InfoBytes Blog
SEC, CFTC settle with national bank’s subsidiary
On December 17, the SEC announced charges against a subsidiary limited liability company of a national bank for Securities Exchange Act violations because the firm and its employees allegedly failed to maintain recordkeeping requirements. According to the order, from at least January 2018 through at least November 2020, the company’s employees communicated about securities business matters on their personal devices, using text messaging applications and personal email accounts. These communications were not maintained or preserved by the company, and some were not able to be furnished promptly to a Commission representative when requested, allegedly in violation of Section 17(a) of the Exchange Act and Rules 17a4(b)(4) and 17a-4(j) thereunder. Additionally, the company’s “widespread failure to implement its policies and procedures which forbid such communications led to its failure to reasonably supervise its employees within the meaning of Section 15(b)(4)(E) of the Exchange Act.” The company received subpoenas for documents and records requests in numerous Commission investigations during the time that it failed to maintain required securities records relating to the business. In its response to the subpoena requests, the bank allegedly did not search for relevant records contained on the personal devices of its employees. The order further noted that because the company’s “recordkeeping failures impacted the Commission’s ability to carry out its regulatory functions and investigate potential violations of the federal securities laws across these investigations, the Commission was often deprived of timely access to evidence and potential sources of information for extended periods of time and, in some instances, permanently.” According to the SEC, the company admitted the facts set forth in the SEC’s order and acknowledged that its conduct violated the federal securities laws, and agreed to: (i) pay a $125 million penalty; (ii) implement robust improvements to its compliance policies and procedures, including retaining “a compliance consultant to, among other things, conduct a comprehensive review of its policies and procedures relating to the retention of electronic communications found on personal devices and [the company’s] framework for addressing non-compliance by its employees with those policies and procedures”; and (iii) cease and desist from committing or causing any violations and any future violations of Section 17(a) of the Exchange Act and Rule 17a-4 thereunder.
The same day, the CFTC announced a $75 million settlement with the company, the national bank, and its public limited company (collectively, “respondents”) for allegedly failing to maintain, preserve, and produce records that were required to be kept under CFTC recordkeeping requirements, and failing to diligently supervise matters associated with its businesses as CFTC registrants. According to the CFTC order, from at least 2015, the respondents’ employees internally and externally communicated on unapproved channels, and had messages related to the respondents’ businesses as CFTC registrants that were required to be maintained under CFTC-mandated recordkeeping requirements. The order also noted that the written communications were not maintained and preserved by the respondents, and they were not able to be furnished promptly to a CFTC representative when requested. The order further alleged that the widespread use of unauthorized communication methods by the respondents’ employees to conduct firm business violated their own policies and procedures. The respondents also did not maintain adequate internal controls with respect to business-related communications on non-approved communication methods. The order requires the respondents to pay a $75 million civil monetary penalty, to cease and desist from further violations of recordkeeping and supervision requirements, and to engage in specified remedial undertakings.