Introduction: The Evolution of Section 166 Interventions
Under Section 166 of the Financial Services and Markets Act 2000, UK regulators hold the statutory power to mandate independent, expert reviews of authorised firms. This mechanism allows supervisory bodies to secure an unbiased assessment of an institution’s risk frameworks, internal controls, or market conduct without immediately launching a formal enforcement investigation.
These reviews serve as a critical diagnostic and monitoring tool. When regulators identify potential vulnerabilities, they use Section 166 to demand proportionate, actionable remediation roadmaps. The resulting independent report heavily dictates the regulator’s ongoing supervisory strategy and can mandate systemic operational overhauls.
The dramatic year-on-year surge in activity, jumping from 47 to 83 reviews, underscores the need for international financial institutions to understand how the panel functions. When managing an intervention, firms must strictly adhere to the regulatory directives outlined in the FCA Handbook, specifically SUP 5.4, to ensure seamless compliance and robust appointment processes.
What Exactly is the FCA Skilled Person Panel?
The Skilled Person Panel is a centralised, pre-vetted marketplace of professional services firms recognised for their technical excellence. Vetted comprehensively by both the FCA and the PRA, these independent consultancies are categorised into 12 thematic subject areas known as “lots”. These lots span vital regulatory pillars, including financial crime, corporate governance, client assets (CASS), prudential risk and technology. By acting as objective third parties, panel members safeguard market integrity and protect end consumers.
The panel operates within defined, multi-year procurement cycles. The current framework took effect on 1 April 2026 and runs until 31 March 2030. This structured timeline ensures the regulator retains access to top-tier industry expertise while maintaining rigorous quality control and strict conflict-of-interest management.
Securing a place on this panel requires passing extensive regulatory due diligence regarding resourcing, track record and operational capability. Complyport’s inclusion across 8 specialised regulatory lots highlights our broad-spectrum capability in handling complex risk and compliance mandates.
The Anatomy of a Skilled Person Review
An intervention typically unfolds through several distinct phases:
- Trigger Event: The FCA detects anomalies via regulatory reporting, thematic market reviews, or firm-specific whistleblowing/incidents.
- The Requirement Notice: The regulator issues a Draft Requirement Notice detailing the exact parameters and expectations of the review.
- Expert Selection: The regulator either dictates the provider or permits the firm to nominate an expert. Because the FCA does not formally endorse individual panel members, firms must execute thorough independent due diligence.
- Fieldwork & Deep-Dives: The expert conducts extensive data parsing, transaction testing, control mapping and executive interviews.
- Reporting: Draft findings are thoroughly vetted before the final independent report is submitted simultaneously to the firm and the FCA.
- Remediation: The firm executes proportionate corrective actions to address identified gaps.
Strategic Financial and Operational Impacts
Because the regulated firm is legally obligated to fund the s166 review, the financial and operational strain can be immense. Modern reviews frequently involve deep data extraction and heavy file sampling, driving average market costs up to £500,000, with large-scale or multi-jurisdictional investigations routinely exceeding £3,000,000.
Beyond the direct costs, firms frequently face temporary business restrictions during the review, such as client onboarding freezes or mandatory consumer notifications, which can severely disrupt commercial operations and client trust. Furthermore, any critical failures uncovered by the expert can trigger immediate enforcement referrals, heavy penalties, or strict Voluntary Requirements (VREQs).
Throughout this intense process, protecting legal privilege remains vital to safeguard confidential legal counsel and internal communications from unintended exposure. Early, transparent engagement with a skilled advisor remains the most effective way to prevent scope creep and secure a proportionate outcome.
Navigating the Selection Process
Firms are granted a degree of flexibility when selecting their expert. If the FCA directly commissions the review, it typically runs an accelerated mini competition among pre-vetted firms within the designated lot.
If the firm is tasked with proposing the expert under SUP 5.4, they can choose an active panel member or nominate an off-panel provider, provided they can satisfy the regulator’s strict independence and capability criteria. When evaluating a delivery partner, boards must carefully weigh specific selection benchmarks:
- Demonstrated track record with comparable s166 mandates.
- Granular sector expertise matching the firm’s specific business model.
- Deep familiarity with evolving regulatory expectations.
- Scalable resource capacity to deliver under compressed timelines.
Comprehensive Breakdown of Panel Lots
The 12 specialised lots ensure that every review is backed by precise technical expertise:
| Lot Focus | Key Areas of Regulatory Scrutiny |
| Governance & Culture | Board oversight, SMCR alignment, senior leadership accountability. |
| Risk & Control Frameworks | Internal control environments, risk tracking and escalation paths. |
| Financial Crime | AML, KYC, sanctions screening and transaction monitoring. |
| Client Assets | CASS compliance, asset segregation and reconciliation integrity. |
| Conduct of Business | Fair customer treatment, product suitability and consumer outcomes. |
| Prudential & Solvency | Capital and liquidity adequacy for insurers and deposit-takers. |
| Adequate Financial Resources | Capital strength and resource monitoring for FCA solo-regulated entities. |
| Tech & Operational Resilience | Cybersecurity, data governance and business continuity systems. |
| Market Abuse | Trading surveillance, market distortion risks and suspicious activity reporting. |
How Complyport Protects Your Business
As an approved practitioner holding 8 active lots on the FCA Skilled Person Panel, Complyport operates on both sides of the intervention lifecycle. We can be directly appointed as the independent Skilled Person, or we can act as the firm’s dedicated defence and shadow team when another panel firm is leading the review.
Our specialised support services include:
- Pre-Intervention Readiness Audits: Simulating s166 scrutiny to find and fix gaps early.
- Scope Optimisation: Challenging draft notices to prevent unnecessary scope creep.
- Data & Document Preparation: Managing the operational burden of regulatory data requests.
- Regulator Liaison: Acting as a buffer to maintain a constructive, professional dialogue with the FCA.
- Remediation Architecture: Designing and executing auditable fixes that satisfy supervisory mandates.
Frequently Asked Questions
Do firms have to select an advisor directly from the official panel?
No. While the FCA often prefers panel firms due to their pre-vetted speed and technical readiness, firms permitted to make the appointment can propose off-panel experts, provided they pass rigorous independent due diligence and secure regulatory sign-off under SUP 5.4.
What is the standard duration of a Section 166 review?
While timelines are dictated by complexity, a standard s166 review spans 3 to 9 months from the initial Draft Requirement Notice to final report submission. Complex, multi-jurisdictional financial crime or historical file reviews can easily extend beyond 12 months.
How does a Skilled Person review differ from an Enforcement Investigation?
A s166 review is a supervisory tool aimed at diagnosing risks and building proportionate remediation plans. An enforcement investigation is a punitive proceeding designed to determine if a breach occurred and whether financial or legal sanctions are warranted. However, a poorly managed s166 report can frequently trigger a subsequent enforcement action.
Are you anticipating heightened regulatory scrutiny or navigating a draft s166 notice? Contact Complyport’s lead practitioners today for confidential, strategic guidance.
