Client categorisation sits at the heart of MiFID II's conduct framework. The category assigned to a client determines what protections they receive, what products they can access, what disclosures the firm must make, and what obligations the firm owes when giving investment advice or executing a transaction. Getting categorisation wrong — treating a retail client as a professional, or skipping a suitability assessment because a client was miscategorised as an eligible counterparty — is a conduct risk failure with serious regulatory consequences.
MiFID II (and its UK-onshored equivalent) divides all clients into three categories: retail clients, professional clients, and eligible counterparties. The categories form a hierarchy of sophistication, with retail clients receiving the most protection and eligible counterparties the least.
Retail Clients
A retail client is any client who does not meet the criteria for professional or eligible counterparty classification. In practice, retail clients are individuals and smaller businesses without the financial expertise or resources to evaluate investment risks independently. The category is defined by exclusion: if a client is not professional, they are retail.
Retail clients receive the most extensive protections under MiFID II. Firms providing investment advice or portfolio management to retail clients must carry out a suitability assessment — determining whether a recommendation or service is suitable given the client's knowledge and experience, financial situation, and investment objectives (including risk tolerance). For execution-only services in complex products, the firm must assess appropriateness — whether the client has the knowledge and experience to understand the risks involved. For PRIIPs (Packaged Retail and Insurance-based Investment Products), retail clients must receive a Key Information Document (KID) before any transaction.
Retail clients also benefit from best execution obligations applied in their fullest form, enhanced order handling rules, and the requirement that marketing communications be fair, clear, and not misleading in a standard calibrated for non-expert readers.
Professional Clients
Professional clients are divided into two sub-categories: per se professionals and elective professionals.
Per Se Professional Clients
Per se professionals are those who meet the criteria automatically by virtue of their institutional nature. The MiFID II Annex II list includes: credit institutions, investment firms, other authorised or regulated financial institutions (insurance companies, UCITS funds and their management companies, pension funds), large undertakings that meet at least two of three size criteria (balance sheet of at least €20 million, net turnover of at least €40 million, own funds of at least €2 million), national governments and public bodies managing public debt, central banks, and supranational institutions such as the IMF and World Bank.
These entities are presumed to have the knowledge and experience to make their own investment decisions and assess the risks involved. Firms dealing with per se professionals have a reduced set of conduct obligations: suitability assessments are required for managed accounts but simplified; appropriateness assessments are generally not required; and some disclosure obligations are reduced.
Elective Professional Clients
A retail client or a small company that does not meet the per se criteria can request to be treated as a professional client — this is the opt-up process. The firm must conduct a qualitative assessment to satisfy itself that the client has the expertise, experience, and knowledge to make their own investment decisions and understand the risks involved.
MiFID II specifies that the assessment should consider whether at least two of the following criteria are met: the client has carried out transactions of significant size on relevant markets at an average frequency of ten per quarter over the preceding four quarters; the size of the client's financial instrument portfolio (including cash deposits) exceeds €500,000; the client works or has worked in the financial sector for at least one year in a professional position requiring knowledge of the relevant transactions or services.
The opt-up is not a one-off event. It must be documented, the client must confirm in writing that they are aware of the protections they lose, and the firm must maintain the assessment in its records. The firm also has an ongoing obligation to review the categorisation if it becomes aware that the client no longer meets the criteria.
Eligible Counterparties
Eligible counterparty (ECP) is the category applied to the most sophisticated market participants. ECPs receive the fewest protections — in particular, the best execution obligation, the suitability and appropriateness requirements, and the order handling rules do not apply to transactions concluded with an ECP.
The per se ECP list under MiFID II Article 30 includes: investment firms, credit institutions, insurance companies, UCITS and their management companies, pension funds, national governments, central banks, and supranational institutions. Notably, an entity that qualifies as a per se professional client does not automatically qualify as an ECP — the ECP list is narrower and more specific.
An ECP can request to be treated as a professional client for all or part of its business, which would reinstate some conduct protections. It cannot opt up to an even lighter-touch regime. Conversely, a professional client can request to be treated as retail (opt down), reinstating the full protection framework. Such opt-downs are common for transactions in complex products where the client wants the firm to carry out a suitability assessment.
The Opt-Down Mechanism
Clients categorised as professional or eligible counterparty can request to be treated as a retail client for some or all services. This opt-down reinstates the protections the client would otherwise have waived. A sophisticated hedge fund might, for example, request retail treatment for a particular structured product transaction where it wants the full suitability analysis and PRIIPS KID documentation. The opt-down must be documented and agreed in writing.
The practical challenge for compliance teams is maintaining a categorisation matrix that maps each client, by legal entity and product type, to the correct category, across potentially hundreds of counterparties. Changes in corporate structure, changes in the size criteria (a company that grows past the thresholds becomes a per se professional), and time-limited elective categorisations all require active management.
Impact on Products and Services
Categorisation directly controls what the firm can sell and on what terms. Certain complex structured products — leveraged instruments, embedded derivatives, barrier structures — may only be offered to professional clients or ECPs. For retail clients, the appropriateness test creates an additional gate: the firm must assess whether the client has the knowledge and experience to understand the risks before allowing the transaction to proceed, even for execution-only services.
The PRIIPS KID requirement adds a further layer for retail clients. Before a retail client purchases a PRIIP — which includes many structured products, derivatives, and insurance-based investment products — they must receive a standardised KID setting out performance scenarios, costs, and risk indicators. Providing a KID for products sold to professionals or ECPs is not required, though some firms do so voluntarily as a matter of client service.
The Role of Compliance
Compliance teams own the client categorisation policy and the operational processes that give effect to it. This includes the onboarding questionnaire and assessment process for elective professionals, the maintenance of categorisation records in the client relationship management system, the periodic review process, and the controls that prevent front-office teams from transacting in products that are out of scope for a client's category. Failures in any of these controls create conduct risk: the most egregious failures involve selling complex derivatives to retail clients without suitability assessments, or skipping the KID requirement.