Why the COFA Role Exists in Every SRA-Regulated Firm
Every solicitor firm regulated by the Solicitors Regulation Authority (SRA) must appoint a Compliance Officer for Finance and Administration (COFA). This is not optional. The requirement is set out in the SRA Authorisation Rules and applies to all practice structures, including sole practitioners, partnerships, LLPs, and Alternative Business Structures (ABS).
The COFA is the person responsible for ensuring the firm complies with the SRA Accounts Rules and all financial regulatory requirements. The role is distinct from the COLP (Compliance Officer for Legal Practice), who handles broader conduct and regulatory compliance. In smaller firms, one person often holds both roles, but the duties are legally separate.
If you are a solicitor, partner, or COFA yourself, understanding the full scope of these duties is critical. The SRA can and does take enforcement action against COFAs personally when firms fail to comply. This article sets out the core responsibilities, common pitfalls, and practical steps for meeting your obligations.
Statutory and Regulatory Basis for COFA Duties
The COFA role is created by the SRA Authorisation Rules 2011 (as amended). Rule 8.1 requires every authorised body to have a COFA. The SRA's SRA Accounts Rules (current version effective 25 November 2019, with subsequent amendments) form the primary rulebook the COFA must enforce.
The COFA must be a manager of the firm (a partner, member, or director) or an employee with sufficient seniority and authority. The SRA expects the COFA to have a good understanding of the Accounts Rules, the firm's accounting systems, and the risks associated with holding client money.
Key regulatory documents include:
- SRA Accounts Rules 2019
- SRA Authorisation Rules 2011 (Part 4)
- SRA Principles 2019 (especially Principle 7: compliance with regulatory requirements)
- SRA Code of Conduct for Firms (paragraph 3.3: duty to supervise compliance)
The COFA's duties are not limited to the Accounts Rules. They also cover anti-money laundering (AML) compliance, the firm's financial stability, and ensuring proper record-keeping for all financial transactions.
Core COFA Responsibilities: A Detailed Breakdown
1. Ensuring Compliance with the SRA Accounts Rules
This is the COFA's primary duty. The Accounts Rules govern how solicitor firms handle client money. Key requirements include:
- Client money must be held in a separate client bank account, clearly designated as such.
- All client money received must be paid into the client account promptly (normally within 14 days of receipt).
- Money may only be withdrawn from the client account for specific permitted purposes (e.g., paying disbursements, transferring to the office account when earned, or returning to the client).
- Client account reconciliations must be carried out at least every five weeks (Rule 8.3).
- Records must be kept for at least six years after the conclusion of the matter.
The COFA must ensure the firm has robust systems and controls in place to meet these rules. This includes training fee-earners and cashiers on the rules, conducting regular audits, and reporting any breaches to the SRA.
For a deeper look at the rules themselves, see our SRA Accounts Rules Essentials guide.
2. Client Money Safeguarding and Interest
The COFA must ensure client money is held in a bank account that is properly designated and protected. The firm must have a policy on when to pay interest to clients. Under the SRA Accounts Rules, interest must be paid to the client when it is "fair" to do so, considering the amount held and the length of time it was held. Small amounts (typically under £20) can be retained by the firm, but this must be documented in a written policy.
The COFA should also monitor the firm's client account balances to ensure they never fall below the total client money held. Overdrafts on client accounts are a serious breach of the rules.
3. Annual Accountant's Report (if Required)
Most SRA-regulated firms must submit an annual accountant's report to the SRA, unless they qualify for the de minimis exemption. The exemption applies if the firm held no more than £10,000 of client money at any time during the accounting period AND the average client money balance did not exceed £250.
The COFA is responsible for instructing an independent accountant (typically a firm registered with a recognised supervisory body such as ICAEW or ACCA) to prepare the report. The report must be submitted to the SRA within six months of the firm's accounting reference date.
The COFA must also ensure the firm's accounting systems are adequate for the accountant to form an opinion. If the accountant identifies breaches, the COFA must report them to the SRA.
Our COFA compliance support service can help you prepare for the annual report and address any issues before the accountant arrives.
4. Anti-Money Laundering (AML) Compliance
Legal practices are in-scope for the Money Laundering Regulations 2017. The COFA must ensure the firm has appropriate AML policies, controls, and procedures. This includes:
- Appointing a Money Laundering Reporting Officer (MLRO) if the firm is large enough.
- Conducting customer due diligence (CDD) on all clients.
- Keeping records of CDD and risk assessments.
- Training all staff on AML obligations.
- Reporting suspicious activity to the National Crime Agency (NCA).
The COFA must also ensure the firm is registered with the SRA as its supervisory authority for AML purposes. Failure to register is a criminal offence.
5. Financial Stability and Risk Management
The COFA has a duty to monitor the firm's financial health. This includes ensuring the firm has adequate professional indemnity insurance (PII) in place, managing cash flow, and ensuring the firm can meet its liabilities as they fall due.
The SRA expects the COFA to report any material financial risks to the firm's management. If the firm is at risk of insolvency, the COFA must consider whether to notify the SRA.
PII is a significant cost for solicitor firms. For guidance on the tax treatment of premiums, see our Professional Indemnity Tax Treatment guide.
6. Reporting Breaches to the SRA
The COFA must report any material breaches of the SRA Accounts Rules to the SRA. This includes breaches that could result in a loss to clients or the firm, or that indicate a systemic failure in the firm's controls.
The SRA's guidance on reporting is clear: the COFA should report promptly, in writing, and provide full details of the breach, the steps taken to remedy it, and any steps to prevent recurrence. Failure to report a material breach can itself be a regulatory offence.
Practical Steps for Fulfilling Your COFA Duties
Being a COFA is not a passive role. You need to be proactive. Here are practical steps to help you discharge your duties effectively:
- Conduct regular internal audits. Review client account reconciliations, transaction records, and fee-earner compliance at least quarterly.
- Train your team. Ensure all fee-earners and support staff understand the Accounts Rules and their personal obligations. Annual refresher training is good practice.
- Maintain a compliance manual. Document your firm's policies on client money, interest, AML, and breach reporting. Keep it up to date.
- Use technology. Modern practice management software can automate reconciliations and flag potential breaches. Invest in systems that support compliance.
- Engage a specialist accountant. A solicitor-sector accountant can review your systems before the annual report and help you address issues early. Our solicitor accountants team works exclusively with law firms.
- Keep a breach log. Record every breach, however minor. This demonstrates to the SRA that you take compliance seriously and have a system for managing issues.
Common Pitfalls and How to Avoid Them
Even experienced COFAs can fall into traps. Here are the most common issues we see:
- Late reconciliations. The five-week rule is a maximum, not a target. Monthly reconciliations are safer and reduce the risk of errors building up.
- Mixed money. Never hold client money and office money in the same account. This is a fundamental breach.
- Failure to pay interest. Many firms do not have a clear policy on when to pay interest. This can lead to client complaints and SRA scrutiny.
- Inadequate training. If fee-earners do not understand the rules, breaches are inevitable. Invest in training.
- Ignoring small breaches. A pattern of minor breaches can indicate a systemic problem. The SRA will take a dim view of a COFA who does not address them.
When to Seek External Support
No COFA is expected to know everything. If you are unsure about a particular rule or a complex transaction, seek advice from a solicitor-sector accountant or a compliance consultant. The cost of external advice is far less than the cost of an SRA investigation.
Our COFA compliance support service is designed to help COFAs in UK law firms meet their obligations. We offer health checks, training, and ongoing advisory support.
You can also use our SRA client account reserve calculator to check your firm's compliance with the client money rules.
Conclusion
The COFA role is one of the most important in any SRA-regulated solicitor firm. It carries significant personal liability, but it also gives you the opportunity to build a culture of compliance that protects your firm, your clients, and your reputation.
By understanding your core responsibilities, implementing robust systems, and seeking support when needed, you can discharge your duties effectively and avoid the regulatory and financial consequences of non-compliance.
If you have any questions about your COFA responsibilities or need help with your firm's compliance, speak to a legal-sector-specialist accountant. Every firm is different, and tailored advice is always the safest route.