SEC Office of Compliance Inspections and Examinations ("OCIE") Director Peter Driscoll urged firms to establish and maintain strong compliance programs that address (i) anti-money laundering ("AML"), (ii) microcap securities, (iii) paying agents and (iv) cybersecurity.
Mr. Driscoll advised firms not to wait until an OCIE examination to identify and address compliance deficiencies. Specifically, Mr. Driscoll advised firms to:
conduct independent tests of their AML programs to identify weaknesses;
educate themselves on FinCEN's customer due diligence rule and ensure their policies are compliant;
scrutinize indicators of manipulation, fraud and inaccurate issuer information when publishing quotations of over-the-counter (OTC) securities in connection with Rule 15c2-11;
ensure they are adhering to the locate requirements of Regulation SHO ("Regulation of Short Sales");
review their policies to ensure compliance with the lost securityholder rule that requires transfer agents and certain broker-dealers to search for and send notices to lost securityholders;
examine practices to ensure that they follow safeguarding and customer protection rules; and
update cybersecurity and technology controls to better protect customer information.