Personal accountability · PII
PI insurance for UK compliance officers, MLROs and SMF-approved individuals
Reviewed by Matthew Bartlett, Director, Apex Insurance Brokers Limited · Published 14 July 2026
Compliance officers, MLROs (Money Laundering Reporting Officers), and other SMF-approved individuals carry personal accountability under the FCA's SMCR. This page maps how PI insurance responds to compliance-personal-liability claims and what cover typically looks like.
Who this applies to
- SMF16 — Compliance Oversight. Named individual with overall compliance responsibility.
- SMF17 — MLRO. Money Laundering Reporting Officer with statutory duties.
- Other SMF-approved individuals including SMF3 (Executive Director), SMF15 (Head of Risk).
- Non-SMCR compliance professionals in firms outside SMCR scope but subject to industry standards.
- External compliance consultants providing regulatory advice.
The dual PI/D&O position
- Firm-level PI. Covers the compliance work of the firm's compliance function.
- Firm-level D&O. Covers the SMF-approved individual's statutory duty exposure.
- Individual cover. Where firm coverage has gaps or is inadequate, individual PI or D&O may be needed.
- Portfolio-holder considerations. Compliance officers holding SMF roles at multiple firms face multi-firm exposure.
SMCR personal accountability
- Statutory duty of responsibility. SMF-approved individuals must take reasonable steps to prevent regulatory breach in their area.
- Personal FCA enforcement. Direct FCA action against individuals (fines, bans, public statements) possible for breach.
- Fitness-and-propriety. Individual assessments affect approved-status.
- Certification regime for other significant employees.
- Personal reputational exposure beyond immediate financial cost.
Common claim triggers
- Regulatory investigation of the individual. FCA thematic review, targeted supervisory action, enforcement inquiry.
- Reg-relevant complaint upheld. Client complaint under DISP escalates to FOS or FCA action.
- MLRO reporting failure. Suspicious activity reporting duty breach.
- Financial promotion breach. Compliance officer approved marketing material later found non-compliant.
- Systemic control failure. Multiple related failures identified at firm level, compliance officer implicated.
- Conflict-of-interest failure. Undisclosed personal conflict affecting compliance decision.
Cover-sizing for compliance individuals
- Firm-level D&O typically £5m-£25m depending on firm scale.
- Individual supplemental cover, if needed, typically £1m-£5m.
- External compliance consultants £1m-£5m PI depending on client mix.
- SMF16 or SMF17 for large firms may want personal Side A cover.
- MLRO-specific claims can generate high defence costs.
Getting cover in place
- Confirm firm's D&O covers your specific role at approval.
- Check whether personal deed of indemnity is in place under Companies Act 2006 s.234.
- For portfolio SMF-holders or external consultants, personal cover essential.
- Retro-date and run-off provisions matter for continuing personal exposure.
- Discuss with specialist broker — individual SMF PI is a specialist market.
Frequently asked
Do compliance officers need personal PI insurance?
For most SMF-approved individuals in FCA firms, firm-level D&O covers the statutory duty exposure. Personal supplemental cover is prudent where firm cover is inadequate or where the individual holds multiple SMF roles.
What is the difference between SMF16 and SMF17?
SMF16 is Compliance Oversight — overall compliance responsibility. SMF17 is Money Laundering Reporting Officer — specific AML duties. Same individual can hold both roles; some firms have separate individuals.
Am I personally liable if my firm has a compliance failure?
Under SMCR, yes potentially. SMF-approved individuals have statutory duty of responsibility for their area. FCA can pursue individuals for failure to take reasonable steps to prevent breach.
Does firm D&O cover my personal SMF liability?
Typically yes for civil liability. Statutory penalties (fines, bans) and criminal exposure not covered. Some D&O wordings restrict cover for wilful misconduct. Read the wording.
Do MLROs face specific claim exposure?
Yes. Statutory duty to report suspicious activity, plus responsibility for firm AML controls. Failures generate direct FCA enforcement and potentially criminal exposure. D&O covers civil defence; PI-adjacent activity for external consulting MLROs.
What if I'm a consultant MLRO for multiple firms?
Portfolio consultant MLRO faces multi-firm exposure. Each firm's D&O covers your role there; personal PI cover provides continuity across the portfolio. Discuss with specialist broker.
Does personal Side A cover apply to compliance officers?
Yes for material exposure. Side A responds when firm cover fails or firm cannot indemnify (typically insolvency). Prudent for SMF16 or SMF17 at higher-risk firms.
How does the certification regime affect PI for other employees?
Certification-regime individuals (senior employees below SMF) face fitness-and-propriety assessments and can be pursued by FCA for specific failures. Firm-level PI/D&O typically covers civil defence. Individual personal exposure remains.