- The issue
A broker-dealer firm was fined $50,000 for failing to capture, review and retain business-related WhatsApp messages.
The firm’s written supervisory procedures (WSPs) prohibited the use of instant messages for business purposes unless the firm granted individual permission. If granted, the firm’s procedures would have obligated the firm to capture, retain, and monitor that individual’s instant messages. In this case, the firm did not grant permission.
Moreover, the firm had no procedures to ensure that its representatives were complying with the prohibition policy. In fact, the firm was aware that multiple representatives were using their personal mobile devices to communicate with their customers via WhatsApp — and that these communications were often business-related. Yet, the firm failed to take any action to either stop this practice or preserve and monitor business-related communications sent or received in this manner.
- The rules
As a result, between 2016 and 2019, the firm failed to capture, review or retain more than 10,000 business-related WhatsApp messages sent or received by 20 different firm representatives. The messages were deemed business-related because they included information about customers, accounts, investments or other aspects of the firm’s securities business.
In this case, the following rules would apply:
- FINRA Rule 4511 requires each FINRA member to make and preserve books and records as required under FINRA Rules, the Exchange Act, and the applicable Exchange Act rules.
- Exchange Act Rule 17a-4(b)(4) requires each FINRA member to preserve all communications relating to its business for a period of not less than three years, including instant messages.
- FINRA Rule 3110 requires each member to establish and maintain a system to supervise the activities of each associated person, that is reasonably designed to achieve compliance with applicable securities laws and regulations, and with applicable FINRA rules.
- FINRA Rule 3110(b)(4) requires a firm to review incoming and outgoing digital correspondence of its registered representatives relating to its securities business.
- FINRA Rule 2010 provides that a member, in the conduct of its business, shall observe high standards of commercial honor, and just and equitable principles of trade. Violations of FINRA Rule 4511 and Exchange Act provisions also violate FINRA Rule 2010.
Firms should enlist a third-party provider to assist with the retention of Whatsapp to comply with the regulatory obligations. Third-party provider solutions place software on an individual’s cell phone that captures IMs — including those sent via WhatsApp and WeChat — and sends the IM to an email address specified by the firm.
- The takeaway
Clearly, regulators are cracking down on the review and retention of business-related digital communications. Here are a few considerations for staying compliant.
- WSPs are non-negotiable
One of the most frequently cited violations is the failure to implement and follow WSPs. Firms must be consistent with their WSPs when it comes to retaining and reviewing digital communications. Not following policies and procedures is just as bad as not having any in the first place. - Prohibition policies aren’t the solution
As exemplified in the enforcement case above, prohibition policies for communications channels are not effective. Instead, firms can enable these convenient channels by enlisting a compliance-focused technology solution that can capture, preserve and monitor communications through all popular channels — including encrypted applications such as WhatsApp and WeChat. - Supervision technology is key
Instant messages and other communications should be reviewed with a risk-based approach through targeted supervision technology, using lexicons, random sampling, and machine learning for precision. With the right solution, messages can be flagged for review by compliance to determine if they are in violation of communications policy or reveal possible customer complaints, employee misconduct or malfeasance, or a violation of FINRA rules.
The financial services industry and how people conduct business within it continues to evolve. Firms must leverage innovative compliance technology to enable staff and customers to communicate, meet regulatory compliance obligations, avoid public mishaps, and stay ahead of the competition.
FEATURED EVENT | Smarsh CONNECT Digital | Virtual Conference | Engage with Compliance, Cyber and IT leaders
Source: Smarsh
Author: Marianna Shafir Esq. | Regulatory Advisor at Smarsh
About the author:
Marianna Shafir, Regulatory Advisor at Smarsh, is responsible for regulatory affairs worldwide. With her expertise in financial services industry, compliance and e-discovery, Marianna counsels Smarsh clients on meeting regulatory obligations, leveraging technology and guidance on best practices related to electronic communications supervision. Prior to joining Smarsh, Marianna worked for BNY Mellon and Invesco where she was an instrumental member on compliance teams.Marianna has also served as an adjunct professor at New York Career Institute where she taught Law Office Management and Real Estate Law. She earned her Juris Doctorate from Nova Southeastern University. She is a frequent speaker at industry conferences and a contributor to various online publications.
About us
LS Consultancy offer a complete solution with a range of cost effective, regulatory compliance and marketing products and solutions including copy advice and copy development which are uniquely suited to supporting firms.
Contact us today for a chat or send us an email to find out how we can support you in meeting your current and future challenges with confidence.
Contact us
Why Not Download our FREE Brochures! Click here.
Call Us Today on 020 8087 2377 or send us an email.
You can see our Google reviews here.
We’re looking for guest writers with business know-how and experience to create outstanding articles to feature on our website. Sound like you? Then find out more…