We often see that some firms develop products and services which -whilst not planned-, inadvertedly require FCA authorisation. For example, firms starting to offer instalment payment on invoices, offering breakdown cover, providing payment services. Irrespective of the circumstances, if in doubt, firms should always seek independent advise from an expert consultant or indeed a respective lawfirm.

Could be. Whilst cryptoassets are not typically regulated by the FCA (but they can be), the services provided on the back of the cryptoassets can attract the need to be FCA authorised. For example, setting up a fund to invest in various cryptoassets may be viewed as a regulated activity (and product), requiring FCA authorisation. There is a fundamental difference between being regulated by the FCA and being registered with the FCA for moneylaundering purposes (see next question).

Depending on the activities. The 5MLD has introduced the requirement on certain cryptobusinesses to register with the FCA for money laundering purposes. These firms (as an example) include crypto exhanges, ATM operators and custodian service providers. Naturally, other aspects should be considered as well (such as by way of business test) which RRCA can assist you with.

No. Firm cannot commence any trading until the FCA have given explicit permission, and the firm appears on the FCA register. Conducting regulated activities without the relevant permissions is a criminal offence.

Also known as Change in control. Individuals or companies that wish to acquire, increase or decrease control in a firm that is regualted by the FCA must seek prior approval. Late notification is a criminal offence. If you need any help, just contact our experts.

Under the SMCR, "senior managers" are individuals who perform one of the senior management functions designated by the FCA. These replace the 'significant influence functions' under the old regime. Senior Managers will need to be approved by the FCA to carry out their senior management function. SMCR is a somewhat complex regime and firm (as well as individuals) must be fully versed in their personal obligations. If in doubt, such as your Statement or Responsibilities, just give us a quick call.

A Data Protection Impact Assessment (DPIA) is a process to help you identify and minimise the data protection risks of a project. You must do a DPIA for processing that is likely to result in a high risk to individuals. This includes some specified types of processing. If in doubt, just give our expert consultants a call.

The UK GDPR introduces a duty for you to appoint a data protection officer (DPO) if you are a public authority or body, or if you carry out certain types of processing activities. If in doubt, just give us a call to discuss your requirement.

No. Put simply, you can have any trading style you wish, however you need to declare this with the FCA through your 'Firm Details Attestation', so the trading style (or trading name) appears on the FCA register. Some names are classed 'sesitive' and therefore you would need to seek the FCA's view prior. If in doubt, just give us a call to discuss it further.

It is driven by the type of application you submit. Typically, the time-frame is 6-12 months but allowance must be given for complex applications, COVID and incomplete submissions.

Potentially yes. It is largely driven by the services you provide (eg Investment, payment services, etc) as well as your own operation. Consideration can be given to the principle of 'reversed solicitation', however this is not a blanket approach and therefore legal opinion should be sought. If in doubt, just give us a call to discuss your situation.