Our Take
The research identifies real compliance pressure (FCA breaches, DORA exams) but conflates vendor-driven modernization anxiety with regulatory mandate—the whitepaper itself is promotional, not independent.
Why it matters
Compliance teams at regulated firms face genuine pressure: 178 confirmed breaches across 11 UK banks in one year (FCA, August 2025), plus live DORA audits in the EU. But the decision to migrate is being shaped by vendor research, not neutral evidence.
Do this week
Compliance lead: run the 12-question self-assessment against your current estate before your next audit cycle so you can separate actual regulatory gaps from migration vendor messaging.
Four regulatory shifts are raising the stakes on legacy voice systems
A Wordwatch study surveying 100 compliance, IT and surveillance leaders at financial organisations found that 79% still rely on disconnected recorders and legacy systems for communications archiving. The research identifies four distinct regulatory and operational pressures that have emerged in the past 12 months.
The Financial Conduct Authority's August 2025 multi-firm review uncovered 178 confirmed breaches of internal communications policies across 11 wholesale banks in a single year, with 41% involving directors or senior managers. The FCA explicitly cited third-party vendor failures as a contributing factor. Separately, Digital Operational Resilience Act (DORA) examinations are now live across the European Union, with assessors actively scrutinising documented exit plans and sub-processor transparency. Microsoft Teams has become the default voice platform at most regulated firms, creating a new data silo that sits alongside historic voice archives rather than integrating with them. Finally, AI-driven initiatives across the sector continue to stall when communications data remains fragmented across vendors and locked in proprietary formats.
More than three-quarters of respondents reported receiving a regulator's request for a record in the past year alone, yet most organisations cite migration risk as their primary barrier to modernisation. The Wordwatch research identifies five ways migrations typically fail: transcoding that strips evidential value, broken chain of custody, proprietary export lock-in, failure to retire legacy infrastructure post-migration, and parallel-running periods cut short before reconciliation is complete.
The cost calculus is shifting, but not uniformly
Inaction on legacy recorder estates now carries measurable compliance exposure. Organisations dependent on ageing infrastructure face spiralling maintenance fees, regulatory requests they may struggle to fulfil from fragmented archives, and inability to integrate communications data with new AI and governance workflows. The institutional memory of a single bad migration can paralyse decision-making for years, but that caution is increasingly expensive.
The research maps six distinct cost lines embedded within a legacy estate that typically never appear together on a single budget page. It also sets out what a controlled migration should include: ingestion in original file formats, full chain of custody from source to destination, live and legacy data in scope from the outset, genuine parallel running with call detail record-level reconciliation, and phased retirement prioritising highest-risk legacy systems first.
One caveat: this whitepaper is from Wordwatch, a vendor in the migration space. The research is independent in scope (100 respondents, external review), but the framing and recommendations are designed to support the business case for migration. The FCA breaches and DORA requirements are real. The cost-benefit analysis of migration versus standing still is directional, not definitive.
Assess your readiness before regulators force the issue
The research includes a 12-question self-assessment covering capture and coverage, archive and retrieval, governance and policy, and legacy modernisation readiness. Organisations that qualify four or more answers are, according to the study, already past the point at which the cost of standing still exceeds the cost of a controlled migration.
The practical divide is not between firms with large budgets and those without. It is between organisations that run a controlled, evidence-preserving migration before regulators escalate their scrutiny and those that delay until forced. If you have received a regulatory request for records in the past 12 months and your voice archive sits across multiple disconnected systems, that deadline is already running.