Why is re-keying client data a risk for advice firms?

Each time client details are typed into a provider form, a new copy of the client record is created by hand. Transposed digits in a sort code, an out-of-date address or a name spelled differently from the one on the policy can delay a transfer, cause an application to be rejected or send money to the wrong account. The more forms a case needs, the more chances there are for the copies to disagree.

Does Consumer Duty apply to form-filling?

Consumer Duty does not mention forms specifically, but it requires firms to avoid causing foreseeable harm and to support customers in pursuing their financial objectives. Avoidable delays, rejected applications and payments to the wrong account are the kind of outcome that sits squarely within that expectation, so the controls around preparing forms are relevant to how a firm evidences good outcomes.

Should the adviser still check a form that has been filled automatically?

Yes. Automatic filling removes typing errors, but it can only be as accurate as the data it draws on and the mapping between that data and each box on the form. A named person should review the completed form against the client record before it goes for signature, and the firm should keep the version that was signed.

What should a firm keep once a form has been signed?

At minimum the signed form itself, the date it was sent and signed, and who prepared and checked it. Where the form was filled from the client record, being able to show which data was used makes it far easier to answer a later query about why a particular value appeared on the form.

Best Practices

Re-keying client data into provider forms: the error risk advice firms underestimate

The advice is agreed. Then the same client details are typed again into every application, transfer and withdrawal form — and each copy is a fresh chance to get them wrong.

TakeNote TeamOctober 16, 20268 min read

Last reviewed: August 2026

Most compliance attention in an advice firm goes on the meeting and the suitability report. Far less goes on what happens next: the provider application, the pension transfer request, the withdrawal instruction, the trustee declaration. Each one asks for the same name, date of birth, National Insurance number, address and bank details the firm already holds — and in most firms, someone types them in again by hand.

It is unglamorous work, which is exactly why it is easy to underestimate. A single case can involve several forms from different providers, each with its own layout. Every form is a new copy of the client record, and every copy can drift from the original.

Where do re-keying errors come from?

Most errors are not careless. They come from copying the same details many times, from several sources, into forms that were never designed around the firm's own records: transposed digits, out-of-date details taken from an old document, names written differently on different forms, and values squeezed into boxes that do not fit them.

The common patterns are well known to anyone who has processed a case:

Transposition. Sort codes, account numbers, policy numbers and NI numbers are strings of characters with no meaning to check against. Swapping two digits looks entirely plausible on the page.
The wrong source. The address on last year's fact-find, the maiden name on an old policy schedule, the bank account that was closed in the spring. Re-keying invites whoever is filling the form to use whichever document is open.
Inconsistency across forms. “Jonathan” on one form and “Jon” on another, or a middle name included on some and not others. Each form may be accepted on its own; together they can stall an identity check or a transfer match.
Awkward layouts. Character-by-character boxes, sort codes split across three fields, dates in a different order from the firm's system. These are where values are cut short, shifted along or entered in the wrong field.
Second applicants. On joint or trustee forms, the second person's details are the most likely to be copied from the first, left blank or entered in the wrong section.

Why it matters more than it looks

A wrong digit on a form is rarely a regulatory breach in itself. Its effects are what matter to the client: an application returned for correction, a transfer delayed while a provider queries a mismatch, a period out of the market, or in the worst case a payment to an account the client does not own. Each of those is also time the firm spends putting it right.

Under Consumer Duty, firms must act to avoid causing foreseeable harm and must enable and support customers to pursue their financial objectives. Delays and rejected applications caused by avoidable data errors are foreseeable — every firm knows they happen. The question a reviewer is likely to ask is not whether errors ever occur, but what the firm does to prevent them and how it knows its controls work.

Data protection points the same way. The UK GDPR accuracy principle requires personal data to be accurate and, where necessary, kept up to date. Sending an incorrect address or bank account to a third party is a failure of that principle, whatever the reason it happened.

What a better process looks like

The aim is not to make people type more carefully. It is to reduce how often anyone has to type the same thing at all, and to make the remaining checks meaningful.

1. One checked source for client data

Client details should be captured once — from the fact-find, the meeting and the documents the client provides — checked, and then treated as the source for everything downstream. When a detail changes, it changes there, not on whichever form happens to be in progress.

2. Map each form once, not each time it is used

Every box on a provider form corresponds to something the firm already records: the client's surname, the second applicant's date of birth, the trustee company's registered address. Defining that link once for each form template means the next fifty cases use the same, reviewed mapping rather than fifty individual judgements about which box takes what.

3. Treat firm-level details as firm-level

Some details are the same on every case: the firm's own name and address, its FCA reference number, a trustee company or a standard default answer. These should come from one place in the firm's settings, so they are right everywhere or can be corrected everywhere at once.

4. Review the completed form, not the blank one

The useful check is a person comparing the finished form against the client record before it goes for signature, with any gaps clearly flagged. A review of a half-completed draft, or a signature request sent before anyone has looked, does not do the same job.

5. Keep what was actually signed

Retain the signed version alongside when it was sent and signed, and who prepared and checked it. Our guide to evidencing the whole signature journey covers why the steps around the signature matter as much as the signed page, and our FCA record-keeping requirements guide sets out where these records fit in the wider file.

A quick check before any form goes for signature

Are names, dates of birth and NI numbers identical to the client record?
Are bank details current, and were they confirmed directly with the client?
Is the address the one on the client's most recent identity check?
On joint or trustee forms, is every person's section filled with their own details?
Are firm details, FCA number and adviser details correct and consistent?
Have split and character-by-character boxes been filled in the right order?
Are any blank boxes intentionally blank, with the reason clear?

Where TakeNote fits

TakeNote holds client details as structured data points drawn from meetings, documents and the client record. Firms map each provider form once, and TakeNote fills it from that data — including joint applicants and firm-level details such as trustee information — before the form is reviewed and sent for signature through DocuSign.

Advisers review and approve every completed form. TakeNote does not decide what should go on a form and does not guarantee regulatory compliance; the aim is to remove repeated typing so the firm's checks can focus on whether the details are right.

Frequently asked questions

Why is re-keying client data a risk for advice firms?: Each time client details are typed into a provider form, a new copy of the client record is created by hand. Transposed digits in a sort code, an out-of-date address or a name spelled differently from the one on the policy can delay a transfer, cause an application to be rejected or send money to the wrong account. The more forms a case needs, the more chances there are for the copies to disagree.
Does Consumer Duty apply to form-filling?: Consumer Duty does not mention forms specifically, but it requires firms to avoid causing foreseeable harm and to support customers in pursuing their financial objectives. Avoidable delays, rejected applications and payments to the wrong account are the kind of outcome that sits squarely within that expectation, so the controls around preparing forms are relevant to how a firm evidences good outcomes.
Should the adviser still check a form that has been filled automatically?: Yes. Automatic filling removes typing errors, but it can only be as accurate as the data it draws on and the mapping between that data and each box on the form. A named person should review the completed form against the client record before it goes for signature, and the firm should keep the version that was signed.
What should a firm keep once a form has been signed?: At minimum the signed form itself, the date it was sent and signed, and who prepared and checked it. Where the form was filled from the client record, being able to show which data was used makes it far easier to answer a later query about why a particular value appeared on the form.

Sources

This article is general information for financial services professionals and is not legal or compliance advice. Firms should refer to the FCA Handbook, ICO guidance and their own compliance function.