Debt collection compliance in the UK and EU

Debt collection compliance in the UK and EU isn't one set of rules.

A collections strategy that works in the UK may need a different approach in France, Germany, the Netherlands, or another EU market. Requirements can vary by country, product, customer circumstance, communication channel, and the type of organization collecting the debt.

This creates a practical challenge for collections leaders. Teams need to apply the right policies in the right market, keep customer information accurate, support people in financial difficulty, and show how decisions were made when a complaint, review, or regulatory question arises.

The UK has a clear regulatory center in the Financial Conduct Authority, or FCA, for relevant consumer credit activity. The EU is more fragmented. EU-wide rules such as GDPR and consumer credit legislation matter, but national laws, regulators, and enforcement approaches also shape how collections activity is carried out.

This guide explains the main areas collections teams need to consider. It isn't a legal checklist, and it doesn't replace local legal advice. Instead, it acts as a starting point for understanding why UK and EU collections compliance needs a market by market operating model.

Why UK and EU collections compliance isn’t one rulebook

The UK and EU share some broad priorities. Regulators expect organizations to treat customers fairly, protect personal data, provide clear information, and manage complaints and vulnerable customers appropriately.

But the legal structure is different.

In the UK, the FCA regulates relevant financial services and consumer credit activity. Its rules and guidance, including the Consumer Credit sourcebook, or CONC, and Consumer Duty, shape how many firms approach arrears, default, recovery, customer support, and fair treatment.

In the EU, there is no single collections regulator that sets one uniform rulebook for every country. EU law can create common requirements, but national governments, courts, and competent authorities apply and enforce rules locally. A cross-border collections operation needs to account for both EU-wide obligations and local requirements in each market.

This means a policy that says “this is how we handle collections in Europe” is rarely enough.

Teams need to understand:

• Which country’s rules apply to the account and customer
• Whether the activity relates to regulated consumer credit or another product
• What communication, disclosure, and customer support requirements apply
• How privacy and customer data rules affect the process
• What vulnerability, hardship, complaint, and dispute procedures are expected
• Which third parties or service providers are involved
• What evidence the organization needs to retain

The UK: the FCA’s role in collections

For relevant UK consumer credit activity, the FCA plays an important role in setting and supervising conduct expectations.

The FCA’s objectives include protecting consumers, protecting and enhancing the integrity of the UK financial system, and promoting effective competition in consumers’ interests. In collections, this focus shows up in the way firms manage customers in arrears or default, communicate with them, assess support needs, and oversee third parties.

The FCA took over responsibility for regulating consumer credit from the Office of Fair Trading in 2014. Since then, collections and recovery have become more closely linked to wider expectations around customer outcomes, vulnerability, transparency, and fair treatment.

For collections teams, three areas are especially important.

Consumer Duty

Consumer Duty sets higher standards of consumer protection for firms within its scope. It requires firms to act in good faith, avoid foreseeable harm, and enable and support retail customers to pursue their financial objectives. It also includes four outcomes: products and services, price and value, consumer understanding, and consumer support.

Collections and recovery can be a difficult point in the customer journey. Teams need to consider whether customers can understand the information they receive, access appropriate support, and take action without unreasonable barriers.

This doesn't mean every customer needs an entirely bespoke process. It means firms need to consider customer needs, monitor outcomes, and avoid a one-size-fits-all approach where it could create foreseeable harm.

Read more in our guide to Consumer Duty in collections and recovery.

CONC and collections conduct

The FCA’s Consumer Credit sourcebook includes rules and guidance for firms dealing with customers in arrears, default, and recovery. CONC 7 covers areas including communications, treatment of customers in financial difficulty, and debt recovery practices for relevant regulated activity.

The detail matters. Collections teams should avoid reducing CONC to a single rule about call frequency or tone of voice. In practice, firms need to consider the full customer journey, including account status, communication content, payment arrangements, support needs, disputes, and escalation activity.

A strong operating process helps teams apply approved policies consistently, record relevant decisions, and route exceptions to the right people.

For a practical discussion of this topic, see FCA debt collection rules and fair treatment.

Vulnerable customers and financial difficulty

The FCA expects firms to identify customers in vulnerable circumstances and provide support that meets their needs. Its Consumer Support outcome includes an expectation that firms design and deliver support that meets retail customers’ needs, including those with characteristics of vulnerability, and monitor whether customers receive the support they need.

For collections teams, this may involve reviewing how they:

• Identify relevant customer disclosures or indicators
• Record information appropriately and handle it sensitively
• Route customers to trained staff or specialist support
• Adjust communications, workflows, or escalation activity where appropriate
• Avoid asking customers to repeat distressing information
• Monitor whether support processes are working as intended
• Oversee third party agencies that may contact customers

Technology can support consistent workflows and records. It doesn't replace training, human judgment, clear policies, or accountability for customer outcomes.

Read more in our guide to FCA vulnerable customer guidance for collections teams.

The EU: shared rules, local implementation

The EU has several legal frameworks affecting collections, but it doesn't have a single regulator that governs all debt collection activity across every member state.

This is where many cross-border strategies become too simplistic.

An EU-wide framework may establish broad obligations, while national laws set the detailed rules around debt collection practices, consumer credit agreements, licensing, communications, limitation periods, fees, enforcement, and complaint handling. National regulators and courts can also interpret and enforce those rules differently.

For collections teams operating across the EU, this means local legal and compliance input is essential.

GDPR and customer data

The General Data Protection Regulation, or GDPR, is central to collections because the process relies on personal and financial data.

Collections teams may handle contact details, account balances, payment history, affordability information, hardship indicators, call notes, dispute details, and communications records. GDPR can affect how that information is collected, used, retained, accessed, corrected, shared, and protected.

Operational questions often include:

• Do we have a clear purpose and lawful basis for using each type of data?
• Are we collecting and retaining only the information we need?
• Can customers exercise relevant data rights through a defined process?
• Do our agencies and service providers handle data appropriately?
• Can we explain how automated or data driven processes affect customers where required?
• Are data transfers and access controls appropriate for the markets involved?

GDPR compliance isn't a one time project. It needs to be built into the way collections teams manage account data, customer preferences, workflows, and third party relationships.

For more detail, see GDPR compliance in debt collection.

Consumer credit rules and local requirements

EU consumer credit rules can affect the wider customer lifecycle, including lending, affordability, disclosures, and treatment when a customer falls into arrears. However, the operational requirements that matter in collections often depend on the country where the activity takes place.

For example, organizations may need to account for local rules around:

• Customer communications and required notices
• Collections fees and interest
• Payment arrangements and hardship treatment
• Debt sale and third party agency activity
• Licensing, authorization, or registration requirements
• Complaint handling and escalation
• Legal action, enforcement, and limitation periods
• Language and accessibility requirements

That is why cross-border collections can't be managed through a single universal workflow. The underlying operating model needs to allow for local rules, local advice, and controlled policy variation.

If you work with BNPL products, see our guide to the EU Consumer Credit Directive and BNPL.

AI and automated decision making

AI and automated decision making are becoming more relevant to collections, but the regulatory position depends on the use case.

Organizations may use analytics or AI to prioritize accounts, support agents, identify possible hardship signals, summarize account histories, or recommend next actions. Those uses raise questions about data quality, transparency, human oversight, bias, privacy, and accountability.

The EU AI Act and GDPR are both relevant to this conversation, but neither should be reduced to a simple technology checklist. The obligations and risk classification can depend on how the system is used and the decisions it influences.

For more detail, see what the EU AI Act means for collections and GDPR and AI in debt collection.

What collections leaders need to manage across markets

Even where the legal rules differ, the operational questions often look familiar.

Collections leaders need to be able to answer:

• Which requirements apply in each market?
• Which customers, products, and accounts are affected?
• How do local rules change communications, workflows, and escalation paths?
• How are vulnerability, hardship, complaints, and disputes handled?
• What data can be used, shared, and retained?
• How are third party agencies and service providers managed?
• How do teams test changes before they affect customers?
• What records are available if a customer, regulator, or internal reviewer asks what happened?

The challenge isn't simply knowing that rules exist. It's translating them into processes that people can follow consistently.

Build a collections operation that can adapt

A global or multi-market collections operation needs enough consistency to maintain control, but enough flexibility to reflect local requirements.

This usually means having:

• Clear ownership of regulatory interpretation and policy decisions
• Local legal and compliance input before changes go live
• Configurable workflows, communication templates, and account treatment rules
• A reliable record of customer interactions, preferences, and account status
• Controlled processes for testing and approving changes
• Training for internal teams and third party partners
• Monitoring that looks at customer outcomes as well as operational activity
• A process for reviewing exceptions, complaints, and recurring issues

Technology can help teams manage workflow variation, records, access, and change control. It can't tell an organization what the law requires or guarantee a compliant outcome.

Moving towards simplified compliance in collections

Compliance has become central to operational brand trust and long term success in the collections space. From navigating the FCA’s outcome-based enforcement to managing multi-layered EU oversight, collections teams have to show they can deliver fair, auditable and customer centric outcomes at scale. 

That’s where a collections solution built for modern compliance standards becomes essential. By embedding compliance into every treatment path a dedicated solution provides teams with the ability to meet regulatory expectations without sacrificing efficiency or agility.

It’s time to reduce risk, build trust, and drive performance through compliant collections. Contact us through inquiries@crsoftware.com today.