The FCA opens itself up: a board-level review of how it treats whistleblowers

The FCA has asked a newly appointed non-executive director to review its handling of a whistleblower who died in late September, a rare instance of the regulator publicly subjecting its own conduct to independent board scrutiny. In a blog published on 6 October, General Counsel and Chief Risk Officer Stephen Braviner Roman confirmed Lea Paterson will examine the FCA's interactions with Simon Andriesz, with findings and planned responses to be shared early next year (FCA).

Key Executive Takeaways

• The FCA has commissioned an independent board-level review of how it handled a deceased whistleblower, signalling that regulator conduct toward sources is now itself a governance issue.
• Whistleblowing reports to the FCA rose 22% last year, with 42% of the 1,252 closed cases leading to direct action to reduce harm, raising the baseline expectation that firms engage seriously with internal disclosures.
• Senior leaders should expect scrutiny of how their own firms treat vulnerable reporters, including the tone, speed and feedback given, not just whether formal processes exist.

A regulator holding itself to the standard it sets

The decision to assign the review to Paterson, who has only just joined the Board, is itself a stakeholder signal. It separates the inquiry from the executive line that handled Andriesz's case and places it under non-executive oversight. Braviner Roman's framing, that staff should treat whistleblowers "with empathy and professionalism, not simply cases to be managed", is a standard the FCA has long implied for regulated firms under the Consumer Duty and the senior managers regime (FCA). Applying it to its own conduct narrows the gap between regulator and regulated in a way that will be noticed.

The numbers underline why this matters commercially. Whistleblowing reports rose 22% last year, and the FCA provided feedback on all 1,252 closed cases, with 42% leading to direct action and a further 53% informing wider harm prevention work (FCA). That is a materially higher conversion rate from tip to action than many firms assume, and it sits alongside separate survey data showing 79% of firms are now highly satisfied with their FCA relationship, up from 74%, and 76% rate it a highly effective regulator (FCA). A regulator with rising trust and rising intake has more room to act on what it hears.

What boards should take from this

The practical read-across for financial services boards is uncomfortable. If the FCA is prepared to commission an independent review of how it treated a single vulnerable individual, the implicit standard it will apply to firms' own whistleblowing arrangements rises accordingly. Audit and risk committees that have treated whistleblowing as a compliance checkbox, measuring volume and closure times rather than the experience of reporters, are now exposed. The question will shift to whether the person who raised a concern felt heard, informed and protected, not simply whether a case file was opened.

There is also a succession and governance point. Paterson's review is her first substantive assignment as a non-executive director, and the FCA has committed to publishing lessons learned early next year (FCA). Firms should expect those lessons to feed into supervisory conversations, particularly for larger institutions where whistleblowing channels interact with vulnerable customer frameworks and employee relations. The reputational cost of being on the wrong side of that revised expectation will fall on named senior managers, not on process owners.

The wider signal is that regulator legitimacy is now partly a function of how it treats the people who tell it things. Firms that want to retain the trust of their own disclosers, employees, customers and counterparties, should assume the same test applies to them.