Financial Services analysis: In this article, Matthew Banham, partner, and Daniel Natoff, associate at Dechert (with contribution from Craig Watson, trainee solicitor) discuss the Financial Conduct Authority’s (FCA’s) Business Plan for 2020/21 and FCA enforcement risk in the year ahead. Original newsFCA publishes business plan for 2020/21The FCA has published its business plan for 2020/21, setting out its key priorities and planned specific activities for the year ahead. The business plan includes a specific focus on the challenges presented by the coronavirus (COVID-19) pandemic, which has led the FCA to delay other activity it had planned where it judged that it was not urgent and may have distracted firms from ‘the immediate priority’ of addressing those challenges.The FCA’s Business Plan for 2020/21 comes at a time of great uncertainty in the financial markets. The FCA’s primary focus will be on mitigating the impact of coronavirus on the markets and protecting consumers in this regard, so much so that the FCA confirms it will only focus on other regulatory areas where it will not dilute its focus on the impact of coronavirus.However, notwithstanding the FCA’s starting position, firms should not assume that the FCA will be adopting a light touch approach to regulatory enforcement. The Business Plan sets out a road map for the FCA’s strategic objectives and areas of focus in the year ahead, and provides an insight for firms as to likely areas of enforcement risk.We have analysed the Business Plan and set out a summary of the key regulatory areas and actions on which firms should concentrate. Financial crime and money launderingCombatting financial crime is often high on the FCA’s agenda and this year is no exception. Following commitments made in the UK’s 2019 National Economic Crime Plan, the FCA will implement changes to reduce financial crime, including making greater use of data to identify firms or areas that are potentially vulnerable. The FCA expressly confirms that it will continue to take enforcement action in this area, particularly where there is a high risk of money laundering, while seeking to further strengthen its rules to prevent money laundering. The FCA will also consult on extending the Financial Crime Data Return to more firms to help strengthen its risk-based supervision as part of its wider anti-money laundering (AML) strategy.It is imperative that firms ensure they have effective systems and controls to detect, disrupt and reduce the risk of financial crime. To mitigate the risks of any enforcement action, firms must equally be able to point to documentary evidence and records to show that this is the case.Cryptoassets will also be subject to greater regulatory scrutiny, with the FCA implementing a new registration and supervision regime for cryptoasset activities. This mirrors the position of the FCA set out in a speech on 5 March 2020 by Therese Chambers, the FCA’s director of Retail and Regulatory Investigations, in which it was recognised that the ‘risk of money laundering using cryptoassets is serious and real…to ensure the policies on paper match up to the procedures in practice, we intend to actively supervise firms in this space.’While the FCA’s crypotasset AML regime is still in its infancy, it is guided by the approach taken by other international regulators to cryptoasset regulation, in particular the US, for example: (i) the Securities and Exchange Commission’s guidance on the Ethereum Decentralised Autonomous Organisation (DAO) dated 25 July 2017; (ii) the Commodity Futures Trading Commission’s guidance on cryptoasset derivatives dated 21 May 2018; and (iii) the Financial Crimes Enforcement Network’s guidance on custodial and non-custodial cryptoasset business models dated 9 May 2019. In the same speech mentioned above, Therese Chambers noted that ‘these documents are not just useful for the market, we also find that they help inform our regulatory thinking in this fast-moving space’. Investment managementThe FCA will continue to prioritise effective governance in the investment management industry and expects that firms will implement the Senior Managers and Certification Regime (SMCR) to help deliver this outcome. This is reflected in two ‘Dear CEO’ letters for asset managers and alternative investment firms which were published by the FCA on 20 January 2020. In these letters the FCA commented that standards of governance had been falling below their expectations. The FCA then set out what it considered to be the key risk areas for consumer/market harm in the asset management industry, along with its supervision strategy for addressing those risks, including for example:asset managers governance—The FCA will evaluate the effectiveness of firms’ governance in the first half of 2020, with a particular focus on steps taken to improve governance in line with the SMCRoperational resilience—Firms are expected to manage their technology and cyber risk appropriately, with adequate oversight of third party firms and intra-group service providers. Firms are expected to notify the FCA if they suffer material technological failures or cyber-attacks, and the FCA expects to undertake further proactive work in this area in the coming months alternative investment firms financial crime—The FCA intends to review firms’ systems and controls to mitigate the risk of financial crime. The FCA in particular stressed the importance of conducting due diligence on third parties and Know Your Customer checksmarket abuse—Market abuse controls must be sufficiently comprehensive and tailored to their individual business models (the FCA having noted that there was significant scope for improvement across the sector). In the coming year, the FCA may conduct further visits to firms and continue to issue firms with questionnaires to assess the adequacy of their market abuse controls. Enforcement action will be considered where firms fail to comply with the Market Abuse RegulationFirms would be well advised to focus on the areas of concern highlighted by the FCA, which are likely to be the subject of enhanced FCA scrutiny over the coming year, to ensure that their governance and systems and controls in those areas are operating effectively.The FCA will also continue to assess asset managers’ exposure to London Inter-Bank Offered Rate (LIBOR) risk. Firms should ensure that they have strategies and plans in place to manage the risks, including conduct risks, as the FCA will be monitoring how firms implement these plans. Culture and accountabilityThe FCA recognises that a firm’s culture shapes the outcomes for consumers and markets. The FCA will continue to focus on the four key culture drivers in firms, namely: (i) purpose, (ii) leadership, (iii) approach to rewarding and managing people, and (iv) governance, and their effectiveness in reducing the potential harm from firms’ business models and strategies.It is essential that firms ensure that issues of culture and conduct are being taken into account at the highest levels of management, and that decision making which evidences the consideration of such issues is clearly documented. Individual accountability remains a key focus for the FCA, with the FCA reiterating that all solo-regulated firms (ie those firms which are only governed by the FCA) are expected to comply with the SMCR, notwithstanding certain relaxations to the rules in light of coronavirus which were published by the FCA on 3 April 2020. Wholesale financial marketsThe FCA intends to achieve a number of outcomes in wholesale financial markets, including: markets meeting users’ needs—the FCA plans to enhance governance and accountability through the SMCR to improve market effectiveness. In addition, the FCA has undertaken a review of remuneration practices in the wholesale broker sector. The FCA expects to introduce a more risk-sensitive prudential regime for investment firms in 2021, and it remains to be seen how onerous the new requirements will bedata use and access—The FCA published a Call for Input (CFI) on 9 March 2020 to better understand how wholesale financial participants are accessing and using market data and advanced analytics. The closing date for responses to the CFI has been extended to 1 October 2020, following which the FCA will issue a feedback statement setting out its findingsorderly transition from LIBOR—In light of the prospective retirement of LIBOR at the end of 2021, the FCA is supporting the transition to alternative risk-free rates Operational resilienceFollowing on from the Final Notice issued to R Raphael & Sons Plc in May 2019 for regulatory failings in relation to its outsourcing arrangements, for which the company was fined £775,100 by the FCA and £1.1m by the Prudential Regulation Authority (both post-settlement), the FCA plans to set new requirements that strengthen operational resilience. The FCA has made it clear (in Consultation Paper CP19/32, dated December 2019) that it expects firms to take ownership of their operational resilience, and to prioritise plans and investments based on their public interest impact. Firms should therefore consider how disruption to their business services could cause harm to market integrity and their customers, and it is essential that firms have effective contingency plans in place to deal with major events. Use of technologyThe FCA is committed to making faster and more effective decisions, using its regulatory tools with greater ‘pace and decisiveness’. To this end, the FCA proposes to make more effective use of the information and intelligence it receives, in part by exploring the use of artificial intelligence (and machine learning more specifically) and by investing in new technologies.Firms can expect earlier interventions from the FCA where regulatory or compliance failures have been suspected or red flags raised. As such, firms themselves will need to become more responsive to issues when raised, ensuring that remedial actions are undertaken and communicated to the FCA in a timely manner. ConclusionsIn the short term at least, the FCA will (rightly) be dedicating its resources to combatting the myriad of issues that are and inevitably will be caused by coronavirus. However, firms should not interpret this to mean that less attention can be paid to regulatory matters and in particular those which might lead to consumer harm. Indeed, the FCA comments—‘There may be some who see these times as an opportunity for poor behaviour—including market abuse, capitalising on investors’ concerns or reneging on commitments to consumers. Where we find poor practice, we will clamp down with all relevant force.’The FCA’s expectations for firms to adhere to best practice and have effective systems and controls to mitigate the risk of consumer harm remain high. Firms can expect continued scrutiny in respect of the regulatory areas set out above and where failings are found, enforcement action may be likely to follow.It would therefore be prudent for firms to assess how well they are performing in each of these areas. For example, firms should be asking themselves:is the firm able to quickly and effectively identify and prevent financial crime?what steps are senior management taking to instil a good culture within the firm and how is their approach perceived?how effective are the firm’s contingency plans to ensure operational resilience?And perhaps most importantly in the current environment:is the firm able to meet its regulatory obligations notwithstanding the operational restrictions that coronavirus might be having on it?If firms can show that they have considered these types of issues and sought to remedy any weaknesses, this will place them in far better stead to avoid possible FCA enforcement action in the future.This article was first published by Dechert on 7 May 2020 and has been republished with permission.