Compliance Consultant Insurance

Every compliance consultant should be able to explain this to a client before it matters, because it is the single most misunderstood point in the relationship.

Regulatory fines and penalties are generally not insurable in the UK as a matter of public policy: an insurer cannot indemnify a party against a penalty imposed for breaking the law. So when a client is fined following a breach you advised on, the penalty itself typically falls outside your professional indemnity policy even though it is the largest number on the client's schedule of loss. What the policy can answer is the cost of remediation, the investigation and defence costs, and consequential losses such as lost contracts or closure.

Which has a practical consequence for how you contract. Make clear in the engagement that you advise and the client remains the duty holder, state that penalties are theirs, and resist contract terms that purport to indemnify a client against enforcement action, because agreeing to something the policy cannot answer leaves you carrying it personally. It is a conversation at engagement rather than a disclaimer in small print.

The difference between two ways of writing the same conclusion decides a surprising number of claims in this profession.

An audit examines a sample of a business on a particular day against a particular standard. Writing that the business is compliant converts that sample into a guarantee covering areas you did not look at and periods you were not there. Writing that you examined the stated scope and found no evidence of non-compliance in it, with the scope listed, says exactly what you did. The second is just as useful to a client and far more defensible, and some policies exclude guarantees and warranties outright, which makes the first form a coverage problem as well as an evidential one.

The same applies to what you did not see. Record the areas within scope, the areas excluded and why, what you could not access, and the date and conditions of the visit. A breach later found in an area you never examined is straightforward to defend when the report said so and difficult when the report was silent, because silence reads as coverage.

The commonest claim in compliance consultancy is not bad advice. It is good advice the client did not act on.

Compliance remediation costs money and disrupts operations: new equipment, altered processes, training time, a building alteration, additional staff. Clients defer it, often reasonably at the time, while continuing to pay a retainer. When the regulator arrives, the client's account of what they were told rarely matches yours, and the adviser is in the frame because the business believed it was being kept compliant.

So the habit worth building is specific and repetitive. Every finding in writing with a risk rating and a timescale. The client's decision recorded, including a refusal. Outstanding items restated at every subsequent visit or report rather than carried silently in the background. A log showing the same high risk finding outstanding across six reports with the client informed each time is close to a complete defence. The same finding mentioned once eighteen months ago is not, even though you identified it first.

There is a quiet difference between answering questions and being responsible for a client's compliance, and retainers blur it.

A project engagement has a defined scope and a deliverable. An ongoing retainer, particularly one described as compliance support or a compliance service, can create an expectation that you will keep the client compliant: that you will tell them when legislation changes, monitor whether they implemented what you recommended, and notice problems nobody asked about. That is a much wider duty than answering queries, and it is rarely what the fee reflects.

Which is worth settling in the engagement letter rather than after an incident. State whether you monitor for regulatory change and notify, or whether the client is responsible for raising matters. State whether you verify implementation or advise only. State the frequency of any review and what it covers. And where the relationship has grown beyond what was agreed, which it usually has after a few years, vary the engagement rather than letting the gap between the fee and the expectation widen.

The question nobody asks is what happens to the fine. We are an FCA regulated broker and will not tell you we are the best choice. These are the questions that decide it.