UK Financial Conduct Authority Brings ESG Rating Providers Under Regulation for First Time

Key Takeaways

• First Regulatory Framework: The UK Financial Conduct Authority has finalized rules bringing ESG rating providers under its supervision for the first time, with the regime taking effect on June 29, 2028.
• Governance and Transparency Requirements: Providers will face requirements covering transparency, governance, systems and controls, conflicts of interest, and engagement with ratings users and rated entities.
• Staggered Authorization Deadlines: Firms projecting at least £500,000 in ESG ratings revenue must apply between June 24 and July 29, 2027, while smaller providers have until August 31, 2027, within their separate application window.
• Methodological Independence: The FCA will regulate how ESG ratings are produced, governed and communicated without prescribing particular sustainability methodologies or rating outcomes.

Deep Dive

A firm expecting to earn £500,000 or more from environmental, social and governance ratings will have just over a month next summer to submit its application for authorization under the UK's new regulatory regime. Smaller providers will have a separate window. By June 2028, firms carrying out regulated ESG ratings activities in the country will generally need permission from the Financial Conduct Authority to continue.

The deadlines are part of rules finalized by the FCA, bringing ESG rating providers under its supervision for the first time. The framework establishes requirements for transparency, governance, internal controls and conflicts of interest in a market whose assessments are used by asset managers, lenders and benchmark administrators to inform investment decisions and manage risk.

ESG ratings assess companies, assets and financial products against environmental, social and governance criteria. Their influence on capital allocation has grown alongside concerns about the quality, independence and consistency of the assessments themselves. The FCA's intervention will subject providers to regulatory standards governing how ratings are produced and communicated, although it will leave the choice of sustainability methodologies to the firms.

"Trusted information is essential for well-functioning markets," said Laura Dawes, the FCA's director of authorisations and sustainable finance. "These rules will help improve transparency and raise standards across the ESG ratings market while supporting competition, innovation and growth."

The requirements extend to governance arrangements, systems and controls, the management of conflicts of interest, and engagement with ratings users and the companies or other entities being assessed. Providers will also be expected to meet transparency standards intended to give investors a clearer understanding of the information on which they rely.

The FCA has stopped short of prescribing how sustainability performance should be measured. Its rules concern the production, governance and communication of ESG ratings rather than the judgments providers reach. Different methodologies will remain permissible, provided firms comply with the applicable requirements.

That leaves an important feature of the market intact. ESG ratings can reflect different assessments of environmental, social and governance performance, and regulatory oversight will not necessarily make those judgments consistent. The FCA is seeking to improve the reliability and comparability of ratings through greater transparency and stronger controls, rather than requiring providers to produce uniform results.

The requirements will also be proportionate to providers' size and activities. The regulator said it developed the framework with reference to international standards, including recommendations issued by the International Organization of Securities Commissions in 2021.

From Voluntary Standards to Regulatory Oversight

The new regime follows several years of work to bring ESG ratings within the UK's financial regulatory framework. The government consulted on regulating the sector in 2023, receiving support from 95% of respondents, according to the FCA. Legislation finalized in 2025 brought ESG ratings activities within the regulator's remit, clearing the way for more detailed requirements.

The FCA opened its consultation on December 1, 2025, and closed it on March 31, 2026. The final rules, published in Policy Statement PS26/22, reflect that process and draw on existing industry practices, including the International Capital Market Association's Code of Conduct for ESG Ratings and Data Providers.

Investor demand provides part of the context. The FCA's 2024 Financial Lives Survey found that 72% of adults with investments or a defined contribution pension wanted their investments to do some good alongside providing a financial return.

The finding does not establish how investors use individual ESG ratings or whether they trust the assessments available to them. It does indicate the extent of interest in environmental and social considerations among people holding investments and pensions.

For the FCA, the regulatory concern lies with the information supplied to those making financial decisions. Ratings can influence how investors assess companies and allocate capital, making the standards governing their production relevant well beyond the providers themselves.

Authorization Deadlines Put Firms on Notice

The authorization process will begin on June 24, 2027, with two application periods determined by providers' projected revenue from ESG rating activities during the 12 months following submission. Firms expecting revenue of £500,000 or more must apply between June 24 and July 29, 2027. Those expecting less than £500,000 must apply between July 30 and August 31.

The FCA has encouraged providers to apply early within their assigned windows, warning that late applications may not receive a decision before the framework takes effect on June 29, 2028. Submitting an application does not guarantee authorization.

Firms already authorized under the Financial Services and Markets Act 2000 will need to consider whether their existing permissions and governance arrangements are sufficient for any ESG ratings activities they undertake. Other providers must establish whether their products or services fall within the new regulated activity and whether authorization is required.

The regulator has published guidance to help firms determine whether they are covered. It is also encouraging prospective applicants to review their existing arrangements, identify deficiencies and assess the resources required for compliance.

Preparations may involve changes to internal controls, conflict-of-interest procedures, transparency arrangements, stakeholder engagement and complaints handling. Firms will also need to consider which legal entity should apply and whether senior management responsibilities require attention under the applicable regulatory framework.

The FCA plans to provide webinars and access to its Pre-Application Support Service, which will be available to prospective applicants from February 2027.

"Firms should check now whether they are in scope and start preparing for authorisation," Dawes said. "We'll continue to provide practical support to help them prepare."

The regime takes effect on June 29, 2028. From that date, firms carrying out regulated ESG ratings activities in the UK will need FCA authorization and the relevant permission unless an exclusion applies.

The GRC Report is your premier destination for the latest in governance, risk, and compliance news. As your reliable source for comprehensive coverage, we ensure you stay informed and ready to navigate the dynamic landscape of GRC. Beyond being a news source, the GRC Report represents a thriving community of professionals who, like you, are dedicated to GRC excellence. Explore our insightful articles and breaking news, and actively participate in the conversation to enhance your GRC journey