Regulator communications is the highest-stakes area of UK corporate comms that gets the least systematic attention. Most comms teams have detailed plans for media, investors, and employees — but regulator engagement is often left to the legal or compliance team, with comms involved only when something goes wrong. That is a missed opportunity. How your organisation communicates with the FCA, CMA, ICO, Ofcom, ASA, and sector-specific regulators directly affects your regulatory risk profile.
The UK Regulatory Landscape for Comms Teams
Key Regulators and What They Care About
| Regulator | Sector | What They Monitor | Comms Implication | |---|---|---|---| | FCA (Financial Conduct Authority) | Financial services | Consumer protection, market integrity, competition | All customer-facing comms must be fair, clear, and not misleading. Consumer Duty raises the bar further. | | CMA (Competition and Markets Authority) | All sectors | Mergers, anti-competitive behaviour, consumer protection | Marketing claims about pricing, comparisons, and market position are scrutinised. M&A comms require careful sequencing. | | ICO (Information Commissioner's Office) | All sectors | Data protection, privacy, GDPR compliance | Data breach communications have mandatory timelines (72 hours). Privacy policies and consent mechanisms are reviewed. | | Ofcom (Office of Communications) | Telecoms, broadcasting, online services | Service quality, consumer complaints, content regulation, Online Safety Act | Customer complaint volumes and service messaging are monitored. Broadcasting output rules affect content. | | ASA (Advertising Standards Authority) | All sectors | Truthfulness of advertising and marketing claims | Environmental claims, health claims, and price comparisons are actively enforced. Rulings are public and reported by media. | | PRA (Prudential Regulation Authority) | Banking, insurance | Financial stability, capital adequacy | Communications about financial strength must be accurate and consistent with regulatory filings. |
Why Comms Teams Need to Be Involved
Regulators form impressions of organisations based on the totality of their public communications — not just formal regulatory submissions. An FCA supervisor who reads your marketing and finds it inconsistent with your compliance filings will ask questions. A CMA case handler who sees your CEO making competitive claims in the press will note it. The comms team needs to understand what each regulator is watching.
The Single Point of Contact
Every organisation should have one named person who owns the regulator relationship. For most UK companies:
- Financial services: The Head of Regulatory Affairs or Chief Compliance Officer owns the FCA/PRA relationship. The comms team provides communications support.
- Technology/telecoms: The Public Affairs lead or Government Relations director typically owns the Ofcom relationship.
- Consumer brands: The Legal Director or compliance lead owns ASA and CMA relationships, with comms supporting on public-facing responses.
The rule: Never have two people from your organisation communicating with the same regulator without coordination. Inconsistent messages between, say, your compliance team's formal submission and your CEO's media interview will be noticed and will raise concerns.
Comms Team's Role
The comms team does not own the regulatory relationship but has three specific responsibilities:
1. Ensuring message consistency: Every public statement, press release, marketing claim, and social media post must be consistent with what you have told the regulator. The comms team is the quality control layer. 2. Preparing for public regulatory actions: When a regulator publishes a finding, enforcement action, or ruling that mentions your organisation, the comms team manages the media response, employee communication, and stakeholder messaging. 3. Monitoring for regulatory signals: Using Meltwater, Signal AI, or Cision to track regulatory announcements, enforcement trends, and sector-wide developments that could affect your organisation.
Documenting Every Interaction
Maintain a log of all regulator interactions. This is not bureaucracy — it is protection.
What to Log
| Field | Example | |---|---| | Date | 14 March 2026 | | Regulator | FCA | | Contact name and role | Jane Smith, Supervision Manager | | Format | Phone call (15 minutes) | | Topic | Consumer Duty implementation progress | | Key points discussed | We confirmed that legacy product review is 80% complete. FCA asked for completion timeline — we said Q3 2026. | | Follow-up commitments | Send written update by 28 March | | Internal attendees | Head of Compliance, Head of Comms | | Documents shared | None |
Why This Matters
If a regulator later claims that your organisation failed to disclose information or made a commitment you did not keep, the interaction log is your evidence. It also prevents internal confusion — if the compliance team discussed one timeline and the CEO mentioned a different one in a press interview, the log reveals the inconsistency before the regulator does.
Preparing for Adverse Findings
When a regulator publishes something negative about your organisation — an enforcement action, a public censure, a warning notice, or an unfavourable market study — you need a communications plan ready before it happens.
The Response Framework
Within 1 hour of publication: 1. Issue an internal holding statement to all employees (they will read about it on the BBC within minutes) 2. Activate the pre-drafted media statement (reviewed by legal and approved by the board in advance) 3. Brief the CEO and any other spokespeople on key messages and Q&A 4. Set media monitoring to high alert — track every piece of coverage in real time using Meltwater or Signal AI
The media statement should include:
- Acknowledgement of the regulator's finding (do not deny or minimise — this antagonises both the regulator and journalists)
- A brief statement of what you are doing about it ("We have already taken the following steps...")
- A commitment to cooperate ("We are working closely with the [regulator] to ensure...")
- A forward-looking statement ("Our priority is to ensure this does not happen again...")
What NOT to include:
- Criticism of the regulator or the finding
- Legal arguments or technical defences (save these for the formal appeal process)
- Claims that the issue was minor or did not affect customers (let the facts speak)
Common Mistake: The Combative Response
A UK insurance company received a public censure from the FCA for failings in its claims handling process. Their initial media response included the phrase "we fundamentally disagree with the FCA's characterisation of this matter." The FCA's press office flagged the response to the supervision team, who scheduled an accelerated review of the company's remediation plan. The media coverage shifted from "Company fined for claims failing" to "Company clashes with regulator over consumer protection" — a far worse headline. The combative tone made a bad situation significantly worse. The appropriate response was: "We accept the FCA's findings and have already implemented the required changes."
Proactive Regulator Engagement
The best UK comms teams do not wait for problems. They build regulatory credibility proactively.
Consultation Responses
UK regulators regularly publish consultations on proposed rules and guidance. Responding to these consultations — with a well-reasoned, data-supported position — establishes your organisation as a constructive participant. The FCA publishes 30-50 consultations per year. The CMA, ICO, and Ofcom each publish 10-20.
What a good consultation response looks like:
- Addresses the specific questions asked (not a general position statement)
- Provides data and evidence from your own operations
- Acknowledges the regulator's objectives and explains how your position supports them
- Is submitted on time (responses received after the deadline are not considered)
Industry Engagement
Participate in regulator-hosted roundtables, working groups, and industry forums. This puts your leadership in the room with the people who write the rules. The FCA's Practitioner Panel, the CMA's business advisory groups, and Ofcom's stakeholder advisory boards are all avenues for constructive engagement.
Thought Leadership on Regulatory Topics
Publishing thoughtful analysis of regulatory developments — a CEO byline in the FT on Consumer Duty implementation, or an opinion piece in City AM on CMA digital markets enforcement — positions your organisation as a serious player. Regulators read this coverage. It shapes their impression of your organisation's commitment to compliance and good practice.
Monitoring Regulatory Risk
Set up the following in your media monitoring platform:
Meltwater / Signal AI / Cision Alert Configuration
| Alert | Search Terms | Frequency | |---|---|---| | Your company + regulator | "[Company]" AND ("FCA" OR "CMA" OR "ICO" OR "Ofcom" OR "ASA") | Real-time | | Sector enforcement | "[Your sector]" AND ("fine" OR "enforcement" OR "censure" OR "warning" OR "investigation") | Daily digest | | Named regulator contacts | "[Supervisor name]" OR "[enforcement lead name]" | Weekly | | Competitor regulatory action | "[Competitor 1]" OR "[Competitor 2]" AND ("FCA" OR "CMA" OR "ICO") | Daily digest | | Regulatory consultations | "consultation" AND ("FCA" OR "CMA" OR "ICO" OR "Ofcom") AND "[your sector keywords]" | Weekly |
A competitor's regulatory problem is your early warning. If a rival is fined for a practice that is also common in your organisation, the regulator will look at you next. The monitoring gives you weeks — sometimes months — of lead time to fix the issue before it becomes your problem.