Compliance plan

Compliance plan

No firm can afford to be complacent when it comes to compliance. Although there is no direct requirement in the SRA Standards and Regulations for law firms to have a compliance plan, doing so will help firms demonstrate that they take their regulatory obligations seriously.

Regulatory requirements

There is no direct requirement in the SRA Standards and Regulations for law firms to have a compliance plan.

This contrasts with the previous SRA regime, where the SRA clearly expected firms to have a compliance plan—the guidance notes to the Authorisation Rules 2011, stated: ‘what needs to be covered by a firm’s compliance plan will depend on factors such as the size and nature of the firm, its work and its areas of risk’. This has not been carried across to the SRA Authorisation of Firms Rules.

It is therefore a matter for firms whether they choose to have a compliance plan, but doing so will help demonstrate the firm takes its regulatory obligations seriously and, indirectly, will assist with other compliance obligations, particularly in relation to:

•
governance—see Practice Note: Governance structures—law firms
•
compliance officer duties—see Practice Note:

To view the latest version of this document and thousands of others like it, sign-in with LexisNexis or register for a free trial.

TAKE A FREE TRIAL

Latest Practice Compliance News

FATF announces new mutual evaluation framework to strengthen global illicit finance defences

The Financial Action Task Force (FATF) has convened its annual high-level meeting with the nine FATF-Style Regional Bodies (FSRBs) in Strasbourg, announcing the implementation of new mutual evaluations. The Global Network, comprising the FATF and nine FSRBs, representing over 200 jurisdictions, remains committed to combating illicit finance through a unified set of standards and mutual evaluations. The meeting focused on implementing Global Network priorities, particularly preparing members for the upcoming mutual evaluations, which will prioritise effectiveness in tackling money laundering, terrorist financing and proliferation risks. All FSRBs aim to complete their first evaluations by late 2026 or early 2027. Additionally, significant emphasis was placed on fostering peer learning, experience sharing and strengthened cohesion within the Global Network, a key priority under the Mexican Presidency.

Data (Use and Access) Bill receives Royal Assent on 19 June 2025

The Data (Use and Access) Bill (DUA) received Royal Assent and became an Act of Parliament on Thursday 19 June 2025. This followed its parliamentary review being finalised on 11 June 2025 and marked the culmination of nearly eight months of parliamentary procedure. Under section 139 of the DUA, most provisions will come into force as and when the Secretary of State appoints regulations. However, a limited number of provisions came into force upon Royal Assent. This included section 78, which relates to reasonable and proportionate searches for data subject access requests. It also included sections 126–128 on the retention of biometric data, and schedule 16 on the grant of energy smart meter communication licences.

Practice Compliance weekly highlights—19 June 2025

This week's edition of Practice Compliance weekly highlights includes: the latest Practice Compliance forecast, notable financial sanctions developments, progress on the Data (Use and Access) Bill, and important updates on OFSI licence adjustments.

New Practice Compliance forecast as at 17 June 2025

Our new Practice Compliance forecast (as at 17 June 2025) is now live. This month we report on items including (1) the SRA's annual AML and sanctions data collection exercise, (2) anticipated guidance from the LSB to help regulators meet the new economic crime regulatory objective, (3) the LSB's enforcement action against the SRA following the Axiom Ince review, and (4) updates to the SRA's first-tier complaints handling requirements.

View Practice Compliance by content type :

News