When marketing and compliance fight, and how to make them allies

The 6pm escalation

Media is booked. Creative is locked. Two days before launch, the head of compliance withdraws sign-off on the lead claim, and the head of marketing escalates to you. One of them will lose, publicly, in front of both teams, and whichever way you call it you are setting precedent for every campaign after this one.

The decision itself is rarely the hard part. The hard part is that most firms have no standing rule for who decides, what evidence the decision turns on, or what happens to the function that loses. So the same argument recurs quarterly, gets personal, and eventually resolves itself the worst way: business development stops asking. Both functions are behaving rationally inside the incentives they were given. That is why the fight repeats, and why it is a leadership problem rather than a personality problem.

Why the fight is structural

Look at the payoffs. A marketing lead carries a pipelinepipelineAll active sales opportunities across the stages of the sales process, together with their combined potential value and probability of closing.View full definition → number inside a quarter and captures the upside of an aggressive claim immediately. The downside, if it lands, arrives eighteen months later, possibly at their next employer. A compliance officer gets nothing for the campaign that ships and owns the file for the one that goes wrong. Stopping a bad promotion produces no measurable win at all: the counterfactual is invisible. Asymmetric payoffs plus invisible wins reliably produce a control function that says no by default and a commercial function that treats review as an obstacle to route around.

Wells Fargo is the expensive version of that arithmetic. Retail sales targets, including a cross-sell ambition of around eight products per household, pushed volume through a control structure that could not hold it. The bank paid $185 million in penalties in September 2016 over unauthorised accounts, and around $3 billion to the Department of Justice and the SEC in 2020. The board's own 2017 investigation found that risk and HR resources inside the Community Bank reported into the business they were supposed to challenge, so warnings died at business-unit level rather than reaching the top. The Federal Reserve then capped the bank's assets in February 2018, a restriction that ran for more than seven years. The regulator's remedy took away the exact growth the incentives had been chasing.

Two structural tests, worth running on your own firm this week:

• Does the person who can block a campaign report, directly or through a dotted line, to the person whose revenue depends on it?
• Does any part of their variable pay move with the results of the work they review?

A yes to either means the argument is decided before anyone opens the creative.

What the failure mode costs a professional firm

Fines are usually the smallest line. PwC Australia's 2023 tax leaks matter is the sharper illustration: confidential government tax briefing material circulated internally and fed business development. The bill was not a penalty notice. It was the loss of federal government work, the sale of the public-sector consulting practice to Allegro Funds for one Australian dollar, the chief executive standing down, partner exits, and a parliamentary inquiry that ran long enough to become the firm's public identity in that market for two years. Separately, the FCA fined PwC's UK firm £15 million in August 2024 for failing to report suspicions about a client, its first fine on an audit firm.

For firms whose product is judgement, the penalty is rarely proportional to the breach. What gets damaged is the thing the fee premium rests on.

Build the ledger before you need it, because it changes the arbitration. A promotion pulled after publication generates: collateral recall and client notification, an internal file review of everything else that used the same claim, external counsel at partner rates, senior time diverted for months, harder professional indemnity renewals, and a permanent answer to the procurement question that appears in most large tenders ("has your firm been subject to regulatory action or investigation in the last five years?"). That last one is the second-order cost leaders consistently miss. A marketing breach becomes a line in every bid document your firm files for half a decade, reviewed by exactly the buyers you were trying to reachreachThe number of unique people exposed to your message in a given period. Unlike impressions, reach counts each person once, no matter how often they see it.View full definition →.

The arbitrations only you can make

Make compliance state which register its objection sits in, in writing:

• A rule-based no, citing the specific provision. Not arbitrable. If a commercial leader can overrule it, you do not have a control function, you have a suggestion box.
• A risk-based caution, which is judgement about how a regulator or a client might read the piece. Arbitrable, by a named person, on the record.

Most escalations that reach a managing partner are the second kind wearing the clothes of the first, because "the rules say no" ends arguments faster than "I would not do this". Forcing the distinction removes maybe half your escalations in a quarter and improves the quality of the rest.

The calls that remain are usually these. Whether to fund the substantiation rather than kill the claim: commission the survey, write the methodology note, license the data. Fund it when the claim will be reusable for a year or more across service lines, drop the claim when it supports one campaign. Whether to launch late with the strong claim or on time with the weaker one, which is a straight comparison between the value of the window and the ledger above. And whether to run at all in a given jurisdiction, which is a decision about appetite, not wording.

The escalation ladder

• Working level, 24 hours: claim owner and reviewer try to resolve, with the substantiation attached.
• Function heads, 48 hours: written note stating rule-based no or risk-based caution.
• Named accountable executive, five working days: decides, in writing, with the compliance view recorded verbatim rather than summarised.
• Risk committee or board: anything that would override a rule-based no, plus any override that changes what the firm can say across multiple campaigns.

Record every override, including the ones where marketing was right. Under the FCA's senior manager regime the decision attaches to a person anyway, and firms that cannot show who decided what are the ones that struggle most in supervisory conversations. The record protects whoever loses the argument, which is what makes people willing to lose it.

Incentives that stop the fight recurring

Put time from brief to approved, and rework rate, on both scorecards. If marketing is measured on velocity and compliance only on incidents avoided, they optimise against each other by design.

Then watch the block rate, and read it in both directions. Near zero means the gate is decorative and nobody is testing it. A large share of submissions bouncing means briefs are arriving without evidence, which is a marketing-side fix. Tag rejections by cause (missing substantiation, wording, wrong channel, no client consent) so the number points somewhere.

The over-cautious failure mode deserves as much attention as the reckless one, and gets far less. A control function that waters everything down teaches business development to stop asking. Partners then market through channels the firm cannot see: personal social accounts, unrecorded webinars, client dinners, decks that never enter the review system. Marketing output looks compliant and volume looks low, while the actual risk has moved somewhere that leaves no record when a regulator asks for one. The FCA's own quarterly promotions data shows thousands of promotions amended or withdrawn every year across authorised firms, and since February 2024 firms need specific permission to approve promotions for unauthorised parties, which narrows the room for informal workarounds further.

One cheap fix: give compliance a small budget for substantiation, data licences and survey work. When the only free answer available to a reviewer is no, no is what you will get.

🎬 [VIDEO: "FCA Consumer Duty and senior manager accountability" - youtube.com - search for FCA or law-firm briefing sessions on how the Duty allocates responsibility for customer communications to a named senior manager]

A note on network firms

PwC, like its peers, is a network of legally separate member firms. A global brand campaign is a local partner's personal regulatory exposure, which is why a global marketing leader can mandate look, message and architecture but cannot deliver a single sign-off that covers every market. Treat local veto as legitimate and give it a cost: the firm that vetoes owns producing the alternative and a date. A veto with no substitute is an escalation, not a decision.

Assume divergence between regimes rather than discovering it, and price localisation into the campaign budget at approval, not as a variation order in week six. The alternative is the pattern that produces most cross-border delays: a global creative built to the most permissive market, then dismantled market by market by people who were not in the room when it was signed off.

Key Takeaways

• The marketing versus compliance fight is an incentive problem. Check reporting lines and variable pay before blaming either team.
• Require every objection to be labelled rule-based no or risk-based caution. Only the second is arbitrable, and only by a named person, in writing.
• Cost the failure mode fully: recall, file review, counsel, insurance and the regulatory-action question in every future tender, not the fine alone.
• Read the block rate in both directions. A near-zero rate means the gate is decorative; a high one means briefs arrive without evidence.
• The over-cautious control function pushes marketing into unrecorded channels, which is the harder failure to detect and the harder one to defend.