The Financial Industry Regulatory Authority has fined Ally Invest Securities $850,000 for failing to preserve about 22.6 million electronic communications with customers about trade executions, fund transfers and other account activity, plus an unknown quantity of internal and external communications about the firm’s securities business from about 90 group mailboxes.
The activity occurred from September 2016 through November 2022. During the same period, Ally’s written supervisory procedures were not reasonably designed to ensure review of business-related electronic communications, and the firm failed to timely review at least 521,000 such communications, violating FINRA Rules 3110 and 2010.
Ally, based in Charlotte, North Carolina, has more than 200 registered reps and six branch offices.
Ally did not preserve those communications due to separate coding errors and other technical failures in three systems that caused the communications to be lost, the order states.
"For example, Ally captured certain electronic communications by copying them to a dedicated mailbox, but when Ally transitioned to a new records-retention system, the copying feature was deleted, and the communications were no longer captured," the order states.
As a result of the technical failures, Ally was unable to fully respond to 39 regulatory inquiries from FINRA and the Securities and Exchange Commission.
During the same period, Ally failed to establish, maintain and enforce a supervisory system, including written supervisory procedures, that were reasonably designed to achieve compliance with the firm’s obligation to review business-related electronic communications to and from about 120 group mailboxes and a software platform used for customer service communications.
"Ally’s procedures did not require the group mailboxes and all user accounts of the customer-service software to be connected to the firm’s system for selecting communications for review, nor did the firm’s procedures describe how to verify that the mailboxes and user accounts were connected to the review system," the order states.
As a result, "Ally failed to timely perform any supervisory review of approximately 521,000 business-related electronic communications from approximately 30 of the group mailboxes and the software platform, plus an unknown quantity of communications from approximately 90 of the group mailboxes," FINRA said.
FINRA previously warned Ally about another failure to review business-related electronic communications.
By failing to implement a reasonable system, including written procedures, for supervising business-related electronic communications, Ally violated FINRA Rules 3110 and 2010.
In resolving the matter, FINRA states that it recognized Ally’s cooperation.
"Ally identified and self-reported each of the issues identified in this AWC before detection by FINRA or any other regulator," FINRA said. "Ally promptly corrected each of the systems failures that caused the issues. Ally also voluntarily took steps, both on its own and by using external resources, to evaluate its recordkeeping procedures and systems broadly for the purpose of identifying other recordkeeping issues."
Further, "Ally substantially assisted FINRA’s investigation by proactively identifying the cause, scope, and impact of each issue and by providing detailed factual summaries," the order said.
© Touchpoint Markets, All Rights Reserved. Request academic re-use from www.copyright.com. All other uses, submit a request to TMSalesOperations@arc-network.com. For more information visit Asset & Logo Licensing.