Brief
Vulnerable customers – understanding and meeting the FCA’s guidelines
Fair treatment of vulnerable customers has been a longstanding concern for the FCA . The FCA has released the Finalised Guidance (FG21/1). It sets out its view of what firms should do to comply with their obligations under the Principles and ensure they treat vulnerable customers fairly.
Michaela Clarke
Operations & Compliance Coordinator

Fair treatment of vulnerable customers has been a longstanding concern for the FCA .
The FCA has released the Finalised Guidance (FG21/1).
It sets out its view of what firms should do to comply with their obligations under the Principles and ensure they treat vulnerable customers fairly.
To briefly summarise, there are six key actions you will need to take to ensure you are treating customer fairly:
- Understand customers needs
- Ensure staff have the right skills and capacity
- Implement processes for monitoring and evaluation of vulnerable consumers
- Review the impact of products and services delivered to consumers
- Put in place customer service protocols to support vulnerable consumers
- Consider whether your communication is comprehensible for vulnerable consumers
Customer vulnerability should be considered across every part of the business, and the regulator will propose enforcement in this area.
You will also need to consider areas covering
- Governance and responsibilities of senior management
- Culture, capacity and competency
- Product Management
- Communications
- Monitoring and oversight
We will soon release a paper providing you with a comprehensive overview of the guidance. It highlights key questions you should consider and proactive steps you can take to meet the guidelines.
Need expert regulatory guidance?
Our ex-regulator team helps firms navigate complex requirements and evidence compliance with confidence.
Book a Free Scoping CallRelated insights
View all insights →
CACEIS and WealthTek: testing the control chain behind client-asset protection
The FCA censured CACEIS UK and recorded a £31.7m voluntary payment after failures to act on information that exposed WealthTek clients to financial-crime risk.

CP26/16 has closed: what firms should prepare for next
CP26/16 closed on 9 July 2026. Its proposals concern safekeeping delegation and the authorised fund registration function, not a new FCA data return.

In-house, outsourced or co-sourced compliance: a governance comparison
A comparison of compliance resourcing models through accountability, capability, information access, provider oversight, continuity and exit planning.