Machine-assisted reading translation. Official regulatory texts prevail; attachments retain their original language.

Reading translation is ready.

UK FCA licence applications · PRA banking and insurance permissions · Licensed company acquisitions/transfers · Company registration and ongoing compliance

UK topicsCredit rating agencies CRAFCA financial regulationApplications and ongoing complianceRen Gang Yong Sheng

Official basisIndependent third-party consultancy · Not a regulator
UK financial authorisation directory / FCA
FCA / CRA Registration / Third-country Certification

Credit rating agencies CRAGuide to applications and ongoing compliance

Credit Rating Agency CRA

UK credit rating agency registration, third-country certification and rating endorsement apply separately. Rating methodologies, conflicts of interest and reporting are supervised by FCA.

UK credit rating agency registration, third-country certification and rating endorsement apply separately. Rating methodologies, conflicts of interest and reporting are supervised by FCA.

A credit rating is an opinion on the creditworthiness of an entity, debt or other financial instrument using an established ranking system; it is neither an insurance contract nor a loan. A CRA is a legal person issuing such ratings professionally. Credit rating activities include data analysis, evaluation, approval, issuance and review. Registration obligations for ratings disclosed publicly or distributed by subscription should be assessed under the UK CRA Regulation. A B2B exemption cannot be claimed merely because all clients are businesses.[1] [3] [4]

UK domestic CRAs are subject to the FCA registration regime. Eligible third-country CRAs may apply for certification, and UK-registered CRAs may also endorse qualifying overseas group ratings, accepting them and assuming UK regulatory responsibility. These mechanisms are not consumer credit Full Permission or Limited Permission, nor do they replace other permissions required for investment advice, lending, insurance or payment business. FCA assumed responsibility for the registration and supervision of UK CRAs at the end of the Brexit transition period on 2020-12-31; it did not take over responsibility for CRAs from FSA in 2013. PRA is responsible for prudential supervision of banks, insurers and other institutions within its remit, and is not a separate authority that licenses CRAs themselves.[2] [5] [18] [19]

There are explicit exclusions in the Regulation for private ratings produced pursuant to an individual order, provided exclusively to the commissioning party and not intended for public or subscription distribution, and for credit scores generated solely by predefined statistical models without substantial rating-specific analytical input from an analyst. Investor-paid subscription ratings are not private ratings; renaming a product as scoring, research or a data service cannot change the legal nature of the actual activity.[3] [4]

Select the minimum sufficient combination of permissions that lawfully supports the actual business, client scope and financial responsibilities, rather than treating the broadest permissions or fastest approval as the sole objective.

  • Compliant ratings may enter the chain of ratings used by UK-regulated institutions. Banks, insurers or fund managers meeting their own prudential rules and applicable ratings requirements may use ratings issued or endorsed by a UK-registered CRA, or issued by an eligible certified CRA. Registration does not mean that FCA guarantees rating accuracy or investment safety.[1] [5] [6]

  • UK registration establishes clear requirements for independence, methodological transparency and disclosure of historical performance. Issuers and investors can verify institutions and ratings using the FCA register, public ratings databases and historical rating statistics. CRA should not promote registration as government endorsement of rated issuers or financial products.[1] [7]

  • The framework provides scope for small specialist CRA to compete in the market. Where an issuer intends to use two or more CRA, it should consider at least one agency with a market share not exceeding 10% and record its decision if it does not do so. This is a duty to consider aimed at encouraging competition, not a guarantee of business for small agencies or a requirement for issuers to engage a specified agency.[20]

  • Legal entity and entry route: applicants for domestic registration must be legal persons established in the UK and describe their business, rating types and ancillary services in the application. A UK limited company or a LLP with legal personality may be structural options; a natural person operating as a sole trader does not automatically meet the legal-person definition in the CRA Regulation merely because a generic form offers a sole trader option. Third-country institutions should first assess certification or the UK group endorsement mechanism, rather than assume that an overseas company's UK contact point automatically qualifies for registration.[4] [8] [9]

  • Pre-application engagement: the current CRA application page of FCA expressly requires prospective applicants to request a meeting through the free PASS pre-application support service. Before the meeting, provide details of the rating business model, allocation of responsibilities between UK and overseas entities, proposed asset classes to be rated, charging model, and organisational and financial readiness. Feedback from PASS does not constitute permission or remove formal registration or certification conditions.[2]

  • Independence and conflicts of interest: conflicts arising from shareholders, directors, analysts, rated entities and ancillary services must be identified, eliminated or managed and disclosed. Commercial fees, business development and rating analysis must be effectively separated. Rating service fees must not depend on the final rating level or other work outcomes; issuing a low rating first to force an issuer to buy services is prohibited.[7] [21]

  • Methodology and validation: rating methodologies, models and key assumptions must be disclosed publicly, and ratings must be based on reliable information and sufficient analysis. Methodologies should be rigorous, systematic, consistently applicable, and validated and backtested against historical experience. Where samples are insufficient, data quality is inadequate or models deviate, limitations and remedial action should be documented; artificial intelligence output cannot replace the necessary analytical judgement.[10] [22]

  • Rating processes and committees: clear policies must cover initial ratings, conversion of preliminary ratings into final ratings, reviews, affirmations, suspensions and withdrawals. Rating committee membership, quorum and internal voting arrangements should be proportionate to the complexity of the rated subject, recording methodology application, data gaps and independent challenge; the review in FCA2025 expressly emphasises collective decision-making and effective participation, and commercial heads or a single analyst should not be allowed to determine outcomes arbitrarily.[22]

  • Resources and operational continuity: sufficient personnel, financial and systems resources must be provided to support the proposed volume of ratings, ongoing monitoring, compliance and internal audit. IT arrangements should protect non-public information, retain complete audit trails and support backup and recovery; group services and outsourcing must not impede access to information by the UK CRA or FCA, nor transfer responsibility to suppliers.[7] [9]

  • Data connectivity: FCA requires CRA to connect to its ratings database and submit ratings data; the relevant connection must be completed before the application is decided. Prepare rated entity and financial instrument identifiers, rating action classifications, press releases and data quality checking processes in advance. Merely obtaining a bank account or certificate of incorporation does not demonstrate readiness to conduct ratings business.[1] [2]

  • Proportionality for small agencies: having fewer than 50 employees is only one condition for applying for the specific exemption under Article 6(3). Applicants must also demonstrate that the relevant requirements are disproportionate to the nature, scale and complexity of their business, that internal controls still safeguard independence, and that they are not circumventing requirements by artificially reducing or splitting the agency. An exemption does not remove registration requirements or permit abandonment of rating-quality requirements.[2] [11]

Shareholders and ultimate control structure: the FCA CRA application guidance requires disclosure of persons directly or indirectly holding at least 5% of capital or voting rights, or able to exercise significant influence over management, together with relevant companies with shareholding links and the parent-company structure. Article 6a restricts cross-shareholdings in other CRAs, rights to appoint or remove directors, and control rights for shareholders reaching 5%, with exceptions for intra-group investments and certain diversified collective investments. Linked shareholdings of 5% and 10% involving rated entities may also respectively trigger disclosure requirements or prohibitions on issuing ratings; a 10% controller list alone is insufficient.[7] [9] [12]

Directors and senior executives: they must be of good repute and have sufficient financial services skills and experience. In principle, at least one-third, and no fewer than two members, of the board or supervisory body must be independent and not involved in rating activities. Independent members' remuneration must not be linked to business performance; their fixed term must not exceed five years and is not renewable. Unless an applicable exemption is obtained, ordinary company governance with only one executive director cannot replace CRA governance. When conducting securitisation ratings, at least one independent director and one other director must have senior-level experience in the relevant securitisation market.[7] [11]

Compliance and methodology review: in principle, there should be an independent, continuously effective and adequately resourced compliance function whose head can access all necessary information and reports regularly to senior management and independent directors. Independent review of methodologies, models and key assumptions should be separate from the ratings business line; internal audit provides the third line of defence and tracks remediation. CRA registration itself should not be described as requiring all directors to apply for SMF1, SMF3 or SMF17. If the same legal person also holds FSMA authorisation, the corresponding individual approval and SM&CR requirements must be assessed separately.[7] [9] [13] [21] [23]

UK substance and professional teams: a UK legal entity should have arrangements capable of genuinely taking responsibility for governance, analysis, quality control and regulatory communications, and retain records accessible to the regulator, rather than merely renting a mailbox or substituting a Hong Kong consultancy address for business premises. Official CRA materials do not require all directors to be UK nationals, prescribe a fixed number of UK-resident directors or set a uniform minimum headcount; applications should demonstrate that workload and experience are aligned with the types and complexity of ratings. UK entity substance issues for third-country certification should be assessed separately under the physical presence exemption in Article 5, rather than applying domestic registration arrangements.[2] [6] [7] [9]

The UK CRA Regulation does not prescribe a uniform minimum initial capital, net asset or solvency capital amount of GBP pounds or EUR euros for all CRA. Applicants must still demonstrate sufficient financial and operational resources and, in accordance with the FCA guidance, provide available financial reports for the preceding three financial years, accompanied by audit reports where statutory audit applies. Newly established institutions with insufficient history should provide interim financial reports and explain funding arrangements. The original page’s £5,000, £10,000, £50,000, £250,000, £1,000,000 and €3,200,000 are not verified CRA capital thresholds.[8] [9] [14]

Regulatory fees must be separated from capital: as at the verification date, a FCA registration application falls within fee category 5, £5,640, and third-country certification within category 4, £2,820, both being GBP pounds. The application fee is neither capital contributed for the company’s use nor an annual fee. The general fees page states that application fees are non-refundable; formal payment steps should follow the CRA team’s instructions for the dedicated application. Where other regulated activities are also undertaken, any additional capital or insurance conditions should be attributed to those activities, not described as a general CRA capital requirement.[2] [15]

Local registration is based on a UK-established legal person. The application must list the registered office, principal place of business, head office and branch arrangements, and explain where information, personnel and management functions are actually located. In principle, CRA rating records must be retained at the registered institution's premises and be accessible at the request of FCA. Shared offices or cross-border cloud services do not remove confidentiality, continuity or regulatory access obligations. No industry-wide mandatory standard for office floor area, a London address or UK residence for all personnel has been verified.[7] [8] [9]

Third-country certification applicants may seek a case-by-case waiver of the physical presence requirement under Article 5(4), demonstrating that the requirement imposes an excessive and disproportionate burden given the nature, scale and complexity of their business. Certification must not be described as an unconditional exemption from establishing a UK entity. The regulatory contact email for CRAs is creditratingagencies@fca.org.uk. Brand materials may be prepared by Tang Shangyong (Mr Tang) of Rengang Yongsheng (Hong Kong) Limited, but the consultant’s Hong Kong or Shenzhen address is not the applicant’s UK business address and does not constitute an approval channel acting for FCA.[2] [6]

  • Dedicated application forms and evidence of legal status: use the current CRA registration or certification form of FCA and consult the corresponding guidance, rather than substituting ordinary consumer credit Full/Limited application forms. Attach the certificate of incorporation, articles or other legal status documents, relevant commercial register extracts and all business addresses. UK registration applications must be submitted in English under Article 15.[2] [9] [16]

  • Ownership and group documents: provide information on direct and indirect holders of at least 5% of capital or voting rights, persons with significant influence, parent companies and associated undertakings, together with a complete structure chart. Explain investments in other CRAs, linked shareholdings involving rated issuers, cross-directorships and group service arrangements, to enable assessment of the conflict-of-interest restrictions in Article 6a and Annex I.[7] [9] [12]

  • Senior management and director documentation: submit responsibilities, career histories, relevant financial services and credit rating experience, and recent criminal record documentation and good-repute self-declarations for senior managers. Independent directors should explain the basis of their independence, terms of office and remuneration arrangements. Directors responsible for securitisation ratings should provide additional evidence of senior-level experience in the relevant market, rather than listing the CeMAP mortgage qualification as a universally mandatory certificate for CRA.[7] [9]

  • Organisation, compliance and internal audit documents: submit the organisational chart, reporting lines, compliance policies, risk management, independent methodology review and internal audit arrangements, and allocation of responsibilities. Where a group or outsourced provider performs some work, explain who actually performs it, how it is monitored and how information is obtained. Waiver applications should include evidence of headcount, proportionality and alternative controls.[2] [7] [9] [11]

  • Financial and staffing resource documents: provide available standalone and consolidated financial reports for the preceding three years, applicable audit reports and parent company financial reports. Where the history is insufficient, provide interim reports and explain funding sources, financial forecasts, costs and staffing commitments, demonstrating the ability to conduct ongoing rating monitoring rather than merely uploading a bank balance certificate for a fictitious minimum capital amount.[9] [14]

  • Rating business and methodology documents: specify proposed rating categories, rating symbols, default definitions, solicited or unsolicited rating models, initial rating and review processes, committee policies, models and back-testing arrangements. Provide data sources, quality checks, sensitivity analysis and procedures for insufficient information, along with actual fee and ancillary service policies, explaining how rating conclusions are protected from revenue pressures.[7] [9] [10]

  • Systems, records and disclosure documents: provide the rating system architecture, segregation of fee information from analytical systems, access controls, confidentiality, record retention, business continuity and testing arrangements. Prepare public rating reports, press releases, transparency reports and database submission fields. Connection to the FCA ratings database and related technical preparations must be completed before the application decision.[2] [7] [9]

  • Third-country-specific documents: certification submissions should include the basis of home-country authorisation or registration and supervision, jurisdictional equivalence eligibility, rating volumes and revenue, rating categories, and evidence of non-systemic importance to the UK market. Endorsement submissions should explain the overseas rating entity, group relationships, objective reasons for issuing ratings overseas, the UK entity’s ongoing verification capability and information access arrangements. The two sets of requirements are not interchangeable.[2] [5] [6] [24]

This is provided as a reference for organising the project; it cannot replace current official application forms or case-specific requests for additional materials. Please do not send identity documents or customer records through website forms.

  • First, determine the activity perimeter and customer use: analyse whether credit opinions expressed using a ranking system are issued, whether they are distributed publicly or by subscription, and whether they are intended for UK regulatory use. Distinguish purely statistical scores, strictly private ratings and general data analysis from professional CRA ratings, and confirm whether any other activities requiring separate permission are also undertaken.[1] [3] [4]

  • Step two: select local registration, third-country certification or group endorsement, and request a pre-application meeting with PASS. Third-country institutions should first verify the certification equivalence list and the non-systemic importance conditions. Endorsement by a UK group must satisfy Article 4(3) and include the capacity for ongoing oversight of, and responsibility for, overseas ratings.[2] [5] [6] [24]

  • Third, establish actual governance, rating and control mechanisms before finalising the documents. The application should demonstrate operational readiness in director independence, separation of analytical and commercial functions, methodology review, ongoing monitoring and database capabilities. Recruitment or procurement of core rating systems should not be left until after approval.[2] [7] [9]

  • Step four: submit the dedicated CRA form and supporting information in English, and pay the relevant application fee, using the method confirmed by the FCA team. The general FCA fees page mentions payment through Connect, but the CRA application page requires dedicated registration or certification forms. Completing an ordinary online authorisation form and paying successfully therefore cannot be treated as acceptance of a complete CRA application. Retain submitted versions, payment records and regulatory receipt and enquiry records.[2] [15] [16]

  • Step five: FCA checks application completeness within 20 working days. If incomplete, it sets a deadline for supplementary information; each item must be answered and gaps in quantity and content quality addressed. Following confirmation of completeness, the 45-working-day decision stage begins, which may be extended by 15 working days under specified conditions. Connection to the ratings database must also be completed under the arrangements provided by FCA.[2] [16] [17]

  • Step six: after receiving a registration or certification decision, check its effective date and the Financial Services Register information before operating within the permitted scope. Article 16 provides that a decision takes effect on the fifth working day after it is made. If FCA proposes refusal, it will explain the issues through the relevant notice and decision procedures. Applicants should not promise guaranteed approval or substitute a consultant's success rate for statutory assessment.[2] [17]

Completeness and incomplete applications: Article 15(4) requires FCA to assess completeness within 20 working days of receiving an application; if incomplete, FCA sets a deadline for submitting additional information. The 20 working days are not a guaranteed timeframe for completing all approvals, nor may the supplementary information stage be described as a fixed 6-month or 12-month approval period for incomplete CRA applications. The verified CRA provisions do not provide a uniform maximum 12-month period for incomplete applications comparable to general FSMA authorisation.[2] [16]

Decision on a complete application: in principle, a decision to register or refuse must be made within 45 working days of FCA issuing the completeness notification; particularly where endorsement of overseas ratings, outsourcing or an exemption under Article 6(3) is proposed, this may be extended by 15 working days to 60 working days. Third-country certification follows the Article 16 procedure through Article 5(3); the decision takes effect on the fifth working day after it is made. FCA also expressly requires connection to its ratings database before the decision, so completeness, decision, effectiveness and technical go-live must be managed separately.[2] [6] [17]

Preparation: organisational establishment, director recruitment, methodology backtesting, system development and communication with PASS have no uniform statutory preparation period. In a project budget prepared by Tang Shangyong (Mr Tang) of Rengang Yongsheng (Hong Kong) Limited, a new institution may allow several months, with complex groups or validation of new methodologies potentially taking longer. This is only work planning, not an official average approval time from FCA or a promise of success. The original page's 3–6 months / 6–12 months and associated stage estimates cannot be applied directly to CRA statutory periods.[2] [9]

Shareholders and control structure: CRAs must continue to meet the initial registration conditions. Material changes in shareholdings, voting rights, parent companies or control arrangements must be notified to FCA without undue delay under Article 14(3). Before a transaction, assess the 5% cross-CRA investment restrictions, significant influence, and the 5% and 10% conflict-of-interest mechanisms concerning rated entities; consult the CRA supervisory team in advance where necessary. It cannot simply be asserted that every crossing of the 10%, 20%, 33% or 50% thresholds in a CRA-only firm invariably requires prior controller approval under section 178 of FSMA; if the target also holds FSMA authorisation, that approval regime must be checked separately.[7] [8] [12] [21]

Directors and senior management: the dedicated FCA change form includes notifications of incoming and departing senior executives. New appointees must provide a curriculum vitae and criminal record check. The proportion of independent directors, securitisation experience, compliance and methodology review functions should be reviewed at the same time, rather than merely filing director changes with Companies House. This notification for a pure CRA must not be described as necessarily using SMF Form A or departure Form C. Specific documentation is governed by the dedicated CRA notification and the supervisory team’s requirements.[2] [7] [25]

Methodologies, categories and exit: adding a rating asset class requires a dedicated notification to FCA explaining the updated methodologies and the experience of analysts and senior managers. Material or new methodologies should undergo public consultation for one month, with simultaneous notification to FCA and notification of the final changes after consultation. Before withdrawal of registration, inform the CRA supervisory team of the number of outstanding ratings, the impact on users and transition arrangements, and settle reporting, fees and applicable outstanding matters. The business or registration status cannot be detached from the original legal entity and treated as a separately transferable commodity.[2] [8] [10] [25]

Ratings and data reporting: report rating actions, outlooks, reasons for withdrawals and required supporting information on an ongoing basis, ensuring consistency between the public ratings database and regulatory information. The 2015/2 technical standards distinguish rating action reporting to the public platform from monthly reporting of rating information outside that public reporting scope; a proportionate arrangement allows reporting every two months for entities with fewer than 50 employees that do not belong to a CRA group, but the regulator may require monthly reporting. Actual UK fields, access, files and deadlines must be confirmed against the current technical requirements of FCA; half-yearly RMAR, quarterly capital or Gabriel reports must not be treated as the entirety of CRA reporting obligations.[1] [2] [26]

Monitoring and methodology updates: ratings and methodologies should be monitored continuously and reviewed at least annually, with sovereign ratings reviewed at least every six months. Material changes in risk must not be left until the annual review date. The public consultation period for material methodology changes is one month. Affected ratings should be reviewed as soon as possible and no later than six months after the change, and placed under observation in the meantime. Methodology or application errors must be reported immediately to FCA and affected rated entities; errors must also be publicly disclosed where they affect ratings. The FCA review in 2026 emphasised that methodology or application errors must be reported even where ratings do not change.[10] [23]

Transparency and financial audit: publish an annual transparency report within three months of each financial year-end and retain it on the website for at least five years. It must cover the legal and ownership structure, internal controls, staffing, record-keeping policies, independent compliance review results, rotation policies and revenue. Annex I also requires historical default rates to be disclosed every six months, together with the relevant annual disclosures on fees, clients and ratings. Whether financial statements require a statutory external audit depends on the legal form and applicable company law. Registration with CRA does not mean that all firms must submit standardised audited statements to FCA within four or six months; CRA internal audit and independent review must nevertheless operate effectively.[7] [14] [27]

Annual regulatory fees for 2026/27: UK-registered CRAs and third-country certified CRAs in category J.1 are exempt from that category’s annual fee where applicable turnover does not exceed GBP£8,730,574. Above the threshold, UK-registered CRAs are charged £2.01 for every £1,000 or part of £1,000 of their entire applicable turnover, not just the excess. Certified CRAs above the threshold pay a fixed annual fee of £5,238. Applicable turnover is determined under the fee rules by revenue from rating activities and ancillary services, not the issuance size of rated securities. Other permissions may attract separate fees; rates must be updated for subsequent years rather than permanently using the 2026/27 figures.[21] [28]

Records and staff rotation: retain records and audit trails of rating decisions, participating and approving personnel, fees, subscription information, methodologies, working papers and relevant correspondence for at least five years, and for at least a further three years after registration is withdrawn. Rotate responsible persons and analysts in accordance with Article 7 and Annex I, with a formal basis for any applicable exemption; when an analyst joins an entity they previously rated, also review the relevant work from the two years preceding departure. Public rating archives must not be treated as evidence that all non-public analytical materials have been retained.[7] [11]

AML and sanctions: pure credit rating activities are not automatically subject to all financial institution obligations under MLR2017 merely because the entity is described as a financial institution. Provision 10 and Schedule 2 define the scope by the activities actually listed; it is necessary to check whether the firm also provides investment services, securities issuance-related services or other covered activities. Corresponding risk assessment, customer due diligence, ongoing monitoring and reporting arrangements are required only where the firm falls within MLR or another relevant regime. UK proceeds of crime and sanctions laws must separately be complied with according to the facts. There is no evidence that every pure CRA must obtain a MLRO approved by SMF17, or that FCA routinely conducts annual AML-specific inspections of all CRA.[13] [29] [30]

Client money and complaints: a pure CRA normally charges fees for its own rating services; this does not confer permission to accept deposits, deal for clients or provide investment custody, nor does a CASS client money segregation regime automatically apply. Plans to hold other funds or assets for customers require separate assessment of activities, permissions and corresponding safeguarding rules; CRA registration cannot replace this analysis. Objections and complaints from rated entities require independent handling and records, but there can be no automatic promise that every CRA dispute falls within the DISP eight-week deadline, FOS jurisdiction or FSCS compensation.[2] [7] [21]

Board oversight and new technologies: the board should review the 2025 rating committee and the 2026 monitoring, methodology and internal control reviews, examining committee membership numbers, records of challenge, data quality, methodological deviations and completed remediation. Material ESG factors in analysis must be transparently explained in methodologies and the reasons for rating actions; AI models must also have validation, bias controls and challenge through human analysis. Pure CRA registration must not be described as automatically attracting Consumer Duty and the full set of SM&CR retail authorisation obligations; concurrent businesses and future formal regulatory reforms must be assessed separately.[13] [22] [23]

Registration status and transaction structure: due diligence should first verify the legal entity, the nature of registration or certification, the actual rating categories, exemptions and regulatory restrictions in the Financial Services Register, and obtain correspondence with FCA, inspection records, error reports and remediation documents. A share acquisition usually retains the same legal entity, but an asset transfer, transfer to a new legal entity or merger may require new admission arrangements; registration is not a standalone licence that can be sold separately from the original institution. Completion documents should make material-change notifications and business continuity conditions, rather than applying a supposed uniform three-month CRA change-in-control approval period.[2] [8] [25]

Shareholder conflicts and rating independence: look through the buyer’s funds, parent companies and common controllers, checking investments of at least 5% in other CRA and director appointment and removal arrangements. If the buyer also holds an interest in a rated issuer, sits on its board or provides restructuring finance advice, this may trigger 5% disclosure, a 10% prohibition on issuing ratings or other connected-rating restrictions, and require existing ratings to be assessed or withdrawn. Sample-check the largest issuer-paying clients, disclosures for clients accounting for more than 5% of annual revenue, whether rating fees are tied to outcomes, and whether ancillary business disguises the sale of advice on improving ratings.[7] [9] [12]

Methodologies, legacy liabilities and system assets: sample-check working papers for initial assessments and annual reassessments, six-monthly sovereign reviews, committee membership, model backtesting, methodological deviations, error identification and the timing of notifications to FCA. Confirm access to at least five years of non-public information, database access and rating histories, and that group-shared IT, data licences and methodological intellectual property remain usable after completion. Acquiring only client contracts and trademarks while losing model licences, analytical teams or historical records may prevent outstanding ratings from continuing to comply with the Regulation.[7] [10] [22] [23]

Overseas operations and business sustainability: firms using endorsement should verify each overseas rating entity's group relationship, framework eligibility, access to information and assumption of responsibility in the UK; certification targets require reassessment of post-transaction systemic importance and third-country eligibility. Calculate analyst and independent control resources based on the existing ratings monitoring workload, and check retention of key directors, exemption conditions, the impact of crossing turnover-based fee thresholds and exit plans. An exemption for fewer than 50 people, an annual fee exemption or an adviser's claimed 100% success rate must not substitute for compliance due diligence.[2] [5] [6] [11] [28]

View the complete process for acquiring a licensed company

The following are specific permissions, organisational models or statutory categories covered by this topic. They do not necessarily each constitute a separate financial licence.

Is CRA divided into full authorisation and limited permission?+

No such division applies. The UK CRA uses registration, third-country certification and endorsement of eligible overseas ratings. Full/Limited Permission are terms used in other regimes, such as consumer credit, and car dealer instalment finance is not an ancillary CRA rating permission.[2] [5] [6]

Does rating only companies remove the need for FCA registration?+

No. Corporate ratings are an important business category for CRA, and B2B is not itself an exclusion criterion. The key facts to verify are whether ratings are strictly private, whether they are distributed publicly or by subscription, and whether they constitute professional credit opinions expressed in rating categories.[3] [4]

Is a credit score generated by an algorithm necessarily a CRA rating?+

No. There is an exclusion for credit scores generated solely by predefined statistical systems or models without substantial rating-specific analytical input from an analyst. If a product actually incorporates substantive analytical judgement and publishes credit opinions using a rating-category system, calling it a ‘score’ cannot avoid assessment under CRA.[3] [4] [22]

Is the minimum capital £5,000 or €3,200,000?+

Neither of these is a verified uniform UK CRA threshold. CRA has no uniform fixed minimum capital amount, but sufficient financial, personnel and systems resources must be demonstrated and the corresponding financial information submitted; capital requirements for insurance SCR or other licences cannot be applied directly.[8] [9] [14]

What are the application fee and annual fee respectively?+

As at the verification date, the registration application fee is GBP£5,640, and third-country certification costs £2,820. Annual fees under 2026/27 J.1 are determined by the applicable turnover threshold of £8,730,574, with exemption for those not exceeding it. Above the threshold, UK-registered CRA are charged £2.01 for every £1,000, or part of £1,000, of total turnover; certified CRA pay a fixed £5,238. These must be updated in subsequent years.[2] [15] [28]

Is the statutory application timeframe 6 months or 12 months?+

That is not the statutory timeframe for CRA. FCA has 20 working days to assess completeness, followed by 45 working days to decide once completeness is confirmed, or 60 working days under specified conditions. FCA specifies the deadline for supplementing incomplete applications; preparation and database connection take additional time.[2] [16] [17]

Are two independent directors an absolute requirement for all CRA?+

In principle, independent members must constitute at least one-third of the board and number no fewer than two. Firms with fewer than 50 employees that meet other conditions may apply for a waiver of the relevant proportion, but must obtain case-specific approval from FCA; they cannot declare themselves exempt.[7] [11]

Must all directors be UK residents or obtain SMF approval?+

Official CRA application materials do not stipulate an industry-wide fixed number of UK-resident directors. CRA must demonstrate effective governance, staff competence and regulatory access; registration itself cannot be equated with all SMF requirements for FSMA authorisation, and other authorisations held require separate assessment.[7] [9] [13]

Can a Hong Kong or Singapore CRA apply for third-country certification?+

Hong Kong is on FCA’s current equivalence list for certification, but all conditions must still be met, including local supervision and non-systemic importance in the UK. Singapore is on the endorsement framework list but not on the current equivalence list for certification. The two lists must not be used interchangeably, and UK-issued instruments cannot use the third-country certification route.[2] [6] [24]

Who is responsible after endorsing overseas ratings?+

The UK-registered CRA endorsing the rating retains full responsibility for the rating and compliance with the conditions. Overseas membership of the same group, recognition of the framework or a local licence does not remove the UK institution’s continuing duties to verify compliance, obtain information and report errors.[5] [23]

Must Consumer Duty, AML and capital reports be submitted to FCA annually?+

The ongoing obligations of a pure CRA cannot be generalised in this way. Rating data, transparency, ongoing monitoring, methodology and governance requirements should be implemented first. AML, SM&CR, Consumer Duty and capital reporting depend on actual other activities and applicable regimes, rather than copying all returns of a retail authorised firm.[2] [7] [10] [13] [29] [30]

Must a methodology error be reported if the rating remains unchanged?+

Yes. The FCA2026 review expressly requires prompt notification when errors in rating methodologies or their application are identified, whether or not they cause a rating change. Root causes should also be analysed, the scope of impact identified and remediation undertaken; a general statement in the annual report that improvements have been made is insufficient.[10] [23]

Can you immediately switch to other financial activities after buying a registered CRA?+

No. CRA registration covers only the relevant credit rating regulatory route and carries no lending, investment, custody or insurance permissions. An acquisition must also examine the buyer's cross-shareholdings and issuer conflicts, director independence, methodologies and systems, and obligations relating to outstanding ratings, notifying FCA or applying for other market access where necessary.[2] [7] [8] [12]

Have the new ESG ratings rules already taken effect?+

The regime requiring the relevant ESG authorisation to operate is not yet in force. The FCA final policy was published on 2026-11-03. The standalone ESG ratings regime takes effect on 2028-06-29, with application arrangements starting on 2027-06-24. It remains necessary today to distinguish ESG factors within credit ratings from standalone ESG ratings business.[23] [31] [32]

Can a consultant guarantee approval or use their own Hong Kong address for a UK CRA?+

Approval cannot be guaranteed. FCA decides on the applicant’s actual circumstances; consultants have no approval authority. Tang Shangyong (Mr Tang) of Rengang Yongsheng (Hong Kong) Limited may prepare business and compliance materials, but the UK legal entity, governance, premises and database preparations must genuinely belong to the application project. A consultancy contact address cannot be used as a substitute.[2] [7] [9]

Primarily based on FCA, PRA / Bank of England, GOV.UK and current legislation. Older third-party guides supplied by users are used to organise business material and do not override the latest official requirements.

Sketch portrait of Tang Shangyong (Mr Tang)
Information compiled by: RenGang Yongsheng (Hong Kong) Limited

Tang Shangyong (Mr Tang / Drew) · Business Manager
Global financial licence application, transaction and ongoing compliance services

Contact the author and enquire about projects
YOUR NEXT STEP

Bring business planning and the compliance pathway,
Maintain consistency from the very first step.

First discuss the business model, fund flows and objectives, then determine the application, acquisition or corporate services solution.

START A CONVERSATION

Discuss your UK business with Mr Tang

Direct business email contact · Drew@sfc8.com

This is a service provider enquiry form, not a regulatory application submission. No intermediary can guarantee licensing or account opening.

Search UK permission guides

Search by business activity, regulatory regime, English abbreviation and directory number

Find268items, including specialist activities; the first 10 items are shown below.

View all search results