The Consumer Duty cross-cutting rules: the practical guide

The Consumer Duty cross-cutting rules represent the most operationally demanding layer of the FCA's new conduct framework, and most regulated firms have not yet understood what genuine compliance requires of them. The rules sit above the four outcomes and apply to every aspect of a firm's relationship with retail customers. They are not aspirational principles to be gestured at in board papers. They are enforceable standards of conduct that the FCA expects to find embedded in day-to-day operations, governance structures, and evidential records. Firms that treat the cross-cutting rules as a compliance formality rather than an operational discipline are accumulating regulatory risk that will eventually surface in supervisory engagement, enforcement action, or both.

This guide explains what the cross-cutting rules actually require, where firms most commonly fall short, what the commercial consequences of that shortfall look like, and how the regulatory environment is likely to develop from here. It is written for operators, compliance leads, and senior managers who need a clear-eyed account of the obligations rather than a summary of the FCA's published guidance.

What the cross-cutting rules actually say

The Consumer Duty is structured in three tiers. At the top sits the overarching principle that firms must deliver good outcomes for retail customers. Beneath that are the four outcomes covering products and services, price and value, consumer understanding, and consumer support. The cross-cutting rules occupy the middle tier, and they govern how firms must behave in pursuit of those outcomes.

The FCA sets out three cross-cutting rules. First, firms must act in good faith towards retail customers. Second, firms must avoid causing foreseeable harm. Third, firms must enable and support retail customers to pursue their financial interests. Each of these rules applies across the full lifecycle of a product or service, from design and distribution through to post-sale support and complaint handling.

The good faith requirement is broader than it might initially appear. It is not satisfied simply by avoiding deliberate deception. The FCA expects firms to act honestly, consistently, and with genuine regard for the customer's position. A firm that designs a product with a technically accurate but practically misleading fee structure may satisfy the letter of disclosure requirements while failing the good faith standard. The FCA has been explicit that good faith encompasses the spirit of the obligation, not merely its technical form.

The foreseeable harm rule introduces a prospective dimension to compliance. Firms are not only accountable for harm that has already occurred. They are required to identify harm that a reasonable firm in their position could have anticipated and to take steps to prevent it before it materialises. This demands a level of analytical rigour in product design and distribution reviews that many firms have not historically applied. Foreseeable harm is assessed from the perspective of the typical retail customer in the relevant target market, which means firms cannot rely on the argument that a sophisticated customer would have understood the risk.

The third rule, enabling customers to pursue their financial interests, is perhaps the most novel. It creates an affirmative obligation. Firms must not merely avoid obstructing customers; they must actively support them. This has direct implications for how firms design switching processes, handle complaints, communicate about alternative products, and respond to customers who are in financial difficulty. A firm that makes it structurally difficult for a customer to exit a product or access a better option may be in breach of this rule even if no individual member of staff has behaved improperly.

What the market usually gets wrong

The dominant misconception about the cross-cutting rules is that they are satisfied by documentation. Firms invest heavily in updating terms and conditions, producing fair value assessments, and commissioning board reports on Consumer Duty implementation. These activities are necessary but not sufficient. The cross-cutting rules are conduct standards, not paper standards. The FCA's supervisory approach is focused on outcomes, which means it will look through documentation to ask whether customers are actually experiencing the treatment the documents describe.

A related misconception is that the cross-cutting rules are primarily a product design concern. In practice, they apply with equal force to distribution, servicing, and remediation. A firm that designs a product carefully but then distributes it through a channel that reaches customers for whom it is unsuitable has not met the foreseeable harm standard. A firm that handles complaints in a way that discourages legitimate escalation has not met the good faith standard. The cross-cutting rules follow the customer relationship wherever it goes.

There is also a tendency to treat the cross-cutting rules as a one-time implementation exercise. The FCA has been clear that Consumer Duty compliance is an ongoing obligation. Firms are expected to monitor outcomes continuously, update their assessments when market conditions or customer circumstances change, and demonstrate through their governance records that they are doing so. A firm that conducted a thorough implementation exercise in 2023 but has not revisited its assessments since is not compliant in any meaningful sense.

For a broader account of how the Consumer Duty framework operates across its different components, the Consumer Duty and Regulation section of this site provides context that is useful alongside this more focused analysis.

The operational layer that most compliance programmes miss

Compliance with the cross-cutting rules is ultimately an operational problem, not a legal one. The legal obligations are relatively clear. The difficulty lies in translating those obligations into the workflows, systems, and incentive structures that govern how a firm actually behaves at the point of customer contact.

Consider the foreseeable harm rule in the context of a firm that sells insurance products through a comparison platform. The firm's legal team may have assessed the product against the target market and concluded that it is appropriate. But if the firm's renewal process is automated in a way that does not prompt customers to reassess their coverage needs, and if that process results in customers retaining cover that no longer matches their circumstances, the firm may be causing foreseeable harm that its legal assessment did not capture. The harm is foreseeable because a firm paying genuine attention to customer outcomes would have identified the risk in its renewal workflow.

The enabling rule creates similar operational challenges. Firms that operate in markets with high switching costs or complex exit processes need to examine whether those processes are genuinely designed to serve the customer or whether they have been structured, even inadvertently, in ways that reduce attrition at the customer's expense. The FCA has signalled that it regards friction in exit processes as a significant area of concern, and firms should expect supervisory scrutiny of any process that makes it materially harder to leave than to join.

Data is central to all of this. Firms cannot demonstrate compliance with the cross-cutting rules without evidence that they are monitoring customer outcomes and acting on what they find. This requires investment in management information systems that go beyond traditional complaints and arrears data. Firms need to be able to show that they are tracking outcomes across the customer lifecycle, identifying cohorts that may be experiencing poor outcomes, and taking proportionate action in response. Many firms have not yet built the data infrastructure that this requires.

The writing archive on this site includes related analysis on how regulatory obligations of this kind translate into operational and commercial decisions for firms operating in consumer-facing markets.

Commercial consequences of getting this wrong

The commercial consequences of non-compliance with the cross-cutting rules operate on several timescales. In the short term, firms that have not embedded the rules into their operations face supervisory risk. The FCA has been clear that it intends to use its full range of powers under the Consumer Duty framework, including skilled person reviews, requirements to remediate customers, and public censure. Any of these outcomes carries reputational and financial costs that are difficult to quantify in advance but easy to underestimate.

In the medium term, firms that are not genuinely compliant face competitive disadvantage as the market adjusts to the new standard. Firms that have invested in understanding what good outcomes actually look like for their customers will be better positioned to design products and services that retain customers on the basis of genuine value rather than structural lock-in. The cross-cutting rules, properly understood, are an invitation to compete on quality rather than inertia.

There is also a litigation dimension that is increasingly relevant. The Consumer Duty does not create a private right of action, but it is already influencing how courts and the Financial Ombudsman Service approach disputes between firms and customers. A firm that cannot demonstrate compliance with the cross-cutting rules in the context of a complaint or claim is in a materially weaker position than one that has maintained clear evidential records of its conduct. Firms that are involved in or anticipate disputes with retail customers should be thinking carefully about how their Consumer Duty compliance records will read in an adversarial context.

For firms seeking to understand how regulatory developments of this kind intersect with dispute resolution and claims management, the about section of this site explains the perspective from which this analysis is offered.

Where the regulatory environment is likely to move next

The FCA has signalled that its supervisory focus under the Consumer Duty will intensify rather than stabilise. The initial implementation period was necessarily focused on getting firms to a baseline level of compliance. The FCA's published statements make clear that it now expects to move beyond baseline assessment towards a more granular examination of whether firms are genuinely delivering good outcomes or merely documenting the appearance of doing so.

Several areas are likely to attract particular attention. Price and value assessments will come under closer scrutiny as the FCA develops a clearer view of what fair value looks like across different product categories. Firms that have produced assessments without robust methodology will find those assessments difficult to defend. Vulnerability handling is another area where the gap between policy and practice is frequently significant, and the FCA has consistently identified it as a priority.

The extension of the Consumer Duty to closed book products, which came into force in July 2024, has expanded the population of firms and products in scope. Firms that manage legacy books need to apply the cross-cutting rules to products that were not designed with the Duty in mind, which creates particular challenges around foreseeable harm and the enabling obligation.

Firms should also expect the cross-cutting rules to feature prominently in any future thematic reviews the FCA conducts. The rules are broad enough to apply to almost any conduct concern, which makes them a natural analytical framework for supervisory work across a wide range of sectors and product types.

What this means in practice

The Consumer Duty cross-cutting rules are best understood as a continuous standard of conduct rather than a set of discrete obligations to be discharged. Firms that approach them as a compliance project with a defined end point will find themselves repeatedly behind the regulatory curve. Firms that embed them into their operational culture, governance structures, and management information frameworks will find that they provide a coherent organising principle for decisions that would otherwise be made on an ad hoc basis.

The practical starting point for most firms is an honest assessment of the gap between their documented policies and their actual customer experience. That assessment should be grounded in data about what customers are experiencing rather than in assumptions about what the firm intends them to experience. Where gaps are identified, they need to be addressed through changes to processes, systems, and incentives, not through additional documentation.

The cross-cutting rules are demanding precisely because they require firms to think seriously about what it means to act in good faith, to prevent foreseeable harm, and to genuinely support customers in pursuing their financial interests. Those are not easy questions to answer, and the answers will differ across product types, customer segments, and distribution channels. But they are the right questions, and firms that engage with them seriously will be better placed to navigate the regulatory environment that the FCA is building.

For further analysis of how the Consumer Duty framework is reshaping conduct standards across regulated markets, the Consumer Duty and Regulation pillar on this site provides a structured set of resources. Enquiries about specific regulatory or operational challenges can be directed through the contact page.