Consumer Protection in Vulnerable Consumer Prioritisation in Complaint Systems in the UK

Vulnerable consumer prioritisation in complaint systems concerns how UK businesses—particularly regulated financial-services firms—identify, support and, where appropriate, prioritise complaints from consumers whose circumstances may make them more susceptible to harm.

The central legal issue is not simply whether vulnerable consumers should automatically move to the front of the queue. Rather, firms must design complaint processes that avoid unreasonable barriers, provide appropriate support, and deliver outcomes for vulnerable consumers that are as good as those for other consumers. The FCA's current guidance expressly states that vulnerable consumers should receive consistently fair treatment and outcomes comparable to other consumers.

1. Who is a vulnerable consumer?

Under the FCA's approach, vulnerability can arise from four broad drivers:

• health — physical or mental-health conditions;
• life events — bereavement, job loss, relationship breakdown, etc.;
• resilience — limited financial or emotional resilience;
• capability — low financial capability, literacy, digital skills or other circumstances affecting ability to engage.

The important point is that vulnerability is context-dependent and can be temporary or permanent.

2. What does "prioritisation" mean?

A complaint system might give priority where delay could cause disproportionate harm.

For example:

Ordinary complaint:
10-day investigation target.

Vulnerable consumer facing imminent loss of essential funds:
accelerated review and specialist support.

Prioritisation can therefore mean:

• faster acknowledgment;
• expedited investigation;
• specialist caseworker;
• alternative communication methods;
• additional explanation;
• reduced procedural friction;
• escalation to senior staff;
• temporary suspension of collection activity where appropriate.

It should not automatically mean that every complaint from a vulnerable consumer must be resolved before every other complaint.

3. FCA Consumer Duty

The Consumer Duty requires firms to deliver good outcomes for retail customers, including customers in vulnerable circumstances.

The FCA's recent review states that firms must:

• design support around customer needs;
• avoid unreasonable barriers;
• monitor support quality;
• avoid disadvantaging groups with characteristics of vulnerability. 

This means complaint systems should be assessed from the perspective of actual consumer outcomes, rather than simply whether the firm has a written vulnerability policy.

4. Complaint-handling obligations

For FCA-regulated firms, DISP 1 requires complaints to be investigated competently, diligently and impartially and assessed fairly, consistently and promptly. Firms must also provide an explanation of their decision and any appropriate redress.

Consequently, a prioritisation system must not compromise:

• impartiality;
• consistency;
• adequate investigation;
• reasoned decision-making;
• appropriate redress.

5. Is preferential treatment lawful?

Potentially, yes.

Giving additional support to a vulnerable consumer is not necessarily unlawful discrimination. It may actually be necessary to achieve substantive fairness.

For example, a consumer with limited digital capability might be unable to use an online-only complaint system.

Requiring that consumer to:

"Submit your complaint through the app"

could create an unreasonable barrier.

An appropriate alternative could be:

• telephone complaint;
• paper form;
• assisted submission;
• representative-assisted communication.

The FCA specifically expects firms to support vulnerable consumers according to their individual needs.

6. Automatic vulnerability scoring

Modern complaint systems may use algorithms to assign a priority score.

For example:

Vulnerability score = 85/100
Complaint priority = High

This creates several risks.

The algorithm may:

• incorrectly classify a consumer;
• fail to recognise vulnerability;
• rely on incomplete data;
• produce discriminatory outcomes;
• prioritise easily detectable vulnerabilities over less visible ones.

A robust system should therefore permit human review and correction.

7. The danger of "digital vulnerability"

A customer may be vulnerable because they cannot effectively use:

• apps;
• online portals;
• automated chatbots;
• digital authentication;
• electronic document systems.

The FCA has identified digital capability as relevant to vulnerability and expects firms to avoid unreasonable barriers in customer journeys.

Therefore:

Digital-only complaint systems can themselves create vulnerability-related harm.

8. Priority queues and fairness

A complaint system could operate:

Tier 1 — Urgent vulnerability

Potential immediate or severe harm.

Tier 2 — Vulnerability-related

Consumer requires additional support but no immediate crisis.

Tier 3 — Standard

Ordinary complaint handling.

Tier 4 — Complex

Requires specialist investigation.

The classification should be based on risk and potential harm, rather than merely giving an arbitrary numerical advantage to someone who has disclosed vulnerability.

9. Risk of deprioritising non-vulnerable consumers

Prioritisation can itself create fairness concerns.

Suppose:

• vulnerable complaints: 90% resolved within 5 days;
• other complaints: 70% resolved within 60 days.

The firm might argue that it is protecting vulnerable customers.

But if ordinary customers experience excessive delay, the system may still fail the requirement to handle complaints fairly and promptly.

The objective should therefore be:

better outcomes for vulnerable consumers without allowing the overall complaint system to become unfair or ineffective.

10. Identification of vulnerability

The consumer should not necessarily have to use a particular phrase such as:

"I am a vulnerable customer."

The FCA's new complaints-reporting framework requires firms to report vulnerable-customer data where the firm identifies that a customer is in vulnerable circumstances regardless of how this was disclosed. It also requires reporting of complaints relating to or caused by the firm's failure to consider or respond appropriately to vulnerability.

This encourages firms to identify vulnerability through appropriate interactions rather than relying entirely on self-identification.

11. Privacy and vulnerability data

There is an important countervailing concern:

How much personal information should a firm collect to identify vulnerability?

Vulnerability information can involve sensitive personal circumstances.

In March 2026, the FCA and ICO issued a joint statement addressing firms' approaches to vulnerability-related data, emphasising the need for good consumer outcomes alongside lawful, fair and responsible use of personal information.

Therefore, a complaint system should apply:

• data minimisation;
• appropriate access controls;
• lawful processing;
• clear retention rules;
• accurate records;
• appropriate security.

12. Vulnerability flags

A firm may place a vulnerability indicator on a customer's account.

This can help ensure:

• future agents recognise support needs;
• the customer does not repeatedly explain their circumstances;
• complaint priority is preserved;
• appropriate communication is maintained.

But inaccurate or excessive flags can cause harm.

For example:

A temporary financial difficulty is recorded permanently as a general vulnerability status.

The consumer may then receive inappropriate treatment in future interactions.

13. Staff discretion

Complaint systems should not rely exclusively on automated prioritisation.

Staff should be able to say:

"Although this complaint was classified as standard, the circumstances indicate that delay could cause significant harm."

Human escalation is particularly important where vulnerability is:

• newly disclosed;
• complex;
• ambiguous;
• temporary;
• not captured by existing categories.

14. Vulnerability and financial hardship

A complaint involving:

• mortgage arrears;
• essential insurance;
• access to a bank account;
• benefit-related payments;
• energy-related finance;

may require rapid intervention because delay could produce significant consequences.

The FCA has specifically emphasised that firms should understand the types of harm or disadvantage vulnerable customers may experience rather than relying simply on complaint volumes.

15. Complaints data and management information

A firm should not measure success simply by asking:

"How many complaints did vulnerable customers make?"

The FCA has warned against over-reliance on complaints data as the measure of outcomes for vulnerable customers. Firms should examine broader management information, including whether vulnerable customers experience higher fees, worse rates, abandonment or other disadvantage.

Useful metrics include:

• average resolution time;
• escalation rate;
• uphold rate;
• redress;
• repeat complaints;
• abandonment;
• complaint reopening;
• customer satisfaction;
• missed deadlines;
• communication failures.

16. Root-cause analysis

Suppose 1,000 vulnerable customers complain about:

inability to contact the firm by telephone.

Simply resolving those 1,000 complaints may not be enough.

The firm should ask:

Why did the system repeatedly create the same barrier?

The FCA expects robust root-cause analysis to identify and remedy recurring systemic problems.

17. AI complaint triage

AI can potentially classify complaints based on:

• urgency;
• vulnerability indicators;
• financial impact;
• risk of harm;
• subject matter;
• previous complaints.

But the model should be tested for:

• false negatives;
• false positives;
• discriminatory patterns;
• inconsistent classifications;
• explainability;
• data quality.

A consumer should not lose meaningful access to complaint escalation merely because an algorithm classified their complaint as low priority.

18. Automated decision-making

A particularly difficult scenario arises where:

AI decides that a vulnerable consumer's complaint is low priority and automatically rejects escalation.

The firm may face questions about:

• fairness;
• transparency;
• Consumer Duty;
• data protection;
• complaint-handling rules;
• accuracy of vulnerability information.

Human intervention should be available where the automated outcome could materially affect the consumer.

19. Accessibility

Complaint channels should accommodate consumers who require:

• large-print communications;
• alternative formats;
• interpreters;
• telephone assistance;
• additional time;
• trusted representatives;
• non-digital communication.

The FCA has highlighted examples of firms improving support through alternative-format communications and more flexible servicing.

20. Third-party representatives

A vulnerable consumer may use:

• family member;
• solicitor;
• charity;
• debt adviser;
• power of attorney;
• other authorised representative.

Complaint systems should have procedures for verifying and communicating with authorised representatives without creating unnecessary barriers.

21. Financial Ombudsman Service

If a complaint remains unresolved, eligible consumers may be able to refer it to the Financial Ombudsman Service (FOS).

A firm's internal prioritisation system should not improperly prevent a consumer from exercising their external dispute-resolution rights.

The internal process should therefore clearly communicate:

• the complaint outcome;
• reasons;
• available redress;
• relevant escalation rights.

22. Discrimination concerns

A complaint system may create discriminatory effects if it:

• systematically downgrades certain groups;
• requires digital access that some consumers cannot reasonably provide;
• uses proxies for vulnerability;
• fails to recognise particular needs;
• applies inconsistent priority rules.

The firm should therefore test both:

intentional discrimination

and

disparate outcomes caused by system design.

23. Contractual disputes

Where a complaint system is outsourced, disputes may arise between:

regulated firm ↔ technology provider

over:

• algorithm accuracy;
• SLA performance;
• data integration;
• vulnerability classification;
• complaint-routing errors;
• cybersecurity;
• missed escalation;
• regulatory remediation.

The regulated firm generally cannot simply transfer its customer-facing responsibilities to the technology supplier.

The FCA emphasises that firms need to demonstrate how their business model, actions and culture ensure fair treatment of vulnerable customers.

24. Example

A UK financial institution deploys an AI complaint-management platform.

The system automatically assigns:

Priority 1: severe vulnerability
Priority 2: moderate vulnerability
Priority 3: ordinary complaint.

A customer discloses that they have serious financial difficulties but does not use the firm's predefined vulnerability terminology.

The AI fails to identify the disclosure.

The complaint is classified as Priority 3.

A 40-day delay follows, during which the customer incurs additional financial charges.

The customer complains that the firm:

• failed to recognise vulnerability;
• created an unreasonable complaint barrier;
• relied improperly on automated classification;
• failed to provide appropriate support.

The firm may then face both a customer dispute and regulatory scrutiny.

25. Principal legal issues

Conclusion

Consumer protection in vulnerable consumer prioritisation in complaint systems in the UK is fundamentally about substantive fairness rather than simply queue position.

The FCA expects vulnerable consumers to achieve outcomes as good as those of other consumers and requires firms to avoid unreasonable barriers in customer support. The FCA's 2026 complaints-reporting reforms also specifically require regulated firms to capture vulnerability-related complaints information, including complaints caused by failures to consider or respond appropriately to vulnerability.

A legally robust complaint system should therefore use:

vulnerability identification → risk-based prioritisation → human oversight → accessible communication → prompt investigation → appropriate redress → outcome monitoring → root-cause analysis.

The key principle is:

Vulnerability should trigger appropriate support and, where necessary, expedited handling—but it should never become a substitute for fair, impartial and properly reasoned complaint resolution.