\u201cIf you\u2019re the [money laundering reporting officer] of Mega Bank, are you really responsible for all the things that sit under that role?\u201d said Taylor, who now runs consultancy Ibex Compliance. \u201cIt\u2019s not realistic.\u201d<\/p>\n
His comments come as the Financial Conduct Authority and Prudential Regulation Authority today set out initial reforms to the Senior Managers and Certification Regime, as part of a broader push by government and regulators to support UK growth.<\/p>\n
The changes focus on streamlining the accountability rules and reducing the regulatory burden they place on firms. But the regulators said they also plan \u201cto consult on wider changes\u201d to the regime later this year.<\/p>\n
For Taylor, \u201cthere\u2019s work to do\u201d to make the accountability regime as effective as possible.<\/p>\n
While he says the framework \u201cfocuses the mind of the office holder\u201d, he complains that it also encourages overly \u201cbrittle\u201d decision-making and misses \u201cthe nuance\u201d needed to facilitate lasting cultural change within City businesses.<\/p>\n
In the absence of more fundamental reform, he argues that smaller firms should increase pay for compliance professionals subject to the rules.<\/p>\n
\u201cIf you are working for a hedge fund and you\u2019re being paid \u00a390,000, you\u2019re not being paid enough to take on that responsibility,\u201d he said.<\/p>\n
Taylor also warned that banks are still failing to meet basic data management requirements, despite decades of regulatory tightening.<\/p>\n
\u201cFirms still struggle with very basic things. Lots of firms can\u2019t get their data right,\u201d he said, adding that he has found examples of inconsistent or missing client data in businesses across the finance sector.<\/p>\n
\u201cIf you don\u2019t record the client name accurately, or at all, then you really are in trouble,\u201d he said. \u201cThat\u2019s why you get sanctions breaches, financial crime and client problems.\u201d<\/p>\n
To be sure, regulators are alive to this issue. In 2025, the FCA warned that weak data governance and record-keeping can leave firms exposed to unresolved compliance breaches.<\/p>\n
Even so, Taylor said firms\u2019 data quality was not getting the attention needed to fix the issue. \u201cIt needs elbow grease,\u201d he said.<\/p>\n
Inadequate resourcing and a lack of diversity in firms\u2019 compliance teams are contributing to weaknesses in the function, he added.<\/p>\n
\u201cCompliance is hard,\u201d he said. \u201cYou should always recruit people who are better than you.\u201d<\/p>\n
This is an abridged version of Lucy McNulty\u2019s Following the Rules podcast.<\/p>\n
Your career spans four decades. What is the industry still not getting right?<\/p>\n
Mark: Firms still struggle with very basic things. Lots of firms can\u2019t get their data right. I go into a firm and I can find missing data around the client.<\/p>\n
If you don\u2019t record the client name accurately, or at all, then you really are in trouble running the business.<\/p>\n
Any firm that has merged with multiple parties is going to have a problem. Any firm with legacy systems is going to have a problem.<\/p>\n
That\u2019s why you get sanctions breaches, financial crime and client problems, because if you\u2019ve got multiple different ways of collecting data, or you\u2019ve merged different systems, then you\u2019ll have a problem when you\u2019re doing any kind of screening.<\/p>\n
There are technologies that can improve that. But if you\u2019ve got rubbish data and you don\u2019t correct it, then it\u2019s a problem. And I\u2019ve encountered that problem in all areas of business and the market.<\/p>\n
What is the solution?<\/p>\n
Mark: It\u2019s dull. That\u2019s the trouble. So it doesn\u2019t get the focus it should.<\/p>\n
Solving a historical data problem requires a huge amount of work.<\/p>\n
You need to have good controls to make sure that what goes in is good, continued maintenance and constant periodic review. It needs elbow grease.<\/p>\n
So it\u2019s not where people start. It\u2019s often where you end up, though, when things go wrong.<\/p>\n
What regulatory shifts concern firms?<\/p>\n
Mark: The governance and use of AI is problematic. I use AI a lot. It empowers you. Also, I\u2019m interested in crypto.<\/p>\n
The speed with which these things are happening means it is very hard for regulators to keep up. The job of regulators is passive. You\u2019re sitting outside the business. It\u2019s a real skill to keep up to date. If you\u2019re not constantly interacting with people, you\u2019re going to slip behind. That is the problem.<\/p>\n
Regulators might miss opportunities because of the speed of change.<\/p>\n
To avoid that, you need to engage with the firms and the technologies. The FCA is open to talking about technology. But any regulator can easily slip behind.<\/p>\n
You have to engage with these developments, particularly if you are a government, a regulator or a business leader. And some people might be missing a trick now.<\/p>\n
What aspects of the financial rule books in the EU and UK would you like to see amended or simplified?<\/p>\n
Mark: I\u2019ve always worried, as a holder of senior management roles, about making individuals responsible for things. I can see why the public like it. In a lot of cases, it\u2019s not realistic.<\/p>\n
The senior management regime focuses the mind. But if you\u2019re the MLRO of Mega Bank, are you really responsible for all the things that sit under that role?<\/p>\n
Accountability and governance need to be looked at. There\u2019s a lot of bureaucracy being piled on these businesses. And there are people who need to be protected. So there\u2019s work to do.<\/p>\n
Challenging something won\u2019t work if you are being brittle. The senior management regime can make you brittle and the rules miss some of the nuance.<\/p>\n
The other way of solving the problem is to pay MLROs and compliance staff more. If you are working for a hedge fund and you\u2019re being paid \u00a390,000, you\u2019re not being paid enough to take on that responsibility.<\/p>\n
They should get rid of the senior management role for compliance and the MLRO. The CEO and management should bear that because, when you are making a difficult decision, that tension isn\u2019t the compliance officer\u2019s tension, it\u2019s tension put on them by the business.<\/p>\n
What does good judgment look like in compliance?<\/p>\n
Mark: Make sure that everybody can talk to the person next to them, so there is good information sharing.<\/p>\n
When you need to go against the commercial grain, you have to make sure that you\u2019ve got all the information you need.<\/p>\n
Goldman had a trading system that used to vibrate when anything in the market was off-key. You need that with compliance. If your antenna says something is wrong, you need an environment where everybody is able to talk about any concerns they have.\u00a0<\/p>\n
Sometimes it will be stupid or wrong. Regardless, the person who is discussing the completion of the KYC documentation needs to know that, when they call you up with a problem, you\u2019ll deal with it, and your deputy needs to be empowered to do that too. Every conversation is important.<\/p>\n
And you need a diverse team because you need to have multiple ways of thinking on the team.<\/p>\n
All teams have some aspects of their culture that could be improved. We need to be able to call that out so that your protection is coming from all members of your team.<\/p>\n
What makes a great compliance hire?<\/p>\n
Mark: Compliance is hard because you\u2019re slightly away from the guts of the business. You need to understand how systems work. That\u2019s a huge investment of time.<\/p>\n
Most people can\u2019t answer the third question. But if you\u2019re in compliance, you need to be able to ask the third, fourth and fifth questions. That is hard.<\/p>\n
I\u2019ve worked in financial crime compliance for a long time. If someone comes back with a transaction from an unexpected jurisdiction, you need to find out how that came about. Sometimes compliance departments aren\u2019t asking those questions hard enough.<\/p>\n
Are compliance teams inadequately resourced?<\/p>\n
Mark: They are inadequately resourced because they don\u2019t have enough diverse thinking or depth of understanding, and there is often a lack of management skills. Technical people are not given enough help to be good managers, and that makes them protective of their jobs. You should always recruit people who are better than you.<\/p>\n
Mark Taylor<\/p>\n
![\"\"\/](\"https:\/\/www.europesays.com\/britain\/wp-content\/uploads\/2026\/04\/193cb385-18d2-41fe-9818-c23a4c41f2e6.jpg\")
<\/p>\n
Title: Founder\/partner of a two-partner firm<\/p>\n
Which line of defence do you typically interact with, and which division? Second<\/p>\n
Something most people wouldn\u2019t know about you: I have sung on stage with Boney M.<\/p>\n","protected":false},"excerpt":{"rendered":"UK regulators should scrap individual accountability for compliance chiefs, a former Goldman Sachs executive has said, warning that…\n","protected":false},"author":2,"featured_media":19763,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":"","_share_on_mastodon":"0"},"categories":[4],"tags":[9120,9119,5,6],"class_list":["post-19762","post","type-post","status-publish","format-standard","has-post-thumbnail","category-uk","tag-crime-conduct","tag-operations","tag-uk","tag-united-kingdom"],"share_on_mastodon":{"url":"https:\/\/pubeurope.com\/@UnitedKingdom\/116449636824024869","error":""},"_links":{"self":[{"href":"https:\/\/www.europesays.com\/britain\/wp-json\/wp\/v2\/posts\/19762","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.europesays.com\/britain\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.europesays.com\/britain\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/britain\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/britain\/wp-json\/wp\/v2\/comments?post=19762"}],"version-history":[{"count":0,"href":"https:\/\/www.europesays.com\/britain\/wp-json\/wp\/v2\/posts\/19762\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/britain\/wp-json\/wp\/v2\/media\/19763"}],"wp:attachment":[{"href":"https:\/\/www.europesays.com\/britain\/wp-json\/wp\/v2\/media?parent=19762"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.europesays.com\/britain\/wp-json\/wp\/v2\/categories?post=19762"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.europesays.com\/britain\/wp-json\/wp\/v2\/tags?post=19762"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}