COLP and COFA Roles Explained: A UK Solicitor's Guide to Both Compliance Officers

What Are the COLP and COFA Roles?

The Solicitors Regulation Authority (SRA) requires every regulated law firm in England and Wales to appoint two designated compliance officers: a Compliance Officer for Legal Practice (COLP) and a Compliance Officer for Finance and Administration (COFA). The appointment is mandatory under the SRA Authorisation of Firms Rules, and a firm cannot be authorised, or remain authorised, without both roles filled by named individuals.

These roles place personal accountability on individuals within the firm. The COLP owns the firm's overall regulatory compliance. The COFA owns the firm's financial compliance, in particular the SRA Accounts Rules and the handling of client money. The two roles are distinct, but they overlap at the edges, because financial compliance is part of the wider regulatory picture the COLP is ultimately responsible for.

This guide is the overview of both roles and, importantly, the distinction between them: what each officer covers, who can be appointed, and the personal duties each carries. For the deeper detail of the COFA's finance and accounts duties (the client account, reconciliations, the accountant's report, breach reporting under the Accounts Rules), see our dedicated COFA responsibilities guide.

The COLP and COFA Split at a Glance

The simplest way to understand the two roles is by what each one owns:

• The COLP owns overall regulatory compliance. The SRA Principles, the Code of Conduct for Firms and for Solicitors, the firm's systems and controls, reporting of serious breaches, professional indemnity insurance, anti-money laundering oversight, and the firm's wider authorisation conditions.
• The COFA owns financial compliance. The SRA Accounts Rules, the safeguarding of client money, the operation of the client account, the five-weekly reconciliation, and the annual accountant's report (where one is required).

The line between them is not a wall. The SRA Accounts Rules sit inside the SRA Standards and Regulations, so a serious breach of the Accounts Rules is also a regulatory matter the COLP needs to be aware of. In practice the two officers work closely together, and in smaller firms they are frequently the same person. What matters is that, for any given compliance question, it is clear which officer leads and that nothing falls between them.

Who Must Appoint a COLP and COFA?

Every SRA-authorised body must have a COLP and a COFA. This includes:

• Sole practitioner solicitors
• Traditional partnerships
• Limited liability partnerships (LLPs)
• Recognised bodies (lawyer-owned companies and LLPs)
• Alternative Business Structures (ABSs) and other licensed bodies

The individuals appointed must be managers of the firm or, in the case of a licensed body such as an ABS, a manager or an employee. A manager includes a partner in a partnership, a member of an LLP, a director of a company, or a sole practitioner. The roles must be held by individuals, not corporate entities, and the SRA must approve each appointment.

In a sole practitioner firm, the sole practitioner typically acts as both COLP and COFA. In larger firms, the roles are usually held by separate individuals, often supported by a deputy or a compliance team.

Who Can Be Appointed: Eligibility for Each Role

The eligibility rules differ between the two roles, and this is one of the practical points firms most often get wrong.

COLP eligibility

The COLP must be a solicitor, a registered European lawyer, a registered foreign lawyer, or a barrister, and must be a manager of the firm. Because the COLP carries responsibility for the firm's overall regulatory compliance, the SRA expects this to be someone with legal-sector standing and real authority within the firm. The COLP must consent to the appointment and must not be disqualified from acting.

COFA eligibility

The COFA must be a manager of the firm or, in a licensed body, a manager or an employee, with sufficient knowledge of the SRA Accounts Rules and the firm's accounting systems. The COFA does not have to be a qualified lawyer, which means a firm can appoint a suitably experienced practice manager or finance manager (in a licensed body) provided they have the necessary knowledge and authority. What the SRA looks for is genuine competence in client money handling, not a particular job title.

In both cases the SRA expects the appointed officer to have the seniority and authority to discharge the role. A nominal appointment, where the named officer has no real ability to influence the firm's conduct, does not satisfy the rules.

COLP Duties: What the Compliance Officer for Legal Practice Must Do

Core responsibilities

The COLP's primary duty is to take all reasonable steps to ensure the firm, and everyone in it, complies with the firm's SRA authorisation and with the SRA Standards and Regulations (other than the Accounts Rules, which sit with the COFA). This includes:

• Ensuring compliance with the SRA Principles, the Code of Conduct for Firms, and the Code of Conduct for Solicitors
• Ensuring the firm has effective systems and controls in place
• Recording any failure to comply, and reporting serious breaches to the SRA promptly
• Ensuring the firm meets its authorisation conditions and reporting obligations
• Ensuring all solicitors and staff understand their regulatory obligations

Practical day-to-day activities

In practice, the COLP's work involves regular reviews of the firm's policies, training records, and risk registers. The COLP should be involved in onboarding new fee-earners, reviewing complaints handling procedures, and ensuring that anti-money laundering (AML) processes are current.

The COLP also oversees the firm's approach to professional indemnity insurance (PII). The firm must hold PII on at least the SRA Minimum Terms and Conditions, and the COLP should ensure the renewal process is completed on time. A lapse in PII cover can leave the firm unable to practise.

COFA Duties: What the Compliance Officer for Finance and Administration Owns

The COFA's role is focused on the firm's financial compliance under the SRA Accounts Rules. At overview level, the COFA owns:

• Ensuring client money is properly held and accounted for, separate from the firm's own money
• Overseeing the client account reconciliation, which must be carried out at least every five weeks and signed off by the COFA or a manager
• Recording any failure to comply with the Accounts Rules, and reporting serious breaches to the SRA
• Ensuring the firm's accounting systems and controls are adequate
• Arranging the annual accountant's report where the firm is required to obtain one

This page deliberately keeps the COFA duties at overview level. The finance detail (how the client account works, what the five-weekly reconciliation involves, when the accountant's report is required and how to prepare for it, and how the COFA reports breaches) is covered in depth in our COFA responsibilities guide. If you are stepping into a COFA role, start there.

One point worth flagging here, because it is widely misstated, is the accountant's report exemption. A firm that has held client money in the accounting period must obtain an accountant's report within six months of the period end, unless either of two conditions is met: (a) all of the client money held or received during the period was money received from the Legal Aid Agency, or (b) the statement or passbook balance of client money held did not exceed an average of £10,000 and a maximum of £250,000 during the period. Both limbs of the second test must be satisfied. The COFA is responsible for assessing whether the firm qualifies and, where it does not, ensuring the report is filed on time.

Appointment and Notification Requirements

When a firm applies for SRA authorisation, it must name its proposed COLP and COFA. The SRA assesses whether the individuals are suitable. Once approved, the firm must notify the SRA of any change in COLP or COFA promptly, and within seven days of the change.

The COLP and COFA must be individuals, not corporate entities, and must have sufficient authority within the firm to discharge their duties effectively. The SRA expects the firm to give them adequate resources, including time, training, and access to information across the firm.

If a COLP or COFA leaves the firm, the firm must appoint a replacement promptly. A gap in coverage can lead to regulatory action. Firms should have a succession plan in place, particularly smaller practices where the COLP or COFA is a single key individual.

Personal Liability and Regulatory Risk

The COLP and COFA roles carry personal liability. The SRA can take action against the individual, not just the firm. This includes a written rebuke, a fine, conditions on the individual's practising certificate, or referral to the Solicitors Disciplinary Tribunal.

Common failures that lead to action against a COLP or COFA include:

• Failure to report a serious breach as soon as reasonably practicable
• Inadequate systems and controls leading to client money being put at risk
• Failure to ensure the firm holds adequate PII (a COLP responsibility)
• Failure to keep the client account reconciled and properly recorded (a COFA responsibility)
• Knowingly allowing the firm to operate outside the SRA Standards and Regulations

The SRA's approach is outcomes-focused. It will look at whether the COLP or COFA took reasonable steps to prevent the failure. If they can demonstrate that they had appropriate systems in place and acted promptly when issues arose, the SRA is less likely to take action against them personally.

Can the Same Person Be Both COLP and COFA?

Yes, in principle. The SRA allows the same individual to hold both roles, provided they have the necessary knowledge and skills for each. This is common in sole practitioner firms and small partnerships, where the sole practitioner often holds both.

However, in larger firms it is generally better practice to separate the roles. The COLP's focus is legal practice compliance, while the COFA's focus is financial compliance. Combining the roles concentrates risk in one individual and can make it harder to provide independent oversight of the client account.

If the same person holds both roles, the firm should ensure there is a deputy who can step in if the COLP or COFA is unavailable, and should consider whether the individual genuinely has time to discharge both sets of duties effectively.

Practical Steps for Solicitors Stepping Into These Roles

For the COLP

• Maintain a compliance manual that sets out the firm's policies and procedures
• Conduct regular risk assessments and keep the firm's risk register current
• Provide annual training to all fee-earners and support staff on regulatory obligations
• Review the firm's complaints log and ensure timely responses
• Oversee the firm's AML compliance, including client due diligence and suspicious activity reporting
• Keep a clear record of breaches considered and any reports made to the SRA

For the COFA

• Ensure client account reconciliations are completed at least every five weeks and signed off
• Review the firm's accounting records for anomalies, unidentified balances, or residual client balances
• Confirm whether the firm needs an accountant's report and, if so, that it is obtained on time
• Maintain a clear record of client money decisions and any breaches reported

The COFA points above are the overview. The step-by-step finance detail behind them sits in the COFA responsibilities guide. Both officers should keep a written record of their activities, including decisions made and actions taken, which can be invaluable if the SRA ever investigates the firm.

Common Mistakes and How to Avoid Them

One common mistake is treating the COLP or COFA role as a purely administrative function. The SRA expects these officers to be actively engaged in the firm's compliance, to meet regularly with the firm's management, and to be empowered to escalate concerns and, where necessary, override commercial pressure.

Another mistake is leaving it unclear which officer owns a given issue, so that a problem sitting at the boundary of legal and financial compliance is picked up by neither. The COLP and COFA should agree, in writing, where the line falls on shared issues such as a client money breach that also raises a wider conduct concern.

A third mistake is delay in reporting. The SRA requires serious breaches to be reported "as soon as reasonably practicable". A delay can itself be treated as a failure of the COLP or COFA's duty. If in doubt, record the matter, take advice, and report.

For the wider rulebook the COFA works within, read our guide to the SRA Accounts Rules, which sets out how client money must be handled and how those rules interact with the COFA role.

Conclusion

The COLP and COFA roles are fundamental to the SRA's regulatory framework. Every UK solicitor who is a manager of a regulated firm should understand both roles and, just as importantly, the line between them: the COLP owns overall regulatory compliance, the COFA owns financial compliance and client money, and in smaller firms one person often holds both.

The duties are significant and carry personal liability, but they are manageable with clear ownership, proper systems, training, and support. Firms that invest in their compliance infrastructure reduce the risk of regulatory action and build a culture of integrity.

If you are taking on a COFA role specifically, the natural next step is the detailed COFA responsibilities guide, which goes deeper on the client account, reconciliations, the accountant's report, and breach reporting. For tailored support with your firm's SRA compliance and accounts, our team works with law firms across England and Wales.