How to Structure an FCA VoP Application That Avoids Full Re-Authorisation

A Variation of Permission is meant to be a targeted change to your Part 4A permissions. In practice, poorly framed VoPs invite the FCA to reopen threshold conditions, governance, financial resources, and business model viability across the whole firm. The difference between a six-week case and a nine-month case is rarely the substance of the change. It is how you scope, evidence, and present it.

Key Executive Takeaways

• Frame the VoP as an extension of an existing, proven business model rather than a new activity, and anchor every section of Connect to that framing.
• Pre-empt the FCA's threshold condition review by supplying updated financials, governance, and controls evidence in the initial submission, not on request.
• Engage the supervisor before filing to test the framing and surface objections early, so the formal application confirms an already-understood position.

Start with the framing decision

Before you touch Connect, decide what story the VoP tells. The FCA case officer will form a view within the first read of your covering narrative about whether this is a contained variation or a material change in risk profile. If they conclude the latter, expect requests spanning ICAAP, wind-down, SMF map, financial promotions governance, and client money arrangements, even where none are directly affected.

The framing that works: this activity is adjacent to permissions you already hold, uses the same operating model, same control environment, same customer base or a well-understood extension of it, and the same senior managers are accountable. The framing that fails: this is a growth initiative, a new revenue line, or a strategic pivot. Both may be true. Only one belongs in the application.

Build the evidence pack before drafting the narrative

Most firms draft the Connect narrative first and assemble supporting evidence afterwards. Reverse this. The evidence pack determines what you can credibly claim.

At minimum, prepare: updated regulatory business plan showing the new activity integrated into existing forecasts, not bolted on; a threshold conditions self-assessment covering all five conditions with specific reference to the variation; updated financial projections including capital and liquidity impact under base and stressed cases; a governance map showing which SMF holders are accountable for the new activity and evidence they have the capacity and competence; a controls matrix mapping the new activity to existing systems, with gaps identified and remediation timed; and a customer journey or product governance assessment where retail is involved.

If any of these documents do not yet exist in a form you would show a supervisor, the VoP is premature.

Pre-application engagement is not optional

File a VoP cold and you are gambling. Request a pre-application meeting with your supervisor, or with the authorisations team if you are flexible portfolio. Present the framing, the scope, and the evidence you intend to submit. Ask directly: is there anything about this variation that would cause you to look beyond the specific permission change?

What you are testing is whether the FCA sees the variation as you do. If they signal concern about business model sustainability, governance capacity, or consumer outcomes, address those concerns before filing. A VoP application withdrawn and refiled cleanly is better than one that drags through minded-to-refuse correspondence.

What most firms get wrong

Three recurring errors: first, understating the change to appear low-risk, which the FCA detects and treats as a credibility issue; second, submitting a Connect narrative that reads like a board paper, full of strategic ambition and market opportunity, which prompts a business model review; third, failing to update the SMF responsibilities map, so the case officer cannot see who is accountable for the new activity.

Good looks like: a factual, contained narrative; evidence that anticipates every reasonable question; SMF accountability documented before filing; and a supervisor who has already indicated the framing is acceptable.

The decision point

Before filing, ask whether you can defend the application under sustained challenge without opening documents you would rather not share. If the answer is no, the issue is not the VoP. It is that the firm is not yet ready for the activity. Fix that first, then file.

Frequently Asked Questions

How long should a well-structured VoP take?

Contained variations with strong pre-engagement typically resolve in eight to twelve weeks. Complex or contested cases extend to six months or more, usually because the FCA has expanded scope beyond the original permission change.

Can we file a VoP while under active supervisory scrutiny?

Technically yes, but expect the open issues to be pulled into the review. If a Section 166, MRA, or Dear CEO response is live, resolve or stabilise it before filing.

Should the board approve the VoP application?

Yes, and the minutes should reflect specific challenge on the framing, the risk assessment, and the SMF accountabilities. The FCA may ask.

What triggers a full business model review?

Material changes to customer type, distribution channel, revenue model, or risk profile. Also: inconsistencies between the VoP narrative and public statements, investor materials, or prior regulatory returns.

Can we withdraw a VoP if the review expands?

Yes, and sometimes you should. Withdrawal is not held against you if handled cleanly. Continuing a VoP that has become a de facto re-authorisation rarely ends well.