Legal

Nobody Wants to Be a COLP – The Law Firm Role Nobody Competes For

Every law firm in England and Wales is legally required to appoint a Compliance Officer for Legal Practice (COLP) and a Compliance Officer for Finance and Administration (COFA). These roles have existed since 2013 and form a critical part of the Solicitors Regulation Authority (SRA)’s risk‑based regulatory model.

But according to the SRA’s December 2025 Thematic Review of Compliance Officers, there is one alarming truth:

Not a single compliance officer reported any internal competition for their role.

That’s right - zero.
Nobody wants to be a COLP.

In this article (and accompanying video), we explore why this crisis matters, what the SRA uncovered, and what it means for the future of compliance in UK law firms.

Compliance & Risk Management Compliance
Brian Rogers

by Brian Rogers

Regulatory Director, Access Legal (The Access Group)

Posted 06/03/2026 | Updated 20/03/2026

Why the SRA’s 2025 Review Should Concern Every Law Firm

Despite the COLP/COFA regime running for over a decade, the SRA had never conducted a thematic review until 2025.
The findings raise serious questions about risk, culture, sustainability, and client protection.

Among the most striking numbers:

  • 0 candidates competing for COLP roles inside firms
  • 800 COLP changes every year in active firms
  • 75% of COLPs are firm owners
  • 16% of COLPs believe they’re not the right person for the job
  • Breaches going on for 6–15 years in some firms
  • New COLPs often take the role blind, with no handover

This paints a worrying picture: compliance roles are being treated as a regulatory burden, not a strategic function.

What Does a COLP Actually Do?

Many lawyers and sometimes even the COLPs themselves, don't fully understand the breadth of the role. According to the SRA, a COLP must:

1. Ensure firm‑wide compliance with SRA authorisation requirements

If the firm breaches its terms of authorisation, the SRA can revoke it. This places huge responsibility on one person.

2. Oversee compliance across ALL roles: managers, employees, and interest holders

This includes junior staff and senior equity partners, creating built‑in cultural challenges.

3. Ensure breaches aren’t caused or contributed to by people inside the firm

A COLP has to understand and monitor processes across every practice area.

4. Report serious breaches to the SRA promptly

And critically, they must also report matters they reasonably believe may amount to a breach.
Even if they aren't sure.

This nuance is often misunderstood. Many COLPs don’t realise they must report potential breaches, not just confirmed ones.

The Appointment Crisis: Why COLPs Are Burning Out

The SRA review revealed an uncomfortable truth:
Firms appoint COLPs out of necessity, not strategy.

Why is nobody applying?

  • High liability and regulatory exposure
  • Conflicts of interest (especially for owner‑COLPs)
  • No financial recognition for additional responsibilities
  • Career risk for employed staff who challenge partners
  • Perception of the role as “toxic”, a word used by several COLPs in the report

Many COLPs are press‑ganged into the role, simply because the firm needs someone - anyone - with a practising certificate to fill the slot.

When COLPs Leave: The Succession Crisis

Another major issue is succession planning:

  • 16% of COLPs plan to retire imminently.
  • Very few firms have successors lined up.
  • Some exiting COLPs don’t provide any handover at all.

That means new COLPs inherit the role blind, often unaware of historic breaches, gaps in reporting, or missing systems. Yet from day one, they are legally accountable.

This lack of continuity creates significant regulatory risk.

Why COLPs Don’t Feel Valued

The SRA found:

  • Only 44% of COLPs feel valued by their firms
  • Only one COLP out of 36 received a pay rise
  • Many see the role as a career dead end
  • The title “Compliance Officer” lacks the authority of “Head of Legal Practice,” despite the Legal Services Act using the latter term

The cultural problem is clear:
compliance is seen as a barrier, not an enabler.

This mindset places both clients and firms at risk.

The Result? Regulatory Theatre

When compliance is:

  • under‑resourced
  • misunderstood
  • undervalued
  • and avoided…

…you don’t get a compliance system.
You get regulatory theatre. Compliance that looks good on paper but fails in practice.

Examples include:

  • missing documentation
  • incomplete breach logs
  • inconsistent supervision
  • unreported incidents
  • outdated policies
  • no training or meaningful oversight

This is a ticking time bomb for firms.

Why This Matters: Compliance Is Core to Running a Law Firm

Running a modern law firm without strong compliance leadership is like driving without headlights. You may get away with it for a while, until you don’t.

Clients expect professionalism.
Regulators expect accountability.
Firms need resilience.

The SRA’s 2025 review shows that many firms are falling dangerously short.

What’s Next in the Series?

The next article and video explore:

Episode 2: “The Knowledge Crisis - Only One COLP Knew Their Job”

We’ll look at:

  • The training gap
  • Misunderstood responsibilities
  • Systemic failures in COLP preparation
  • The risks of under‑informed compliance leadership

This is one of the most shocking findings in the entire SRA review.

Final Thoughts

“Nobody wants to be a COLP” isn’t a throwaway line, it’s a red flag for the entire sector. The SRA review exposes deep structural issues in how firms view, resource, and support compliance.

If the role remains undervalued, under‑resourced, and avoided, firms risk:

  • regulatory sanctions
  • loss of authorisation
  • financial penalties
  • reputational damage
  • client harm

Change starts with recognising the importance of the role and supporting the people who take it on.

Brian Rogers

By Brian Rogers

Regulatory Director, Access Legal (The Access Group)

Brian Rogers FCMI is a legal risk and compliance specialist with more than 30 years of hands-on experience helping regulated legal entities meet their regulatory, compliance, and accreditation obligations. His areas of expertise span legal risk management, SRA compliance, data protection (UK GDPR), anti-money laundering (AML), and legal practice management.

With over 20 years working directly inside legal practice management, Brian brings first-hand practitioner knowledge (not just theoretical guidance) to the complex and ever-changing legal regulatory landscape. He is the creator of Access Legal Compliance system (formerly Riliance - the award-winning market-leading risk & compliance software system), one of the UK's leading compliance management systems built specifically for law firms and regulated legal entities.

Brian's expertise and leadership have been independently recognised through industry awards, including being named a Business Leader of the Year Finalist (Large Business) at the ex-Forces in Business Awards 2021 and winning the Innovation Through Technology Award at the British Chambers of Commerce Awards 2008. He is also a Member of the Association of Regulatory & Disciplinary Lawyers, further cementing his standing within the UK's legal and regulatory professional community.

Brian is a recognised authority in legal compliance, sharing his expertise through a monthly legal risk and compliance update webinar attended by more than 2,000 legal professionals every month. His updates are trusted by solicitors, compliance officers, and practice managers across the UK to stay ahead of SRA regulatory changes, AML obligations, and data protection requirements.