for their employees (or longer for findings of gross misconduct), and they must update regulatory references that they have previously given where new significant information comes to light that would impact the content of a previously given regulatory reference.

Regarding anyone in an executive position (i.e. members of the legal administrative body, the effective management and independent controllers) at a financial institution, it is necessary to use the forms provided by the NBB to ensure that they are “fit and proper” and are authorised by the NBB (see question 2).

It is also recommended to foresee restrictive covenants in the employment contract, such as confidentiality, other professional activities, non-solicitation, non-competition and intellectual property provisions.

As a matter of general Isle of Man employment law, employers must give employees written particulars of their terms and conditions of employment within four weeks of them starting work, pursuant to section 8 of the Employment Act 2006. This mandatory information includes (but is not limited to) the names of the employer and employee; the date of commencement of employment and the date when continuous service began for statutory employment rights purposes; scale or rate of remuneration; hours of work; and holiday entitlement. Typically, a written employment contract will contain the relevant information and satisfy these requirements.  

Financial institutions should also ensure that contracts of employment reinforce the requirements of meeting and maintaining the employee’s “fit and proper” status.

As a matter of general UK employment law, employers must give employees written particulars of certain terms and conditions of employment. This is known as a “section 1 statement” after section 1 of the Employment Rights Act 1996, which sets out the mandatory information that employers must give to employees no later than the first day of their employment. This includes fundamental information such as the names of the employer and employee; the date of commencement of employment; the rates and timing of pay; and working hours. Other prescribed particulars (such as information regarding pensions, collective agreements and training) can be provided to employees in instalments within two months of commencement of employment. Typically, a written employment contract will contain the relevant information to satisfy these requirements.

Financial services employers should ensure that, in addition, their employment contracts reinforce the requirements of SM&CR. This will help the employer manage the employment relationship in a manner compliant with SM&CR and demonstrate to the relevant regulators the employer’s commitment to compliance with SM&CR. The employment contract will usually include, therefore, additional provisions regarding the completion of SM&CR-compliant background checks; confirmation of the employee’s regulated function (eg, their SMF or certification function); required regulatory standards of conduct; cooperation with fitness and propriety assessments; and tailored termination events.

In addition, all senior managers must have a statement of responsibility setting out their role and responsibilities. Certain firms must also allocate certain regulator-prescribed responsibilities (prescribed responsibilities) among senior managers. It is common to set out a senior manager’s regulatory responsibilities in their employment contract.

Dual-regulated firms must also ensure that individuals approved to carry out a PRA-designated SMF are subject to any specific contractual requirements required by the PRA. For example, depending on the type of firm, a firm may be required to ensure that the relevant individual is contractually required to comply with certain standards of conduct, such as to act with integrity and with due care and skill (among other requirements).

Anyone in an executive position (i.e. members of the legal administrative body, the effective management and independent controllers) at a financial institution must, at all times, have the necessary professional standing and expertise to perform their duties.

This will be assessed by the NBB through standard forms to complete if there is a new appointment, new elements during employment, termination of appointment or renewal of appointment.

"N-1" effective managers must meet the same criteria, but authorisation by the NBB is not necessary (see question 2).

Yes, please see question 2.

Any individual performing a prescribed key role must be pre-approved by the IoM FSA and be certified as “fit and proper”. The IoM FSA has issued detailed guidance for financial institutions that set out the criteria that they normally apply in considering the fitness and propriety of individuals who wish to undertake Controlled Functions. Appendix 2 of the guidance contains a table setting out which Controlled Functions require consent and which functions are notification only.

Guidance can be found here: https://www.iomfsa.im/media/2464/regulatoryguidancefitnessandpropriety.pdf

See question 2.

All individuals performing an SMF, as classified by the FCA or PRA, will be subject to the SMR. SMFs are described in the Financial Services and Markets Act 2000 (FSMA) as functions that require the person performing them to be responsible for managing one or more aspects of a firm’s affairs authorised by the FSMA, and those aspects involve, or might involve, a risk of serious consequences for the firm or business or other interests in the UK. As noted, any individual performing an SMF will need to be pre-approved by the relevant regulator before they can start their role, and thereafter they must be certified as fit and proper by their firm annually. Applications to the regulator for pre-approval must disclose all matters relating to a candidate’s fitness and propriety and be accompanied by a statement of responsibilities. Firms must carry out a criminal records check as part of the application for approval.

Additionally, employees of firms who are not senior managers but who, because of their role, could still pose a risk of significant harm to the firm or any of its customers, may be subject to the CR. The certification functions that place an employee within the ambit of the CR are different under the rules of the FCA and the PRA but include persons such as those dealing with clients or those subject to qualification requirements. These employees must be certified by their firm as fit and proper for their roles both at the outset of their employment and on an annual basis thereafter (certified staff). Firms are not required to carry out criminal records checks for certified staff, but firms can choose to do so to the extent it is lawful.

The regulators have set out detailed guidance for firms to consider when assessing an individual’s fitness and propriety. This includes assessing an individual’s honesty, integrity and reputation; competence and capability; and financial soundness.

Specifically, employees holding executive, overall management, oversight or control functions in regulated companies are responsible for ensuring that the companies’ organization ensures the continued compliance with applicable financial market laws. Swiss financial market laws do not have enhanced responsibilities for different employee categories. Instead, a person’s fitness and propriety are assessed within the context of the specific requirements and functions of a given company, the scope of activities at that company, and the complexity of that company.

Employees who carry out a Controlled Function will have a duty of responsibility to ensure compliance with the financial institution’s ongoing regulatory requirements. 

Every senior manager under the SMR has a “duty of responsibility” concerning the areas for which they are responsible. If a firm breaches a regulatory requirement, the senior manager responsible for the area relevant to the breach could be held accountable for the breach if they failed to take reasonable steps to prevent or stop the breach.

In addition, for most firms, the FCA requires that certain responsibilities – “prescribed responsibilities” – are allocated to appropriate senior managers. These responsibilities cover key conduct and prudential risks. They include, among others, responsibility for a firm’s performance of its obligations under the SMR; responsibility for a firm’s performance of its obligations under the CR; and responsibility for a firm’s obligations around conduct rules training and reporting. Firms must give careful thought to the best person to allocate each prescribed responsibility.

There is no list of financial services employees as such, but the NBB will assess, among others, the experience and the credibility of the person when granting the “fit and proper” authorisation.

This concerns anyone in an executive position (i.e. members of the legal administrative body, the effective management and independent controllers) at a financial institution (see question 2).

However, it should be noted that financial services institutions approved by the NBB are listed on its website. Moreover, banking and investment services intermediaries must be registered and file through an online application to the FSMA (www.fsma.be) documents attesting, inter alia, their knowledge, clean criminal record, and professional liability insurance.

The IoM FSA maintains a public register of entities that are regulated by them. The register lists the classes of regulated activity that the licence holder is authorised to carry out. However, there is no prescribed list or public register for financial services employees that individuals need to be included in to undertake regulated activities.

The FCA maintains a public list of authorised firms and the activities for which each firm has permission. This list is known as the Financial Services Register. The register also includes a directory of certified and assessed persons working in financial services – this includes for each firm (as applicable) senior managers; certified staff; directors (executive and non-executive) who are not performing SMFs; and other individuals who are sole traders or appointed representatives.

Firms are responsible for keeping the directory up to date. Firms must report certain information to the FCA about persons included in the register and directory, including information on an individual's role, their workplace location, and the types of business they are qualified to undertake. The FCA provides guidance and Q&As to assist firms with navigating the register and directory.

Specific rules apply to personnel whose professional activities have a significant impact on the company's risk profile (article 92, 2. Directive 2013/36/EU; article 67, Act of 25 April 2014), including:

• all members of the legal administrative body and senior management;
• staff members with supervisory responsibility for control functions or business units;
• employees who received significant remuneration during the previous year (ie, 500,000 EUR or more and equal to or greater than the average remuneration of members of the legal administrative body and senior management) and the employee performs the professional activity in a critical business unit and the nature of the activity is such that it has a significant impact on the risk profile of the business unit concerned.

Variable remuneration is capped at 50% of the fixed remuneration or 50,000 EUR, without exceeding the fixed remuneration, whichever is higher (article 1, Annex II, Act of 25 April 2014). Moreover, it is forbidden to have a guaranteed variable remuneration (article 5). 40% of variable remuneration is delayed for four to five years, with a minimum of five years for members of the legal administrative body and senior management. When the variable remuneration is very high, the percentage of the delayed variable remuneration is 60% (article 7).

The total variable remuneration will be significantly reduced if the company generates a reduced or negative financial return. This applies to variable remuneration not yet earned, variable remuneration earned but not yet paid, and variable remuneration that has already been paid. It occurs through malus or clawback schemes, in particular when the person has participated in practices that have resulted in significant losses, has not respected the “fit and proper” duties or has set up a specific mechanism for tax fraud (article 8).

A termination indemnity is considered a variable remuneration, except for a legal indemnity in lieu of notice or a non-compete indemnity (based on the calculation provided by the Employment Contracts Act). Furthermore, a termination indemnity higher than 12 months, or 18 months for a motivated decision from the remuneration committee, can only be granted subject to the approval of the first ordinary general meeting following the termination (articles 12 and 12/1).

For companies that benefit from government intervention, there is in principle no variable remuneration, except for the person recruited after the public intervention to carry on the restructuring. Moreover, the termination indemnity is capped at nine months, unless the legal indemnity in lieu of notice (based on seniority) is higher (articles 16 and 17).

There are no prescribed rules relating to compensation payable to financial services employees and any remuneration, bonuses or clawback will be a matter of contract between the financial services employee and the financial institution. Inevitably, this will reflect what is typical in the market for experienced, qualified, financial services personnel performing the role for which they are applying or are currently carrying out.

The remuneration of financial services employees working at certain firms (such as banks, building societies, asset managers and investment firms) is heavily regulated. The relevant rules can be found in various FCA “Remuneration Codes” (each Code tailored to different firms) and also (for dual-regulated firms) in specific remuneration parts of the PRA Rulebook and directly applicable retained EU law.

The remuneration rules are complex and their application is dependent on each firm. The key principle of the rules, however, is that firms subject to them must ensure that their remuneration policies and practices are consistent with and promote sound and effective risk management.

Some elements of the rules apply to all staff, whereas others apply only to material risk-takers within a particular firm.

By way of a snapshot, the rules generally cover such matters as:

• the appropriate ratio between fixed pay and variable pay, to ensure that fixed pay is a sufficiently high proportion of total remuneration to allow for the possibility of paying no variable pay;
• the amount of any discretionary bonus pool, which should be based on profit, adjusted for current and future risks, and take into account the cost and quantity of the capital and liquidity required;
• performance-related bonuses, which should be assessed based on a variety of factors, including the performance of the individual, the relevant business unit and the overall results of the firm;
• restrictions on guaranteed variable pay and payments on termination of employment; and
• malus and clawback requirements.

To keep the “fit and proper” authorisation, the concerned persons must ensure that they follow the relevant training.

Regarding the prevention of money laundering, financial institutions must ensure that personnel whose function requires it is aware of the legislation, knows the internal policies, is aware of the internal reporting procedure and receives special continuing education programmes (article 11, §1, Act of 18 September 2017).

At a sectoral level, JC Nos. 310 and 341 provide for an individual right to five days of training per year per full-time equivalent employee.

The IoM FSA’s “Training and Competence Framework” sets the minimum standards that must be achieved by individuals working in the financial services industry. The framework sets out the IoM FSA’s expectations regarding competency, not only for employees who carry out a Controlled Function (and who are subject to fitness and propriety criteria) but for all staff.

The framework is split into two segments: general training and competence requirements for all staff; and training and competence expectations for Controlled Functions and Other Functions – essentially additional expectations for individuals undertaking or aspiring to undertake certain Controlled Functions or other designated functions.

The IoM FSA also sets requirements concerning continuing professional development (CPD) for different types of regulated entities and staff at different levels. For example, Rule 8.5 of the Rule Book specifies that directors and key persons within a licence holder must undertake a minimum of 25 hours of relevant CPD per year or meet the level prescribed by their professional body (where higher). There are further CPD requirements on individuals who provide investment advice to retail investors.

Even absent a prescribed minimum level of CPD, the IoM FSA believes that ongoing training and CPD for all financial services staff and officers is good practice. Such training and CPD should be relevant to the role of the individual and take account of new developments (ie, changes to tax legislation, new regulatory requirements and new products).

The PRA and FCA training and competence regimes set the minimum standards that must be achieved by individuals working in the financial services industry. These regimes aim to ensure that authorised firms have arrangements in place to satisfy themselves that their employees are competent.

All FSMA-authorised firms are required to have adequately trained and competent senior management and employees. The training and competence requirements include:

• Threshold conditions on suitability – All firms must show that persons connected with the firm are fit and proper, taking into account all the circumstances. When assessing the suitability threshold of an employee, the FCA and the PRA will consider:
  • the nature of the regulated activity the firm carries on or is seeking to carry on;
  • the need to ensure that the firm's affairs are conducted soundly and prudently;
  • the need to ensure that the firm's affairs are conducted appropriately, considering especially the interests of consumers and the integrity of the UK financial system; and
  • whether those who manage the firm's affairs have adequate skills and experience and act with probity.

• FCA Principles for Businesses or PRA Fundamental Rules – These rules lay out the parameters of the “fit and proper” standard set for firms in the threshold condition on suitability, and require firms to undertake the following:
  • recruit staff in sufficient numbers;
  • provide employees with appropriate training, with competence assessed continuously;
  • make proper arrangements for employees involved with carrying on regulated activities to achieve, maintain and enhance competence; and
  • train employees to pay due regard to the interests of a firm’s customers and treat them fairly.

• Competent employees rule in chapters 3 and 5 of the Senior Management Arrangement Systems and Controls Sourcebook – This is the main employee competence requirement in the training and competence regime under the FSMA and applies to individuals engaged in a regulated activity in UK-regulated firms. The application of this rule can be complex and dependent upon the firm and the activities it undertakes, but in general, it provides that firms must employ personnel with the skills, knowledge and expertise necessary for the discharge of the responsibilities allocated to them.

• Detailed training and competence requirements in the FCA’s training and competence handbook (TC) – The TC rules are designed to supplement the competent employees rule, especially concerning retail activities carried on by firms. Among others, these rules include the following:
  • rules on assessing and maintaining competence;
  • supervision of employees who have not yet been assessed as competent;
  • appropriate qualifications; and
  • recordkeeping and reporting for firms within its scope, including how a firm assessed its employees as competent, and how it has ensured that its employees remain competent.

The NBB has issued a Fit & Proper Handbook, which was last updated on 22 December 2022.

Besides, Febelfin has adopted codes of conduct and regulations for relations between financial institutions and their customers, which can be considered standard practice in the sector.

Each financial institution may also provide more concrete or more precise quality standards for its clientele.

Yes, financial institutions are required to comply with the rules and standards of conduct as set out in the Rule Book (as a minimum).

Financial institutions must notify the IoM FSA of any departure or intended departure of an employee who undertakes a Controlled Function within ten business days. Furthermore, where a financial institution discovers an event which may lead to a final warning being given to, or other serious disciplinary action being taken against, any of its employees, the financial institution must inform the IoM FSA within ten business days. The notice must specify the event, and the name of the employee where the employee holds a Controlled Function or is a “key person”. Where the employee is not a “key person” and does not hold a Controlled Function role, the financial institution is not required to inform the IoM FSA of the name of the employee unless – following an investigation – the employee is given a final warning or other serious disciplinary action is taken (in which case, the financial institution will have to inform the IoM FSA of the employee’s name at that point).

Yes. Both the FCA and PRA have established their own high-level required standards of conduct known as the Conduct Rules. The FCA’s conduct rules are set out in the FCA’s Code of Conduct sourcebook. The PRA’s conduct rules are set out in the PRA Rulebook (and different versions apply to different types of PRA-regulated firms).

The FCA’s conduct rules apply to most individuals working at an SM&CR firm. The PRA’s conduct rules apply to more limited individuals working at dual-regulated SM&CR firms: senior managers (approved by the PRA or FCA); individuals within the PRA’s certification regime; key function holders; and non-executive directors.

The Conduct Rules apply to conduct relating to the carrying out of an individual’s role. They do not extend to conduct within an individual’s private life, provided that the conduct is unrelated to the activities they carry out for their firm. Nevertheless, an individual’s behaviour outside of work can still be relevant to the separate consideration of their fitness and propriety.

There are two tiers of Conduct Rules: a first tier of rules applicable to all individuals subject to the Conduct Rules; and a second tier applicable to senior managers only.

The rules of the first tier are:

• Rule 1 – You must act with integrity.
• Rule 2 – You must act with due skill, care and diligence.
• Rule 3 – You must be open and cooperative with the FCA, PRA and other regulators.
• Rule 4 – You must pay due regard to the interests of the customer and treat them fairly.
• Rule 5 – You must observe proper standards of market conduct.

The rules of the second tier (applicable to senior managers) are:

• SC1 – You must take reasonable steps to ensure that the business of the firm for which you are responsible is controlled effectively.
• SC2 – You must take reasonable steps to ensure that the business of the firm for which you are responsible complies with the relevant requirements and standards of the regulatory system.
• SC3 – You must take reasonable steps to ensure that any delegation of your responsibilities is to an appropriate person and that you oversee the discharge of the delegated responsibility effectively.
• SC4 – You must disclose appropriately any information for which the FCA or PRA would reasonably expect notice.
• SC5 (certain dual-regulated firms only) – When exercising your responsibilities, you must pay due regard to the interests of current and potential future policyholders in ensuring the provision by the firm of an appropriate degree of protection for their insured benefits.

Firms must notify the FCA if they take disciplinary action against an individual for a breach of the Conduct Rules.

If a new element occurs that can influence one or more of the five criteria assessing the suitability of a person for the “fit and proper” authorisation (see question 2), the financial institution must file the adequate form with the NBB.

Notification to the NBB is also required in the event of termination or reappointment.

Yes, please see question 9.

Financial institutions in the Isle of Man are required to comply with various statutory requirements. Breaches of those statutory requirements impose an obligation on the relevant entity to self-report to the IoM FSA. While ordinarily, businesses will endeavour not to supply information about individuals within the business to the regulator as part of this reporting, from time to time this may be necessary to comply with their regulatory obligations. Where this is the case, usually the regulator will be asked to use their powers of compulsion to seek the information rather than such information being given voluntarily. This is particularly the case where the regulator may have formed concerns about an individual’s fitness and propriety and wishes to investigate this further.

Regulators from other jurisdictions may use certain reciprocal agreements and reciprocal enforcement legislation to seek information from the IoM FSA or more directly from a financial services business. Where such requests are made, this may include information about individual employees (ordinarily those exercising Controlled Functions). However, any mechanism for reciprocal enforcement or exchange of information is subject to scrutiny and such information would normally only be offered by an employer under compulsion.

Yes. There are multiple potential reporting obligations with various timing imperatives. We include below a snapshot of some of the key obligations:

• under FCA Principle 11, firms have a general duty to inform the FCA of matters about which it would reasonably expect notice;
• a firm must notify the FCA immediately it becomes aware, or has information which reasonably suggests, that a matter which could have a significant adverse impact on the firm’s reputation has occurred, may have occurred or may occur in the foreseeable future;
• a firm must notify the FCA immediately it becomes aware, or has information which reasonably suggests, that a significant breach of a rule (including a significant breach of a Conduct Rule) has occurred, may have occurred or may occur in the foreseeable future; and
• a firm must also notify the FCA if it takes disciplinary action against an individual for a breach of the Conduct Rules. Where the relevant individual is a senior manager, the notification must be made within seven business days. Where the relevant individual is certified staff, the notification must be made in the firm’s annual reporting.

EU Directive 2019/1937 on whistleblowing has been transposed in Belgium by the Act of 28 November 2022. Financial services are included in its material scope (article 2, 1°, b)). In general, companies with more than 250 employees had to create an internal whistleblowing system by 15 February 2023. For companies with between 50 and 250 employees, the deadline was 17 December 2023. However, these thresholds do not count for legal entities who are active in financial services, therefore they needed to install an internal whistleblowing system no matter their employee count and respect the deadline of 15 February 2023 (article 57, §3). The FSMA will have to verify whether the financial institutions are respecting their whistleblowing obligations (article 36). Furthermore, persons who report violations relating to financial services receive better protection and are awarded higher lump sum compensation if they are the victim of a retaliation measure (six months gross remuneration; article 27, §3).

Regarding the prevention of money laundering, financial institutions were already required to provide a procedure to enable their personnel, agents or distributors to report a violation of the legislation, through a specific, independent and anonymous channel (article 10, Act of 18 September 2017).

The employer must ensure the wellbeing of its employees, which includes the prevention of harassment. If harassment has occurred, they must provide appropriate support, including remediating measures, protection against dismissal and investigation by a prevention advisor specialising in psychosocial risks (Wellbeing Act of 4 August 1996, Wellbeing Code of 28 April 2017). The procedure must be detailed in the work rules of the financial institutions.

Yes, from 1 January 2017 financial institutions must have an internal whistleblowing policy in place. Financial services employees are encouraged to first raise issues with their employer. However, employees may also raise serious concerns with the IoM FSA if they remain unsatisfied at the end of the employer’s process.

Under employment legislation, if an employee is dismissed because they have made a “protected disclosure” (ie, blown the whistle), that dismissal is automatically unfair. Compensatory damages for whistleblowing are uncapped in the Isle of Man Employment and Equality Tribunal.

While there is no sector-specific guidance on harassment in the workplace, all employers have a legal duty to ensure that employees are not harassed at work (this would extend to bullying and being subjected to discrimination). Failure to have and enforce appropriate policies on bullying and harassment is likely to impair any defence that the employer may raise to a legal claim because it will not be able to show that it took “all reasonable steps” to prevent such acts.

Whistleblowing

In addition to the requirements of the SM&CR outlined above which relate to the prevention of wrongdoing (including the Conduct Rules, fitness and propriety assessments, Senior Managers’ Duty of Responsibility, the certification and approvals processes and associated training requirements), the PRA and the FCA maintain rules on whistleblowing. These are intended to encourage whistleblowers to come forward to report wrongdoing and protect them from retaliation when they do.

For certain types of SM&CR firms, the rules mandate measures that employers must implement, for others they provide guidance on measures to consider.

The key measures are as follows:

• Whistleblowers’ champion – a non-executive director and senior manager with responsibility for whistleblowing compliance within the firm, including oversight of internal policies and procedures and certain reporting requirements.

• Whistleblowing channel – a system which allows whistleblowers to report concerns confidentially and anonymously, and which allows such concerns to be assessed, addressed, and escalated where appropriate.

• Notification regarding external whistleblowing channels – that is, making staff aware of their right to report matters directly to the PRA and FCA and explaining how they can do so.

• Whistleblowing training – this must cover arrangements on whistleblowing within the firm and be provided (and tailored) to employees based in the UK, their managers, and employees responsible for operating the firm’s whistleblowing arrangements.

Prevention of harassment

Harassment and related unacceptable workplace behaviours (such as bullying and discrimination) are not specifically addressed in the SM&CR rules on individual accountability. However, it is clear from regulators’ public statements that the culture of firms (in its broadest sense) is central to their approach. Having a healthy firm culture is seen as critical to consumer protection and well-functioning markets, and firms with healthy cultures are considered to be less prone to misconduct.

Firms that are subject to the SM&CR need to be alive to the possibility that instances of harassment and other non-financial misconduct could amount to breaches of the individual accountability regime or trigger certain requirements under it, such as a requirement to investigate, reassess an individual’s fitness and propriety, or notify certain matters to the regulators. The same could apply to any failure by relevant staff to investigate and deal appropriately with allegations of this kind, such as a senior manager who turns a blind eye to reports of sexual harassment or workplace bullying. While there have been relatively few instances of non-financial misconduct resulting in an enforcement action to date, this is likely to become an emerging trend.

If the person concerned is subject to “fit & proper” authorisation from the NBB (see question 2), a form must be filed with the NBB to inform it of the termination.

Furthermore, the settlement agreement cannot include payments that would not respect the caps for remuneration and termination indemnities (see question 7).

Finally, job security clauses have been negotiated at a sectoral level, meaning a specific procedure must be followed for individual or collective dismissal under JC No. 310, with a sanction of six to nine months’ remuneration.

Terminating an employee’s employment must occur in accordance with the terms of their contract, otherwise the employer risks a claim for wrongful dismissal.

Additionally, financial institutions have certain notification obligations to the IoM FSA as outlined in question 10. Where a settlement agreement is entered into in respect of the exit of an employee and a factor in their departure is a disciplinary issue, the IoM FSA will usually wish to know the terms of, and circumstances leading to, the settlement agreement. In particular, the IoM FSA will want to understand whether the reason for the termination was a systemic failure on the part of the financial institution or an issue with the individual and their capability or conduct. The settlement agreement cannot prevent an employee from making a protected disclosure and must not require the employee to warrant that they have not made a protected disclosure.

Settlement agreements

The whistleblowing measures outlined above are complemented by mandatory requirements for SM&CR firms concerning settlement agreements, namely that any such agreement must include a term stating that it doesn’t prevent the individual from making a protected disclosure, and must not require the individual to warrant that they have not made a protected disclosure or that they do not know of any information which could lead to them doing so (a “protected disclosure” is a type of disclosure recognised in English employment law that gives the person making it legal protection from retaliatory detrimental treatment).

SM&CR firms entering into settlement agreements must also ensure that they are not drafted in a way that is incompatible with other relevant regulatory requirements. For example, there is a specific prohibition in the FCA Handbook on firms entering into any arrangements or agreements with any person that limit their ability to disclose information required by the regulatory reference rules (see question 2). As such, terms relating to confidentiality and the provision of employment references should allow the firm sufficient flexibility to comply with regulatory reference requirements, which could include a requirement to update such a reference. In addition, any obligations of confidentiality should include a carve-out to permit relevant regulatory disclosures and reports.

Handover procedures

The SM&CR includes requirements designed to ensure that adequate handovers take place between outgoing and incoming senior managers. Firms must take all reasonable steps to ensure that senior managers (and anyone who has management or supervisory responsibilities for them) have all the information and material that they could reasonably expect to have to perform their responsibilities effectively and under the requirements of the regulatory system. This applies when someone becomes a senior manager and when an existing senior manager takes on a new job or new responsibilities (or when their responsibilities or job are being changed).

Firms must have a handover policy in place to ensure compliance with these requirements. They must also make and maintain adequate records of steps taken to comply with them.

The information and material handed over should be practical and helpful, with an assessment of what issues should be prioritised, and judgement and opinion as well as facts, figures and records. It should also include details about unresolved or possible regulatory breaches and any unresolved concerns expressed by the FCA, the PRA or any other regulatory body.

The format and arrangements of a handover should allow for an orderly transition, which should include the outgoing senior manager contributing to the handover everything that it would be reasonable to expect them to know and consider relevant, including their opinions. This could be achieved by requiring outgoing senior managers to prepare a handover certificate, but the FCA recognises that this will not always be practical.

To ensure that these requirements are satisfied, it is good practice to include in senior managers’ employment contracts (and settlement agreements) specific obligations relating to handovers.

Reallocating senior managers’ responsibilities

In addition to ensuring that adequate handovers take place between outgoing and incoming senior managers, firms should also ensure on the departure of a senior manager that their responsibilities are reallocated and that this is recorded in a way that is compliant with relevant regulatory requirements. This may include temporary reallocation to one or more existing senior managers where the replacement does not take over immediately on the departure of the departing senior manager, as well as updating the firm’s management responsibilities map and statements of responsibilities.

Reporting requirements

When an individual ceases to perform an SMF, the firm must generally notify the relevant regulatory within seven business days.

SM&CR firms must notify the relevant regulators if certain types of disciplinary action are taken, which can include dismissal – see question 10.

There are no specific rules for the financial services sector, except that they cannot have an effect that does not respect the caps for remuneration (see question 7).

The IoM FSA does not regulate the use of post-termination restrictive covenants for employees in the financial services sector. Post-termination restrictive covenants will be a matter of contract and will typically include non-compete, non-solicitation and non-dealing restrictions. These are subject to the same common law rules on interpretation and enforceability as in any other sector. Restraint of trade provisions are, in principle, contrary to public policy as a result of which it is for the employer to justify the length and scope of the restrictive covenant and show that it goes no further than necessary to protect its legitimate business interests. If a restraint is considered to be excessive, the courts will not generally rewrite or modify it to make it enforceable and, therefore, the whole of a defective covenant could fall away or be of no effect.

The SM&CR does not regulate the use of post-termination restrictive covenants for employees in the financial services sector. It is fairly typical for financial services firms in the UK to include non-dealing, non-solicitation, non-compete and similar restrictive covenants in their employment contracts. These are subject to the same common law rules on interpretation and enforceability as in any other sector. The only caveat to this is that firms should ensure that such terms do not include any provision that might conflict with the regulatory duties of either the firm or the employee. This will be a rare occurrence in practice for most types of restrictive covenant, but could arise in respect of post-termination contractual obligations that are closely associated with restrictive covenants, namely those relating to confidentiality. As such, firms should ensure that confidentiality clauses in employment contracts or other agreements such as NDAs include appropriate carve-outs.

Employees must not, both during and after the termination of the contract, obtain, use or unlawfully disclose a business secret he or she became aware of in the course of his or her professional activity, or disclose the secrecy of any matter of a personal or confidential nature of which he or she became aware in the course of his or her professional activity (article 17, 3°, a, Employment Contracts Act).

The company can include a NDA in the employment contract to underline what is considered confidential information. A penalty clause (with a lump sum to be paid) can be foreseen in case of a breach after the end of the employment contract, but not during the period of the employment relationship. This is because of the prohibition on restricting the rights of employees or increasing their obligations in comparison with what is foreseen by the Employment Contracts Act (article 6).

Yes, non-disclosure agreements are potentially lawful in the Isle of Man. A contract of employment may also contain confidentiality provisions for financial services employees. However, a non-disclosure agreement or confidentiality clause would not (and could not) prevent a financial services employee (or any employee) from making a protected disclosure, (ie, a disclosure made by an employee where they reasonably believe there is serious wrongdoing within the workplace (whistleblowing)).

A financial services employee may, furthermore, be subject to a legal requirement to disclose information in certain circumstances that might override an NDA. For example, an individual can be compelled to provide information by the IoM FSA during an interview, and such compulsion will generally override an employee’s duties of confidentiality. Alternatively, an individual can be subject to a requirement to disclose information in the context of legal proceedings (eg, by court order).

NDAs (also known as confidentiality agreements) are potentially lawful and enforceable in the UK. It is common to include NDAs in employment contracts (to protect the confidential information of the employer during and after employment) and in settlement agreements (to reiterate existing confidentiality obligations and to keep the circumstances of the settlement confidential).

NDAs do not need to follow a particular form, but they must be reasonable in scope. Following #MeToo, there has been considerable government, parliamentary, and regulatory scrutiny of the use of NDAs and their reasonableness in different circumstances.

The following limitations on NDAs should be noted:

• By law, any NDA purporting to prevent an individual from making a “protected disclosure” as defined in the Employment Rights Act 1996 (ie, blowing the whistle about a matter) is void.

• The regulatory body for solicitors in England and Wales, the Solicitors Regulation Authority (SRA), has issued a detailed warning notice and guidance to practitioners setting out – in its view – inappropriate or improper uses of NDAs. Failure to comply with the SRA’s warning notice may lead to disciplinary action. The SRA lists the following as examples of improper use of NDAs:

• • using an NDA as a means of preventing, or seeking to impede or deter, a person from:
    • cooperating with a criminal investigation or prosecution;
    • reporting an offence to a law enforcement agency;
    • reporting misconduct, or a serious breach of the SRA’s regulatory requirements, to the SRA, or making an equivalent report to any other body responsible for supervising or regulating the matters in question; and
    • making a protected disclosure;
    • using an NDA to influence the substance of such a report, disclosure or cooperation;
    • using an NDA to prevent any disclosure required by law;
    • using an NDA to prevent proper disclosure about the agreement or circumstances surrounding the agreement to professional advisers, such as legal or tax advisors, or medical professionals and counsellors, who are bound by a duty of confidentiality;
    • including or proposing clauses known to be unenforceable; and
    • using warranties, indemnities and clawback clauses in a way that is designed to, or has the effect of, improperly preventing or inhibiting permitted reporting or disclosures being made (for example, asking a person to warrant that they are not aware of any reason why they would make a permitted disclosure, in circumstances where a breach of warranty would activate a clawback clause).
       
• The Law Society of England and Wales, a professional association representing solicitors in England and Wales, has issued similar guidance (including a practice note) on the use of NDAs in the context of the termination of employment relationships.
• Other non-regulatory guidance on the use of NDAs has also been issued, including by the Advisory, Conciliation and Arbitration Service and by the UK Equality and Human Rights Commission.

Care should be taken accordingly to ensure that the wording of any NDA complies with prevailing guidance, especially from the SRA.