FCA Finalises First UK Regulatory Regime for ESG Rating Providers

The UK Financial Conduct Authority published final rules on November 3, 2026 that bring environmental, social and governance rating providers into UK regulation for the first time. In-scope firms will need FCA authorisation and the relevant permission from June 29, 2028, following a revenue-based application process opening in 2027.

ESG ratings assess companies, other entities, assets or financial products against environmental, social and governance criteria. Asset managers, lenders, benchmark administrators and others use them to inform capital allocation and manage risk. Yet users can struggle to understand how ratings are produced, compare different products or assess potential conflicts of interest. The new framework is designed to improve transparency, reliability and comparability in that information market.

Laura Dawes, the FCA’s director of authorisations and sustainable finance, said: “Trusted information is essential for well-functioning markets.” The requirements cover transparency, governance, systems and controls, conflicts of interest, and engagement with users and rated entities.

Disclosure Without Prescribing a Methodology

The final policy statement establishes a tiered transparency framework. Public disclosures cover methodology, objectives, coverage, data approach and limitations. Direct users receive additional product and rating-level information, while rated entities can request detailed disclosures. All disclosures must be accessible, clearly presented, accurate, fair and not misleading.

Providers will not have to publish precise methodology weightings or training data, and they may rely on a trade-secrets exemption when its conditions are met. The regime therefore seeks to make ratings more understandable without requiring every proprietary input to be made public.

Governance rules require clear UK accountability but do not require every rating function or all senior personnel to be located in the UK. Outsourcing remains permitted, while the authorised firm retains responsibility for the ratings it provides in the UK. Providers must identify, prevent and manage conflicts of interest, with public disclosure treated as a last resort when material risks to rating integrity or independence remain.

Rated entities must receive at least two business days’ notice before a new rating is first made available. They can request the data underlying a rating and offer factual corrections, but providers need not wait for feedback before publication. Providers will also be Core firms under the Senior Managers and Certification Regime, which includes approved senior managers, conduct rules and fitness and propriety requirements.

Revenue Determines the Application Window

The FCA’s authorisation guidance splits applications by projected UK revenue from ESG rating activities in the 12 months after submission. Providers expecting £500,000 or more must apply between June 24 and July 29, 2027. Those below that level must apply between July 30 and August 31, 2027. During the gateway, the application fee is currently £2,820 below the threshold and £11,260 at or above it.

The FCA raised the revenue threshold from the £250,000 originally proposed after respondents warned that the lower level would classify too many providers as large. The higher threshold is intended to keep application fees proportionate while balancing barriers to entry against the costs of processing applications.

Missing the allotted window has significant consequences. Firms that do not apply on time, withdraw or are refused cannot take on new business when the regime begins and must wind down. Timely applicants still awaiting a decision may continue operating, including taking on new business, until their applications are determined. Carrying on in-scope activity without the required authorisation after commencement will breach the general prohibition under the Financial Services and Markets Act 2000 and constitute a criminal offence.

Consultation Changes and Remaining Scope Questions

The FCA received 90 consultation responses and retained most proposals. Among the changes, detailed disclosures to rated entities will be available on request rather than automatically, and recordkeeping must explain and evidence how a rating was produced rather than allow it to be reproduced. Direct users must receive advance notice of material methodology changes, but that requirement does not extend to rated entities. These amendments address operational concerns while preserving the framework’s baseline requirements.

The regime does not impose bespoke prudential requirements, and the Consumer Duty, Financial Ombudsman jurisdiction and Financial Services Compensation Scheme cover will not apply to ESG rating activities. Ratings produced in the course of another regulated activity are generally excluded unless provided as a standalone product or service. The FCA will separately conduct a targeted desk-based review of proprietary ESG ratings used in fund marketing and consider next steps.

The final regime therefore regulates how ESG ratings are produced, governed and communicated, not the sustainability conclusions they reach. Providers have a fixed path to authorisation, while the separate fund-marketing review leaves open whether further standards will follow for ratings embedded in already regulated activities.