Discretionary vs advisory permissions: how the permission boundary shapes IFA PII

~4 min read

Reviewed by Matthew Bartlett, Director · Last reviewed 2026-07-06

The boundary between advisory and discretionary permissions is one of the most consequential distinctions in UK IFA regulation. An adviser with advisory-only permissions can recommend an investment but cannot execute the recommendation without the client's explicit consent for each transaction. An adviser with discretionary managing permissions can manage a client's portfolio on their behalf, making buy-and-sell decisions within an agreed mandate without needing consent for each individual trade. The permission scope changes the nature of the client relationship, the applicable regulatory framework, and the PI risk profile materially. This entry sets out how the permissions differ, where the claim exposure sits differently under each, and what firms considering the permission choice should think about.

Advisory-only permissions

Advisory-only firms hold permission to "advise on investments" under the FCA regulated activities. Each recommendation is delivered as a personal recommendation with a suitability report; the client either accepts the recommendation and executes it (or authorises the firm to execute on their behalf on a transaction-by-transaction basis) or declines. The firm's activities are governed primarily by COBS 9 on suitability and COBS 6 on information for clients.

The PI exposure of an advisory-only firm crystallises at the point of the recommendation. If a recommendation is unsuitable and the client accepts and executes it, the firm is exposed to claim. If the client rejects the recommendation, no claim exposure attaches. The firm's ongoing role is to review the recommended arrangement periodically and issue further recommendations if circumstances change.

Discretionary managing permissions

Discretionary firms hold the additional permission to "manage investments" — to make buy-and-sell decisions on the client's behalf within an agreed mandate. The mandate defines the parameters (asset allocation ranges, permitted investment types, benchmark, risk profile), and the discretionary manager operates within them without needing client consent for each trade. The regulatory framework layer adds COBS 11 on portfolio management, and the reporting requirements are more demanding — periodic statements, benchmark comparisons, and specific disclosures about decision-making authority.

The PI exposure of a discretionary firm is continuous rather than point-in-time. Every decision the manager makes within the mandate is a potential claim event. Poor benchmark-relative performance, mandate breaches, timing of trades relative to market events, and portfolio construction decisions all become claimable. The claim volume potential is therefore higher than advisory-only work, and the aggregate exposure across a book of discretionary clients is materially larger.

The hybrid model

Many IFA firms operate a hybrid model — advisory for some clients, discretionary for others. The discretionary work is often outsourced to a specialist DFM (Discretionary Fund Manager) with the IFA acting as introducer and ongoing adviser. This arrangement transfers the discretionary PI exposure to the DFM but retains the IFA's advisory exposure on the recommendation to use the DFM in the first place.

Insurers underwriting hybrid firms scrutinise the DFM introduction arrangement carefully. The IFA's exposure is not zero — a claim that the DFM recommendation was itself unsuitable falls back on the IFA, not on the DFM. Firms operating a hybrid should ensure the PII policy covers both the pure advisory work and the DFM-introducing element, and should ensure the DFM-introducing element is scoped clearly in the wording.

Permission boundary claims

Three specific claim types recur where the permission boundary is not respected.

First, informal discretionary management — where an advisory-only adviser gets into the habit of executing trades on a client's behalf without explicit consent, on the informal understanding that the client is happy for the adviser to act. This drifts into discretionary territory without the firm having discretionary permissions. Regulatory sanction (unauthorised business) attaches, and the claim exposure on any executed trade the client subsequently complains about is uninsured or contested.

Second, mandate breaches on discretionary business — where a discretionary manager holding a mandate for a particular risk profile drifts into higher-risk allocations without a formal mandate update. The client then argues that the resulting loss falls outside the mandate they agreed and is claimable.

Third, unclear DFM introduction arrangements — where an IFA introduces a client to a DFM but continues to give the client informal advice on portfolio matters, blurring the line between introducer and adviser. Both the IFA's and the DFM's PII may need to respond, with the two insurers arguing about the primary exposure.

PII implications for permission choice

Firms considering applying for discretionary permission should factor three PII implications into the decision.

First, premium impact — discretionary permission adds meaningfully to premium relative to advisory-only work at the same firm size. The extent varies by insurer and book profile.

Second, aggregate limit sizing — discretionary work generates continuous exposure across the book, and firms should size the aggregate limit against a systemic-issue scenario where market events or a single decision-making failure generates multiple simultaneous claims.

Third, evidence expectations — discretionary firms face materially higher evidence expectations from insurers on process, benchmark tracking, mandate documentation, and periodic client engagement. Firms without the infrastructure to support this face harder terms or declines.

Worked example

Illustrative only. A four-adviser firm operating a hybrid model. Two advisers hold advisory-only permissions and operate a pure recommendation-plus-execution model for around 200 clients. Two advisers work with a DFM for portfolios above £250,000, introducing around 60 clients to the DFM and maintaining an ongoing adviser role. Broker action: PII policy placed with cover for both work streams, aggregate limit sized to cover a scenario where a market shock generates multiple simultaneous claims across the discretionary-introduced book, and the DFM introduction wording confirmed clearly in the policy. Documentation memo issued confirming which work stream sits under which policy element.