Variation of Permission vs New FCA Authorisation: Which Route Applies When Your Business Model Changes?

An FCA reference number is a reassuring thing to have in a launch meeting. It is also a poor substitute for knowing which company will be doing what.

A credit broker might be adding a product, opening a different customer channel or moving an established service into a new company. Commercially, each can look like an extension of the existing business. Regulators ask different questions: who carries on the activity, what that activity is, and whether the permission or exemption actually covers it.

There is a timely reason to revisit the distinction. In its trading-names guidance updated on 30 June 2026, the FCA makes clear that registering a trading name has no legal effect on another person's regulatory status. Adding somebody else's business name does not authorise that business. A name on the Register is not a regulatory extension lead. FCA: trading names

For an established broker, the task is therefore more precise than choosing between an application and no application. A proposed change may need a variation of permission, a new authorisation, a notification, a change to a limitation or requirement, or a separate change-in-control process. Sometimes several apply together. Sometimes the existing permission already covers the activity, but the controls need substantial work.

Start with the person holding the permission

Permission belongs to the legal person carrying on the business. For a limited company, that is the company, not its directors, shareholder, brand or wider group. A sole trader's position is different because the authorised person is the individual. Before debating forms, identify the present operator and the proposed operator.

For a company, compare its registered name and company number with the FCA record and the documents granting and subsequently varying its permission. Then check the proposed contracts and customer journey. Which entity introduces the customer? Which enters the broker agreement? Which receives the commercial payment? Those details help establish the facts, although no single payment arrangement determines the regulatory answer.

A genuine new trading name used by the same company does not create a new legal person. Nor does simply changing that company's registered name. The FCA's firm-details process deals with relevant updates, but neither update enlarges the activities that the company may perform. Conversely, a separately incorporated company does not become the existing permission holder merely because it has the same owners, staff and branding. FCA: updating firm information; FCA: change of legal status

This is worth resolving before the business plan acquires a launch date. A diagram showing the entities and their proposed activities can expose a problem that a polished description of the group conceals.

When an FCA variation of permission is the right question

For an existing FCA-authorised person with Part 4A permission, section 55H of the Financial Services and Markets Act 2000 provides the route to request changes to that permission. These include adding or removing regulated activities and changing their description. The FCA explains the mechanism in SUP 6.3. It is a change to the existing person's permission, not a transfer to another company. FCA Handbook: SUP 6.3

The FCA's current variation guidance tells firms to review their scope when starting a new business line or regulated activity, or adding a product or client type. That is a prompt to assess the change, not a statement that every new lender relationship or product name requires an application. Compare the proposed service with the actual permission, including its limitations and any requirements. FCA: variation of permission

Consider a broker proposing to lend its own money under regulated credit agreements. Credit broking permission does not itself cover entering those agreements as lender. If the same authorised company will do both, a variation to add the relevant lending activity may be the route. The operating model also changes: someone must own lending decisions, creditworthiness assessment, servicing and the treatment of customers in financial difficulty. The statutory activity distinction is explained in PERG 2.7.19A. FCA Handbook: regulated activities

Existing authorisation is not a favourable decision on that new model. The firm has to demonstrate that it can support the expanded business. Commercial experience in finding customers for lenders is useful; it is not evidence, by itself, that the broker is ready to become one.

A familiar product label can hide a different activity

Debt consolidation is a useful example. Introducing a customer to a lender and advising that customer about liquidating existing debts are not interchangeable activities. The FCA's primary-broker guidance flags debt counselling and debt adjusting when firms help customers consolidate, repay or otherwise end existing finance. The exact analysis depends on what the broker actually says and does, including any relevant exclusions. FCA: primary credit brokers

Read the proposed script and application journey, not just the lender-panel agreement. Does staff guidance stop at explaining the available service, or does it lead staff to recommend how particular debts should be dealt with? Has a new calculator become part of a recommendation? Those are questions for the activity analysis, not conclusions that any calculator or discussion automatically needs another permission.

Customer scope deserves the same care. Moving into business finance does not automatically move the firm outside consumer credit regulation. Sole traders and certain partnerships and unincorporated bodies can fall within the relevant definition of an individual. Establish the borrower, agreement and applicable exemptions before treating a commercial-purpose label as decisive. The FCA expressly includes commercial brokers serving such customers in its primary-broker guidance.

Equally, a business that qualified for Limited Permission under its old model may no longer qualify after expansion. The FCA's criteria depend on the activities and circumstances, not the firm's preferred description. For the same authorised person, assess the necessary variation and resulting status; do not assume that Full Permission appears automatically when the business grows. Full Permission is not permission for every regulated activity either. FCA: consumer credit broker permissions

Read the restrictions beneath the activity heading

Finding “credit broking” on a Register entry is the start of the review. Limitations can narrow the scope of an activity. A requirement can separately oblige the firm to do something, or prevent it from doing something. A business can therefore hold the headline activity and still be unable to operate the proposed model.

The distinction affects the application. A limitation forms part of the permission's scope; changing it falls within the variation analysis. Applying to impose, vary or cancel an FCA requirement has its own statutory basis in section 55L(5), explained alongside permission variations in SUP 6.2. Related requests may need to be considered together, but they are not legally identical. FCA Handbook: SUP 6.2

Debt permissions illustrate why the wording matters. The FCA warns that a “no debt management” limitation may be inappropriate for certain debt activities and directs firms to review the relevant definitions and seek a variation where necessary. Do not infer from the presence of debt counselling permission that every proposed debt-related service is covered. FCA: limitations on debt permissions

Read the operative documents and record precisely what blocks the proposed activity. If a requirement depends on prior written consent, identify that condition. If it needs formal amendment, pursue that route. An internal view that the original concern has been resolved does not remove an operative restriction.

No variation does not necessarily mean no notification

Suppose the same broker adds a lender offering agreements already within its permission, without changing its regulated role or breaching any limitation or requirement. The conclusion may be that no variation is needed. That is a useful conclusion, provided it is supported by an assessment rather than the familiarity of the lender's name.

A separate notification question remains. Principle 11 requires appropriate disclosure of matters of which the FCA would reasonably expect notice. SUP 15.3.8G explains that this includes proposed restructuring, reorganisation or expansion capable of significantly affecting a firm's risk profile or resources. SUP 15.3.9G says the FCA expects early discussion of relevant matters before internal or external commitments. Those provisions are guidance explaining the underlying Principle, not a universal notice period for every commercial change. FCA Handbook: SUP 15.3

Record both decisions: whether permission must change and whether the FCA should be notified. A notification does not enlarge permission. Equally, a firm can need to notify a material change while remaining within its existing scope.

There is also the customer-outcomes assessment. Where Consumer Duty applies, distributors must obtain sufficient product information and review their distribution arrangements under PRIN 2A.3. A newly targeted customer group may need different support or communications even when the permission remains unchanged. Regulatory scope and a service's suitability for its intended customers are separate tests. FCA Handbook: Consumer Duty distribution rules

A new company cannot inherit the old permission

Moving regulated activity into a newly incorporated company is different from adding a trading name. If the new company needs direct authorisation and does not already have it, it must obtain its own permission. The old company's application to vary its permission cannot authorise the new operator.

SUP 6.2.4AG addresses transfers to a different legal entity, including the receiving entity's permission and cancellation of the transferring firm's permission. Where the recipient is already authorised, analyse whether its existing scope is sufficient or needs varying. Buying a business's assets is not a purchase of the seller's FCA permission. FCA Handbook: business transfers

Do not turn this into a rule that every alteration in legal status requires a fresh application. The FCA's legal-status table distinguishes changes requiring new authorisation from those requiring a SUP 15 notification. For example, it treats a private limited company's change to public limited status differently from a sole trader incorporating a company. Follow the actual legal change, not the shorthand used in a project plan.

Where the FCA's change-of-legal-status application process applies, its guidance also addresses a Deed Poll declaration covering existing customer complaints, cancellation of the previous permission and customer contracts. Coordinate the sequence with the FCA; do not cancel first and hope the replacement arrives in time. This is not an ordinary firm-name update. FCA: change of legal status

A share acquisition presents another distinction. If the authorised company remains the operator, its permission stays with that company. Where the acquisition triggers the controllers regime, the proposed controller must obtain the required approval before acquiring control. That process does not authorise additional activities. An acquisition followed by a business-model expansion can therefore require both change-in-control work and a permission variation. FCA: change in control

The detailed ownership analysis belongs in our separate change-in-control guide. The point here is operational: buying shares, buying assets and incorporating a new company are different events, even when the commercial announcement calls each one an acquisition.

An AR appointment is not a direct permission

A broker operating only as an appointed representative does not hold a Part 4A permission of its own to vary. Its position depends on the applicable section 39 exemption, the activities covered and the principal's acceptance of responsibility. An introducer appointed representative has a narrower scope; an expanded customer journey must not quietly exceed it. FCA Handbook: appointed representatives

A proposed change therefore starts with the principal assessing whether it can lawfully accommodate and oversee the activity. The principal may need to vary its own permission, amend the appointment or make the applicable notifications. Its commercial agreement alone cannot overcome a regulatory restriction. The FCA's oversight guidance specifically addresses changes to AR business models and regulated activities. FCA: principal responsibilities

If a broker without direct permission chooses to become directly authorised, that is a new authorisation application, not a variation of its AR status. This article does not revisit negotiating the principal agreement; that is covered in our pre-signing guide. The immediate launch question is whether an effective permission or exemption covers the exact operator and activity.

Build the evidence around what is changing

At Authorised Compliance Ltd, we help brokers translate these distinctions into a workable change plan. For an existing firm, the most useful starting document is a comparison of the live model with the proposed one. A general description of the business can miss the very difference that needs regulatory attention.

Our suggested working method is to map each changed customer step to the entity performing it, the relevant activity and the permission or exemption relied on. Record any limitation or requirement, the action needed, the person responsible and the evidence that will close the issue. This is a practical control, not a prescribed FCA template or an alternative to the application requirements.

Attach evidence of the proposed service: contracts showing the operator, scripts showing what staff will say, product information showing the intended customers, and tests showing where enquiries go. Use dummy cases to test both eligible and excluded customers. An exclusion written into a policy is of little use if the application journey cannot recognise it.

Resources deserve their own assessment. What happens if demand exceeds the forecast, a lender withdraws or the new process generates complaints? Identify who can investigate, correct customer harm and suspend the affected activity. For changes involving another entity, specify responsibility for unfinished enquiries, historical complaints and access to records. Avoid leaving these matters to an undefined handover.

The FCA's variation guidance explains that information requirements depend on the scale, nature and risk of the proposed change. SUP 6.3 also addresses controls, management arrangements and continuing satisfaction of threshold conditions. The practical implication is that the existing firm must be ready for its expanded responsibilities, not merely able to describe the proposed revenue. FCA Handbook: variation assessment

Make the launch decision capable of saying no

The stop decision should be unambiguous where the proposed operator lacks the necessary authorisation or exemption, the activity exceeds its permission, or an operative restriction prevents it. The FCA expressly says firms must not start activities requested in a variation before approval. Submitting an application, receiving an acknowledgement or having a useful discussion does not change that. FCA: variation of permission

The legal distinction matters too. Section 19 contains the general prohibition on unauthorised regulated activity; section 20 addresses authorised persons acting outside permission. Neither is cured by calling the launch a pilot. Do not assume that a small number of live customers creates an exemption. FCA Handbook: general prohibition; FSMA: section 20

For a defensible internal go decision, identify the permission or exemption that is effective, check the final scope and restrictions, resolve any separate approvals, and confirm that the tested service matches the authorised model. Record notification obligations and how they have been met. Regulatory approval and operational readiness answer different questions; the launch needs both where approval is required.

A restricted launch may be possible if the existing lawful service can remain genuinely separate and the new activity stays disabled. Test that separation across staff instructions, referrals and automated journeys. Otherwise, keep the affected activity stopped. If the review reveals that out-of-scope activity has already begun, escalate it for breach, notification and customer-impact assessment rather than treating a prospective application as retrospective clearance.

Give the decision-maker the unresolved conditions, not just the forecast. The commercially useful question is not whether the firm has been authorised before. It is whether the business about to open is the business that is permitted to operate.