With the UK’s Financial Conduct Authority joining its American counterparts in cracking down on communications surveillance, MirrorWeb’s Harriet Christie catches up with recent enforcement efforts.
The typical narrative is that as time passes, digital regulation becomes more stringent. Accountability becomes a greater requirement as technology continues to advance and occupy a more meaningful proportion of our professional lives. There’s nothing new here, and yet recent regulatory activity has been even more intense than expected across a variety of global organizations.
Stateside, the SEC and Financial Regulation Authority (FINRA) are continuing to demonstrate characteristic aggression while expanding the demands placed on firms under their jurisdiction. Meanwhile, the UK’s Financial Conduct Authority (FCA) appears to have woken up from a period of relative indifference.
FINRA
FINRA’s 2024 Regulatory Oversight Report provided new steps for firms to implement in their quest for compliance. Companies are now asked what they are doing to capture business correspondence through off-channel avenues and whether they are actively monitoring for new communications platforms that may be available to advisers.
FINRA directly recommends that firms determine if approved channels are underutilized, signifying that alternatives are being used. They’re also asked to look out for “indicia of communications occurring off-channel,” i.e., references to other conversations on unsanctioned domains.
These updates are significant because of what they represent. Trusting employees to follow protocol is no longer enough; the surveillance element is now more pronounced, and compliance teams are expected to do the detective work to understand the regulatory landscape and make sure employee conduct is appropriate. This places a greater burden of responsibility across every organization and makes it difficult for leaders to look the other way and then plead ignorance.
SEC: Self-Reporting Is Biggest Factor in Assessing Recordkeeping Fines
Cooperation with investigation and efforts to comply with obligations also considered, agency official say
Read moreDetailsSEC
Applying standards across the industry
We’re all aware of the agency’s ongoing probe into off-channel communications, which has dominated headlines for a couple of years now, and in April, the SEC announced its first enforcement action against a registered investment adviser (RIA) with no ties to a broker-dealer.
This action is a statement of intent; it exemplifies Enforcement Director Gurbir Grewal’s desire to apply fundamental standards across the industry, and not just to the eye-catching J.P. Morgans of this world. This is not a box-ticking exercise but a shift to the culture of proactive compliance he strives for.
Self-reporting
Following criticism around arbitrary enforcement, the SEC has denied that it is picking numbers at random when determining fines around off-channel communications. Rather than the size of a firm or scope of their misconduct, the most meaningful factor is, in fact, whether a company has self-reported their violations, the agency says.
By providing an opportunity for companies to self-report on past lapses and establish the correct compliance procedures proactively in exchange for leniency, the SEC is clearly trying to expedite the process of cultural upheaval.
Marketing rule
The marketing rule signaled a regulatory evolution when it landed in late 2022. Consumer protection was top of the agenda, but it has taken some time for the regulator to bare its teeth on enforcement. We are now seeing some progress, with companies being held accountable for passing outlandish speculation as legitimate advice.
In April, the SEC imposed $200,000 in fines over marketing rule violations. Five RIAs were charged, with all five accepting that they misled consumers by advertising model performance which they could not substantiate. GeaSphere LLC was hit with the heaviest penalty of $100,000.
Another risk alert was issued around this time, with the regulator addressing common marketing rule pitfalls like those mentioned above.
“The findings point to numerous instances of noncompliance, ranging from unsubstantiated claims to misleading advertising tactics, raising concerns about the transparency and accuracy of information available to investors,” the alert said.
FCA
Historically, the FCA has developed a reputation for weak enforcement, particularly in comparison to its U.S. counterparts. This report from the National Audit Office (NAO) in December 2023 acknowledged that in order to match the UK government’s ambitions for the sector, they would need to improve on past regulatory failures. In recent months, they have obliged.
In November 2023, the FCA issued a call to action highlighting lapses around consumer duty compliance, including the promotion of high-risk or complex products, opacity on fees and insufficient consideration of consumer understanding. The regulator also began to directly engage with noncompliant firms, conducting onsite visits and issuing Section 165 information requests.
In March 2024, following a review into retirement income advice, the FCA wrote to the CEOs of financial firms and told them to review their processes. They also warned that, “the honeymoon period is over,” around consumer duty enforcement and revealed plans to publicly share details of any businesses under investigation.
The name-and-shame policy was met with widespread backlash across the industry, including British Chancellor of the Exchequer Jeremy Hunt. While unpopular, it signifies how unprecedented and potentially impactful the FCA’s change of strategy can be.
Harriet Christie is chief operating officer at MirrorWeb. She graduated from the University of Sheffield in 2010, with a B.A. in management accounting, entrepreneurship, business law, BSR, HR. She entered the tourism space, starting as an accounts executive at LateRooms.com, and earning the title of global accounts manager within three years. She occupied this role for a further five years as the business continued to evolve and flourish, before taking up her role as a key account manager with MirrorWeb, a data-archiving solution based in Manchester. Harriet was appointed operations director in 2020. Since then, she has helped oversee the evolution of the MirrorWeb product and service offering, as well as the business' impressive growth since her taking on the role. 
