UK rules for finance creators in 2027, kept as five separate questions

Finance content aimed at England can engage several rule sets at once. The first question is not whether a post has a disclosure. It is what the communication does, who pays for it, which audience sees it, what personal information is used and which contract allocates the work.

This guide was checked on 5 September 2026 for planning in 2027. It offers general information, not a legal opinion, personal financial advice or a compliance guarantee.

UK-wide financial, advertising, consumer and data rules are distinguished from contract points that may depend on the law of England and Wales. Qualified reviewers must assess the facts and recheck every source before publication.

What to take away

Keep five questions separate

The same article may require more than one answer:

General financial information is not automatically a financial promotion. Editorial content is not automatically advertising. Equally, calling something education or commentary does not decide its status. Work from the words, images, commercial facts, audience and call to action.

Identify the financial-promotion perimeter

Section 21 of the Financial Services and Markets Act 2000 concerns certain invitations or inducements communicated in the course of business. The FCA's approver guidance describes the principal routes by which a promotion may be communicated: by an authorised person, with approval from a person lawfully able to approve it, or under an applicable exemption.

The statutory analysis can be technical. Record the legal entity, controlled product or activity, intended audience, jurisdiction, commercial purpose and full journey. Do not assume that a partner's FCA authorisation covers every activity or gives it permission to approve another person's material.

Use the FCA's process to check firms and individuals. Firm Checker is designed for common consumer checks, while the Financial Services Register provides fuller regulatory records. Match the contact details and permissions to the proposed work. Authorisation is not an endorsement of a product, person or campaign.

FCA FG24/1 explains the regulator's expectations for firms and others, including unauthorised influencers and affiliates, using social media. It says relevant rules are technology neutral and the communication should give a balanced view of benefits and risks. A click to another page does not automatically fix an unbalanced post.

FG24/1 also explains that its guidance does not create new obligations. The record should name the qualified reviewer, the version reviewed, the route relied upon and any approval expiry or monitoring condition. Reopen the analysis after a new claim, image, audience, call to action or channel adaptation.

Decide whether the material is advertising

The CAP Code is the UK non-broadcast advertising code. Its published scope includes some paid, reciprocal and direct-marketing material while excluding other content. The Code operates alongside law and professional advice may be needed about its application. The Code does not turn every editorial mention into an advertisement.

CAP Code Section 2 requires marketing communications to be obviously identifiable and addresses advertorials and commercial intent. A disclosure should reach the audience before or when it meets the endorsement. A generic profile statement may not explain the relationship behind a single post.

The CMA's guidance for content creators covers incentives such as payment, commission, free or discounted items and own-brand promotion. The CMA's separate brand guidance describes responsibilities when businesses commission and monitor creator material.

Record the commercial connection even when there is no cash. Agree who labels, checks and corrects the live item. Keep the ad-recognition decision separate from FCA approval: an obvious advertisement can still be an unlawful financial promotion, and a lawful financial promotion may still need clear ad identification.

Check claims against the right standards

Evidence must fit the proposition. A provider page can establish its current terms but does not independently prove that its product is best. Historical performance cannot support a guaranteed future outcome. A reader testimonial cannot replace a representative method or primary product record.

CAP Code Section 14 covers non-broadcast financial marketing within its remit. It addresses audience understanding, contract limitations, charges, withdrawal terms, the basis of projections, investment variability and past performance. Product-specific FCA Handbook rules may impose further requirements.

For consumer-facing sales and marketing, the CMA's unfair commercial practices guidance explains the protections in the Digital Markets, Competition and Consumers Act 2024. The provisions described apply to practices from 6 April 2025, and the guidance states that it is not a substitute for the law or a definitive interpretation.

Maintain a claim ledger with the exact wording, first-party source, geography, period, calculation, owner and recheck trigger. Put observed evidence, forecasts and illustrative scenarios in separate fields. State the basis immediately when a projection is used in marketing. Never invent a return, saving, approval, testimonial or test.

Protect audience and lead data

Financial enquiries can contain sensitive and identifying details even when a form did not request them. Map newsletter addresses, enquiries, survey responses, analytics identifiers, competition entries and partner leads. For each use, record the purpose, data, source, lawful basis, recipients, storage, access, retention and deletion.

The ICO's April 2026 lawful-basis guidance says organisations must choose and document an appropriate basis before processing. The proper basis depends on purpose and relationship. Consent is not automatically the answer, and a basis should not be swapped later without good reason.

The collection point needs appropriate privacy information. ICO guidance on the right to be informed covers identity, purposes, basis, recipients and transfers. An advertising label explains a commercial relationship; it does not explain how personal information will be used.

Collect only what the purpose requires. The ICO's data-minimisation page describes personal information as adequate, relevant and limited to what is necessary. Do not request balances, account identifiers or health details merely because they might be useful later.

Email, analytics, research and fulfilment providers need role analysis and suitable terms. The ICO's detailed controller and processor contract guidance notes that it is under review after changes made by the Data (Use and Access) Act. Recheck the page and obtain current privacy advice before contracting.

Direct electronic marketing has another layer. The ICO's electronic-mail guidance explains PECR in detail and was updated in April 2026. Confirm the subscriber type, consent or other route, sender identity and objection process. Do not reuse research or support contacts for promotion without analysing the new purpose.

Account for the 2025 data-law changes

The Data (Use and Access) Act 2025 changed parts of UK data-protection and privacy law. It did not replace the UK GDPR, Data Protection Act 2018 or PECR. The ICO's DUAA overview for organisations was updated on 19 June 2026 and links to current subject guidance.

Do not copy a pre-2026 checklist and assume it remains complete. Review lawful-basis records, privacy information, direct marketing, cookies, rights handling and complaints against the current ICO pages that match the activity. The overview also describes new organisational complaint requirements. Assign a person to acknowledge, investigate and answer privacy complaints within the applicable process.

Put compliance duties into the contract

A creator agreement cannot transfer away statutory responsibility, but it can make the working process clearer. Name the parties and signatories, governing law, status, deliverables, evidence, review stages, permitted claims, approval route, disclosures, personal-data roles, intellectual-property rights, fees, cancellation, correction and removal duties.

Status should match reality. Acas guidance for Great Britain says employment status depends on the contract, what was agreed and how the relationship works in practice. Tax status is a separate question. A clause calling someone self-employed does not finish the analysis.

Copyright needs express treatment. The Intellectual Property Office says the creator is usually the first owner of copyright in commissioned literary, dramatic, musical or artistic work unless the parties agree otherwise in writing. Specify whether the deal grants a licence or assignment, along with media, duration, territory, editing, amplification and archive use.

If either party processes personal information for the other, record the instructions, security, subprocessors, international transfers, rights support, incidents and deletion or return. Do not describe every supplier as a processor without analysing who determines purposes and means.

State invoices, payment dates, expenses, non-cash benefits, cancellation fees and the effect of termination on published promotions. GOV.UK explains the statutory route for late commercial payments, while the actual entitlement depends on the transaction and agreed terms. Obtain advice for the specific deal and the chosen jurisdiction.

Contract law can differ within the UK. For a contract governed by England and Wales law, obtain advice from a solicitor qualified for that jurisdiction.

Run one evidence-led publication gate

Before release, the editor should be able to answer these questions from the file:

The available decisions are publish, revise, obtain further advice or stop. A missing answer is not approval. No checklist can guarantee compliance across all five areas. Keep the item on editorial hold until the writer, fact-checker and relevant qualified reviewers are named and their work is recorded.

Recheck for 2027 publication

This article does not predict that the rules will remain unchanged through 2027. On publication day, reopen the FCA, ASA, CMA and ICO records, confirm the legislation in force and check the exact firm's current permissions. Review contracts and advice for the applicable jurisdiction.

Monitor regulator updates, approval changes, product amendments, complaints, corrections and privacy incidents after release. Remove or pause material when its evidence or legal route can no longer be demonstrated. Compliance is continuing work, not a badge attached to a creator profile.

Before you act

Common questions

Is general financial information always a financial promotion?

No. General financial information is not automatically a financial promotion, and editorial content is not automatically advertising. Calling something education or commentary does not decide its status. Work from the words, images, commercial facts, audience and call to action to determine whether it falls within the UK statutory restriction.

What should I record when analysing a financial promotion?

Record the legal entity, controlled product or activity, intended audience, jurisdiction, commercial purpose and full journey. Also name the qualified reviewer, the version reviewed, the route relied upon and any approval expiry or monitoring condition. Reopen the analysis after a new claim, image, audience, call to action or channel adaptation.

How should I handle personal data from financial enquiries?

Map newsletter addresses, enquiries, survey responses, analytics identifiers, competition entries and partner leads. For each use, record the purpose, data, source, lawful basis, recipients, storage, access, retention and deletion. Choose and document an appropriate lawful basis before processing, and collect only what the purpose requires.