The principal owns the risk
Under the appointed representative regime, a principal is responsible for the regulated activities of firms and advisers it does not employ. When an AR gives unsuitable advice, it is the principal that answers for it.
The 2022 reforms raised the bar: principals must apply oversight proportionate to the risk each AR poses, and the FCA now collects far more data on ARs directly. A light-touch relationship is no longer defensible.
What enhanced oversight means in practice
The regulator expects principals to assess each AR’s activities, risk and growth, review the advice they give, monitor their financial promotions, and complete an annual self-assessment alongside a review of each AR at least yearly.
The common failure is treating this as an annual attestation. Oversight has to be continuous and evidenced, with the annual review a summary of it rather than the whole of it.
Move from sampling to risk-based
Pulling a random sample of files cannot keep pace with a large AR population and misses the outliers that cause harm. Capture every piece of advice, then let risk-based rules decide what needs a closer look: new advisers, high-risk advice types, unusual volumes, or prior findings.
Your reviewers then spend their time where the risk actually is, not on a random slice of the book.
Watch the leading indicators per AR
Advice quality is the core signal but not the only one. Track complaints, business volumes and mix, growth that outpaces an AR’s controls, financial promotions, and file-review outcomes.
A change in one of these is often the early warning that arrives before a quality problem shows up in the files.
Be able to prove supervision per AR
When the FCA asks how you oversee a specific representative, the answer has to be a record: the advice reviewed, the checks applied, the decisions taken, and the actions where something fell short.
Per-AR evidence, produced on demand, is what turns an oversight claim into an oversight fact.