Receiving an SRA investigation notice is one of the most stressful events a solicitor or law firm can face. The Solicitors Regulation Authority has broad powers to examine your files, question your staff, and impose sanctions ranging from a warning to closure of the practice. How you respond in the first days and weeks can determine the outcome.

This guide explains the practical steps a law firm should take when handling an SRA investigation. It covers the initial SRA notice, the client matter review process, and how to prepare a robust investigation response. The advice is general; every case depends on the specific facts and regulatory context.

What Triggers an SRA Investigation?

The SRA opens investigations for many reasons. A complaint from a client or third party is the most common trigger. Other triggers include a qualified accountant's report that flags irregularities, a COFA self-report, a media report, or a routine thematic review that uncovers issues.

The SRA also monitors law firm accounts through its data analytics. Unusual patterns in client account transactions, late reconciliations, or high volumes of cash payments can prompt an investigation without any external complaint.

Once the SRA decides to investigate, it issues a formal SRA notice. This document sets out the scope of the investigation and the powers the SRA intends to use. It may require you to produce documents, attend an interview, or allow an inspection of your premises.

Immediate Steps After Receiving an SRA Notice

Do not panic. Panic leads to mistakes. Take these steps in the first 24 to 48 hours.

1. Notify Your COLP and COFA

Your Compliance Officer for Legal Practice (COLP) and Compliance Officer for Finance and Administration (COFA) must be informed immediately. They are the designated officers responsible for regulatory compliance. They need to know the scope of the SRA notice so they can begin gathering relevant material and assessing risk.

If your firm does not have a COLP or COFA, the SRA notice will name the individuals responsible. In a sole practice, that is you.

2. Engage a Specialist Solicitor

Do not handle an SRA investigation alone. You need a solicitor who specialises in regulatory law, ideally one with experience representing law firms before the SRA. Your usual firm's solicitor may be excellent at conveyancing or litigation, but regulatory defence is a distinct specialism.

Your regulatory solicitor will advise on privilege, the scope of disclosure, and how to frame your investigation response. They will also handle direct communications with the SRA, which reduces the risk of you saying something inadvertently damaging.

3. Secure Your Files and Data

Identify all files and documents within the scope of the SRA notice. Place them under your control. Do not destroy, alter, or remove any document. Doing so is a serious regulatory and potentially criminal offence.

If the SRA notice covers electronic data, work with your IT provider to preserve email archives, accounting records, and case management system data. Ensure backups are intact and accessible.

4. Brief Your Team

Inform relevant staff that an investigation is underway. Instruct them not to discuss the matter with anyone outside the firm, including clients, other solicitors, or on social media. Emphasise that all communications with the SRA must go through your regulatory solicitor.

Staff who are not directly involved should know only what they need to know. Avoid creating unnecessary anxiety.

Understanding the Client Matter Review

A client matter review is a core part of many SRA investigations. The SRA will select a sample of client files and examine them for compliance with the SRA Accounts Rules, the SRA Standards and Regulations, and the Code of Conduct for Solicitors.

The review typically covers:

  • Client care letters and terms of engagement
  • File opening procedures, including anti-money laundering checks
  • Billing and disbursement records
  • Client account entries, transfers, and reconciliations
  • Compliance with undertakings and undertakings registers
  • Confidentiality and conflict of interest checks

The SRA will compare what your files show against what the rules require. Any gap becomes a finding in the investigation report.

How to Prepare for a Client Matter Review

If the SRA notice indicates a client matter review is coming, you can prepare proactively. Your regulatory solicitor will advise on the scope, but you can take these steps:

  • Conduct your own internal review of the files the SRA is likely to examine. Identify any obvious compliance gaps and document corrective actions already taken.
  • Ensure all files are complete. Missing documents, such as signed client care letters or evidence of identity checks, will be noted.
  • Check client account reconciliations. The SRA will look for unreconciled balances, late reconciliations, or transfers that lack proper authorisation.
  • Review undertakings. Any outstanding or breached undertakings are a red flag.

If you find problems, do not try to hide them. The SRA treats concealment far more seriously than the underlying breach. Your regulatory solicitor can help you decide whether to self-report the issue before the SRA finds it.

Drafting the Investigation Response

Your investigation response is your formal reply to the SRA notice. It is not a simple letter. It is a carefully structured document that sets out your position, provides evidence, and addresses each allegation or concern raised by the SRA.

Structure of a Strong Response

A good investigation response follows this structure:

  • Introduction: Confirm receipt of the SRA notice, identify the individuals involved, and state that you are cooperating fully.
  • Background: Provide context about the firm, its structure, and the relevant work. This helps the SRA understand the environment in which the alleged breach occurred.
  • Response to each allegation: Address each point in the SRA notice separately. For each, state whether you accept or dispute the allegation, explain the facts, and provide supporting evidence.
  • Mitigating factors: If a breach occurred, explain why. Was it a one-off error? Did it result from a misunderstanding of a rule? Have you since implemented new procedures to prevent recurrence?
  • Remedial steps: Describe any corrective actions taken. This might include additional training, revised policies, enhanced supervision, or changes to accounting software.
  • Conclusion: Summarise your position and confirm your willingness to cooperate further.

Evidence to Include

Attach copies of relevant documents. These might include:

  • Client care letters and engagement terms
  • File notes and attendance records
  • Client account statements and reconciliations
  • Anti-money laundering documentation
  • Training records
  • Internal compliance policies
  • Any correspondence with the SRA or the client

Do not send original documents. Provide copies. Keep a full set of everything you send.

Common Mistakes in Investigation Responses

Avoid these errors:

  • Being defensive or aggressive. The SRA expects cooperation, not confrontation. A hostile tone damages your credibility.
  • Providing incomplete or inaccurate information. If you do not know the answer to a question, say so. Do not guess.
  • Delaying without good reason. The SRA sets deadlines. If you need more time, ask for it promptly and explain why.
  • Failing to address the real issue. Sometimes the SRA notice focuses on a symptom, not the root cause. Your response should identify and address the underlying problem.

What Happens After You Submit Your Response?

The SRA will review your investigation response and supporting evidence. It may ask follow-up questions, request further documents, or schedule an interview. Your regulatory solicitor will handle these interactions.

The SRA has several possible outcomes:

  • No further action: The SRA is satisfied no breach occurred or the matter is not serious enough to warrant action.
  • Warning or rebuke: A formal warning that does not restrict your practice but remains on your record.
  • Conditions on your practising certificate: Restrictions on the type of work you can do, supervision requirements, or limits on client money handling.
  • Fine: The SRA can impose a financial penalty.
  • Referral to the Solicitors Disciplinary Tribunal (SDT): For serious breaches, the SRA may refer the case to the SDT, which can impose sanctions including suspension or strike-off.

The outcome depends on the severity of the breach, your cooperation, and the effectiveness of your investigation response.

Practical Tips for COFAs and COLPs

If you are a COFA or COLP, an SRA investigation is a direct test of your compliance systems. Here are practical steps to reduce the risk of an investigation and improve your response if one occurs:

  • Maintain a compliance file. Keep records of all training, policy reviews, and compliance checks. This shows the SRA that compliance is embedded in your firm, not an afterthought.
  • Conduct regular internal audits. Review a sample of client files every quarter. Identify issues early and fix them before they become regulatory problems.
  • Self-report promptly. If you discover a breach, self-report to the SRA within a reasonable time. The SRA views self-reporting as a mitigating factor.
  • Use technology. Case management and accounting software can automate compliance checks, reducing human error. Ensure your systems produce clear audit trails.

For more detailed guidance on COFA responsibilities, see our COFA fundamentals guide.

When to Seek Professional Help

An SRA investigation is not the time to cut corners. The cost of a regulatory solicitor and a legal-sector-specialist accountant is small compared to the potential cost of a fine, conditions, or closure.

Your accountant can help with the financial aspects of the investigation, such as reviewing client account records, preparing reconciliations, and explaining accounting entries to the SRA. They can also advise on whether your accounting systems need improvement to prevent future issues.

If you need support with SRA compliance, our COFA compliance support service can help you build robust systems. For help with client account reconciliations and SRA Accounts Rules, see our SRA Accounts Rules services.

Conclusion

An SRA investigation is a serious matter, but it is not necessarily the end of your practice. A prompt, well-prepared, and cooperative response can significantly improve the outcome. The key steps are: notify your COLP and COFA, engage a specialist regulatory solicitor, secure your files, prepare for the client matter review, and draft a thorough investigation response.

Every investigation is different. The facts of your case, the nature of the alleged breach, and your firm's compliance history all matter. Speak to a legal-sector-specialist accountant and a regulatory solicitor for advice tailored to your situation.