uk Legal, police, prison & official contact

What to do if…
you are contacted by a regulator about possible violations and are unsure how to respond

Produced and maintained by PanicStation.org Published: 5 May 2026 Last reviewed: 17 July 2026 Editorial policy UK guide

Short answer

Pause, preserve relevant records, and avoid giving a substantive response until you know who is contacting you, what power they are using, what they want, and when they say it is due. A safe first response is to acknowledge receipt and ask for the legal basis, scope, deadline, and contact route in writing.

Do not do these things

Do not ignore it or assume it will go away.
Do not destroy, delete, edit, backdate, tidy up, move, or rename records, including chats, emails, files, logs, calendars, and device data.
Do not give an off-the-cuff explanation on a phone call to be helpful.
Do not volunteer extra information beyond what is being asked for, especially before you have checked the scope.
Do not ask staff to keep quiet or pressure them about what to say.
Do not align accounts, script narratives, or agree a story. It is fine to locate facts and records; it is not fine to coordinate what people say.
Do not sign statements, agree to interviews, or provide material beyond the stated request or written authority without checking what power is being used and getting advice where possible.
Do not email sensitive details widely inside your organisation; internal messages may later be reviewed.

What to do now

Confirm it is real without using the contact details in the message.
Use the regulator’s official website or published switchboard number to call back. Quote the reference number and confirm the case officer or team exists.
Capture the basics immediately.
Save the letter or email. Note the date and time received, reference numbers, the person or team contacting you, what they are asking for, and any stated deadline. If it was a call, write down what was said, who said it, and what number they called from.
Pause routine deletion and housekeeping.
Do not delete duplicates or tidy folders. If you have IT, legal, or compliance support, ask them to issue an internal document hold and pause routine retention or deletion for relevant systems, accounts, and devices. Record what was paused and when.
Identify what kind of contact this is.
Look for whether it is a voluntary request, an informal enquiry, a formal information notice, a statutory request, an interview request, or an inspection or visit using statutory powers. If you cannot tell, treat it as requiring controlled handling until you have advice.
Ask for scope and authority in writing.
Reply briefly to acknowledge receipt. Ask what legal power or process they are relying on, what topics and time period are covered, what format they require, who you should correspond with, and how deadlines or extensions should be confirmed. If the deadline is tight, ask for an extension before it expires.
Get appropriate legal help quickly.
Tell in-house counsel, compliance, or senior management if you have them. If not, contact a UK-qualified solicitor with regulatory or investigations experience. If you cannot reach anyone immediately, do steps 1–5 and say you are seeking advice.
Choose one point of contact.
Decide who speaks to the regulator. Tell others calmly to forward any regulator contact to that person and not to respond themselves.
If officials arrive in person, verify powers and log everything.
Ask for identification and written authority. Read the scope carefully, including what they can access, take, copy, or inspect, and any time period covered. Call your lawyer immediately. Cooperate and do not obstruct, but keep responses and material within the written authority or request. Keep a written log of what they ask for and what they take or copy.
If they ask for an interview, do not attend alone if you can avoid it.
Ask whether the interview is voluntary or under a legal power, whether you are being interviewed under caution, what topics and time period it will cover, and whether you may have legal representation present. Arrange legal advice before the interview where possible.
Start a clean factual timeline for your adviser.
List relevant events, people, systems, records, deadlines, and any ongoing risk. Keep it factual and avoid speculation, blame, or conclusions.

What can wait

You do not need to decide the whole strategy today.
You do not need to write a detailed narrative response immediately.
You do not need to confront colleagues, dismiss staff, or announce anything publicly right now.
You do not need to guess what the regulator really thinks; focus first on verification, preservation, scope, deadlines, and controlled communication.

Important reassurance

Being contacted by a regulator can range from routine fact-finding to formal enforcement. Feeling shocked or frozen is understandable. By preserving records, slowing down communications, and clarifying the scope in writing, you reduce the risk of avoidable damage while you get proper help.

Scope note

These are first steps only, to stabilise the situation and avoid self-inflicted damage. Later decisions may depend heavily on which regulator is involved, what powers they are using, the documents requested, and whether the matter is civil, criminal, disciplinary, or professional.

Important note

This is general information, not legal, financial, medical, therapeutic, or other professional advice. Regulatory powers, deadlines, duties, and rights can vary by regulator and situation. If you are unsure, preserve records, avoid substantive comment, and get UK-qualified legal advice promptly.

Additional Resources

About this guide

This guide was produced and is maintained by PanicStation.org using its published editorial process. Official and specialist sources are checked where relevant, and AI-assisted tools may be used for drafting, organisation, and consistency checks. The site operator remains responsible for publication, revision, and removal decisions.

Support us