How to draft a vulnerable customers policy

Your vulnerable customers policy is a vital roadmap that directs your team on how to identify and support individuals who may be at a disadvantage due to their personal circumstances. To be effective and compliant with the Financial Conduct Authority (FCA) standards, this document must move beyond theory and provide practical, actionable instructions for your staff. It serves as proof that your business is committed to the "Consumer Duty" by ensuring that all customers, regardless of their situation, receive a high standard of care and experience outcomes as good as any other user.

Understanding the drivers of vulnerability

The first step in drafting your policy is defining what vulnerability looks like in the context of your business. The FCA identifies four key "drivers" that can increase the risk of consumer vulnerability. Your policy should explicitly reference these to help your staff understand the breadth of the issue:

Setting out your identification process

Your policy must detail how your business will spot these signs. Since you may not always meet customers face-to-face, your frontline staff need guidance on identifying "red flags" through digital interactions or phone calls. Consider including these steps:

• Active Listening: Train staff to listen for cues, such as a customer mentioning a hospital stay, sounding confused, or expressing anxiety about bills.
• Data Analysis: If your platform monitors transaction patterns, note how you might identify sudden changes that suggest a customer is struggling.
• Self-Identification: Ensure your website or app has a clear, low-friction way for customers to tell you about their needs voluntarily.

Operational adjustments and support

Once a vulnerable customer is identified, your policy needs to explain exactly what changes your staff will make to support them. You should document specific "reasonable adjustments," such as:

• Communication Preferences: Offering documents in large print, providing summaries of long calls, or allowing a trusted third party to speak on the customer's behalf.
• Time and Patience: Allowing extra time for customers to make decisions without pressure or providing a "cooling-off" period after a purchase.
• Specialist Support: Routing vulnerable customers to a dedicated, senior support team that has received advanced empathy and problem-solving training.

Tip: Always ensure your policy mandates that staff ask for explicit consent before recording a customer’s health or vulnerability data, in line with UK GDPR requirements.

Monitoring and reporting outcomes

A policy is only useful if it works. Your document must outline how you will measure the success of your support. This usually involves tracking specific Key Performance Indicators (KPIs) and reviewing them at board level. You might track:

1. Customer Satisfaction (CSAT): Comparing scores from vulnerable customers against the general customer base to ensure parity.
2. Complaint Levels: Monitoring whether vulnerable customers are complaining more frequently about specific products or processes.
3. Staff Feedback: Regularly asking frontline teams if they feel they have the tools and authority to help those in need.

Governance and staff training

Finally, state how often the policy will be reviewed (at least annually) and how staff will be trained. Every member of your team should know the policy exists and where to find it. Make it clear that supporting vulnerable customers is a shared responsibility, not just a task for the compliance department. By following these steps, you create a culture of care that protects both your customers and your firm’s reputation.