REGULATOR · UK · RETAIL FINANCIAL SERVICES
REVISED 2026-05-08 · PS22/9 PRINCIPLE 12 · IN FORCE 2023-07-31

FCA Consumer Duty.

Warrant is regulator-grade evidence infrastructure for AI agents in regulated industries: drop an agent's execution trace, get a record mapped to a specific EU AI Act obligation, independently verifiable without contacting Warrant. PS22/9 Principle 12. UK retail financial services. Effective 31 July 2023. Senior managers carry personal accountability under SMCR. AI agents acting on retail customer data fall in scope per DP24/2. Warrant captures the per-decision evidence chain a CCO can hand a supervisor.

PRINCIPLE
PRIN 12· PS22/9
Good outcomes for retail customers. AI in scope per DP24/2.
IN FORCE
2023-07-31
Application date for new and existing products serving retail customers.
PERSONAL LIABILITY
SMCR· senior manager
Senior Manager Function holders carry individual accountability.
01 · PRINCIPLE 12 · GOOD OUTCOMES

The duty extends to AI-driven decisions.

A firm must act to deliver good outcomes for retail customers. Consumer Duty obligations extend to AI-driven products and services. Where AI influences a customer-facing decision, firms must evidence that the outcome was tested for good outcomes, vulnerable-customer protection, and explainability. FCA PS22/9 · Principle 12 · DP24/2 (AI scope)

Principle 12 sits above the four outcomes (products and services, price and value, consumer understanding, consumer support). DP24/2 confirmed that AI-influenced decisions fall in scope. The supervisor will not accept "the model decided" as an answer. The firm must produce the evidence chain. For the clause-level reading, see FCA Consumer Duty Principle 12, read against the agent.

"Where AI influences a customer-facing decision, the firm owes the outcome. The model is not the firm. The senior manager is."SMCR practitioner · regulatory review · 2026-04-30
02 · CONSUMER DUTY OBLIGATIONS

Per-decision evidence shape.

PRIN 12
Good customer outcomes evidenced per decision. WARRANT · trace.actions[*].outputs (decision + rationale) + obligations[good_customer_outcomes] mapped per agent action.
PS22/9 · vulnerable
Vulnerable customer protection logged. WARRANT · trace.actions[*].inputs (vulnerability flags when present in trace) + per-action authorization assessment. Gap surfaced when missing.
DP24/2
AI decision explainability documented. WARRANT · trace.actions[*].rationale + per-action authorization envelope (within_purpose, preconditions_met, justification).
SMCR · SMF
Senior Manager Function accountability. WARRANT · trace.signed_off_by (when supplied) + the record names the customer tenant as its issuing author.
03 · SMCR · PERSONAL LIABILITY

The senior manager owns the chain.

SMCR is the test. Under the Senior Managers and Certification Regime, a Senior Manager Function holder can be personally fined or banned where consumer harm follows AI-driven decisions and the firm cannot evidence the record. The record is the trail. The record names the accountable tenant, so the same person who owns the policy owns the evidence.

DP24/2 carries the FCA position on AI: the firm must surface explainability appropriate to the decision class, retain the evidence, and deliver the same trail to the consumer (where requested) and to a supervisor.

PRIN 12
PRINCIPLE NUMBER
Twelfth FCA Principle for Businesses. Sits above the four outcomes that operationalise it.
SMF
FUNCTION HOLDER
Senior Manager Function. The named accountable individual. Personal liability at the FCA's discretion.
04 · WHY THIS REGULATOR NOW

Is the FCA enforcing Consumer Duty now?

Consumer Duty has been in force since 31 July 2023 for new and existing products and from 31 July 2024 for closed products. The post-implementation period is over; the FCA is now using PRIN 12 in supervisory action. The supervisor's working position in 2026 is that PRIN 12 expands the duty of care, not codifies it · and the firm bears the evidential burden.

Recent enforcement signal carries into 2026 from a 2024 base. The FCA Final Notice against TSB Bank (10 December 2024, GBP 10.9 million in customer redress over mortgage and unsecured personal lending arrears handling) was framed under the broader treating-customers-fairly umbrella and read directly into PRIN 12 supervisory letters across the lending vertical. The Final Notice against Coverage Underwriting (7 May 2025, related to wholesale and SME underwriting) was the first to cite PRIN 12 explicitly in firm-level enforcement. The FCA Dear CEO letter to consumer credit firms (15 April 2025) signalled that vulnerable-customer harm in AI-influenced decisioning would be treated as priority casework for 2026 supervision cycles.

Prosecutorial interest tracks the SMF lever. DP24/2 (October 2024) confirmed that AI-influenced decisions fall inside Principle 12 and that the senior manager personally accountable for the affected business unit carries the duty of responsibility under FSMA s.66A. Multiple SMF holders have already been referred for assessment over AI-driven retail outcomes; counsel reviewing PRIN 12 in May 2026 should expect that a specific customer case file (vulnerable, loss-making, opaque rationale) will be the entry point, not the firm-wide MI pack.

05 · MAPPING · PRIN 12 OUTCOMES

Per-outcome field map.

A firm must avoid foreseeable harm to retail customers, enable retail customers to pursue their financial objectives, and act in good faith towards retail customers. The firm must monitor and regularly review the outcomes its retail customers are experiencing and act to address any risk of poor outcomes. FCA Handbook · PRIN 2A.1.1R · Consumer Duty cross-cutting rules

The four outcomes operationalise PRIN 12 across products and services, price and value, consumer understanding, and consumer support. The mapping below names the obligation, the supervisory expectation, and the Warrant evidence field that satisfies it.

PRIN 2A.1.1R
Cross-cutting rule · avoid foreseeable harm. WARRANT · trace.actions[*].risk_assessment flags decisions outside envelope. Foreseeable harm is auditable per decision.
PRIN 2A.1.2R
Cross-cutting rule · enable retail customer to pursue financial objectives. WARRANT · trace.actions[*].outputs (decision + rationale) + obligations[good_customer_outcomes] mapped per agent action.
PRIN 2A.1.3R
Cross-cutting rule · act in good faith. WARRANT · authorization_envelope.within_purpose + authorization_envelope.justification per action. Good faith is the envelope assessment.
Outcome 1
Products and services · designed for the target market. WARRANT · trace.regulated_entity + trace.agent_id (deployment scoped to specific product cohort) + per-action target-market field when supplied.
Outcome 2
Price and value · fair value evidenced. WARRANT · trace.actions[*].inputs.pricing_parameters + authorization_envelope check on price-against-value when supplied.
Outcome 3
Consumer understanding · communications support informed decisions. WARRANT · trace.actions[*].rationale (suitable for disclosure to consumer on subject access) + per-decision explainability surfacing under DP24/2.
Outcome 4
Consumer support · meets retail customer needs. WARRANT · trace.actions[*].human_review_recorded + authorization_envelope.human_oversight_appropriate. Vulnerable-customer flag carried when present in trace.
DP24/2
AI explainability under Consumer Duty. WARRANT · trace.actions[*].rationale + per-action authorization_envelope.justification (tamper-evident in the record). Explainability surfaced to consumer on request and to supervisor on examination.
SYSC 9.1.1R
Records sufficient to demonstrate compliance. WARRANT · Warrant Cloud receipt store + customer-controlled retention policy. Five-to-seven-year retention is market practice for retail decisions.
SMF · DoR
Senior Manager duty of responsibility under FSMA s.66A. WARRANT · trace.signed_off_by + the record names the SMF holder's tenant as its issuing author. The record is the trail.
06 · FAQ

Questions a CCO and SMF holder ask first.

Does Consumer Duty apply if my firm is not FCA-authorised but distributes products into the UK retail market?

PRIN 12 binds FCA-authorised firms. A non-FCA distributor sits outside Principle 12 directly, but the FCA-authorised manufacturer or co-manufacturer remains accountable for the end-to-end retail outcome under PROD 4. The supervisor reads through to the chain irrespective of who in the chain is authorised.

How does SMCR personal liability attach to an AI-driven decision?

The Senior Manager Function holder responsible for the relevant business unit carries the duty of responsibility under FSMA s.66A. Where consumer harm follows from an AI-driven decision and the firm cannot evidence the record (rationale, oversight, alternatives considered), the SMF holder is exposed to personal fines, prohibition orders, or industry exclusion. The record is the trail. The record names the accountable tenant so the same person who owns the policy owns the evidence.

What does DP24/2 say about AI explainability under Consumer Duty?

DP24/2 (FCA discussion paper on AI in financial services, October 2024) confirms that AI-influenced retail decisions fall in PRIN 12 scope and that the firm must surface explainability appropriate to the decision class, retain the evidence, and deliver the same trail to the consumer (where requested) and to the supervisor. The FCA position: explainability is the firm's burden, not the model vendor's.

How do i generate Consumer Duty evidence if my agent runs on a non-UK LLM provider?

The location of the model vendor is not material. PRIN 12 binds the FCA-authorised firm. Wrap each tool call with the Warrant trace shape and POST the JSON to /attest. Warrant produces a per-action evidence package mapped to PRIN 12 plus DP24/2 explainability, independently verifiable without contacting Warrant. Same artefact whether the LLM is Anthropic, OpenAI, or open-source.

What does the FCA recognise as 'good outcomes' evidence under PRIN 12?

The four outcomes operationalise PRIN 12: products and services, price and value, consumer understanding, consumer support. Evidence must be per-decision, structured, retrievable on supervisor request, and traceable to the SMF holder. Aggregated MI dashboards are necessary but not sufficient; the supervisor will pull a specific customer case file and read the chain end-to-end.

How long must Consumer Duty evidence be retained?

FCA SYSC 9.1.1R requires firms to keep records sufficient to demonstrate compliance. For retail mortgage, lending, and insurance decisions, market practice runs five to seven years post-decision. Where the decision affects a vulnerable customer, longer retention is the operative pattern. Warrant Cloud receipt store plus customer-controlled retention policy carries this forward.

07 · READ THE SOURCE

Primary citations.

FCA PS22/9 sits at fca.org.uk/publications/policy-statements/ps22-9-new-consumer-duty. The finalised non-Handbook guidance is at FG22/5. The FCA AI overview is at fca.org.uk/firms/ai-financial-services. SMCR reference at fca.org.uk/firms/senior-managers-certification-regime.

W
Sample EU/UK evidence package · maps Article 12 + Article 13 + FCA Principle 12INDEPENDENTLY VERIFIABLE · ID 7de85ceaeac42a47
→ eu-fintech.pdf
Verify a package → Open the demo All regulators