Panoramic: Automotive and Mobility 2025
From 29 June 2028, any firm wishing to provide certain types of “ESG rating” in the UK will need FCA authorisation. The government consulted on this in 2023, and in October 2025 it published draft legislation to implement this. Under the proposals the provision of ESG ratings will become a new form of regulated activity.
The FCA has now published a consultation paper (CP) which sets out the FCA’s own proposed rules and guidance for the regulation of ESG providers. This includes draft guidance relating to the regulatory perimeter (which will help firms understand whether they are inside or outside the scope of the new regime) and details of the draft rules that are being proposed for ESG ratings providers.
This note considers the main elements of the new regime, and in particular looks at:
For a rating to be caught by the new regime, it will have to meet each of the following criteria:
An “ESG rating” will be defined in the new legislation as:
an assessment regarding one or more ESG factors, which:
(a) is produced in the form of an opinion, a score or a combination of both, where:
(i) ‘score’ means a measure derived from data and a pre-established statistical or algorithmic system or model, without additional substantial analytical input from an analyst, and
(ii) ‘opinion’ means an assessment involving substantial analytical input from an analyst, and
(b) is prepared using an established methodology and a defined ranking system of rating categories’.
It makes no difference for these purposes whether the assessment is characterised as an ESG rating.
An “ESG factor” is defined in the legislation as “an environmental, social or governance factor”. An assessment regarding one or more environmental, social or governance factors is potentially within scope. It does not necessarily have to relate to questions of the environment or sustainability.
Firms should be aware of the possibility that assessments of only social or governance factors could equally be caught by the new regime.
The provider must both produce the rating and make it available. Mere distribution of someone else’s ESG rating is out of scope.
The rating must be likely to influence a decision to make a specified investment.
It is immaterial whether someone commissioned the ESG rating (it is solicited) or no-one commissioned the rating (it is unsolicited).
The CP says that a person will need FCA authorisation for the new regulated activity where that person:
The new regime is, therefore, potentially capable of applying to persons outside the UK.
Overseas firms who are engaged in ESG ratings-related activities with UK customers should consider whether they will need FCA authorisation under the new regime.
There are several exemptions available in relation to the new regulated activity – including an intra-group exemption.
The exclusion that is likely to be of most interest to the financial sector is the “regulated products and services” exclusion. Certain firms who are already regulated in the UK will be excluded from the regime where they provide ESG ratings in the course of carrying on another regulated activity.
Examples given in the CP include:
However, the exclusion does not apply where the ESG rating is provided as a standalone product or service. Regulated firms who wish to provide this kind of service will need to apply for a new permission from the FCA.
Only a firm that, broadly speaking, is regulated in the UK will be able to benefit from this exclusion. An overseas firm that is authorised in its home country to do similar ESG rating activities will not be able to benefit from the exclusion and will potentially have to apply for authorisation.
Any person who can benefit from an exclusion will be outside the scope of the new rules that the FCA is consulting on. Read on to see what the new rules will require of ESG ratings providers.
The FCA says that the regime it proposes for ESG ratings providers will be a combination of:
The baseline requirements will include things like the FCA’s Principles for Business, general systems and controls requirements and the senior managers regime.
The tailored element of the rules will focus on:
The FCA says that these tailored rules are informed by IOSCO standards.
The CP proposes that the FCA’s Consumer Duty will not apply to ESG ratings activity, but it reminds ESG ratings providers that other firms in the distribution chain for ESG products may be subject to the Consumer Duty and it encourages them to consider this when conducting their business. The FCA says that the detailed rules on transparency will also be calibrated to give retail consumers the information they need, which should help avoid the harms that the Consumer Duty is normally there to prevent.
The FCA is proposing that the jurisdiction of the Financial Ombudsman Service (FOS) should not extend to complaints about ESG ratings, and that coverage under the Financial Services Compensation Scheme (FSCS) should not be extended to ESG ratings providers.
The new FCA rules will apply only to firms who are specifically authorised to carry on the new regulated activity of providing ESG ratings. They will not apply to existing regulated firms who benefit from the “regulated products and services” exclusion.
This creates the possibility of a dual regime, under which an ESG ratings provider will have to comply with detailed requirements under the new rules when producing an ESG rating, but a regulated firm that produces an ESG rating in the course of other regulated activities would not. This could mean, for example, that ESG ratings produced by an ESG ratings provider would have to comply with the detailed minimum disclosure requirements, but those produced by an asset manager would not.
In addition, some of the nuances regarding the regime for ESG ratings providers – for example, the particular types of issue that should be considered from a conflicts perspective – would not apply to an asset manager producing similar ESG ratings.
For regulated firms who rely on the exclusion, the FCA says that it plans to assess whether it needs to improve standards in existing regulatory regimes to address the risk of harm, and that if it considers there are significant gaps in standards between the new regime and the current regulatory framework for existing regulated products and services, then it will consult on any proposed changes to the existing regimes. There may, therefore, be further changes in this space.
It also remains to be seen whether the standards that apply to ESG ratings providers will become the market standard and followed even by firms who would benefit from an exclusion.
The CP contains a roadmap for implementation of the new regime. The key dates are as follows:
|
31 March 2026 |
FCA consultation on the new rules closes. |
|
Q4 2026 |
FCA finalises its rules. |
|
June 2027 |
Authorisations gateway opens (preceded by a six month pre-gateway support period). |
|
29 June 2028 |
Regime goes live. |
Authored by Dominic Hill and Emily Julier.