Employment in Financial Services

Employment law in Switzerland is based mainly on the following sources, set out in order of priority:

• the Federal Constitution;
• Cantonal Constitutions;
• public law, particularly the Federal Act on Work in Industry, Crafts and Commerce (the Labour Act) and five ordinances issued under this Act regulating work, and health and safety conditions;
• civil law, particularly the Swiss Code of Obligations (CO);
• collective bargaining agreements, if applicable;
• individual employment agreements; and
• usage, custom, doctrine, and case law.

Depending on the regulatory status of the employer and the specific activities of financial services employees, respectively, Swiss financial market laws may also apply. They are, in particular, the Federal banking, financial institutions and insurance supervision regulations.

In the UK, there are two main regulators responsible for the supervision of financial institutions. These are:

• The Prudential Regulation Authority (the PRA) – The PRA supervises over 1,500 financial institutions, including banks, building societies, credit unions, insurance companies and major investment firms. It creates policies for these institutions to follow and watches over aspects of their business.
• The Financial Conduct Authority (the FCA) – The FCA regulates the conduct of approximately 50,000 firms, prudentially supervises 48,000 firms, and sets specific standards for around 18,000 firms.

Some financial institutions are regulated by both the PRA and FCA (dual-regulated). Those financial institutions must comply with rules set down by the PRA in its rulebook (the PRA Rulebook) and by the FCA in its handbook (the FCA Handbook). Other firms are regulated solely by the FCA (solo-regulated) and must comply with the FCA handbook alone. Different rules can apply depending on the nature and size of the firm. The PRA and FCA work closely on certain issues and firms, but the FCA focuses specifically on ensuring fair outcomes for consumers.

The Senior Managers and Certification Regime (SM&CR) sets out how the UK regulators oversee people in businesses supervised and regulated by them, and how those people must act. As the FCA has summarised, “The SM&CR aims to reduce harm to consumers and strengthen market integrity by making individuals more accountable for their conduct and competence” (https://www.fca.org.uk/firms/senior-managers-certification-regime).

SM&CR consists of three elements:

• The Senior Managers Regime (SMR) – This applies to the most senior people in a firm (senior managers) who perform one or more senior management functions (SMFs). These functions are specified in the PRA Rulebook and the FCA Handbook. Senior managers must be pre-approved by the PRA or FCA before starting their roles. Each senior manager must also have a “Statement of Responsibilities” (that sets out what they are responsible and accountable for), which may include (depending on the firm) certain responsibilities prescribed by the regulator known as “Prescribed Responsibilities”. Every year, senior managers must be certified as fit and proper to carry out their role by their firm.
• The Certification Regime (CR) – This applies to employees who, because of their role, could pose a risk of significant harm to the firm or its customers, such as employees who offer investment advice (certified staff). For solo-regulated firms, these roles are generally called certification functions. Firms must certify that these employees are fit and proper for their roles both at the outset of their employment and continuously.
• The Conduct Rules – The Conduct Rules set minimum standards of individual behaviour in financial services in the UK. They apply to almost all employees of a firm. They also include particular rules applicable only to senior managers.

Certain parts of SM&CR apply to particular firms only. This is outside the scope of this note, which sets out the general position under SM&CR.

Depending on the status of the employing entity and the position of the financial services employee, a special certification or, more generally, proof of relevant work experience and sufficient education is required.

As a general rule, persons holding executive, overall management, oversight or control functions (eg, a member of the board, CEO, compliance officer, risk officer or their deputies) in regulated companies such as banks, insurance companies, securities firms, fund management companies, managers of collective assets or asset managers are required to demonstrate to FINMA that they have sufficient relevant work experience and education. As proof, FINMA requests current CVs, diplomas, certifications and contact details of references. The scope and nature of the future business activity and the size and complexity of the company in question also need to be considered.

Furthermore, client advisers of so-called financial service providers (eg, investment advisers) must have sufficient expertise on the code of conduct and the necessary expertise required to perform their work. Client advisors often prove that these requirements have been met by successfully attending special courses. In addition, insurance intermediaries registered with FINMA’s insurance intermediary register have to prove that they have undergone sufficient education and have sufficient qualifications. For this purpose, FINMA has published a list of different Swiss and foreign educational qualifications deemed to be sufficient on its website.

See question 2.

All individuals performing an SMF, as classified by the FCA or PRA, will be subject to the SMR. SMFs are described in the Financial Services and Markets Act 2000 (FSMA) as functions that require the person performing them to be responsible for managing one or more aspects of a firm’s affairs authorised by the FSMA, and those aspects involve, or might involve, a risk of serious consequences for the firm or business or other interests in the UK. As noted, any individual performing an SMF will need to be pre-approved by the relevant regulator before they can start their role, and thereafter they must be certified as fit and proper by their firm annually. Applications to the regulator for pre-approval must disclose all matters relating to a candidate’s fitness and propriety and be accompanied by a statement of responsibilities. Firms must carry out a criminal records check as part of the application for approval.

Additionally, employees of firms who are not senior managers but who, because of their role, could still pose a risk of significant harm to the firm or any of its customers, may be subject to the CR. The certification functions that place an employee within the ambit of the CR are different under the rules of the FCA and the PRA but include persons such as those dealing with clients or those subject to qualification requirements. These employees must be certified by their firm as fit and proper for their roles both at the outset of their employment and on an annual basis thereafter (certified staff). Firms are not required to carry out criminal records checks for certified staff, but firms can choose to do so to the extent it is lawful.

The regulators have set out detailed guidance for firms to consider when assessing an individual’s fitness and propriety. This includes assessing an individual’s honesty, integrity and reputation; competence and capability; and financial soundness.

There are no specific whistleblowing laws in Switzerland, but employees have a right to report grievances and misconduct to their employer, provided that they do not commit a breach of a fiduciary duty or cause damage (eg, malicious false reports).

However, employees must also report material facts or incidents of misconduct and the misconduct of other employees discovered in the course of their work to their employer under the employee's duty of loyalty.

On the other hand, an employee’s duty of loyalty and, in particular, an employee’s statutory duty of confidentiality flowing from it may also give rise to a duty to not report.

Based on the current legal situation, there may be a conflict between an employee’s need to report grievances (internally or externally) and a possible duty to not report with regard to an external report. An attempt to resolve this conflict through legislation has failed, and a new attempt to introduce whistleblowing legislation in Switzerland is not expected anytime soon.

Concerning whistleblowing by employees to a public authority or even to the public, employees are regularly prevented from doing so by confidentiality obligations under criminal law. Any justification for such a disclosure will usually only be examined in the context of a criminal investigation against the employee.

However, larger companies have taken measures and set up certain processes to uncover and prevent wrongdoing without having to do so under mandatory laws. For instance, companies have implemented internal or external reporting offices.

When it comes to harassment, an employer is explicitly required to protect employees from sexual harassment (prevention) and to protect any victims from further disadvantages (active protection). According to the Gender Equality Act, victims of sexual harassment may be awarded compensation of up to six months' wages by the courts, in addition to damages and restitution, unless the employer can prove that they have "taken all measures that are necessary and appropriate according to experience to prevent sexual harassment and that they can reasonably be expected to take”. Employers are therefore advised to actively address the issue of sexual harassment (as well as general discrimination and bullying) in the workplace and include it in their regulations or directives.

Whistleblowing

In addition to the requirements of the SM&CR outlined above which relate to the prevention of wrongdoing (including the Conduct Rules, fitness and propriety assessments, Senior Managers’ Duty of Responsibility, the certification and approvals processes and associated training requirements), the PRA and the FCA maintain rules on whistleblowing. These are intended to encourage whistleblowers to come forward to report wrongdoing and protect them from retaliation when they do.

For certain types of SM&CR firms, the rules mandate measures that employers must implement, for others they provide guidance on measures to consider.

The key measures are as follows:

• Whistleblowers’ champion – a non-executive director and senior manager with responsibility for whistleblowing compliance within the firm, including oversight of internal policies and procedures and certain reporting requirements.

• Whistleblowing channel – a system which allows whistleblowers to report concerns confidentially and anonymously, and which allows such concerns to be assessed, addressed, and escalated where appropriate.

• Notification regarding external whistleblowing channels – that is, making staff aware of their right to report matters directly to the PRA and FCA and explaining how they can do so.

• Whistleblowing training – this must cover arrangements on whistleblowing within the firm and be provided (and tailored) to employees based in the UK, their managers, and employees responsible for operating the firm’s whistleblowing arrangements.

Prevention of harassment

Harassment and related unacceptable workplace behaviours (such as bullying and discrimination) are not specifically addressed in the SM&CR rules on individual accountability. However, it is clear from regulators’ public statements that the culture of firms (in its broadest sense) is central to their approach. Having a healthy firm culture is seen as critical to consumer protection and well-functioning markets, and firms with healthy cultures are considered to be less prone to misconduct.

Firms that are subject to the SM&CR need to be alive to the possibility that instances of harassment and other non-financial misconduct could amount to breaches of the individual accountability regime or trigger certain requirements under it, such as a requirement to investigate, reassess an individual’s fitness and propriety, or notify certain matters to the regulators. The same could apply to any failure by relevant staff to investigate and deal appropriately with allegations of this kind, such as a senior manager who turns a blind eye to reports of sexual harassment or workplace bullying. While there have been relatively few instances of non-financial misconduct resulting in an enforcement action to date, this is likely to become an emerging trend.