Compliance officer

Spec sheet // Glossary // COMPLIANCE OFFICERRev 2026.10
Glossary / C / Compliance officer
Glossary · Regulatory change

Compliance officer

Also called chief compliance officer, head of compliance, SMF16

Definition

A compliance officer is the person responsible for making sure a regulated firm follows the laws and rules that apply to it. The role advises the business, sets policies, monitors conduct and reports breaches to senior management and regulators. In the UK, the senior compliance role is a named regulatory function, SMF16.

COMPLIANCE OFFICERPOLICYADVICEMONITORING
Fig. 1 · Compliance officer
SM&CR, SMF16 · MLR 2017, regulation 21 · MiFID II Delegated Regulation, Article 22
Key rulesSM&CR, SMF16 · MLR 2017, regulation 21 · MiFID II Delegated Regulation, Article 22 · Rule 206(4)-7
Applies toBanks, building societies and PRA investment firms from 2016; FCA solo-regulated firms from 9 December 2019
RegionsUK · EU · US
01

How it works

The compliance officer runs the second line of defence. Day to day this means interpreting new rules, approving financial promotions, training staff, running the monitoring plan and handling regulator contact. Compliance must be independent of the business it oversees, with direct access to the board. In smaller firms one person may also act as MLRO, the officer responsible for anti-money laundering.

The role carries personal regulatory accountability. Under the UK Senior Managers and Certification Regime, the SMF16 holder answers for oversight of compliance with FCA rules, and the SMF17 holder for anti-money laundering. In the US, investment advisers must name a chief compliance officer, and broker-dealer chief executives certify compliance processes each year. Regulators can fine or ban individuals.

Step 1Track rulesIdentify new and changing regulation affecting the firm.
Step 2Set policyWrite policies and procedures that turn rules into practice.
Step 3Advise and trainAdvise the business and train staff on obligations.
Step 4MonitorTest compliance through a risk-based monitoring plan.
Step 5ReportReport breaches and findings to the board and regulators.
02

The rules

UK · 7 March 2016SM&CR, SMF16FCA Senior Managers and Certification Regime, SMF16 Compliance Oversight function

The person overseeing the compliance function must be approved by the FCA as a senior manager and is accountable for that oversight.

Banks, building societies and PRA investment firms from 2016; FCA solo-regulated firms from 9 December 2019
UK · 26 June 2017MLR 2017, regulation 21Money Laundering Regulations 2017, regulation 21

Where appropriate, firms must appoint a board-level officer responsible for compliance with the regulations and a nominated officer to receive suspicious activity disclosures.

Relevant persons under the Money Laundering Regulations
EU · 3 January 2018MiFID II Delegated Regulation, Article 22Commission Delegated Regulation (EU) 2017/565, Article 22

Firms must appoint a compliance officer responsible for an independent compliance function with the authority, resources and expertise it needs.

Investment firms and banks providing investment services
US · 5 October 2004Rule 206(4)-7Investment Advisers Act of 1940, Rule 206(4)-7

Advisers must designate a chief compliance officer to administer written compliance policies and procedures.

SEC-registered investment advisers
03

Common questions

What is SMF16?

SMF16 is the Compliance Oversight senior management function under the UK Senior Managers and Certification Regime. The holder is responsible for overseeing the firm's compliance function and must be approved by the regulator before taking the role.

Is the compliance officer the same as the MLRO?

Not always. The MLRO, or SMF17 in the UK, is responsible for anti-money laundering systems and suspicious activity reporting. The compliance officer covers wider conduct and regulatory rules. Smaller firms often combine both roles in one person.

Who does a compliance officer report to?

Compliance officers usually report to the chief executive or a board committee, with direct access to the board and audit or risk committee. Rules require the function to be independent of the business areas it monitors.

Can a compliance officer be personally fined?

Yes. Regulators can sanction individuals who fail in their duties. In the UK, senior managers including SMF16 and SMF17 holders can be fined or banned if they did not take reasonable steps to prevent breaches in their areas.