In the Alert, the Commission reiterated that Reg BI “established a new, enhanced standard of conduct” for broker-dealers and their associated persons “when making recommendations of securities transactions or investment strategies (including account recommendation) to retail customers”. The Commission then summarized the deficiencies in broker-dealers’ compliance with the four (4) general Obligations contained within Reg BI: (i) Compliance Obligation, (ii) Care Obligation, (iii) Conflict of Interest Obligation, and (iv) Disclosure Obligation.

1. Compliance Obligation

• The Staff observed instances in which firms did not maintain adequate policies and procedures, and specifically called out instances in which firms only maintained generic policies not tailored to the firm.
  • The Staff observed that certain firms did not maintain adequate policies and procedures to comply with the Disclosure Obligation:
    • The Staff observed that several firms did not specify when disclosures should be created or updated or how updated disclosures should be delivered to retail customers. Firms also could not demonstrate whether a disclosure was delivered, making it difficult for firms to determine whether disclosures had been provided prior to or at the time of a recommendation.
  • The Staff also observed inadequate policies and procedures relating to firms’ compliance with the Care Obligation:
    • The Staff found several weaknesses in firms’ written policies and procedures, including failing to provide any guidance on how to consider alternatives in formulating a recommendation, how to consider costs when making a recommendation, and how/when to document the basis for recommendations.
    • Further, the Staff found that many firms that established systems that enabled the evaluation of costs or available alternatives failed to mandate their use and could not determine whether or not the systems were used.
  • Observations regarding Training and Periodic Reviews and Testing:
    • The Staff found that firms improperly relied on surveillance systems that (a) existed before the effective date of Reg BI without considering whether such systems warranted modification; and (b) captured only executed transactions and therefore did not review “hold” recommendations for compliance with Reg BI.
    • Certain firms relied upon documentation held locally rather than centrally, so that reviews designed to achieve compliance could only occur during branch examinations, and not in a timely manner to achieve compliance with the Care Obligation.
    • Firms did not provide targeted training that identified the firms’ processes for compliance with Reg BI.