FMA Compliance Documentation for Financial Services in New Zealand
The Financial Markets Authority requires extensive documentation from licensed financial service providers. Here's how to review your compliance documentation systematically.
The Financial Markets Authority (FMA) is New Zealand's conduct regulator for financial markets. It oversees licensed financial service providers including fund managers, financial advisers, derivatives issuers, peer-to-peer lending providers, crowdfunding platforms, and market operators. The Financial Markets Conduct Act 2013 (FMC Act) is the primary legislation, supplemented by the Financial Advisers Act 2008 (now largely incorporated into FMC Act amendments) and various FMA standards and guidance.
FMA's regulatory approach combines licensing requirements, ongoing conduct obligations, and regular monitoring. Licensed entities must maintain comprehensive documentation covering governance, risk management, fair dealing, client money handling, disclosure, and complaints management. FMA conducts thematic reviews, monitoring visits, and enforcement actions — and documentation is central to every engagement.
What FMA Requires
Licensed Entity Documentation
| Area | Documentation Required |
|---|---|
| Governance | Governance framework, board charter, committee terms of reference, fit and proper assessments |
| Risk management | Risk management framework, risk register, risk appetite statement |
| Compliance | Compliance framework, compliance plan, compliance monitoring programme, compliance officer appointment |
| Fair dealing | Fair dealing policy, client suitability processes, conflicts of interest management |
| Disclosure | Product Disclosure Statements (PDS), fund updates, other material information statements |
| Client money | Client money handling procedures, reconciliation records, audit reports |
| Complaints | Internal complaints resolution process, complaints register, reporting to dispute resolution scheme |
| AML/CFT | AML/CFT programme, risk assessment, CDD procedures (under Anti-Money Laundering and Countering Financing of Terrorism Act 2009) |
| Business continuity | BCP covering all critical functions, testing records |
| Outsourcing | Outsourcing policy, due diligence records, monitoring of outsourced functions |
Financial Advice Documentation
Under the updated financial advice regime:
| Requirement | Documentation |
|---|---|
| Financial Advice Provider (FAP) licence | Licence application, conditions of licence, ongoing compliance |
| Code of Professional Conduct | Policies demonstrating compliance with the Code — competence, knowledge, skill, client care, ethical behaviour |
| Advice process | Documented advice process from client engagement through to recommendation |
| Record of advice | Written record of every financial advice given — client situation, recommendation, rationale |
| Competence, knowledge and skill | Adviser qualifications, CPD records, competency assessments |
| Disclosure | Adviser disclosure statements (nature, scope, and limitations of advice; fees; conflicts of interest) |
| Complaints | Internal complaints process; membership of approved dispute resolution scheme |
| Nominated representative oversight | If using nominated representatives — oversight procedures, training, monitoring |
Product Disclosure Statements (PDS)
Managed investment schemes must maintain current PDS documentation:
| Element | Requirement |
|---|---|
| PDS content | Must include all information prescribed by the FMC Act and regulations |
| Fund updates | Quarterly fund updates filed with the Registrar of Financial Service Providers |
| Other material information | Information incorporated by reference in the PDS, available on the scheme's offer register entry |
| Currency | PDS must be current — updated when material information changes |
| Accessibility | PDS must be available to investors free of charge |
AML/CFT Documentation
The Anti-Money Laundering and Countering Financing of Terrorism Act 2009 requires:
| Requirement | Documentation |
|---|---|
| AML/CFT programme | Risk assessment, compliance programme, compliance officer appointment |
| Customer Due Diligence | Identity verification procedures, enhanced CDD for high-risk situations |
| Ongoing monitoring | Account monitoring, transaction monitoring procedures |
| Suspicious activity reports | Procedures for identifying and reporting suspicious activities to the FIU |
| Record keeping | All CDD and transaction records retained for minimum 5 years |
| Annual report | Annual AML/CFT compliance report |
| Independent audit | Periodic independent audit of the AML/CFT programme |
Common Compliance Failures
1. Fair Dealing Documentation Gaps
FMA's fair dealing focus means scrutiny of how financial service providers treat clients:
- Suitability assessments not documented for every client recommendation
- Conflicts of interest identified but management procedures not documented
- Fee disclosure incomplete or not provided at the right time
- Product recommendations not supported by documented analysis of client needs
- Switching recommendations without documented rationale showing client benefit
2. Financial Advice Record Deficiencies
- Advice records that summarise the recommendation but not the client's situation or the rationale
- No documented evidence that the adviser considered alternatives
- Disclosure statements not provided or not covering all required information
- CPD records incomplete — advisers not meeting minimum CPD requirements
- Nominated representative oversight not documented
3. Compliance Framework Weaknesses
- Compliance plan exists but monitoring programme not implemented
- Compliance monitoring conducted but findings not tracked to remediation
- Compliance reporting to the board insufficient — board not aware of compliance gaps
- Compliance framework not updated when regulations change
- No documented process for identifying and responding to regulatory changes
4. Client Money Handling
- Client money reconciliation not conducted at prescribed frequencies
- Discrepancies identified but not investigated and resolved
- Client money bank accounts not properly designated
- No independent audit of client money handling
- Procedures not updated for changes in banking arrangements
5. Complaints Management
- Complaints not recorded in a central register
- Complaint resolution timelines not met
- Root cause analysis not conducted for complaint trends
- Complainants not informed of their right to escalate to the dispute resolution scheme
- Complaint data not reported to the board or used to improve processes
Building an FMA Compliance Documentation Review Process
Step 1: Regulatory Mapping
| FMA Requirement | Document | Owner | Last Reviewed | Status |
|---|---|---|---|---|
| Governance framework | Board Charter, Committee ToRs | Company Secretary | January 2026 | ✅ Current |
| Risk management | Risk Framework, Risk Register | Risk Manager | November 2025 | ✅ Current |
| Compliance framework | Compliance Plan | Compliance Officer | October 2025 | ✅ Current |
| Fair dealing | Fair Dealing Policy | Compliance Officer | September 2025 | ✅ Current |
| Advice process | Advice Process Documentation | Head of Advice | August 2025 | ⚠️ Needs review |
| PDS | Product Disclosure Statements | Legal/Product | Ongoing | ✅ Current |
| Client money | Client Money Procedures | Finance | December 2025 | ✅ Current |
| AML/CFT | AML/CFT Programme | AMLCO | July 2025 | ⚠️ Annual review due |
| Complaints | Complaints Policy | Customer Relations | November 2025 | ✅ Current |
| BCP | Business Continuity Plan | Operations | June 2025 | ⚠️ Testing overdue |
Step 2: Implement Review Cycles
| Document Type | Review Frequency | Triggered Review |
|---|---|---|
| Governance documents | Annually | Board composition change, FMA guidance |
| Risk framework | Annually | Material risk event, business change, FMA feedback |
| Compliance framework | Annually | Regulatory change, FMA monitoring feedback |
| Fair dealing policies | Annually | FMA guidance update, complaint trend |
| Advice process documentation | Annually | Code of Conduct update, FMA guidance |
| PDS and fund updates | Continuous (PDS); quarterly (fund updates) | Material information change |
| Client money procedures | Annually | Banking change, audit finding |
| AML/CFT programme | Annually | Risk assessment update, FMA/DIA guidance |
| Complaints procedures | Annually | Complaint trend analysis, DRS feedback |
Step 3: FMA Monitoring Readiness
FMA conducts monitoring visits and thematic reviews. Be prepared to demonstrate:
- Governance framework is documented and functioning
- Risk management is proportionate to the business
- Compliance monitoring programme is implemented with findings tracked
- Fair dealing obligations are met — suitability, disclosure, conflicts management
- Financial advice records are complete and demonstrate good client outcomes
- Client money is handled correctly with regular reconciliation
- Complaints are recorded, resolved, and analysed for trends
- AML/CFT programme is current and independently audited
- Licence conditions are being met
Using AI to Review FMA Compliance Documentation
What AI Can Check
- Completeness — verify policies cover all FMA-required elements
- Consistency — cross-reference policies, procedures, and client-facing documents
- Currency — flag references to superseded legislation or FMA guidance
- PDS compliance — check PDS content against FMC Act prescribed requirements
- Advice record quality — check that advice records include client situation, recommendation, rationale, and alternatives considered
- Disclosure compliance — verify disclosure statements contain all required information
What AI Cannot Replace
- FMA regulatory interpretation for specific situations
- Assessment of whether advice is suitable for specific clients
- Client money reconciliation
- Independent AML/CFT audit
- Board governance effectiveness assessment
- FMA relationship management
Practical Example
In TeamBench, you could configure a reviewer:
Reviewer name: FMA Compliance Documentation Reviewer
System prompt:
You are an FMA compliance documentation reviewer for New Zealand financial service providers. Review governance documents, compliance frameworks, fair dealing policies, advice process documentation, PDS content, and AML/CFT programmes against the Financial Markets Conduct Act 2013, Financial Advisers Act requirements, Code of Professional Conduct for Financial Advice Services, and FMA guidance. Check for: completeness (all FMA-required elements addressed), currency (current legislation and FMA guidance referenced), fair dealing compliance (suitability, disclosure, conflicts management documented), advice record quality (client situation, recommendation, rationale, alternatives), and AML/CFT programme coverage. Flag specific gaps with the FMC Act section or FMA guidance reference. Use New Zealand English.
Evaluation criteria:
- Regulatory Completeness (weight: 3) — All applicable FMA requirements addressed
- Fair Dealing (weight: 3) — Suitability, disclosure, and conflicts management documented
- Consistency (weight: 2) — No contradictions across documents
- Currency (weight: 1) — Current legislation and FMA guidance referenced
- Structure (weight: 1) — Professional presentation, clear organisation
Quality gate: Minimum score: 85.
Upload FMC Act, Code of Professional Conduct, and relevant FMA guidance into a Knowledge Base.
Frequently Asked Questions
Who needs an FMA licence?
Licences are required for: managers of registered managed investment schemes, financial advice providers, derivatives issuers, peer-to-peer lending providers, crowdfunding platforms, independent trustees, and market operators. The specific licence type depends on the financial service provided.
What are FMA's enforcement powers?
FMA can: issue direction orders, apply for civil penalties (up to $1 million for individuals, $5 million for entities), seek criminal prosecution for serious offences, suspend or cancel licences, issue public warnings, and accept enforceable undertakings.
How often does FMA conduct monitoring?
FMA conducts risk-based monitoring — higher-risk entities are monitored more frequently. Thematic reviews (covering a specific topic across the industry) occur regularly. Individual monitoring visits may be scheduled or triggered by concerns. FMA also reviews annual returns and compliance reports submitted by licensed entities.
What CPD requirements apply to financial advisers?
Financial advisers must meet the CPD requirements set by the Code Committee. This typically includes structured and unstructured learning activities, with minimum hours per year. CPD records must be maintained and may be audited. FAPs are responsible for ensuring their nominated representatives also meet competency requirements.
How do we handle complaints about financial advice?
Document every complaint in a central register. Investigate promptly and respond within a reasonable timeframe. If the complaint can't be resolved internally, inform the complainant of their right to escalate to your approved dispute resolution scheme. Analyse complaint trends and report to the board. FMA expects complaints data to drive service improvements.
What's the relationship between FMA and DIA for AML/CFT?
The Department of Internal Affairs (DIA) is the AML/CFT supervisor for financial service providers that are not supervised by the RBNZ or FMA specifically. FMA supervises AML/CFT compliance for entities it licences. The obligations under the AML/CFT Act are the same regardless of supervisor.
Key Takeaways
- FMA requires comprehensive documentation covering governance, risk management, compliance, fair dealing, disclosure, client money, complaints, and AML/CFT.
- Fair dealing is FMA's central focus — document suitability assessments, conflicts management, and fee disclosure for every client interaction.
- Financial advice records must be complete — client situation, recommendation, rationale, and alternatives considered. Incomplete records are a common FMA finding.
- Compliance frameworks must be implemented, not just documented — FMA looks for evidence of monitoring, findings tracking, and board reporting.
- Common failures include fair dealing documentation gaps, incomplete advice records, compliance framework weaknesses, client money handling issues, and complaints management deficiencies.
- Review cycles should be annual for most documentation, with triggered reviews for regulatory changes and FMA feedback.
- AI-assisted review can check completeness, consistency, currency, and advice record quality, but cannot replace FMA regulatory judgement or client money reconciliation.
- Be monitoring-ready at all times — FMA visits may be scheduled or triggered by concerns.
This article provides general information about FMA compliance documentation requirements and is not legal or regulatory advice. Always consult the FMA for current guidance and seek qualified compliance advice for your specific situation.