Governance, Risk & Compliance

The Consumer Duty Board Report: What Your Governing Body Must Review, Approve and Sign Off

What the annual Consumer Duty board report must contain, what the governing body must approve, and the FCA's good and poor practice from its review.

7 min read Published 17 Jul 2026
The Consumer Duty Board Report: What Your Governing Body Must Review, Approve and Sign Off

The Consumer Duty places a specific, recurring obligation on the people at the top of your firm. At least once a year the governing body must sit down, read an assessment of whether the firm is delivering good outcomes for retail customers, challenge it, and formally approve it. That document is the Consumer Duty board report, and it is one of the clearest tests of whether the Duty is genuinely embedded or simply written down.

The requirement is not guidance a firm can take or leave. It sits in the FCA Handbook at PRIN 2A.8, supported by the FCA's finalised guidance FG22/5. The first reports were due by 31 July 2024, and the FCA has since reviewed a sample of 180 of them and published detailed good and poor practice. Firms now have a clear picture of what a strong report looks like and where boards commonly fall short.

This article sets out exactly what the rules require, what the report must contain across the four outcomes and governance, how to produce it, and what the FCA praised and criticised. It is written for compliance leads, company secretaries and non-executive directors who own this process and want to get the next edition right.

The rule: what PRIN 2A.8 actually requires

The obligation is set out in PRIN 2A.8 of the FCA Handbook. Under PRIN 2A.8.3R, a firm must prepare a report for its governing body setting out the results of its monitoring under PRIN 2A.9 and any actions required as a result of that monitoring. Monitoring is not optional context around the report; it is the substance the report exists to summarise.

PRIN 2A.8.4R then places three duties on the governing body itself, to be carried out at least annually. The body must review and approve the firm's report on the outcomes being received by retail customers, confirm whether it is satisfied that the firm is complying with its obligations under Principle 12 and PRIN 2A, and assess whether the firm's future business strategy is consistent with those same obligations.

Approval is not a formality. PRIN 2A.8.5R requires that, when approving the report, the governing body must also agree any action needed to address an identified risk that retail customers may not receive good outcomes, any action needed where customers have not received good outcomes, and any amendments to business strategy required to keep it consistent with the Duty. In other words, the board owns the conclusions and the remedial actions, not just the sign-off.

What FG22/5 says the assessment should include

The FCA's finalised guidance FG22/5 puts the rule into plain terms. At paragraph 10.11 it states that a firm's board, or equivalent governing body, should review and approve an assessment of whether the firm is delivering good outcomes for its customers which are consistent with the Duty, at least annually. That framing, delivering good outcomes, is the lens the whole report should be written through.

Paragraph 10.12 lists what the assessment should include: the results of the monitoring the firm has undertaken to assess whether products and services are delivering expected outcomes, any evidence of poor outcomes including whether any group of customers is receiving worse outcomes than another, and an evaluation of the impact and root cause; an overview of the actions taken to address any risks or issues; and how the firm's future business strategy is consistent with acting to deliver good outcomes under the Duty.

Paragraph 10.13 is the sign-off step. Before signing off the assessment, the board should agree the action required to address any identified risks, agree any action required to address poor outcomes experienced by customers, and agree whether any changes to future business strategy are required. Finally, paragraph 10.14 confirms the report matters beyond the boardroom: the FCA treats the assessment as part of the evidence it uses to judge compliance, and expects to be provided on request with the report and the management information that sits behind it.

What the board report must contain

A practical way to structure the report is to work through the four consumer outcomes and then the governance wrap-around. Each outcome section should present the monitoring results, the evidence of good or poor outcomes, and the actions taken and planned, rather than a data dump the board is left to interpret. The table below maps the required content against each area.

The four outcomes named in the Duty are products and services, price and value, consumer understanding, and consumer support. The governance section then does what PRIN 2A.8.4R and 2A.8.5R demand: it records the board's conclusions, its agreed actions, and its assessment of future strategy.

Report areaWhat to coverRule or guidance anchor
Products and services outcomeMonitoring results showing products and services meet the needs of the identified target market, any evidence of poor outcomes, and actions taken or plannedPRIN 2A.8.3R; FG22/5 10.12
Price and value outcomeEvidence that products and services provide fair value, findings on any groups receiving worse value, and remedial actionPRIN 2A.8.3R; FG22/5 10.12
Consumer understanding outcomeResults of monitoring whether communications support informed decisions, evidence of poor understanding, and fixes appliedPRIN 2A.8.3R; FG22/5 10.12
Consumer support outcomeMonitoring of whether support meets customer needs, including customers with characteristics of vulnerability, plus root cause and actionsPRIN 2A.8.3R; FG22/5 10.12
Evidence of poor outcomesWhether any customer group is receiving worse outcomes than another, with an evaluation of impact and root causeFG22/5 10.12
Actions and future strategyOverview of actions taken, board-agreed remedial actions, and confirmation the future business strategy is consistent with the DutyPRIN 2A.8.4R; PRIN 2A.8.5R; FG22/5 10.12 to 10.13
How the required content maps to PRIN 2A.8 and FG22/5. Actions taken and planned should appear in each outcome section, not only in a separate list.

The Consumer Duty champion and the board's role

FG22/5 paragraph 10.10 originally set out an expectation for a board champion. It stated that firms should have a champion at board, or equivalent governing body, level who, along with the Chair and the CEO, ensures the Duty is being discussed regularly and raised in all relevant discussions, and that this champion should be an independent non-executive director where possible. The role was designed to keep senior attention on customer outcomes rather than to write the report.

This expectation has since changed. The FCA has confirmed that from 27 February 2025 it no longer expects firms to have a Duty champion, although firms can retain the role should they wish to do so. Many have kept it, because a named senior owner helps keep the Duty on the agenda between annual reports. Removing the formal expectation does not remove the governing body's underlying accountability under PRIN 2A.8.

Whether or not a firm keeps a champion, the board itself remains responsible. FG22/5 paragraph 10.9 expects the board to ensure the Duty is considered in all relevant contexts, including governance, remuneration policies, and the work of risk and internal audit functions. The report is where that oversight is evidenced. A strong report shows the board asking questions and directing action, not merely receiving a paper prepared elsewhere.

What the FCA praised and criticised

In December 2024 the FCA published good practice and areas for improvement drawn from a targeted review of the first annual board reports from 180 firms across retail banking, insurance, payments, consumer investments, consumer finance and wholesale. The publication is the clearest signal firms have of the standard expected, and it is worth reading in full alongside FG22/5.

On good practice, the FCA highlighted reports that drew clear conclusions from data rather than presenting numbers without commentary, that linked complaint trends to specific events such as technical incidents or process changes, and that included dedicated sections on each of the four outcomes. It valued reports that documented genuine board challenge, evidenced the positive influence of the Consumer Duty champion, and gave specific illustrative examples of action taken, such as removing non-compliant products or changing pricing.

On areas for improvement, the FCA found some firms lacked the data quality to justify their conclusions or to give the board adequate assurance, and relied on high-level claims without explaining how monitoring thresholds were set. It flagged a disconnect where a firm described extensive support for vulnerable customers while its own management information indicated fewer than half were receiving good outcomes. It criticised weak action plans lacking timescales, owners and success measures; reports produced almost solely by compliance or a dedicated Consumer Duty function without wider input; and cases where effective board challenge on the report's content was not evident.

FCA review of first annual board reports

The FCA's good and poor practice publication was based on a targeted review of the first annual Consumer Duty board reports from 180 firms across multiple sectors.

FCA review of first annual board reports
180Total %
Firms in the FCA's sample180%

How to produce the annual board report

A repeatable process is what turns the report from an annual scramble into evidence of embedded governance. Start early, base the report on outcomes monitoring you have run through the year rather than data assembled at the last minute, and give the board enough time and detail to challenge before it approves. The steps below outline a workable sequence.

Two points deserve emphasis. First, the report should read as the board's assessment, so involve stakeholders beyond compliance and record the board's questions, challenge and agreed actions in the minutes. Second, keep the management information that sits behind the report, because the FCA can ask for both the report and that MI at any time.

1
Run outcomes monitoring
Monitor the four outcomes through the year under PRIN 2A.9 so the report summarises real evidence.
2
Assess outcomes
Evaluate results, identify any group receiving worse outcomes, and establish impact and root cause.
3
Draft with wide input
Write outcome-by-outcome with input beyond compliance, showing actions taken and planned.
4
Set actions and owners
Attach timescales, owners and success measures to every remedial action and improvement.
5
Board reviews and challenges
Governing body scrutinises the assessment; minute the questions asked and challenge given.
6
Approve and agree actions
Board confirms compliance, assesses strategy, agrees actions, then signs off under PRIN 2A.8.4R and 2A.8.5R.
7
Retain evidence
Keep the report and supporting MI; the FCA can request both on request.

Conclusion

The Consumer Duty board report is a governance obligation with teeth. PRIN 2A.8 requires the governing body to review and approve an assessment of consumer outcomes at least annually, to confirm whether it is satisfied the firm is complying, to assess future strategy, and to agree the actions that follow. FG22/5 fills in what that assessment should contain, and the FCA's review of 180 first-year reports shows the difference between a document that evidences good outcomes and one that merely asserts them.

The firms that do this well treat the report as the visible output of year-round outcomes monitoring, involve people beyond compliance, and record genuine board challenge and clear, owned actions. If you want a single system to run outcomes monitoring, evidence your controls and assemble a board-ready report, see how Nasara Connect Control supports the Consumer Duty, or request a demo to walk through it with our team.

Frequently asked questions

Is the Consumer Duty board report a legal requirement?

Yes. PRIN 2A.8.3R requires a firm to prepare a report for its governing body on the results of its outcomes monitoring, and PRIN 2A.8.4R requires the governing body to review and approve it at least annually. It is a Handbook rule, not optional guidance.

What must the board report contain?

Per FG22/5 paragraph 10.12, the assessment should include the results of outcomes monitoring, any evidence of poor outcomes including whether any customer group is receiving worse outcomes than another with impact and root cause, an overview of actions taken to address risks or issues, and how future business strategy is consistent with delivering good outcomes.

Who must approve the board report?

The firm's board or equivalent governing body. Under PRIN 2A.8.4R it must review and approve the report, confirm whether it is satisfied the firm is complying with Principle 12 and PRIN 2A, and assess future strategy. Under PRIN 2A.8.5R it must also agree any required remedial actions before approving.

Do firms still need a Consumer Duty champion?

No. FG22/5 originally expected a champion at board level, ideally an independent non-executive director, but the FCA confirmed that from 27 February 2025 it no longer expects firms to have a Duty champion. Firms can keep the role if they wish, and many have.

When was the first board report due?

The first annual Consumer Duty board report was due by 31 July 2024. The FCA subsequently reviewed a sample of 180 first-year reports and published good practice and areas for improvement in December 2024.

What did the FCA criticise in the first board reports?

The FCA flagged insufficient data quality to support conclusions, high-level claims without explained thresholds, disconnects between narrative and management information, weak action plans lacking timescales and owners, reports produced almost solely by compliance, and cases where board challenge on the content was not evident.

Ready to move money with confidence?

Nasara Control helps UK firms send and control payments with lower fees, better rates and full visibility.

Talk to an expert
Secure by designBank-grade security and encryption
Built for UK firmsMade for FCA-regulated businesses
Data protectedYour data stays private and controlled
Global reachCross-border payments worldwide