Employment in Financial Services

Financial services employees are primarily subject to general employment law, such as the Employment Contracts Act of 3 July 1978.

Moreover, sectoral collective bargaining agreements (CBAs) also apply. The main concerned joint committees (JCs) are JC No. 310 for banks (including savings banks and stockbroker companies) and JC No. 341 for banking and investment services intermediaries

JC No. 309 for stockbroker companies is abolished since 1 July 2023 and the employees who were covered by it are now covered by joint committee No. 310. A specific CBA was adopted to regulate employees’ rights following this change (Collective bargaining agreement of 3 July 2023 concluded within the Joint Commission for Banks concerning the transfer of stockbroker companies from JC No. 309 to JC No. 310).

Due to the peculiarities of the financial sector, they are also governed by specific regulations, such as Regulation (EU) No. 468/2014 of the European Central Bank; Directive 2013/36/EU on access to the activity of credit institutions and the prudential supervision of credit institutions and investment firms; Directive 2014/65/EU on markets in financial instruments; the Status and Supervision of Credit Institutions Act of 25 April 2014, the Prevention of Money Laundering and Terrorist Financing Act of 18 September 2017; and the Supervision of the Financial Sector and on Financial Services Act of 2 August 2002.

Finally, the regulations adopted by supervisory authorities, such as the National Bank of Belgium (NBB), the European Central Bank and the Financial Services and Markets Authority (FSMA), apply to the sector. The Belgian Financial Sector Federation (Febelfin) also issues guidelines.

The main regulatory regime applicable to financial services employees is the Brazilian Labour Code (CLT). However, several rules created from collective bargaining have been formalised in the Collective Labour Contract. That contract established additional standards with a validity period determined by the contract.

Due to the unique activities of the financial sector, which involve confidential information, the handling of funds, possible conflicts of interest, etc, there is a special legal framework, specific to financial services employees, which is deployed at national and European levels.

Companies and employees in the sector are subject to private law. As such, they are bound by all the norms of French law, such as Law No. 2016-1691 dated 9 December 2016, on transparency, the fight against corruption and the modernisation of economic life; Ordinance No. 2017-1387 of 22 September 2017, on the predictability and securitisation of labour relations; Law No. 2022-401 of 21 March 2022, aimed at improving the protection of whistleblowers, or Law No. 2022-1598 of December 21, 2022 on emergency measures relating to the functioning of the labor market with a view to full employment. Most legal provisions specific to financial services employees are contained in the Monetary and Financial Code.

In addition, collective agreements govern the working conditions of financial services employees. The most common collective agreements in the financial services sector are:

• The national collective agreement of financial companies of 22 November 1968;
• The national collective agreement for financial market activities of 11 June 2010; and
• The national collective agreement of the bank of 10 January 2000.

Finally, two authorities supervise operators in the financial services sector: the Financial Markets Authority (FMA), which is an independent administrative authority that regulates and supervises financial services operators, through its General Regulations; and the French Prudential Supervision and Resolution Authority (ACPR), which is part of the Banque de France and is responsible for supervising banks.

At a European level, several instruments provide a framework for the financial services sector, including:

• for investment funds (Annex II of Directive 2011/61/EU for alternative investment funds (AIF) and Articles 14a, 14b of Directive 2009/65/EC for UCITS) ;
• for investment firms (Directive 2019/2034/EU, on the prudential supervision of investment firms) ; and
• for markets in financial instruments (Directive 2014/65/EU).

Financial services industry employers and their employees are subject to a multi-layered legal framework, which varies depending on the business activity of the respective institution. In each case, it comprises a patchwork of overarching EU law, local law, and ordinances issued by the regulatory watchdog, the Federal Financial Supervisory Authority (BaFin). Employees are particularly affected by specific remuneration principles targeted at avoiding excessive risk-taking.

Banks and financial services

These providers are subject to the German Banking Act (KWG), with a few exceptions (eg, certain provisions do not apply to some institutions due to the nature of their business (section 2 KWG)). The KWG provides, inter alia, a slightly reduced level of dismissal protection for certain banking employees and sets out rules for an appropriate ratio between variable and fixed annual remuneration for employees and managing directors. Bonuses may not exceed the fixed salary, unless the institution’s shareholders approve an increase of up to twice the fixed salary by qualified majority vote. Further details are set out in the Remuneration Ordinance for Financial Institutions (IVV) issued by BaFin. In addition, banks and financial service providers are under certain prerequisites subject to the EU Capital Requirements Regulation (Regulation (EU) No. 575/2013 (CRR) as modified by Regulation (EU) No. 2019/876 of 20 May 2019).

Insurance providers

These are subject to the Commission Delegated Regulation (EU) 2015/35 (Solvency II Regulation), which applies directly and takes precedence over national law. The Insurance Regulation Act governs regulatory supervision and forms the basis for a BaFin-issued insurance compensation ordinance. Compared to banking’s IVV, this is much broader in scope and only applies when not overridden by rules set out in the Solvency II Regulation.

Investment funds

These are subject to the German Capital Investment Code (KAGB), which provides specific rules on remuneration for employees, as well as Annex II of Directive 2011/61/EU for alternative investment funds and articles 14a, 14b of Directive 2009/65/EC for undertakings for collective investments in transferable securities. There is no BaFin ordinance (comparable to IVV for banks) for this sector yet, although BaFin could be authorised to issue one. Section 37 paragraph 1 KAGB provides that investment funds should establish a remuneration system for certain employees, such as managers, that is consistent with and conducive to a sound and effective risk management system, that does not create incentives to take inappropriate risks, and does not prevent the investment fund from acting dutifully in the best interests of the investment assets.  

Investment firms

Finally, these are subject to a different regulatory regime depending on their size and impact. Larger investment firms are subject to the risk and remuneration regime for banks, while medium-sized investment firms (since June 2021) are subject to the new German Securities Act (WpIG). The Act implements the Investment Firm Directive (Directive (EU) 2019/2034) and is complemented by the Investment Firm Regulation (Regulation (EU) 2019/2033). Commission Delegated Regulations specify the standards to identify risk-takers, and Guidance by the European Securities and Markets Authority further detail the requirements for sound remuneration policies. In January, 2024, a new remuneration regime – the Investment Firm Remuneration Ordinance (WpI-VergV) – was introduced by BaFin after a multi-year consultation phase. Quite similar to the regime for banks and financial services, but with a few subtle differences, these rules must now be applied to the remuneration of medium-sized investment firms and especially their risk takers. Small investment firms are only subject to a low level of regulation. Further regulatory rules are set out, inter alia, in the German Securities Trading Act (WpHG) and the Financial Investment Mediation Ordinance, setting out behavioural standards for employees interacting with customers.

The primary regulatory regime applicable to financial services employees in Hong Kong are as follows:

• Under the Banking Ordinance (BO), the Hong Kong Monetary Authority (HKMA) is responsible for regulating all authorised institutions (banks, restricted-licence banks and deposit-taking companies). In particular, the HKMA needs to ensure that the chief executive, directors, controllers and executive officers of the authorised institutions are “fit and proper”.

• Under the Securities and Futures Ordinance (SFO), the Securities and Futures Commission (SFC) is responsible for regulating the securities and futures markets. Employees performing any regulated functions under the SFO must obtain the requisite licence from the SFC. Relevant individuals engaged by the authorised institutions who perform regulated functions (eg, bank staff working in the securities dealing department) are not required to be licensed or registered with the SFC but their names have to be entered in the register maintained by the HKMA.

• Under the Insurance Ordinance (IO), the Insurance Authority (IA) is responsible for regulating the insurance industry. Employees carrying on a regulated activity under the IO must obtain the requisite licence from the IA.

The important labour laws that may apply to financial services employees are:

• Industrial Disputes Act, 1947 (IDA)
• Contract Labour (Regulation & Abolition) Act, 1970
• Payment of Gratuity Act, 1972
• Payment of Bonus Act, 1965
• Equal Remuneration Act, 1976
• Maternity Benefit Act, 1961
• Apprentices Act, 1961
• Employees’ Compensation Act, 1923
• Employment Exchanges (Compulsory Notification of Vacancies) Act, 1959
• The Employees' Provident Funds and Miscellaneous Provisions Act, 1952
• Shops and Establishments Act(s)[1].

In addition, there are financial services regulations in India such as the Banking Regulation Act, 1949; Reserve Bank of India Act, 1934; Securities and Exchange Board of India Act, 1992 (and the regulations thereunder); Insurance Act, 1938; Income-tax Act, 1961; and the Foreign Exchange Management Act, 1999 (and the regulations thereunder). There are also multiple regulators established under these laws.

The Central Bank of Ireland (CBI) is responsible for the authorisation and supervision of regulated financial service providers (RFSPs) in Ireland. RFSPs can include credit institutions, credit unions, brokers/retail intermediaries; and other RFSPs such as electronic money institutions, insurance and reinsurance undertakings, investment firms and payment institutions. The regulatory regime applies in a bespoke way to each sector and its employees and tailored legal advice should be taken for a specific situation. The general principles of the regulatory framework are set out below.

Fitness and Probity

The primary regulatory regime applicable to employees of RFSPs is the Fitness & Probity ("F&P") framework under the CBI Reform Act 2010 (2010 Act) as amended. Its function is to assess and monitor the suitability of individuals for certain key positions, known as Controlled Functions (CFs), including Pre-approved Controlled Functions (PCFs). The general rule is that an RFSP cannot permit a person to perform a controlled function unless the RFSP is satisfied on reasonable grounds that the person complies with the F&P Standards prescribed under the 2010 Act and further set out in the regulations and Guidance prescribed by the CBI. A link to resources governing the F&P Standards is here.

Fitness relates to an individual's competency, experience, qualifications and capacity to perform the role (including time commitments and being free from conflicts of interest).

Probity relates to an individual's honesty, diligence, independence, ethics and integrity in performing their role.

Employers are required to perform due diligence to confirm that individuals they propose placing in CF roles are fit and proper. Employers are also required to hold a certificate of compliance in respect of each in scope employee, certifying that the employee complies with the F&P Standards. Employees of RFSPs must agree in writing to comply with the F&P Standards.

A breach of an individual's F&P obligations can result in criminal and administrative sanctions for the RFSP and suspension and disqualification for the individual from holding a controlled function.

Minimum Competency Requirements

The CBI also operates a minimum competency regime under the Minimum Competency Code 2017 and the CBI (Supervision and Enforcement) Act 2013 (section 48(1)) Minimum Competency Regulations 2017, which set out professional standards and competencies, and continuing professional development (CPD) requirements, for persons providing certain financial services and products across certain sectors e.g., credit union and insurance services.  The aim is to protect consumers by ensuring a minimum acceptable level of competence from individuals acting for or on behalf of RFSPs providing advice and information and associated activities (such as dealing with insurance claims or complaints), in connection with in-scope financial products.

The Individual Accountability Framework

The CBI (Individual Accountability) Act 2023 (the "2023 Act") was signed into law on 9 March 2023. The 2023 Act introduced a new Individual Accountability Framework ("IAF"):

• An enhanced Fitness and Probity Framework;
• New Common Conduct Standards, including Additional Conduct Standards for PCFs, applicable to employees and officers of RFSPs as well as Business Conduct Standards;
• The Senior Executive Accountability Regime ("SEAR"); and
• Administrative Sanctions Procedures ("ASP") which empowers the CBI to investigate and sanction individuals for breaches of their obligations under the IAF including the Conduct Standards and their F&P obligations.

The IAF commenced in Ireland from 29 December 2023. The F&P Framework and the application of the new Conduct Standards became effective from this date. Other parts of the IAF will be effective later in 2024.

Conduct Standards

Under the 2010 Act, both CFs and PCFs must take any step that is reasonable in the circumstances in the performance of their role, to ensure that they meet the requirements of the Common Conduct Standards. The Common Conduct Standards are explained in Guidance published by the CBI here. The Conduct Standards include the requirement to act with honesty and integrity, due skill and care, co-operate in good faith with the CBI, act in the best interests of customers and comply with applicable rules governing market conduct and trading as applicable to the relevant RFSP's sector. The F&P Standards set a standard that CFs and PCFs must meet to ensure that they are sufficiently skilled and have the competence and capability to perform their roles. Whereas the Common Conduct Standards impose positive, enforceable legal obligations on individuals in those roles, governing their conduct and requiring them to act in accordance with a single set of standards of expected behaviour. Employers must train their employees on the applicable Conduct Standards. Employees are required to attend at that training and to fully understand and comply with the Conduct Standards. Additional Conduct Standards apply to PCFs.

Senior Executive Accountability Regime

SEAR which applies to senior managers/officers holding PCF and CF1 roles, will be applicable from 1 July 2024. SEAR will come into force in respect of Non Executive Directors (NEDs) and Independent Non Executive Directors (INEDs) with effect from 1 July 2025.

In terms of the scope of application, SEAR will be introduced on a phased basis and will initially apply from 1 July 2024 to credit institutions, insurance undertakings (excluding reinsurance undertakings, captive (re)insurance undertakings and insurance special purpose vehicles) and investment firms that underwrite on a firm commitment basis, deal on own account, or are authorised to hold client monies or assets; and third-country branches of the above.

However, the CBI has noted in its Consultation Paper 153 (CP153) that "there is much in the spirit of the SEAR that firms not initially failing within scope should consider as aligned with good quality governance". RFSPs which are not in Phase 1 of SEAR should therefore consider the presence of the new regime and whether it may be appropriate to comply with the spirit of SEAR by ensuring that individual responsibilities for senior managers are mapped and clearly allocated across the firm's senior management. This is to ensure that it is very clear who is individually accountable for what and in order to ensure that the business and its risks are being properly managed.

Business Standards

The 2023 Act provides for the ability of the CBI of Ireland (CBI) to prescribe the "Business Standards" for the purposes of ensuring that in the conduct of its affairs a firm:

1. acts in the best interests of customers and of the integrity of the market;
2. acts honestly, fairly and professionally; and
3. acts with due skill, care and diligence.

The Business Standards are obligations which apply to the RFSP.

Protected Disclosures Legislation – Whistleblowing

The Protected Disclosures Act 2014 as amended provides that all employers (with 50 or more employees) and most RFSPs regardless of head count (including MiFID firms, UCITS management companies, AIFMs, externally managed UCITS and externally managed AIFs)  have and maintain secure, confidential and effective internal reporting channels and investigation procedures that comply with its requirements. Employees and other workers, including INEDS and NEDS as well as contractors have significant anti retaliation protection in connection with making a protected disclosure. Employers are required to appoint a designated person to acknowledge a report within 7 days, make diligent inquiries and to follow up with the reporter within three months in relation to the progress/outcome of the investigation. The Central Bank (Supervision and Enforcement) Act, 2013 as well as the European Union (Market Abuse) Regulations, 2016 set out whistleblowing requirements for in scope employees and anti retaliation protection.

The Employment Act 2006 and the Equality Act 2017 prescribe general employment rights and obligations for both employers and employees, including those in the financial services industry.

The Isle of Man Financial Services Authority (IoM FSA) is responsible for the regulation and supervision of financial services providers in the Isle of Man. Among other things, regulated financial institutions must comply with the rules set down by the IoM FSA in its Financial Services Rule Book 2016 (as amended) (the Rule Book). The IoM FSA applies “fitness and propriety” criteria to holders of certain key roles within a licence holder. This entails the IoM FSA assessing an individual’s integrity, financial standing, competency and capacity to undertake the role.

The requirement for an individual to be “fit and proper” depends on the nature of the role rather than their job title, but generally applies to key person or senior managerial roles (also known as Controlled Functions), where the individual has significant influence or control over the regulatory matters of the financial institution or to roles that have a bearing on the regulatory objectives of the IoM FSA and its ability to meet them.

Articles 5 and 123 of the Constitution of the United Mexican States provide express protection of labour rights and establish that legal rights are protected by the Federal Labour Law (the FLL).

Pursuant to article 5 thereof, no-one can be stopped from providing services in industry, commerce, or any other activity, provided it is not illegal; thus, individuals may only be prohibited from performing their duties as financial services employees if there is a legal justification. The activity may only be prohibited by a judicial declaration. Also, the law will define occupations that require a licence, the conditions to be met to obtain that licence and the issuing authorities.

Furthermore, no contract or provision that affects an individual’s freedom will be enforced.

All employers and employees within the private financial services sector are primarily subject to the FLL. Additionally, financial entities and their employees are subject to different laws and general provisions depending on the entities’ core business and activities, such as:

• Law to Regulate Finance Associations;
• Credit Institutions Law;
• General Provisions of Credit Institutions, issued by the supervisory authorities;
• Law to Regulate Credit Information Entities;
• General Law of Auxiliary Credit Organizations and Activities;
• Investment Funds Law;
• Popular Savings and Credit Law;
• Law to Regulate Technological Finance Institutions;
• General Provisions of Technological Finance Institutions, issued by the supervisory authorities;
• Law of Transparency and Promotion of Competition in Guaranteed Credit;
• Securities Market Law;
• Law for the Transparency and Regulation of Financial Services;
• Federal Law for the Prevention and Identity of Transactions with Illegally Obtained Resources;
• General Provisions applicable to securities operations carried out by counsel, managers and employees of financial entities and other obligated parties, issued by the supervisory authorities;
• Insurance and Bonding Institutes Law; and
• Insurance and Bonding Agents Regulations.

Some of the financial entities regulated are the following (Financial Entities):

• controlling entities (controlling entities of financial groups);
• credit institutions;
• credit information entities;
• multiple purpose financial entities;
• exchange bureaus and brokerage houses;
• auxiliary credit organisations;
• technological finance institutions;
• investment funds;
• financial cooperative associations and community finance entities; and
• insurance and bond institutes.

Authorities that regulate and supervise the compliance of financial laws and provisions are the National Banking and Securities Commission (CNBV), National Insurance and Bonding Commission (CNSF), National Commission of Retirement Savings Fund (CONSAR), National Commission for Financial Service Consumer Protection, Bank of Mexico, and the Ministry of Finance and Public Credit (SHCP).

The Dutch Financial Supervision Act (Wft) and the Dutch Remuneration Policies for Financial Institutions Act.

All private-sector employers and employees in Singapore are regulated by the Ministry of Manpower (MOM). Legislation such as the Employment Act 1968, the Employment of Foreign Manpower Act 1990, and the Workplace Safety and Health Act 2006 prescribe general employment rights and obligations for both employers and employees, and are supplemented by various tripartite advisories and guidelines. Anti-workplace discrimination legislation is also expected in the second half of 2024.

From the perspective of financial services, financial institutions (FIs) and FI employees are regulated by the Monetary Authority of Singapore (MAS). FIs are broadly categorised into four sectors: banking, capital markets, insurance, and payments. Statutes specific to each FI sector also apply. These include the Banking Act 1970, Securities and Futures Act 2001, Trust Companies Act 2005, Financial Advisers Act 2001, Insurance Act 1966, and Payment Services Act 2019. These are supplemented by MAS-issued directions, guidelines, codes, practice notes, circulars and policy statements.

A new Financial Services and Markets Act 2022 (FMSA) was also passed by Parliament in April 2022, consolidating and enhancing MAS’ powers. The FMSA will be implemented in phases, with the first phase having been implemented on 28 April 2023. This first phase addresses the porting over of provisions under the Monetary Authority of Singapore Act 1970 which relates to the MAS’ general powers over financial institutions, the anti-money laundering / countering of terrorism financing framework, and the Financial Dispute Resolution Schemes framework. The MAS has stated that the remaining phases are targeted for implementation in 2024.

2024 also saw the introduction of the Financial Institutions (Miscellaneous Amendments) Bill 2024. If passed, the bill will enhance, clarify and consolidate MAS’ powers across various acts to investigate, reprimand, supervise and inspect potential breaches and offences.

Contravening legislation (primary or subsidiary) and directions would generally constitute a criminal offence. Contravening advisories, guidelines, codes and practice notes would not generally constitute a criminal offence, but may result in regulatory or administrative consequences such as reprimands, censures or prohibition orders (in the case of MAS) or other administrative actions, such as a curtailment of work-pass privileges (in the case of MOM) – which is significant as work passes are a requirement for employing foreign nationals in Singapore.

Employment law in Switzerland is based mainly on the following sources, set out in order of priority:

• the Federal Constitution;
• Cantonal Constitutions;
• public law, particularly the Federal Act on Work in Industry, Crafts and Commerce (the Labour Act) and five ordinances issued under this Act regulating work, and health and safety conditions;
• civil law, particularly the Swiss Code of Obligations (CO);
• collective bargaining agreements, if applicable;
• individual employment agreements; and
• usage, custom, doctrine, and case law.

Depending on the regulatory status of the employer and the specific activities of financial services employees, respectively, Swiss financial market laws may also apply. They are, in particular, the Federal banking, financial institutions and insurance supervision regulations.

The UAE has four different regulators responsible for the authorisation and supervision of banks, insurers, and other financial institutions.

There are two regulators "on-shore" in the UAE, namely, (i) the UAE Central Bank, which is the state institution responsible for banking and insurance regulation, as well as monetary policy, and has authority over all licensed financial institutions in the UAE, including those in the financial free zones; and (ii) the Emirates Securities and Commodities Authorities (ESCA)  that regulates markets, listed companies, and securities brokers.

There are two financial free zones in the UAE, the Dubai International Financial Centre (DIFC) and Abu Dhabi Global Market (ADGM), who were established as special economic zones with independent jurisdictions through amendment to the UAE Constitution.  Within the free zones, the Dubai Financial Services Authority (DFSA) is the regulator of the DIFC and the Financial Services Regulatory Authority (FSRA) is the regulator of the ADGM.

As the DIFC and ADGM free zones have been established as special economic zones in which financial services are conducted, most of the applicable legislation in the UAE which governs financial services is found in the two free zones.  Therefore, unless expressly referenced, the responses for the UAE in this guide consider the position in the DIFC and ADGM only.

The Dubai Financial Services Authority is the financial regulatory body of financial services conducted in or from the DIFC.  The key legislation is the Regulatory Law of 2004, as amended, which is administered by the DFSA and is described as the cornerstone legislation of the regulatory regime.

The ADGM Financial Services Regulatory Authority is the financial regulatory body of financial services conducted in or from the ADGM.  The key legislation is the Financial Services and Markets Regulations (FSMR), which sets out the legislative and regulatory framework for financial services in the ADGM.  The FSMR was modelled on the UK’s Financial Services and Markets Act 2000 and other related legislation.

Finally, all employees in the private sector (excluding the two financial free zones) are subject to Federal Decree-law No. 33 of 2021, as amended (the Labour Law).  In the DIFC, employees are subject to DIFC Law No. 2 of 2019, as amended (the DIFC Employment Law) and in the ADGM, employees are subject to the ADGM Employment Regulations 2019 (the ADGM Employment Regulations).  In addition to the employment legislation described above, a number of other laws will be applicable to employees in the UAE, including Federal Decree-law No. 30 of 2021 containing the Penal Code.

In the UK, there are two main regulators responsible for the supervision of financial institutions. These are:

• The Prudential Regulation Authority (the PRA) – The PRA supervises over 1,500 financial institutions, including banks, building societies, credit unions, insurance companies and major investment firms. It creates policies for these institutions to follow and watches over aspects of their business.
• The Financial Conduct Authority (the FCA) – The FCA regulates the conduct of approximately 50,000 firms, prudentially supervises 48,000 firms, and sets specific standards for around 18,000 firms.

Some financial institutions are regulated by both the PRA and FCA (dual-regulated). Those financial institutions must comply with rules set down by the PRA in its rulebook (the PRA Rulebook) and by the FCA in its handbook (the FCA Handbook). Other firms are regulated solely by the FCA (solo-regulated) and must comply with the FCA handbook alone. Different rules can apply depending on the nature and size of the firm. The PRA and FCA work closely on certain issues and firms, but the FCA focuses specifically on ensuring fair outcomes for consumers.

The Senior Managers and Certification Regime (SM&CR) sets out how the UK regulators oversee people in businesses supervised and regulated by them, and how those people must act. As the FCA has summarised, “The SM&CR aims to reduce harm to consumers and strengthen market integrity by making individuals more accountable for their conduct and competence” (https://www.fca.org.uk/firms/senior-managers-certification-regime).

SM&CR consists of three elements:

• The Senior Managers Regime (SMR) – This applies to the most senior people in a firm (senior managers) who perform one or more senior management functions (SMFs). These functions are specified in the PRA Rulebook and the FCA Handbook. Senior managers must be pre-approved by the PRA or FCA before starting their roles. Each senior manager must also have a “Statement of Responsibilities” (that sets out what they are responsible and accountable for), which may include (depending on the firm) certain responsibilities prescribed by the regulator known as “Prescribed Responsibilities”. Every year, senior managers must be certified as fit and proper to carry out their role by their firm.
• The Certification Regime (CR) – This applies to employees who, because of their role, could pose a risk of significant harm to the firm or its customers, such as employees who offer investment advice (certified staff). For solo-regulated firms, these roles are generally called certification functions. Firms must certify that these employees are fit and proper for their roles both at the outset of their employment and continuously.
• The Conduct Rules – The Conduct Rules set minimum standards of individual behaviour in financial services in the UK. They apply to almost all employees of a firm. They also include particular rules applicable only to senior managers.

Certain parts of SM&CR apply to particular firms only. This is outside the scope of this note, which sets out the general position under SM&CR.

In the United States, there are different regulatory environments, depending on the nature of the employer.

• The Securities and Exchange Commission (SEC) regulates the offer and sale of securities, the various obligations of public companies, and the registration and conduct of broker-dealers. The SEC also regulates investment advisers.
• Every state has its own securities laws, known as Blue Sky Laws. These laws vary from state to state, but most, including New York and California, impose registration requirements on broker-dealers. State laws also require employees of brokers and dealers engaged in securities transactions to register as agents or salespersons.
  • The California Corporate Securities Law of 1968 covers securities offerings in the state of California.
  • The New York General Business Law and the New York Compilations of Codes, Rules and Regulations cover securities offerings in the state of New York.
• The Financial Industry Regulatory Authority (FINRA) is a private self-regulatory organisation that oversees exchange markets and brokerage firms and regulates the conduct of broker-dealer member firms.
• The Commodity Futures Trading Commission (CFTC) regulates commodities or future brokers and exchanges under the Commodity Exchange Act (CEA).
• Banks are regulated by both federal and state regulators, including the Federal Reserve Board, the Office of the Comptroller of the Currency, the Consumer Financial Protection Bureau, and the Federal Deposit Insurance Corporation.
• Commodities or future brokers or exchanges are covered by the CEA and are regulated by the CFTC.
• The Protocol for Broker Recruiting is an agreement signed by more than 2,000 broker-dealers. This Protocol specifically places limits on the restrictions a signatory firm can place on representatives who move to another signatory firm.

Most states have their own financial regulatory regimes. For example:

• The New York Department of Financial Services has regulatory authority over banks and certain other financial services entities within the state of New York.
• The California Department of Financial Protection and Innovation has regulatory authority over financial services entities within the state of California.

The NBB has issued a Fit & Proper Handbook, which was last updated on 22 December 2022.

Besides, Febelfin has adopted codes of conduct and regulations for relations between financial institutions and their customers, which can be considered standard practice in the sector.

Each financial institution may also provide more concrete or more precise quality standards for its clientele.

There is no general code defined by law or regulation.

Each company can adopt its standard of behaviour as a rule.

Certain activities require specific protocols for the Prevention of Money Laundering and Combating the Financing of Terrorism:

• the capture, intermediation, and investment of financial resources from third parties in national or foreign currency;

• the purchase and sale of foreign currency or gold as a financial asset or exchange instrument; and

• the custody, issuance, distribution, settlement, negotiation, intermediation, or securities administration.

Within the scope of the Brazilian System for Preventing and Combating Money Laundering and the Financing of Terrorism, it is up to institutions and their employees to adequately comply with Central Bank regulations. Also, institutions must promote the effectiveness of the apparatus to combat and prevent money laundering, carry out risk management with the implementation of effective policies, procedures, and controls, and help the Brazilian state locate suspicious financial operations so that they can be investigated.

First of all, various obligations discussed so far have the effect of forcing, if they were not already there, employees in the financial services sector to behave in an honourable manner and respect prudential rules.

In addition, Law 2016-1691 of 9 December 2016 on transparency, the fight against corruption and the modernisation of economic life states in article 17 that in certain large companies, managers must take all measures to prevent and detect the commission, in France or abroad, of acts of corruption or influence peddling.

This means setting up a code of conduct that will be integrated into the internal regulations, in compliance with the procedure for consulting employee representatives provided for in article L. 1321-4 of the French Labour Code.

This code of conduct involves the implementation of measures and procedures that will be monitored by the French Anti-Corruption Agency. In particular, the code of conduct must define and provide examples of the various types of behaviour to be prohibited as likely to constitute corruption or influence peddling. It must also establish an evaluation and control system, as well as a disciplinary system, enabling the company's employees to be sanctioned if there is a violation of the company's code of conduct.

In addition to this code of conduct, which is part of the internal regulations, almost all players in the financial services sector have put in place charters and policies to protect confidential information and regulate risky activities.

Employees must conduct themselves in line with their respective roles and responsibilities, which in client-facing roles indirectly leads to them being subject to specific behavioural obligations (such as having to adhere to certain procedures and documentation obligations before selling a service or product to a client). In addition, company policies required by the regulator (eg, on sustainability or equal treatment) often include behavioural standards.

In addition, there are voluntary standards adopted by various professional associations, such as the Code of Conduct of the Federal Association of Financial Services, which apply to their respective members.

SFC

Under the SFO, licensed representatives and ROs are required to be “a fit and proper person” to carry on the regulated activities and must adhere to the standards of behaviour set out in the “Code of Conduct for Persons Licensed by or Registered with the Securities and Futures Commission”. Other relevant guidelines regarding standards of behaviour include:

• “Fit and Proper Guidelines”, which set out the general expectations of the SFC of what is necessary to satisfy the licensing or registration requirements that a person is fit and proper.
• “Guidelines on Competence”, which set out the competence requirements and its objective to ensure a person is equipped with the necessary technical skills and professional expertise to be “fit”, and is aware of the relevant ethical standards and regulatory knowledge to be “proper” in carrying on any regulated activities.

HKMA

Under the BO, employees of an authorised institution that carry on regulated activities under the SFO are required to be fit and proper. In addition, the HKMA needs to be satisfied that the chief executive, directors, controllers and executive officers of the authorised institutions are fit and proper. Other relevant guidelines regarding standards of behaviour include:

• “Code of Banking Practice”, which is to be observed by authorised institutions in dealing with and providing services to their customers.
• Supervisory Policy Manual CG – 2 “Systems of Control for Appointment of Managers”, which sets out the system of control that authorised institutions should have for ensuring the fitness and propriety of individuals appointed as managers.

IA

The conduct requirements for licensed insurance agents and brokers are set out in Division 4 of the IO. Other relevant codes and guidelines include:

• “Code of Conduct for Licensed Insurance Agents”, which sets out the fundamental principles of professional conduct that buyers of insurance are entitled to expect in their dealings with licensed insurance agents.
• “Code of Conduct for Licensed Insurance Brokers”, which sets out the fundamental principles of professional conduct that buyers of insurance are entitled to expect in their dealings with licensed insurance brokers.
• “Guideline on ‘Fit and Proper’ Criteria under the Insurance Ordinance”

Financial services regulators like the RBI, SEBI and Insurance Regulatory and Development Authority of India (IRDAI) regulate employees through prescribed frameworks and their organisation-specific rules.

The obligations for the conduct of employees in financial services are determined depending upon the type of organisation: public sector banks (majorly owned by the state) or private banks; sectors (banking, non-banking, insurance, capital market); regions (different local laws); and level of seniority (liability of officers or manager is different from regular employees or clerical staff).  Though there are no statutory standards, judicial pronouncements have set a higher threshold of duty of care for employees in the financial services sectors. The Andhra Pradesh High Court in Harinarayan Seet v Andhra Bank[1] held dismissal of service as a proportionate punishment for dereliction of duty by banking employees, which would have otherwise attracted a lesser penalty for employees in less-critical sectors.

In terms of general labour legislation also applicable to financial services employees, financial services organisations fall under the definition of “commercial establishments”, whose definition has been laid down by the Shops & Commercial Establishments Act (state level). They provide certain conduct-specific obligations, for example, a prohibition against discrimination, suspension or dismissal for misconduct.

The other major piece of labour legislation that lays down standards of conduct is the Industrial Employment (Standing Orders) Act, 1946 (IESOA). However, its applicability to commercial establishments or to a specific industry is dependent upon state-wide laws. For example, the states of Haryana and Karnataka have notified the application of the IESOA to commercial establishments with a minimum of 50 employees. This implies that financial services institutions in these states, meeting the above criteria, are bound to comply with the IESOA. Upon the application of the IESOA, the establishments are required to submit to the certifying officer draft standing orders proposed for their establishment, which should cover acceptable standards for employees.

In the banking sector, employees of public-sector banks, private-sector banks and foreign banks are bound by the obligations laid down by the RBI and their organisation rules. The provisions of these rules, which are different from other industries, are stricter: observance of secrecy; prohibition against using influence to secure employment for family members; bypassing regular compliance checks for availing of banking facilities; prohibition against media contributions, participating in politics or standing for election; demonstrations prejudicial to the public interest; and acceptance of gifts in an official capacity.

In terms of financial propriety, employees must not indulge in speculation in stocks and shares, but must avoid personal insolvency and even disclose their moveable and immoveable assets. During employment, they are also forbidden from engaging in any outside employment (stipendiary or honorary) without the prior approval of the organisation. Higher managerial employees are subject to additional scrutiny. Those belonging to public sector enterprises are brought within the jurisdiction of the Central Vigilance Commission, the apex vigilance institution. It is due to the gravity of corruption cases that the senior management of private sector banks is also included within the ambit of “public servant”, which usually includes employees of only public sector organisations. This was upheld by the Supreme Court of India in the case of Central Bureau of Investigation v Ramesh Gelli[2].  The organisations in the insurance and capital markets sectors also have similar institution-wide conduct and disciplinary rules.

Directors of organisations in the financial services sector may also be subject to duties stated in Schedule IV of the Companies Act 2013 and the SEBI (Listing Obligations and Disclosure Requirements) Regulations 2015.

When it comes to outsourcing activities, financial institutions formulate a board-approved “Code of Conduct” as part of the “Outsourcing Agreement”, which is to be complied with by the outsourced service providers and their employees.[3]

Though financial services employees are held to a higher set of moral standards, their right to participate in trade union actions for voicing their concerns has been upheld time and again. Recently, the Madras High Court in the case of D Thomas Franco Rajendra Dev v The Disciplinary Authority and Circle Development Officer and State Bank of India[4] observed bank officers’ right to unionise.  However, the right of bank employees to go on a strike gets limited since banks and other financial institutions are declared as ‘Public Utility Services’ (“PUS”). Accordingly, while they are not barred from going on strike, they must adhere to certain pre-requisites namely service of notice of at least 6 weeks before going on a strike, prohibition of any strike within 14 days from date of service of above notice, prohibition of going on a strike before the expiry of the date of that strike and non-authorization of any strike during the pendency of any conciliation proceedings or 7 days after the conclusion of such a proceeding. Upon being declared a PUS, the concerned industry must adhere to these conditions failing which the strikes would be declared as illegal.

Yes there are. They are:

• the F&P Standards;
• the minimum competency regime; and
• the IAF and SEAR (see question 1).

There are also sector-specific conduct of business requirements in legislation and codes, including the Consumer Protection Code 2012, the MiFID II regime, and other regulatory requirements applicable to RFSPs based on their industry sector that apply and deal with matters such as:

• error handling,
• disclosures to customers,
• acting in the best interests of customers; and
• complaints handling.

Yes, financial institutions are required to comply with the rules and standards of conduct as set out in the Rule Book (as a minimum).

Financial institutions must notify the IoM FSA of any departure or intended departure of an employee who undertakes a Controlled Function within ten business days. Furthermore, where a financial institution discovers an event which may lead to a final warning being given to, or other serious disciplinary action being taken against, any of its employees, the financial institution must inform the IoM FSA within ten business days. The notice must specify the event, and the name of the employee where the employee holds a Controlled Function or is a “key person”. Where the employee is not a “key person” and does not hold a Controlled Function role, the financial institution is not required to inform the IoM FSA of the name of the employee unless – following an investigation – the employee is given a final warning or other serious disciplinary action is taken (in which case, the financial institution will have to inform the IoM FSA of the employee’s name at that point).

Financial entities must establish, implement and apply, among other things:

• confidentiality policies;
• policies for internal control to confirm the acts, operations and services of individuals are carried out in an ethical, professional and legal manner;
• policies regarding the prevention of acts and operations with illegal resources;
• policies to prevent psychological risk factors;
• policies that allow the identification, follow-up and control of risks inherent to operations; and
• conflict of interest resolution policies.

Under the general provisions applicable to operations with securities carried out by members of the board of directors, officers and employees of financial entities and other obligated parties, the principles that must be complied with are the following:

• transparency in operations;
• equal opportunity before all other market participants in sureties operations;
• compliance with fair stock market customs and practices;
• absence of a conflict of interest; and
• prevention of improper behaviour that may have as its origin the use of privileged or confidential information.

Policies, manuals and codes must also include guidelines for the resolution of potential conflicts of interest, as well as the mechanisms to avoid the existence of such conflicts.

Financial entities must inform the CNBV annually, within 15 days, a report on the conduct, operations, and services of individuals. If any act or operation with illegal resources is detected, financial entities must inform the authorities immediately, including the CNBV and the SHCP.

The board of directors of operating companies of investment funds, distribution entities, and stock appraisers of investment funds must approve a code of conduct, which must consider:

• activities in compliance with the applicable laws;
• internal control rules for the compliance of provisions and policies contained in the code, including investment provisions issued by the CNBV;
• security mechanisms to ensure confidential information is used solely for authorised purposes and security measures to protect clients’ files from fraud, robbery or misuse;
• an obligation on the general manager, officers and employees to conduct themselves in a fair, honest and professional manner in the performance of their activities; and
• a prohibition on officers, employees and proxies executing any type of operation with the public that contravenes market practices.

Members of the board of directors, the general manager, officers, regulatory comptrollers, proxies, and other employees must immediately report the existence of illegal or unethical conduct or activity to the regulatory comptroller.

Under Dutch law, financial services companies must maintain integrity and ensure safety, stability and integrity within their company. This also means that financial services companies must prevent their employees from committing criminal offences, other violations of the law or socially inappropriate behaviour that undermines confidence in the financial services sector or financial markets. For these reasons, it is common to implement company-specific codes of conduct.

There are many statutory general regulations and standards of behaviour that financial services employees are expected to adhere to. Moreover, all industries have their own specific industry-wide guidelines and codes of conduct.

An important statutory obligation for directors, (other) policymakers and employees with customer contact is to take an oath or promise before entering into employment. The oath or promise contains a declaration that – among other things – the employee will perform his or her duties with care and integrity, will put customer interests first and will make every effort to maintain and promote confidence in the financial services sector.

In addition to the oath or promise as mentioned above, there is also the “banker's oath”. This oath goes further than the oath or promise mentioned above and is mandatory for all employees who work for banks.

Breaching guidelines, codes of conduct or the statutory oath could lead to disciplinary sanctions being taken by the company itself (such as termination of the employment contract) or by disciplinary supervisors (such as a reprimand or a fine).

Generally, MAS’ Guidelines on Individual Accountability and Conduct emphasises the importance of reinforcing standards of proper conduct among all employees, while employees conducting regulated activities must remain fit and proper for their roles under MAS’ Guidelines on Fit and Proper Criteria.

Guidelines, codes, directions, notices and legislation in relation to corporate governance and risk management (including those mentioned in questions 5 and 6) should also be considered.

Depending on the regulatory status of the employing entity and, as the case may be, on the exact activities of a financial service employee, a financial service employee needs to adhere to certain code of conduct rules (eg, regarding transparency and care, documentation and accountability).

Supervised companies in Switzerland are, in principle, required to set up an organisation that ensures the compliance with Swiss financial market laws and its statutory code of conduct rules. For this purpose, among others, companies are required to issue regulations that their employees must follow.

Under Swiss financial market laws, code of conduct rules are generally based on abstract statutory rules and concretized by recognised privately organised associations.

In particular, several professional organisations (eg, the Swiss Bankers Association or the Asset Management Association) and self-regulated organisations issue their own set of code of conduct rules that members are required to follow.

In the DIFC, the DFSA General Rulebook provides that authorised individuals must adhere to six principles, as follows:

• Principle 1 – Integrity
• Principle 2 – Due skill, care and diligence
• Principle 3 – Market conduct
• Principle 4 – Relations with the DFSA
• Principle 5 – Management, systems and control
• Principle 6 – Compliance
   

In the ADGM, the FSRA General Rulebook provides that authorized individuals must adhere to eleven principles, as follows:

• Principle 1 – Integrity
• Principle 2 – Due skill, care and diligence
• Principle 3 – Management, systems and control
• Principle 4 – Resources
• Principle 5 – Market conduct
• Principle 6 – Information and interests
• Principle 7 – Conflicts of Interest
• Principle 8 – Suitability
• Principle 9 – Customer assets and money
• Principle 10 – Relations with regulators
• Principle 11 – Compliance with high standards of corporate governance

Yes. Both the FCA and PRA have established their own high-level required standards of conduct known as the Conduct Rules. The FCA’s conduct rules are set out in the FCA’s Code of Conduct sourcebook. The PRA’s conduct rules are set out in the PRA Rulebook (and different versions apply to different types of PRA-regulated firms).

The FCA’s conduct rules apply to most individuals working at an SM&CR firm. The PRA’s conduct rules apply to more limited individuals working at dual-regulated SM&CR firms: senior managers (approved by the PRA or FCA); individuals within the PRA’s certification regime; key function holders; and non-executive directors.

The Conduct Rules apply to conduct relating to the carrying out of an individual’s role. They do not extend to conduct within an individual’s private life, provided that the conduct is unrelated to the activities they carry out for their firm. Nevertheless, an individual’s behaviour outside of work can still be relevant to the separate consideration of their fitness and propriety.

There are two tiers of Conduct Rules: a first tier of rules applicable to all individuals subject to the Conduct Rules; and a second tier applicable to senior managers only.

The rules of the first tier are:

• Rule 1 – You must act with integrity.
• Rule 2 – You must act with due skill, care and diligence.
• Rule 3 – You must be open and cooperative with the FCA, PRA and other regulators.
• Rule 4 – You must pay due regard to the interests of the customer and treat them fairly.
• Rule 5 – You must observe proper standards of market conduct.

The rules of the second tier (applicable to senior managers) are:

• SC1 – You must take reasonable steps to ensure that the business of the firm for which you are responsible is controlled effectively.
• SC2 – You must take reasonable steps to ensure that the business of the firm for which you are responsible complies with the relevant requirements and standards of the regulatory system.
• SC3 – You must take reasonable steps to ensure that any delegation of your responsibilities is to an appropriate person and that you oversee the discharge of the delegated responsibility effectively.
• SC4 – You must disclose appropriately any information for which the FCA or PRA would reasonably expect notice.
• SC5 (certain dual-regulated firms only) – When exercising your responsibilities, you must pay due regard to the interests of current and potential future policyholders in ensuring the provision by the firm of an appropriate degree of protection for their insured benefits.

Firms must notify the FCA if they take disciplinary action against an individual for a breach of the Conduct Rules.

Employees in some states, including California and New York, are required to receive periodic sexual harassment training.

Employers are also required to implement anti-discrimination and anti-harassment policies that:

• contain information about where and how employees can report improper conduct;
• prohibit retaliation for reporting or opposing improper conduct, or participating in an investigation regarding misconduct; and
• comply with state and local provisions that require employer policies to contain certain provisions (eg, New York, Los Angeles and San Francisco).

New York law prohibits employers from mandating confidentiality or non-disclosure provisions when settling sexual harassment claims (though it allows such provisions where it is the employee’s preference to include them).

California law prohibits employers from mandating confidentiality or non-disclosure provisions in employment agreements, settlement agreements, and separation agreements that are designed to restrict an employee's ability to disclose information about unlawful acts in the workplace, including information pertaining to harassment or discrimination or any other conduct the employee has reason to believe is unlawful.

FINRA and the SEC both have requirements and recommendations for social media use.

FINRA requires that broker-dealers retain records of social media communications related to the broker-dealer’s business made using social media sites and adopt policies and procedures designed to ensure that their employees who use social media sites for business purposes are appropriately supervised and trained, and do not present an undue risk to investors.

The SEC similarly requires that social media use complies with all federal security laws, including antifraud, compliance, and recordkeeping provisions.

Banking regulators provide guidance stating that each financial institution is expected to carry out an appropriate risk assessment that takes social media activities into consideration.