FCA and ICO issue Consumer Duty statement for financial services providers

27/03/2026 | Financial Conduct Authority

The Financial Conduct Authority (FCA) and the Information Commissioner's Office (ICO) have published a joint statement to help financial services providers deliver good outcomes for retail consumers in vulnerable circumstances. The guidance ensures that businesses can meet the requirements of the Consumer Duty while maintaining the lawful and responsible use of personal information. 

The statement addresses three practical areas: supporting vulnerable individuals, sharing data appropriately across the distribution chain, and monitoring outcomes to ensure support is effective. The statement also highlights that laws, including the UK General Data Protection Regulation (GDPR), the Data Protection Act 2018 (DPA18) and Privacy and Electronic Communications Regulations 2003 (PEC-Regulations), do not prevent firms from achieving positive consumer results. However, businesses must remain compliant with data protection requirements while processing vulnerability-related data. By aligning FCA expectations with ICO guidance, the statement aims to help firms support consumers in a confident and compliant manner.


Training Announcement: Freevacy offers a range of independent data protection qualifications from IAPP and BCS. Our certified courses are available at foundation and practitioner levels and cover multiple legal jurisdictions, data protection operations management, and the implementation of complex privacy solutions in technical environments. Find out more.

Read Full Story
Financial Conduct Authority, FCA

What is this page?

You are reading a summary article on the Privacy Newsfeed, a free resource for DPOs and other professionals with privacy or data protection responsibilities helping them stay informed of industry news all in one place. The information here is a brief snippet relating to a single piece of original content or several articles about a common topic or thread. The main contributor is listed in the top left-hand corner, just beneath the article title.

The Privacy Newsfeed monitors over 300 global publications, of which more than 6,250 summary articles have been posted to the online archive dating back to the beginning of 2020. A weekly roundup is available by email every Friday.