Quick answer
Financial services direct mail covers two different jobs. Marketing mail (acquisition and retention offers) is usually a financial promotion, so it must be fair, clear and not misleading under the FCA's COBS 4 rules and, under s21 of FSMA 2000, be communicated or approved by an authorised person. Regulated and transactional mail (annual statements, policy renewals, compliance notices) carries personal financial data and fixed deadlines. Since July 2023 both have also been judged against the Consumer Duty, which expects communications that customers are likely to understand. In print, that means clear layout and prominent key information, testing where appropriate, secure data handling, and verified enclosing so every pack reaches only the right person.
Key takeaways
- Under COBS 4.2.1R, a firm must ensure a communication or financial promotion is "fair, clear and not misleading". That applies to a printed mailer just as it does online.
- Section 21 of FSMA 2000 restricts financial promotions unless they are made or approved by an authorised person, so sign-off has to happen before artwork goes to press.
- The Consumer Duty's consumer understanding outcome (PRIN 2A.5) expects communications that meet customers' information needs and are likely to be understood. Where appropriate, they should be tested before they are sent.
- Statements and renewals are not marketing. They go as Business Mail, not Advertising Mail, and their deadlines are fixed, so production has to be planned back from the regulatory window.
- A statement in the wrong envelope is a personal data breach. Camera-matched enclosing and checkweighing are the practical controls that prevent it.
Marketing mail vs regulated communications
Financial firms send far more print than most sectors, but it falls into two groups with different rules, costs and risks. Treating them the same is where problems start.
| Marketing mail | Regulated and transactional mail | |
|---|---|---|
| Examples | Acquisition offers, cross-sell and retention campaigns, rate-change promotions | Annual and pension statements, policy renewals, terms changes, compliance notices, welcome packs, remittances |
| Main rules | COBS 4 financial promotion rules; s21 FSMA approval; Consumer Duty | Product-specific disclosure rules; Consumer Duty; UK GDPR |
| Data | Prospect or customer selections, suppressed and screened | Full customer records with balances, policy and account details |
| Deadlines | Set by the campaign plan | Often fixed by regulation or contract |
| Royal Mail service | Can qualify for Advertising Mail if the message is promotional and largely uniform | Business Mail. A statement with a leaflet inside does not qualify as Advertising Mail |
| Biggest risk | A misleading or unapproved promotion | The wrong person's data in an envelope, or a missed deadline |
General guidance, not regulatory advice
This guide summarises published FCA rules and guidance as they relate to print and mail. It is not legal or regulatory advice. Your compliance team, or the authorised person approving a promotion, decides what a communication must say.
Financial promotion rules for printed mail
The FCA's core rule for promotions, COBS 4.2.1R, says: "A firm must ensure that a communication or a financial promotion is fair, clear and not misleading." Its guidance applies the rule proportionately, "taking into account the means of communication", but a letter or leaflet does not get a lighter test than a web page. It has more room for the balance the rules expect.
- Make risk clear. COBS 4.2.4G says a promotion for a product that places a client's capital at risk should make this clear. Do not bury that line in small print on the back of a reply form.
- Give balance. The same guidance says a promotion quoting a yield should give "a balanced impression of both the short and long term prospects".
- Explain qualifying terms prominently. Where a promotion uses words such as "guaranteed", "protected" or "secure", COBS 4.2.5G expects the firm to present the relevant information "with sufficient clarity and prominence".
- Get the promotion approved. Section 21 of FSMA 2000 says a person must not, in the course of business, communicate an invitation or inducement to engage in investment activity unless they are an authorised person or the content "is approved for the purposes of this section by an authorised person".
In practice the approval has to cover what is actually printed. If a personalised mailer has several versions, for example different rates or offers by segment, every version needs to be approved, and the data rules that choose which version each customer receives need checking too. Our variable data printing guide explains how versioned packs are built and proofed.
Lock the copy before data merges
Changes after approval are a common source of risk. Agree a single approved PDF per version, and treat any later edit, even a typo fix, as a new approval. Proof the merged output, not just the template.
What the Consumer Duty means for print design
The FCA's Consumer Duty (PS22/9) applied from 31 July 2023 to products open to sale or renewal, and from 31 July 2024 to closed products. Its consumer understanding outcome, in PRIN 2A.5.3R, requires firms to support customers' understanding so that communications meet their information needs, are likely to be understood, and equip them to make decisions that are effective, timely and properly informed.
The FCA's guidance (FG22/5) is specific about design. It says key information "should be easy to identify", for example "by means of headings and layout, bullet points, display and font attributes of text", and that tables, graphs and diagrams can make communications more effective. It also says jargon should be avoided where possible, and explained where it cannot be.
| Consumer Duty expectation | What it means on paper |
|---|---|
| Key information is easy to identify | Put the action, deadline or change at the top of the letter, in a heading, not in paragraph four |
| Information is coherent across documents | A cover letter, statement and terms insert must describe features the same way |
| Communications are likely to be understood | Plain English, short sentences, readable type size and good contrast on the chosen stock |
| Customers with characteristics of vulnerability are considered | Offer other formats and a clear contact route; FG22/5 gives an example of larger key text and a dyslexia-friendly colour scheme |
| Communications are tested where appropriate | Test drafts, and if a version performs better, print that one. Versioning in digital print makes A/B tests practical |
Testing is a rule as well as good practice. PRIN 2A.5.10R requires firms, where appropriate, to test communications before sending them to retail customers, and to monitor their impact. For print, that can be as simple as mailing two versions to matched samples and measuring calls, responses or errors before the full run. See how to plan a direct mail campaign for structuring test cells.
Secure data processing for regulated mailings
Data arrives by secure SFTP and is processed in our ISO 27001-certified environment, with audit logs and agreed destruction dates.
Explore the serviceData security and pack integrity
A statement or renewal carries one person's financial details. If it reaches someone else, the ICO treats "sending personal data to an incorrect recipient" as a personal data breach. Notifiable breaches must be reported to the ICO within 72 hours. So the controls that matter most in financial print are the ones that keep each person's documents together, from data file to sealed envelope.
The full due-diligence checklist, including what your Article 28 processor contract must say, is in our guide to data security for mailings. For the lawful basis behind marketing mail, see GDPR and direct mail.
Planning around regulatory deadlines
Annual statement runs can involve very large volumes and a fixed window. The safest plans work backwards from the latest date customers must receive the document, leaving room for data issues, proof corrections and postal delivery.
- 1
Agree the receipt deadline
Start from the date the regulation or your terms require, not the date you would like to post.
- 2
Allow for delivery
Delivery aims depend on the Business Mail service you choose. Check the aim for that service and build in a margin.
- 3
Book production capacity early
Fretwell's annual statement workflow begins weeks before the drop date, with the run scheduled against our production calendar.
- 4
Send test data first
A sample file lets the data team build and check the merge before live data arrives, so the live run is about volume, not discovery.
- 5
Approve merged proofs
Check a spread of real records, including edge cases such as long names, zero balances and joint accounts.
- 6
Ask about continuity plans
A single machine failure should not put a deadline at risk. Fretwell's business continuity and disaster recovery planning is part of our ISO certification, and the documentation is available for procurement review.
Postage for statement runs can still be reduced with sortation and Mailmark barcodes, even though they do not qualify for Advertising Mail. Our Mailmark guide explains how.
Sources
- FCA Handbook – COBS 4.2: Fair, clear and not misleading communications
- FCA Handbook – PRIN 2A.5: Consumer Duty, consumer understanding
- FCA – PS22/9: A new Consumer Duty (implementation dates)
- FCA – FG22/5: Final non-Handbook guidance for firms on the Consumer Duty (chapter 8)
- legislation.gov.uk – Financial Services and Markets Act 2000, section 21
- ICO – Personal data breaches: a guide
- Royal Mail – User Guide for Royal Mail Advertising Mail, April 2026 (archived copy)
