FCA mandates ESG ratings provider authorisation from 2028

The FCA has mandated that all ESG ratings providers operating in the UK must secure authorisation by 2028. This moves beyond voluntary standard-setting into direct regulatory oversight – a recognition that unverified ESG scores have become too embedded in investment decisions to remain unpoliced.

The reasoning is sound. Ratings agencies currently operate in a grey zone: they shape capital allocation without formal accountability, audit requirements, or consistent methodology. A pension fund manager relying on an ESG score to redirect billions has no statutory assurance that the underlying data is sound or that conflicts of interest are managed. The FCA's intervention closes that gap.

Authorisation will require providers to meet governance standards, disclose methodology transparently, and submit to ongoing supervision. This is tighter than existing voluntary codes, which have failed to prevent grade inflation and selective reporting.

But the 2028 timeline is generous – perhaps too much so. Providers have four years to prepare for rules that should have existed five years ago. Smaller or newer ratings shops may exit the UK market rather than absorb compliance costs, which could concentrate power among incumbents. That's not necessarily bad for rigour, but it may narrow the market.

The real test is enforcement. Authorisation means little if the FCA lacks the resource or appetite to revoke it when providers cut corners. Watch whether the regulator publishes complaint data and penalty decisions publicly.

FCA unveils landmark rules for ESG ratings providers

Report This Content