The FCA targeted support PECR conflict has moved from theoretical concern to practical obstacle, with a regime finalised by the Financial Conduct Authority on 26 February 2026 and due to go live from 6 April 2026 now running headlong into privacy rules that could prevent firms from reaching the very customers it is designed to help.
For anyone managing a self-invested or workplace pension, the stakes are worth understanding. The FCA spent years investigating the so-called advice gap: the reality that, by its own account, 91% of the UK population does not receive financial advice. Targeted support was conceived as a middle ground, allowing providers to identify groups of customers sharing common characteristics and offer ready-made suggestions suited to people in similar circumstances. Prompting a pension saver to increase contributions, or alerting a retiree that their withdrawal rate may not be sustainable, falls short of regulated advice but could materially improve outcomes over a five-to-ten-year horizon.
Where the Privacy and Electronic Communications Regulations Create a Barrier
The difficulty lies with the Privacy and Electronic Communications Regulations 2003, known as PECR. Under Regulation 22, firms generally cannot send unsolicited direct marketing by email or text without consent, unless they can rely on the so-called soft opt-in, which requires a prior sales interaction with the recipient. For automatically enrolled workplace pension members who have had little meaningful contact with their provider, that prior interaction rarely exists. The provider may therefore lack the marketing permissions needed to make straightforward electronic contact.
The definition of direct marketing is broad enough to capture communications that encourage someone to take a particular action, which is precisely what targeted support is meant to do. The Information Commissioner’s Office assesses whether an email counts as direct marketing by examining its content and purpose, not the label a compliance team attaches to it. An email described internally as a service message does not escape PECR simply because of that description; if it nudges the recipient towards a course of action, it risks crossing into regulated territory.
Of the 73 respondents who addressed direct marketing in the FCA’s consultation, 55 regarded the existing PECR and data-protection framework as a barrier to targeted support. That is a clear majority signal from the industry, and it points to a structural problem rather than a compliance failure by individual firms.
The FCA Targeted Support PECR Workaround and Its Limits
The FCA and the ICO have attempted to give firms some room. Their shared position is that a firm can send a neutral, factual communication telling customers that targeted support is available, and that this can be sent even to individuals who have opted out of direct marketing. Firms may also be able to rely on the soft opt-in where its conditions are satisfied. For portfolio construction purposes, this matters: a provider trying to engage a disengaged saver with a cash-heavy, under-contributing pension position would benefit from precisely the kind of proactive outreach that these rules complicate.
The practical problem is that a neutral, factual notification and a genuinely useful targeted prompt are not the same thing. Firms are left navigating a narrow path between telling customers that help is available and saying enough to persuade them to engage with it. Cross that line and the communication becomes direct marketing; stay behind it and the message may be too thin to drive any action.
For workplace pensions specifically, the government has accepted that a more fundamental legislative fix is required and has committed to changing the rules so providers have greater scope to contact automatically enrolled members who have not opted out of marketing. That commitment addresses one of the most acute cases. It also, however, raises a pointed question about the coherence of the original framework: if FCA targeted support PECR tension requires primary legislative intervention before a pension provider can warn a member they may be heading towards a poor retirement outcome, the design of the regime arguably needed to account for that conflict before the rules were drawn up.
The ICO’s rules exist for good reason, and capital preservation of consumer trust in data handling is not something this sector should treat as a friction cost. But there is a meaningful distinction between shielding someone from unsolicited product promotion and preventing their pension provider from alerting them to a foreseeable shortfall. With the regime set to go live from 6 April 2026, firms will need to establish now how they intend to navigate that distinction in practice, before the first targeted support communication is sent.
