Appropriateness Assessments Under MiFID II: A Practical Guide

Appropriateness is one of the most misunderstood obligations in investment conduct regulation — frequently confused with suitability, often applied mechanically, and a recurring source of supervisory criticism. The rules sit in COBS 10 of the FCA Handbook. This article sets out when appropriateness applies, how it differs from suitability, and what a firm actually has to do and evidence.

Appropriateness versus suitability

The distinction is the foundation, and getting it wrong leads firms to apply the wrong test entirely. Suitability applies where a firm provides investment advice or portfolio management — the firm is making a recommendation or exercising discretion, so it must assess whether the investment suits the client’s objectives, financial situation and knowledge. Appropriateness applies to non-advised services in complex products — the client is making their own decision, so the narrower question is whether they have the knowledge and experience to understand the risks involved.

Put simply: suitability asks whether the investment is right for this client; appropriateness asks whether this client understands what they are getting into. The second is a lower bar, but it is not a formality.

When the assessment is required

Appropriateness is required for non-advised transactions in complex financial instruments. Where a product is non-complex and the service is execution-only at the client’s initiative, the firm may be able to rely on the execution-only exemption and dispense with the assessment — but the conditions for that exemption must genuinely be met, including that the service is provided at the client’s initiative and the firm has given the required warning.

The practical error firms make is classifying products as non-complex too readily in order to avoid the assessment. Product classification is where a great deal of appropriateness risk actually sits.

What the assessment must cover

The firm must obtain information about the client’s knowledge and experience relevant to the specific type of product or service, sufficient to judge whether they understand the risks. Relevant information typically includes:

• The types of service, transaction and financial instrument the client is familiar with.
• The nature, volume and frequency of the client’s previous transactions in relevant instruments, and the period over which they were carried out.
• The client’s level of education and profession or relevant former profession.

The firm must then form a judgement. It is not enough to collect the answers and file them — the rules require the firm to assess whether, on that information, the client has the necessary knowledge and experience.

What happens when the client fails the test

If the firm concludes the product is not appropriate, it must warn the client. If the client provides insufficient information, the firm must warn that it cannot determine appropriateness. In both cases the client may still proceed — appropriateness is a warning regime, not a prohibition. But the firm must have given the warning clearly, and must be able to evidence that it did.

This is where the Consumer Duty now bites. A firm that issues warnings mechanically, sees a high proportion of clients proceed regardless, and does nothing about it will struggle to show it is acting to avoid foreseeable harm. The warning cannot be a formality that clears a compliance hurdle while the outcome for clients stays poor.

Where firms get caught

The recurring failings are practical rather than conceptual: questionnaires that are too generic to distinguish genuine knowledge from a client clicking through; product classifications that treat complex instruments as non-complex; assessments that are collected but not actually evaluated; warnings that are buried or boilerplate; and no monitoring of what happens after a warning is issued. Each of these is the kind of finding that emerges from a supervisory review or a skilled person report.

Product classification: where the real risk sits

Because the appropriateness obligation is triggered by complexity, how a firm classifies its products effectively determines how often it has to run the test. That makes classification a control point rather than an administrative step. Instruments with embedded derivatives, leverage, or structures the retail client is unlikely to understand should be treated as complex, and a firm that classifies aggressively toward non-complex in order to streamline onboarding is taking on real regulatory risk.

A defensible approach documents the reasoning for each product category, revisits it when products change, and can explain to a supervisor why a given instrument sits where it does.

Designing a questionnaire that actually works

The assessment is only as good as the information it gathers. Questionnaires that ask clients to self-certify their experience in broad terms produce answers that cannot support a real judgement. Better designs ask about specific instrument types, actual transaction history with frequency and period, and test understanding of the particular risk features of the product rather than general investment knowledge.

Firms should also think about what happens when answers are inconsistent — a client claiming extensive derivatives experience but no relevant profession or transaction history — and build a route for that to be reviewed rather than passed automatically.

Monitoring after the warning

The area supervisors increasingly look at is what happens after a client is warned. If a firm issues warnings at scale and almost every client proceeds, that pattern tells the regulator either that the warnings are ineffective or that the assessment is not doing its job. Firms should monitor the proportion warned, the proportion proceeding, and how warned clients subsequently fare — and be prepared to change the process if the outcomes are poor.

This is the clearest example of how appropriateness has shifted from a rules-based checkbox to an outcomes-tested obligation.

What good looks like

A firm applying appropriateness well has a defensible product classification, a questionnaire designed to elicit genuine evidence of knowledge and experience, a real assessment step rather than an automated pass, clear and prominent warnings where the test is failed, and monitoring of outcomes — including how many clients proceed after a warning and how those clients subsequently fare. That last element is what turns a rules-based control into the outcomes-based assurance the Consumer Duty expects.

Why this needs senior compliance ownership

Appropriateness sits precisely where commercial pressure and conduct obligation meet: a rigorous assessment reduces conversion, and there is always pressure to make the process frictionless. Holding the line requires a compliance leader with genuine investment conduct expertise and the standing to be heard. It is exactly the capability that regulated investment firms most often tell us is hard to find.

FD Capital recruits compliance leaders with investment conduct and MiFID expertise into FCA-regulated firms.

The execution-only exemption and its limits

Firms often rely on the execution-only route to avoid the appropriateness assessment, and the exemption is legitimate — but its conditions are specific. The service must relate to a non-complex instrument, must be provided at the client’s initiative rather than following any firm communication that prompts the transaction, and the firm must give the prescribed warning that it is not assessing appropriateness.

The condition that most often fails in practice is client initiative. Where a firm has marketed a product, sent a communication that prompts the trade, or designed a journey that steers clients toward it, the transaction is unlikely to be genuinely at the client’s initiative — and the exemption does not apply. Firms relying heavily on execution-only should test that condition honestly against how their customer journeys actually work.

Record-keeping and what a supervisor will ask for

Appropriateness is an area where a supervisor or skilled person will ask to see the evidence trail for individual clients: the information gathered, the assessment made, the warning issued where relevant, and the client’s subsequent action. Firms should be able to reconstruct that for any transaction. Where the assessment is automated, they should also be able to explain the logic the system applied and demonstrate that it produces a genuine judgement rather than a pass-through.

As with much of the conduct framework, a sound decision that cannot be evidenced is treated much the same as no decision at all.

This article is general information about UK financial services regulation and recruitment practice. It is not legal or regulatory advice. Firms and individuals should take their own professional advice on their specific circumstances.