COCON: Did the conduct fall within the conduct rules?
- Conduct toward a colleague
- Work-link and reasonableness tests
- Specified bullying, harassment or violence
- Manager response to known workplace misconduct
FCA PS25/23 · Practical briefing
A practical guide for compliance, HR and SMCR teams—covering COCON, FIT, what firms should review, and what the FCA says firms do not need to monitor.
Get the practical guideSee the assessment workflow
Based on the FCA’s published policy statement and non-financial misconduct implementation materials. This page is practical information, not legal advice. Read the FCA source.
From 1 September 2026, the FCA’s new rule makes specified serious misconduct toward colleagues capable of falling within COCON for non-bank firms when the required work connection is present. FIT remains a separate, relevance-based assessment.
Important boundary: The FCA expressly says firms do not need to monitor employees’ private lives or social media, and do not need to investigate information that is trivial, implausible or irrelevant.
The identity, target, workplace link and context can be verified. Escalate through the firm’s conduct process and preserve evidence and response.
Ask whether it is credible, supported by a formal finding and materially relevant to the role. Do not convert an allegation into a conclusion.
The FCA says lawful expression of controversial views on social media does not, by itself, call fitness and propriety into question.
The new COCON rule and related FIT guidance take effect on 1 September 2026.
No. The FCA says firms do not need to monitor employees’ private lives or social media.
No. The firm remains responsible for its lawful basis, process and final decision.