How to Structure a Variation of Permission Application That Holds Up
A practical guide to preparing a VoP application that gives the FCA what it needs to assess the request properly, first time. Readers will finish with a clear view of how to sequence the work, what to evidence, and where applications typically stall.
A Variation of Permission application is not a form-filling exercise. It is a case made to a regulator that your firm is ready, resourced, and governed to carry on new or expanded regulated activity. Most delays and information requests are not caused by FCA pedantry. They are caused by applications that assert readiness without demonstrating it, or that quietly expose gaps the case officer is then obliged to probe.
Start with the business case, not the permission
The application should open from the firm's strategic logic: what activity, for which customers, through what channels, at what scale, and why now. Case officers read many applications where the regulatory permission is clear but the commercial rationale is vague. That gap invites questions about whether the firm has actually thought the proposition through.
Be specific about volumes, revenues, margins, distribution, and the customer segments involved. If the activity is adjacent to existing business, explain the relationship. If it is genuinely new, explain the capability build.
Match the ask to demonstrable readiness
The FCA's core question is whether the firm meets the Threshold Conditions for the varied permission on day one of approval. That means:
- Governance arrangements that already reflect the new activity, including board or ExCo oversight, MI, and risk appetite.
- SMF accountability clearly allocated, with updated Statements of Responsibilities and, where relevant, a new SMF application running in parallel.
- Policies, procedures, and systems in place or in a credible, dated implementation plan with named owners.
- Financial resources sized to the expanded activity, with ICARA, liquidity, and capital implications worked through.
- Operational resilience, financial crime, and consumer duty considerations explicitly addressed for the new activity, not assumed to be covered by existing frameworks.
Applications stall when the regulatory pack asserts these are in hand but the supporting documents show policies dated before the new activity was contemplated, or an org chart with no owner for the new product line.
Get the financials right
Poor financial projections are one of the most common triggers for FCA follow-up. Provide a base case, a downside, and a stress scenario. Show the assumptions. Reconcile projections to the ICARA and to any wind-down analysis. If the new activity changes the firm's prudential category or threshold conditions capital calculation, say so and show the maths.
Address consumer outcomes directly
For retail-facing variations, the FCA will expect to see target market analysis, fair value assessment, foreseeable harm analysis, and the MI the firm will use to monitor outcomes. Do not leave this to a generic Consumer Duty reference. Tie it to the specific product or service.
Anticipate the obvious questions
Before submission, have someone independent of the drafting team read the full pack cold and list every question they would ask. Common ones include: who signs off pricing, how complaints will be handled for the new activity, how appointed representatives or introducers will be overseen, what the outsourcing arrangements are, and how the firm will know if the activity is not working as intended. If the answers are not in the pack, add them.
Sequence and engagement
For material variations, a pre-application meeting with the FCA is usually worth requesting. Use it to test the shape of the case, not to seek permission in principle. Submit a complete pack: partial submissions extend the determination clock and signal that the firm is not ready.
Respond to information requests quickly, completely, and without defensiveness. If the answer exposes a gap, acknowledge it and set out the remediation.
The decision point
Before you submit, ask one question honestly: if the FCA approved this tomorrow, could the firm carry on the new activity safely and compliantly from day one? If the answer is anything other than yes, fix that first. The application will be stronger, and the determination faster, because of it.
Frequently Asked Questions
How long should we expect a VoP determination to take?
Statutory deadlines are six months for complete applications and twelve months for incomplete ones. In practice, complex variations routinely take longer where the FCA raises substantive questions. Plan on nine to twelve months for anything material and do not commit externally to earlier dates.
Should we engage with the FCA before submitting?
For material changes to the business model, yes. A pre-application discussion helps the case team understand context and flags any structural concerns before you have committed to a particular framing. For narrow technical variations, the form and supporting pack are usually sufficient.
What triggers the most information requests?
Missing or inconsistent financial projections, unclear SMF accountability, vague descriptions of systems and controls, and weak consumer outcomes analysis. Inconsistencies between the application form, the regulatory business plan, and supporting policies are also common triggers.
Can we start the new activity while the application is pending?
No. The permission must be granted before the activity begins. Firms that begin preparing commercial arrangements prematurely often create governance and disclosure issues that complicate the application itself.
What if our circumstances change mid-application?
Tell the FCA promptly. Material changes to the business case, financials, key personnel, or control environment must be disclosed. Silence on a known change, discovered later, damages credibility and extends the process.
Frequently asked questions
How long should we expect a VoP determination to take?
Statutory deadlines are six months for complete applications and twelve months for incomplete ones. In practice, complex variations routinely take longer where the FCA raises substantive questions. Plan on nine to twelve months for anything material and do not commit externally to earlier dates.
Should we engage with the FCA before submitting?
For material changes to the business model, yes. A pre-application discussion helps the case team understand context and flags any structural concerns before you have committed to a particular framing. For narrow technical variations, the form and supporting pack are usually sufficient.
What triggers the most information requests?
Missing or inconsistent financial projections, unclear SMF accountability, vague descriptions of systems and controls, and weak consumer outcomes analysis. Inconsistencies between the application form, the regulatory business plan, and supporting policies are also common triggers.
Can we start the new activity while the application is pending?
No. The permission must be granted before the activity begins. Firms that begin preparing commercial arrangements prematurely often create governance and disclosure issues that complicate the application itself.
What if our circumstances change mid-application?
Tell the FCA promptly. Material changes to the business case, financials, key personnel, or control environment must be disclosed. Silence on a known change, discovered later, damages credibility and extends the process.
Related guides
How to Structure a Skilled Person Review Response That Minimises Supervisory Escalation
This guide sets out how to respond to a Section 166 review in a way that demonstrates genuine engagement, accurate self-assessment, and credible remediation. After reading, you will know how to sequence your response, manage the skilled person relationship, and present findings to your regulator in a way that supports supervisory confidence.
How to Structure a Wind-Down Plan That Supports Solvent Exit
A practical guide to building a Wind-Down Plan that meets the FCA's expectations under WDPG and genuinely supports a solvent exit. After reading, you will know what the FCA tests for, where firms commonly fall short, and how to sequence the work so your plan holds up under supervisory review.
How to Structure an SMCR Statement of Responsibilities That Withstands FCA Scrutiny
A practical guide to drafting Statements of Responsibilities that give the FCA a clear, defensible picture of individual accountability. Readers will finish with a working method for identifying gaps, allocating Prescribed Responsibilities cleanly, and keeping SoRs aligned with how the firm actually runs.
How to Structure a Section 165 Information Request Response
A practical guide for senior leaders on responding to FCA or PRA Section 165 information requests in a way that is accurate, complete, and legally sound. After reading, you will know how to coordinate the response, protect legitimate privilege, and reduce the likelihood of avoidable follow-up.
How to Structure an RRP Data Submission That Meets Bank of England Expectations
A practical guide to assembling a Recovery and Resolution Plan data submission that withstands Bank of England review under the RRD framework. Readers will finish with a clearer view of sequencing, data lineage, and the judgement calls that separate credible submissions from those that trigger follow-up challenge.
Where a specific question needs an outside answer, quickly
Polar Insight's Expert Network connects leadership teams with practitioners who can speak to a precise regulatory, commercial, or stakeholder question before a decision is finalised.
Explore Expert Network