UK FCA Sets ESG Ratings Rules, With Authorization Starting in 2027

UK ESG ratings enter FCA supervision

The UK’s ESG ratings market is moving into formal FCA supervision, with firms required to obtain authorization and explain more clearly how their ratings are produced. The rules take effect in June 2028; applications for authorization open a year earlier, in June 2027. That gap gives providers a defined period to prepare, but it also puts a deadline on work that may involve changes to governance, documentation and customer communications.

The regime applies to UK-based providers and overseas firms offering ESG ratings in the UK. It follows legislation finalized by the UK government in October 2025 and the FCA’s initial rule proposals later that year. The scope means providers will need to consider not only where they are based, but how their services reach users in the UK.

ESG ratings can influence how investors assess companies and compare sustainability-related performance, yet the methods behind those assessments have not always been easy for users to inspect. The new regime addresses that information gap through disclosure and governance requirements. The difficult question is whether clearer process descriptions will also make ratings more useful and comparable in practice.

More disclosure for users and rated entities

Providers will have to publish information about their products, including each rating’s objectives, methodology, coverage and rated universe. Disclosures must also describe the data used, the limits of the approach and how the provider engages with users and rated entities. Together, those details should help readers understand what a rating is designed to measure and where its conclusions may be less certain.

That context matters because a rating can look authoritative while reflecting choices about data, scope and method that users may not see from the result alone. Explaining those choices won't eliminate differences between providers, but it can give users a basis for asking why two assessments diverge. The numbers here are underwhelming if the goal is a single, consistent view of ESG performance; the framework instead makes the differences more visible.

Users will receive additional product and rating information. Rated entities can request further details about individual ratings, and providers must give them advance notice of new ratings. Providers must also notify users in advance of material methodology changes. That gives both audiences more visibility into how ratings are formed and when the process changes, though advance notice is useful only if the information is clear enough to interpret.

For rated entities, the ability to request details offers a route to understand how a particular assessment was reached. It doesn't, on the information provided here, amount to a right to determine the rating or require providers to change it. (And this is the part most people overlook.) Disclosure can expose the reasoning behind a result without settling disagreements about the data or the judgments that produced it.

Accountability across the rating process

The FCA’s governance requirements call for arrangements suited to a provider’s size and complexity. Firms must retain operational responsibility for the full ratings process, including outsourced work, and maintain an appropriate UK presence to support oversight and accountability. In practice, those requirements put responsibility on the provider even when parts of the work are handled by another organization.

That allocation of responsibility is significant. A ratings process can involve data collection, analysis and review, and outsourcing can make it harder for users to see who is accountable when something goes wrong. The FCA's approach expects firms to keep oversight of the chain and to maintain enough local presence for that oversight to work.

Providers will need systems to keep ratings based on current information and apply methodologies consistently. The rules also require quality assurance, internal records, and competent, professional staff who act with integrity. Firms must document how ratings are produced and how outcomes are reached. Those records may give the FCA a clearer way to assess whether a provider's stated method matches its actual practice.

Consistency doesn't mean every rating will reach the same conclusion, since providers may use different objectives, coverage and data. It does mean the process should be applied in a repeatable way and supported by records. If you're working in this space, that distinction matters: a transparent method can still produce a judgment that another provider would contest.

Conflict management is another central part of the framework: providers must identify, prevent, manage and disclose conflicts of interest. They must also maintain effective complaints procedures and policies for quality assurance, data validation and methodology reviews. These requirements address points where commercial relationships or weak internal checks could undermine confidence in a rating.

Complaints and review policies give users and rated entities a route to raise concerns, while data validation and methodology reviews can help providers identify problems within their own process. Here's the thing: policies on paper aren't proof that ratings are sound. Their value will depend on how firms apply them and whether their records support the decisions they make.

Standards shaped by international work

The FCA says the framework is intended to make ESG ratings more transparent, reliable and comparable, supporting investor decisions, market confidence and sustainable finance. Its approach draws on recommendations from IOSCO, the international securities regulator standards setter, and the International Capital Market Association’s Code of Conduct for ESG ratings and data products providers. That international input provides a reference point for the UK rules, while the FCA will supervise firms operating within its own regime.

Laura Dawes, the FCA’s Director of Authorisations and Sustainable Finance, said: “Trusted information is essential for well-functioning markets. These rules will help improve transparency and raise standards across the ESG ratings market while supporting competition, innovation and growth.” The statement sets out the regulator's aims, but the practical test will be whether users can understand ratings well enough to judge their relevance and limitations.

What the timetable means for the market

The transition now has a defined timetable: authorization applications begin in June 2027, ahead of the rules taking effect in June 2028. The FCA has published the final ESG ratings framework. Providers now have a period to prepare their applications and bring their disclosures, records and oversight arrangements into line with the requirements.

This is more significant than it looks. Authorization makes the regulator's expectations part of the operating conditions for providers, and the disclosure rules give users more grounds to compare how ratings are built. Yet transparency alone won't settle contested questions about what ESG ratings should measure or which data deserves the most weight. The framework can make the process easier to inspect; its effect on trust and comparability will depend on how providers put those requirements into practice.

For users, the change should mean more information about what a rating covers, how it was produced and when its method changes. That gives investors and rated entities a clearer basis for evaluating the output. A clearer paper trail, at last.