For fifteen years, the compliance architecture of the average English law firm has rested on a quiet convenience. The managing partner, or the founder, or the finance partner who also happened to run the client account, wore two hats — leader of the business and the regulator's named officer inside it. That convenience is now being legislated out of existence.
In August 2026, the Legal Services Board approved the Solicitors Regulation Authority's draft rules separating the roles of Compliance Officer for Legal Practice (COLP) and Compliance Officer for Finance and Administration (COFA) from firm owners and senior managers. The rules begin a phased rollout from January 2027. For a large slice of the profession, the person who signs off the strategy will no longer be the person who reports the firm to its regulator.
What the rules actually say
The mechanism is narrower than the headlines suggest, and firms should read the thresholds carefully before panicking or relaxing.
Under the new Rule 8.4, a firm with annual turnover above £600,000, or holding more than £2m in client money, cannot appoint as its COLP or COFA anyone who can unilaterally determine or direct significant management decisions. The test is about authority, not job title. A partner with a veto over budgets, headcount or strategy is caught, whatever the letterhead says.
Below both thresholds, sole owner-managers get a partial reprieve. Rule 8.5 lets them remain COLP. Rule 8.6 does not let them remain COFA, the SRA's judgement being that the person who controls the money should never be the person certifying that the money is safe.
Rule 8.7 adds a pressure valve for firms that cross a threshold because of an anomalous transaction e.g. a single large completion, provided the SRA is notified and the firm keeps a written record.
The thresholds moved during the consultation period. The client money trigger was raised from £500,000 to £2m, cutting the number of smaller firms drawn into scope from roughly 1,302 to 576. The SRA gave ground on breadth while conceding nothing on principle.
Alongside the split, firms holding client money face mandatory annual accountants' reports whether qualified or unqualified, with fixed financial penalties for late or missing submissions, from April 2027.
Why now
The proximate cause is client money. The SRA has spent three years dealing with the aftermath of firm collapses in which the same individual held the purse strings and the compliance pen, and in which nobody inside the business was structurally positioned to say no. The regulator's own rationale is characteristically dry: the change will "reduce the risk that conflict or weak internal challenges will allow problems to go undetected and unreported."
Strip out the regulatory register and the argument is simple. A compliance officer whose remuneration, career and partnership standing depend on the very people they may have to report is not independent in any meaningful sense. The role has always carried personal regulatory liability; what it has often lacked is personal regulatory power.
The objections were substantial
The Law Society campaigned hard against the split, calling separation "likely to be ineffective, and impractical" in smaller firms and warning of higher regulatory costs that would be passed to clients and, ultimately, chip away at access to justice. It urged the SRA to invest in better risk data rather than mandate structural change. Respondents also raised concerns about disproportionate impact on sole practitioners and BAME-owned firms, which are over-represented at the smaller end of the market.
The SRA raised the thresholds, published its final decision in June 2026, and pressed on. The LSB's August approval closed the argument.
That outcome leaves a practical problem sitting on a lot of desks. In a 12-partner firm, the pool of people who are senior enough to hold the COLP role and not senior enough to be caught by the management test is small, and sometimes empty. Firms will respond in three broad ways: promoting a non-partner compliance professional into the role, hiring one, or restructuring management authority so that a partner falls outside the Rule 8.4 test. Each carries cost, and the third carries the risk of a paper reorganisation that a regulator can see through.
The real shift: from trust to evidence
The deeper consequence is not who holds the badge, it is what the badge now requires.
A COLP who is also the managing partner knows things. They know which fee-earner is behind on file reviews, which matter has an awkward source-of-funds question, which client account balance has been sitting unreconciled for too long. That knowledge is ambient, informal and undocumented, and under the old model it was usually enough.
An independent COLP or COFA has no ambient knowledge. They have systems, or they have nothing. From January 2027, a compliance officer who cannot see risk assessments, onboarding decisions, client due diligence outcomes and client account activity in something close to real time is carrying personal liability for a business they cannot observe.
That is a governance problem before it is a technology problem, but it resolves into a technology requirement fairly quickly. Firms will need an auditable record of who decided what, on what evidence, and when, the sort of deep governance layer that platforms such as Legl are built to provide, pulling client onboarding, AML and KYC checks, matter risk assessment and client money workflows into a single evidenced trail rather than a scatter of spreadsheets, email threads and partner memory. The point is not automation for its own sake. It is that an officer who no longer sits at the top of the management tree needs a line of sight that does not depend on being told.
The mandatory accountants' report regime sharpens the same point. Annual reporting with fixed penalties turns the client account from something reviewed when someone remembers into something continuously defensible.
What firms should be doing between now and January 2027
The runway is short and largely consumed by people decisions rather than paperwork.
Test your thresholds against forecast, not history. Turnover of £600,000 and £2m in client money are not distant numbers for a mid-sized practice, and a firm that expects to cross either in 2027 should plan as though it is already in scope.
Map management authority honestly. The Rule 8.4 test is about who can direct significant decisions. Work out now which of your current officers fail it.
Identify or recruit the successor. If the answer is an internal promotion, that person needs a year of shadowing, not a handover email. If it is a hire, the market for experienced compliance officers is about to get considerably tighter as several hundred firms reach for the same candidates at the same time.
Fix the visibility gap before the person changes. The worst version of this transition is a new, independent COLP inheriting personal liability alongside a compliance picture assembled from conversations they were never part of. Build the evidence layer while the incumbent is still there to explain it.
Get the accountants' report process ready for April 2027. Fixed penalties do not negotiate.
A structural answer to a structural failure
It is possible to think the Law Society was right about the costs and still think the SRA was right about the risk. Separation will be expensive, awkward in mid-sized partnerships, and occasionally circumvented by firms that reorganise on paper. It will also make it materially harder for one person to control both the money and the reporting of the money - which is precisely the failure mode that produced the collapses behind these reforms.
The firms that come out of this well will be the ones that treat January 2027 as a prompt to build genuine governance infrastructure, rather than a compliance headcount problem to be solved as cheaply as possible.
