Employment in Financial Services

Members of management should at all times be of good repute and possess sufficient knowledge, skills and experience to perform their duties (article 91, Directive 2013/36/EU; and article 9, Directive 2014/65/EU).

Anyone in an executive position (i.e. members of the legal administrative body, the effective management and independent controllers) at a financial institution must exclusively be natural persons and must at all times have the necessary professional standing and expertise to perform their duties (article 19, Act of 25 April 2014). Since 2023, it is specified that “in particular, these persons must demonstrate honesty, integrity and independence of mind which, in the case of members of the legal administrative body, enable them to effectively evaluate and, if necessary, question the decisions of the actual management and to ensure the effective supervision and monitoring of the management decisions taken” (Art. 19, Act of 25 April 2014).

In addition, they must not have been convicted of any of the offences listed in article 20 of the Act of 25 April 2014. This concerns convictions with a professional ban and violations of financial legislation, company codes and insurance law.

The NBB will verify that these persons meet the conditions listed above. Forms for a new appointment, additional elements during the employment, termination of an appointment or renewal of an appointment are available on the NBB website (www.nbb.be). These forms require information mainly regarding education, past financial services experience, training, any criminal or administrative or civil proceedings or investigations, disciplinary decisions, bankruptcy, insolvency, potential conflicts of interest, and time commitments for the new appointment.

The NBB will assess the ability of the person based on five criteria:

• expertise, covering knowledge, experience and skills;
• professional repute;
• independence of mind;
• time commitment; and
• collective suitability for the board (ie, to verify whether the expertise within the said body is sufficiently guaranteed, given the person’s knowledge, experience and skills (NBB Fit & Proper Handbook of 22 December 2022, 2:26, p. 16)).

Concerning "N-1" effective managers (managers who exercise direct and decisive influence over the management of the institution, but who are not members of the management committee) other than branch managers, the supervisory authority does not have to authorise them (NBB Fit & Proper Handbook of 22 December 2022, 2:9, p. 14). This does not mean that these persons must not have the required expertise and professional reputation, but only that the NBB will not conduct an assessment.

The law does not require specific procedures or measures before hiring. However, depending on the activities the employee performs, specific certification may be necessary.

In the financial services sector, candidates must comply with standard recruitment practices, but also with suitability, requirements and, for certain positions, with supervision by the ACPR or the European Central Bank (ECB).

Traditionally, employees in the financial services sector are required to provide the usual documents requested when applying for a job: a cover letter and a curriculum vitae. This is especially important because, as we will see, access to certain positions is conditional. For example, investment advisors must provide proof of either a national diploma attesting to three years of study, or training, or professional experience in the field.

Also, due to the very nature of the financial services business, employees of companies in the sector are required to be honourable.

The Monetary and Financial Code provides that certain operational activities in the financial services sector, such as being a managing director, are barred in the event of a felony conviction, a prison sentence of at least six months with a suspended sentence in connection with the financial world, or a management ban (article L. 500-1 of the Monetary and Financial Code). For this reason, the criminal record of a concerned candidate is generally requested at the time of hiring.

In addition, the appointment or renewal of a senior executive of a credit institution, a finance company, an investment firm other than a portfolio management company, a payment institution or an electronic money institution must be ratified by the ACPR, and by the ECB in the case of major credit institutions. Validation of the appointment or renewal is based on good reputation and competence, which is assessed based on five criteria: experience, reputation, absence of conflicts of interest and independence of mind, availability, and collective ability.

Different notification procedures exist before employees may take up their roles.

Investment firms may only entrust employees to provide investment advice if they are knowledgeable and have demonstrated the required reliability – as evidenced, inter alia, by not having a relevant and unspent prior criminal record. Furthermore, such employees’ identities must be disclosed to BaFin before they commence their activities. The active registration of employees is intended to impart upon employers the significance of employee selection and responsibility for their decisions.

Representatives of regulated entities of the financial services sector (typically, members of management) must be approved by BaFin before they can take up their role (colloquially known as BaFin’s “driver’s licence”). To obtain approval, a request must be filed with BaFin, showing the experience and suitability of the candidate for the role. Depending on the financial services delivered by the company, information that must be filed include the following:

• a CV (including information on professional training, career, and references);
• information on reliability (a form or summary to be completed by the manager, including, for example, mandatory declarations on prior criminal or administrative offences);
• a "certificate of good conduct for submission to an authority", a "European certificate of good conduct for submission to an authority", or "corresponding documents" from abroad (depending on the countries of residence in the last 10 years);
• an extract from the central commercial register;
• an overview of other mandates as a managing director or in administrative and supervisory bodies; and
• information about the manager’s ability to dedicate sufficient time to the role.

Non-management employees responsible for specific key functions at an insurance provider are subject to a similar notification process. Further, financial services employers must perform a risk analysis under the Anti-Money Laundering Act and take internal security measures, which also includes assessing the reliability of employees.

There are no particular pre-screening measures specified by the financial regulators in Hong Kong. Nevertheless, financial institutions would generally conduct background checks on prospective employees (especially those taking on senior positions) to ensure they comply with the “fit and proper” requirements of the financial regulators.

There is no particular form of regulator-specified reference to be provided by previous employers in the financial services industry. Nevertheless, the SFC has specified disclosure obligations for licensed corporations in respect of outgoing employees who were subject to internal investigations (see question 10).

The pre-screening measures, when employing a financial service employee, are carried out in compliance with the frameworks laid down by the respective industry regulators. For instance, the Reserve Bank of India (RBI), the central banking sector regulator in India, periodically issues certain guidelines for banking and non-banking employers to conduct mandatory employee background checks. These regulators also recognise certain “Self-Regulatory Organisations” (SROs), who then play the primary role in conducting grassroots verifications. SROs conduct character and antecedent verification of employees registered with them as per the standards set by the regulator. Strict police verification of at least the last two addresses is usually mandated and verifications are periodically updated and shared on a common database at an industry level. For instance, the Finance Industry Development Council is an SRO of Non-Banking Finance Companies (NBFCs) and is registered with the RBI.

A financial services employer should be sensitive to the data being used for pre-screening measures as India protects individual privacy. Hence, both the employer and the service provider engaged by the employer should obtain prior consent from the prospective employee before pre-screening. If the pre-screening measures include the collection of “sensitive personal data information[1]”, then an employer must seek the individual’s consent, which would also help mitigate risks for any claims concerning the invasion of an employee’s privacy. Employers should ideally ensure that pre-screening is complete before the employee is hired. A comprehensive pre-screening will include verification of educational qualifications, checks with past employers, verification of residential addresses, police records, and passport status. Usually, with seniority of the role, checks with past employers happen more rigorously, while for entry-level employees, checks with academic institutions about educational qualifications may be done more rigorously. Similar standards must be met by contract employees empanelled by the service providers.

There is no regulator-specified reference that must be provided by previous employers in the financial services industry. However, in practice, most public sector banks (eg, Bank of India) and many central public sector undertakings in financial services (eg, Life Insurance Corporation of India (LIC)), as per their selection or onboarding protocols, require at least two “Character Certificates”, one of which should be from the head of the educational institution last attended or the present employer and the other should be from gazetted officers[2] or bank officers, without any familial ties to the employee.

RFSPs must satisfy themselves that all CF and PCF candidates or employees comply with the F&P Standards. Pre-employment due diligence must be performed, including asking the candidate to certify they will comply with the F&P Standards and notify the RFSP immediately of any change in circumstance that may mean they no longer comply. Employers must continue to ensure that in scope employees comply with the F&P Standards and must complete an annual declaration to this effect. This means that due diligence must continue throughout the employment relationship and not just at the recruitment stage.

Candidates for PCF roles must complete an online individual questionnaire, which is submitted to the CBI in advance of appointment to the role through the Central Bank portal. The CBI must grant its approval for the PCF appointment before a candidate can take up the role. Any PCF offer of employment must be conditional on that approval being obtained. The CBI may request applicants attend an interview as part of the approval process.

Employers should take all reasonable steps to secure references from previous employers in order to due diligence the candidate's compliance with the F&P Standards and their suitability for the role. However, an employer is not obliged to issue a reference in respect of a former employee which means that a prospective employer may not be able to secure a reference from a previous employer.  The CBI does not oblige employers to either issue or obtain a reference as part of screening checks, however employers must make good efforts to do so.

There are material obstacles from a data privacy and practical perspective to employers conducting criminal background checks in relation to prospective employees. Data relating to criminal convictions is special category data under the GDPR. Employers would need to satisfy both Article 6 and Article 9 requirements under the GDPR to justify the processing of this data. In terms of Article 9, this means employers would need to show reasons of substantial public interest or that they are carrying out their legal obligations in processing the data.  In terms of Article 6 the employer will need to show that the processing is necessary to comply with a legal obligation to which the employer is subject or the processing is necessary for the employer's legitimate interests for example to ensure the suitability and honesty of its employees and to protect its reputation. Employers are also prevented from asking candidates about "spent convictions" which are usually minor criminal offences dating back over seven years.

Pre-employment medical checks must also have a clear legal basis justifying the processing of an employee's medical and health information.

There is a general obligation on employers in the Isle of Man to undertake legal working checks to ensure that the prospective employee has the right to work lawfully in the Isle of Man.

In addition, financial institutions must take reasonable steps to ensure that individuals who perform any regulated activity in the course of their employment, or under any contract with the financial institution, are fit and proper for the tasks they perform, by providing adequate training and supervision and (where necessary) undertaking additional checks. Where the financial institution wishes to employ an individual in a Controlled Function, the financial institution must carry out sufficient due diligence to satisfy itself that the candidate is fit and proper to perform the proposed functions.

There are two types of Controlled Functions, those that require notification to, and acceptance by, the IoM FSA and those that require notification only. In either case, the financial institution is required to notify the IoM FSA of the appointment or intended appointment of certain key roles at least 20 business days before the appointment takes effect. Where the Controlled Function also requires acceptance, the financial institution will require the IoM FSA’s consent to the appointment of a prospective candidate to a particular role. It is recommended that job offers in such circumstances are made subject to the written acceptance of the IoM FSA.

While the IoM FSA does not specify any particular pre-screening measures, it provides guidance on the nature of the expected due diligence that it would expect a financial institution to carry out, particularly where the individual will be undertaking a key role. Such due diligence includes carrying out a professional body check (ie, any memberships held and if disciplinary action has been taken), capacity check[1], criminal record check, credit check and website checks. The financial institution should also consider the individual’s qualifications, training and competency.

The IoM FSA may ask for evidence of the due diligence carried out by the financial institution at any time, either remotely or during a supervisory visit.

The IoM FSA recommends financial institutions request a reference from the prospective candidate’s current employer and previous employers covering, as a minimum, the past ten years of employment.

For employees with general positions, there are no pre-screening measures. Under article 1 of the Constitution and article 21 of the FLL, discrimination is prohibited. Furthermore, article 21 of the FLL establishes that distinctions will not be deemed discriminatory if certain qualifications are required for certain work. Specifically, if there is no legal ground or work-related justification to request criminal records for a determined position, conditioning the position on that information may be deemed discriminatory.

For example, financial entities must include a list of the expected members of the board of directors, general manager, and main officers, including their respective professional and academic backgrounds, in the filing to obtain authorisation of the CNBV (except insurance and bond institutions) to start operations. These positions require certain special requirements, and thus financial entities must verify – by prior appointment and thereafter, at least every year – that general managers and officers:

• have a standing reputation;
• have expertise in legal, financial and management matters;
• have a satisfactory credit record and credit eligibility;
• are residents in Mexico (for credit entities); and
• have no other legal impediment (see below).

All financial entities must guarantee that high-level employees are capable, experienced and not subject to any procedure involving conduct contrary to financial stability or compliance with business or financial business standards. General managers and officers in controlling entities and auxiliary credit organisations, and in exchange bureaus and brokerage houses, and general managers in insurance and bonding institutions must have at least five years’ experience at a high decision-making level that required financial and management expertise.

Also, these individuals must not have any of the following legal impediments:

• a pending dispute with the financial entity or any other financial entities in the group;
• a conviction for a wilful economic crime;
• a disqualification from owning a business, public service positions or the Mexican financial system;
• declared bankruptcy or insolvency;
• carried out regulation, inspection, and monitoring of the financial entity or any other financial entities in the group; or
• participated in the board of directors of the financial entities.

Additionally, for exchange bureaus and brokerage houses, such individuals must not have been an external auditor of the exchange bureau or related entity in the 12 months before their appointment.

Specifically, in credit organisations, general managers and officers must not:

• be a partner or have a position within entities or associations that render services to the entity or its related entities;
• be a client, provider, debtor, creditor, partner, member of the board of directors or employee of an entity that is a client or provider (whose services or sales represent more than 10% of the client’s services or sales), or a debtor or creditor (of which the debt is higher than 15% of the assets);
• be an employee of a foundation, association or civil society that receive important contributions from the entity (which represent more than 15% of the total contributions received by such entities in a fiscal year).
• be a general manager, officer, or employee of another entity that is part of the financial group;
• be a spouse or domestic partner of any individual mentioned above, or be in a cohabiting relationship with them; or
• carry out regulation duties of credit organisations and exchange bureaus.

Financial entities must inform the CNBV, CNSF, or CONSAR, as applicable, of general managers’ and officers’ appointments, resignations or removals, within five business days of such events. Meanwhile, controlling entities, brokerage houses, surety deposit institutions and compensation chambers must inform the CNBV, CNSF, or CONSAR within 10 days of the same.

There are also limits to employees participating in the board of directors of these companies. Only the general manager and officers two levels below may be members, and no other employees may occupy these positions.

According to the Insurance and Bonds Regulations, officers and employees of credit institutions, insurance institutions, bond institutions, brokerage houses, stock market specialists, auxiliary credit organisations, investment companies, operating companies of investment companies, exchange houses, financial commissioners, retirement fund managers, specialised investment companies of retirement funds, and controlling companies with 10% or more of representative shares of such companies will not be authorised to act as insurance or bond agents.

Under Dutch law, all financial services sector companies must make substantiated assessments on the reliability and integrity of candidates to be appointed in integrity-sensitive positions. However, in practice, almost all financial services sector companies have made a pre-employment screening mandatory for all candidates (for any position).

The exact pre-screening process differs per financial service industry and company. In general, the following components are part of the pre-screening process: proof of identity; insolvency check; highest level of education; work experience (reference check); certificate of conduct (VOG, see question 3); and an integrity questionnaire.

Reference checks that go back five years are common in the financial services sector.

Pre-screening measures are only required if the FI employee is going to be involved in the provision of financial services (or other MAS-regulated activities).

Such employees need to pass a fit-and-proper assessment, referring to the MAS Guidelines on Fit and Proper Criteria. Criteria to be considered include the employee’s honesty, integrity and reputation; competence and capability; and financial soundness.

In considering the employee’s honesty, integrity and reputation, relevant factors include whether the employee has been the subject of proceedings or investigations (whether criminal or disciplinary) or has been dismissed or asked to resign. MAS’ Circular CMI 01/2011 also sets out MAS’ expectations on due diligence checks, declarations and documentation concerning employees who are expected to be representatives of specific FIs. Among other things, this entails conducting reference checks with the previous employers of the FI’s proposed employees.

In December 2023, MAS issued its response to a May 2021 consultation paper which sought to address issues arising from the recycling of “bad apples” through FIs. In doing so, the MAS noted it will proceed with its proposal to impose mandatory requirements to conduct and respond to reference checks. The anticipated reference check regime will apply to specific groups of employees, with the information to be addressed in reference checks standarised. The MAS will look to consult on the relevant draft notices in this respect in due course, and this will bear watching.

For more senior roles (eg, senior managers, material risk personnel, directors, committee members, chairpersons and key executives), FIs are expected to ensure that they are fit and proper for their roles. MAS’ prior approval may also have to be obtained or notices may have to be made, depending on the licence, registration and role sought. FIs in these sectors are expected to conduct more rigorous checks before seeking MAS’ approval or submitting a notice, with a greater emphasis on considering circumstances that may give rise to a conflict of interest.

Under Swiss civil law, there is no requirement to apply pre-screening measures. However, while not a statutory requirement under Swiss financial market laws per se, companies subject to these laws apply pre-screening measures to ensure that a prospective financial services employee meets the requirements set forth by these laws. In particular, regulated companies such as banks, securities firms, insurance companies, fund management companies, managers of collective investment schemes and asset managers are required to obtain authorisation from the Swiss Financial Market Supervisory Authority (FINMA) relating to strategic and executive management and each change thereto.

As a general rule, the higher the responsibility or position of a person, the more requirements financial services employees may need to fulfil. Persons holding executive or overall management functions (eg, a member of the board or members of the senior management) are required to fulfil certain requirements set forth by the applicable Swiss financial market regulations. Such requirements may include providing current CVs showing relevant work experience and education as well as excerpts from the debt and criminal register. It may also include providing various declarations (eg, concerning pending and concluded proceedings, qualified participations and other mandates). Furthermore, financial services employees holding certain control functions (eg, compliance officer, risk officer and their deputies) may also be required to prove that they are suitable for the position by providing, for example, a current CV showing relevant work experience and education.

In the DIFC, an individual who performs a “licensed function” must be approved in advance by the DFSA.   The roles which fall within the meaning of an authorised person for the DFSA includes someone appointed as:

• the Senior Executive Officer, who has ultimate responsibility for the day-to- day management, supervision and control of one or more (or all) of an authorised firm’s financial services carried on, in or from the DIFC;
• the Finance Officer;
• Compliance Officer;, and
• Money Laundering Reporting Officer. 

Where a firm proposes to appoint an authorised individual, an application to the DFSA must be made in advance; the DFSA will make an assessment of the  individual in order to satisfy itself that they are fit and proper to be an authorised individual. The Regulator will consider the individual’s integrity, competence and capability, financial soundness, their proposed role, and any other relevant matters.  That individual may not be considered as fit and proper where they have been declared bankrupt, convicted for a serious criminal offence, or incapable - through mental or physical incapacity - of managing their affairs.

In the ADGM, an individual who performs a “controlled function” must be approved in advance by the ADGM.  A controlled function includes someone appointed as the Senior Executive Officer, Finance Officer, Compliance Officer, and Money Laundering Reporting Officer.

Where a firm proposes to appoint someone in a controlled function, an application to the ADGM must be made in advance, The ADGM will make an assessment of  that individual in order to satisfy itself that they are fit and proper to be an approved individual.  The Regulator will consider the individual’s integrity, competence and capability, financial soundness, their proposed role and any other relevant matters.  That individual may not be considered as fit and proper where they have been declared bankrupt, convicted for a serious criminal offence, or incapable - through mental or physical incapacity - of managing their affairs.

For employees subject to the SMR, anyone performing an SMF must be pre-approved by the relevant regulator before they can start their role. Generally, firms that wish to employ a senior manager must first carry out sufficient due diligence to satisfy themselves that the candidate is a fit and proper person to perform their proposed functions. In this regard, firms must consider the individual’s qualifications, training, competency and personal characteristics. The firm must also carry out a criminal records check. They may then apply to the relevant regulator for that candidate’s pre-approval. In the firm’s application, all matters relating to the candidate’s fitness and propriety must be disclosed. The firm must also enclose a statement of that individual’s proposed responsibilities and (depending on the firm) the latest version of the firm’s management responsibilities map.

For employees subject to the CR, before the appointment and annually thereafter, these employees must be certified by the employing SM&CR firm as being fit and proper. Certification does not involve pre-approval by the FCA or PRA.

Additionally, firms must comply with the regulatory reference rules for all candidates subject to either the SMR or CR before their employment. These rules require employing firms to request a regulatory reference from all previous employers covering the past six years of employment. Information must be shared between regulated firms using a particular template, which includes information relevant to assessing whether a candidate is fit and proper. Firms are also expected to retain records of disciplinary and fit and proper findings going back six years for their employees (or longer for findings of gross misconduct), and they must update regulatory references that they have previously given where new significant information comes to light that would impact the content of a previously given regulatory reference.

In addition to the standard hiring measures that must be taken when engaging an employee, several additional steps must be taken when engaging financial services employees in the United States. Generally, financial services employees must pass certain screening and disclosure steps, including:

• background checks;
• criminal background disclosures; and
• fingerprinting.

Broker-dealers and investment advisors must register with FINRA (see below).

Background checks

FINRA-regulated entities must investigate each person they plan to register with FINRA to ensure that they meet FINRA Form U4 requirements regarding that person’s history of formal charges and indictments.

If the applicant has previously registered with FINRA, broker-dealers must also review an applicant’s most recent Form U5 or be able to demonstrate to FINRA that it has made reasonable efforts to review Form U5 but has been unable to do so. If the applicant has previously registered with a CFTC-registered firm, the broker-dealer must review CFTC Form 8-T.

Bank employees must undergo a background check. Certain criminal conduct may statutorily disqualify an applicant from employment. For example, federal law prohibits any person convicted of a criminal offence involving dishonesty or breach of trust (or who has entered into a pre-trial diversion or similar programme regarding such an offence) from serving as a director, officer, or employee of an FDIC-insured bank without the FDIC's consent. Banks must conduct reasonable inquiries into an applicant’s background to avoid hiring persons barred from employment by this law. Banks may be protected from claims of disparate impact (under state “ban-the-box” laws) when terminating or withdrawing offers from disqualified employees under this law. Both California and New York explicitly provide such carve-outs. However, these are position-specific rather than employer-specific, and employees with positions not subject to FINRA or other statutorily required background checks or disqualifiers based on criminal history may still be subject to state or local “fair chance” or ban-the-box laws. Therefore, as a best practice, non-bank financial services employers should avoid relying on these exceptions for all of their employees. Relatedly, the FDIC does not consider “de minimus” criminal violations disqualifying, including minor offences by young adults, bad cheques for less than $1,000 and simple theft of less than $500.

Fingerprinting

Entities covered by the SEC are also subject to fingerprinting requirements. Every member of a national securities exchange, broker, dealer, registered transfer agent, registered clearing agency, registered securities information processor, national securities exchange, and national securities association must ensure that each of its partners, directors, officers, and employees are fingerprinted and must submit such fingerprints, or cause the same to be submitted, to the Attorney General of the United States for identification and appropriate processing. Employees who will not be selling, keeping, or handling securities or supervising those who do are exempt from this requirement.

While New York generally prohibits fingerprinting, there is an exception where, as here, fingerprinting is statutorily required.

California Financing Law requires fingerprinting for certain individuals seeking to license in California.

Please note, during the COVID-19 epidemic, the SEC temporarily paused the fingerprinting requirements. This pause was lifted in September 2022.

The NBB has issued a Fit & Proper Handbook, which was last updated on 22 December 2022.

Besides, Febelfin has adopted codes of conduct and regulations for relations between financial institutions and their customers, which can be considered standard practice in the sector.

Each financial institution may also provide more concrete or more precise quality standards for its clientele.

There is no general code defined by law or regulation.

Each company can adopt its standard of behaviour as a rule.

Certain activities require specific protocols for the Prevention of Money Laundering and Combating the Financing of Terrorism:

• the capture, intermediation, and investment of financial resources from third parties in national or foreign currency;

• the purchase and sale of foreign currency or gold as a financial asset or exchange instrument; and

• the custody, issuance, distribution, settlement, negotiation, intermediation, or securities administration.

Within the scope of the Brazilian System for Preventing and Combating Money Laundering and the Financing of Terrorism, it is up to institutions and their employees to adequately comply with Central Bank regulations. Also, institutions must promote the effectiveness of the apparatus to combat and prevent money laundering, carry out risk management with the implementation of effective policies, procedures, and controls, and help the Brazilian state locate suspicious financial operations so that they can be investigated.

First of all, various obligations discussed so far have the effect of forcing, if they were not already there, employees in the financial services sector to behave in an honourable manner and respect prudential rules.

In addition, Law 2016-1691 of 9 December 2016 on transparency, the fight against corruption and the modernisation of economic life states in article 17 that in certain large companies, managers must take all measures to prevent and detect the commission, in France or abroad, of acts of corruption or influence peddling.

This means setting up a code of conduct that will be integrated into the internal regulations, in compliance with the procedure for consulting employee representatives provided for in article L. 1321-4 of the French Labour Code.

This code of conduct involves the implementation of measures and procedures that will be monitored by the French Anti-Corruption Agency. In particular, the code of conduct must define and provide examples of the various types of behaviour to be prohibited as likely to constitute corruption or influence peddling. It must also establish an evaluation and control system, as well as a disciplinary system, enabling the company's employees to be sanctioned if there is a violation of the company's code of conduct.

In addition to this code of conduct, which is part of the internal regulations, almost all players in the financial services sector have put in place charters and policies to protect confidential information and regulate risky activities.

Employees must conduct themselves in line with their respective roles and responsibilities, which in client-facing roles indirectly leads to them being subject to specific behavioural obligations (such as having to adhere to certain procedures and documentation obligations before selling a service or product to a client). In addition, company policies required by the regulator (eg, on sustainability or equal treatment) often include behavioural standards.

In addition, there are voluntary standards adopted by various professional associations, such as the Code of Conduct of the Federal Association of Financial Services, which apply to their respective members.

SFC

Under the SFO, licensed representatives and ROs are required to be “a fit and proper person” to carry on the regulated activities and must adhere to the standards of behaviour set out in the “Code of Conduct for Persons Licensed by or Registered with the Securities and Futures Commission”. Other relevant guidelines regarding standards of behaviour include:

• “Fit and Proper Guidelines”, which set out the general expectations of the SFC of what is necessary to satisfy the licensing or registration requirements that a person is fit and proper.
• “Guidelines on Competence”, which set out the competence requirements and its objective to ensure a person is equipped with the necessary technical skills and professional expertise to be “fit”, and is aware of the relevant ethical standards and regulatory knowledge to be “proper” in carrying on any regulated activities.

HKMA

Under the BO, employees of an authorised institution that carry on regulated activities under the SFO are required to be fit and proper. In addition, the HKMA needs to be satisfied that the chief executive, directors, controllers and executive officers of the authorised institutions are fit and proper. Other relevant guidelines regarding standards of behaviour include:

• “Code of Banking Practice”, which is to be observed by authorised institutions in dealing with and providing services to their customers.
• Supervisory Policy Manual CG – 2 “Systems of Control for Appointment of Managers”, which sets out the system of control that authorised institutions should have for ensuring the fitness and propriety of individuals appointed as managers.

IA

The conduct requirements for licensed insurance agents and brokers are set out in Division 4 of the IO. Other relevant codes and guidelines include:

• “Code of Conduct for Licensed Insurance Agents”, which sets out the fundamental principles of professional conduct that buyers of insurance are entitled to expect in their dealings with licensed insurance agents.
• “Code of Conduct for Licensed Insurance Brokers”, which sets out the fundamental principles of professional conduct that buyers of insurance are entitled to expect in their dealings with licensed insurance brokers.
• “Guideline on ‘Fit and Proper’ Criteria under the Insurance Ordinance”

Financial services regulators like the RBI, SEBI and Insurance Regulatory and Development Authority of India (IRDAI) regulate employees through prescribed frameworks and their organisation-specific rules.

The obligations for the conduct of employees in financial services are determined depending upon the type of organisation: public sector banks (majorly owned by the state) or private banks; sectors (banking, non-banking, insurance, capital market); regions (different local laws); and level of seniority (liability of officers or manager is different from regular employees or clerical staff).  Though there are no statutory standards, judicial pronouncements have set a higher threshold of duty of care for employees in the financial services sectors. The Andhra Pradesh High Court in Harinarayan Seet v Andhra Bank[1] held dismissal of service as a proportionate punishment for dereliction of duty by banking employees, which would have otherwise attracted a lesser penalty for employees in less-critical sectors.

In terms of general labour legislation also applicable to financial services employees, financial services organisations fall under the definition of “commercial establishments”, whose definition has been laid down by the Shops & Commercial Establishments Act (state level). They provide certain conduct-specific obligations, for example, a prohibition against discrimination, suspension or dismissal for misconduct.

The other major piece of labour legislation that lays down standards of conduct is the Industrial Employment (Standing Orders) Act, 1946 (IESOA). However, its applicability to commercial establishments or to a specific industry is dependent upon state-wide laws. For example, the states of Haryana and Karnataka have notified the application of the IESOA to commercial establishments with a minimum of 50 employees. This implies that financial services institutions in these states, meeting the above criteria, are bound to comply with the IESOA. Upon the application of the IESOA, the establishments are required to submit to the certifying officer draft standing orders proposed for their establishment, which should cover acceptable standards for employees.

In the banking sector, employees of public-sector banks, private-sector banks and foreign banks are bound by the obligations laid down by the RBI and their organisation rules. The provisions of these rules, which are different from other industries, are stricter: observance of secrecy; prohibition against using influence to secure employment for family members; bypassing regular compliance checks for availing of banking facilities; prohibition against media contributions, participating in politics or standing for election; demonstrations prejudicial to the public interest; and acceptance of gifts in an official capacity.

In terms of financial propriety, employees must not indulge in speculation in stocks and shares, but must avoid personal insolvency and even disclose their moveable and immoveable assets. During employment, they are also forbidden from engaging in any outside employment (stipendiary or honorary) without the prior approval of the organisation. Higher managerial employees are subject to additional scrutiny. Those belonging to public sector enterprises are brought within the jurisdiction of the Central Vigilance Commission, the apex vigilance institution. It is due to the gravity of corruption cases that the senior management of private sector banks is also included within the ambit of “public servant”, which usually includes employees of only public sector organisations. This was upheld by the Supreme Court of India in the case of Central Bureau of Investigation v Ramesh Gelli[2].  The organisations in the insurance and capital markets sectors also have similar institution-wide conduct and disciplinary rules.

Directors of organisations in the financial services sector may also be subject to duties stated in Schedule IV of the Companies Act 2013 and the SEBI (Listing Obligations and Disclosure Requirements) Regulations 2015.

When it comes to outsourcing activities, financial institutions formulate a board-approved “Code of Conduct” as part of the “Outsourcing Agreement”, which is to be complied with by the outsourced service providers and their employees.[3]

Though financial services employees are held to a higher set of moral standards, their right to participate in trade union actions for voicing their concerns has been upheld time and again. Recently, the Madras High Court in the case of D Thomas Franco Rajendra Dev v The Disciplinary Authority and Circle Development Officer and State Bank of India[4] observed bank officers’ right to unionise.  However, the right of bank employees to go on a strike gets limited since banks and other financial institutions are declared as ‘Public Utility Services’ (“PUS”). Accordingly, while they are not barred from going on strike, they must adhere to certain pre-requisites namely service of notice of at least 6 weeks before going on a strike, prohibition of any strike within 14 days from date of service of above notice, prohibition of going on a strike before the expiry of the date of that strike and non-authorization of any strike during the pendency of any conciliation proceedings or 7 days after the conclusion of such a proceeding. Upon being declared a PUS, the concerned industry must adhere to these conditions failing which the strikes would be declared as illegal.

Yes there are. They are:

• the F&P Standards;
• the minimum competency regime; and
• the IAF and SEAR (see question 1).

There are also sector-specific conduct of business requirements in legislation and codes, including the Consumer Protection Code 2012, the MiFID II regime, and other regulatory requirements applicable to RFSPs based on their industry sector that apply and deal with matters such as:

• error handling,
• disclosures to customers,
• acting in the best interests of customers; and
• complaints handling.

Yes, financial institutions are required to comply with the rules and standards of conduct as set out in the Rule Book (as a minimum).

Financial institutions must notify the IoM FSA of any departure or intended departure of an employee who undertakes a Controlled Function within ten business days. Furthermore, where a financial institution discovers an event which may lead to a final warning being given to, or other serious disciplinary action being taken against, any of its employees, the financial institution must inform the IoM FSA within ten business days. The notice must specify the event, and the name of the employee where the employee holds a Controlled Function or is a “key person”. Where the employee is not a “key person” and does not hold a Controlled Function role, the financial institution is not required to inform the IoM FSA of the name of the employee unless – following an investigation – the employee is given a final warning or other serious disciplinary action is taken (in which case, the financial institution will have to inform the IoM FSA of the employee’s name at that point).

Financial entities must establish, implement and apply, among other things:

• confidentiality policies;
• policies for internal control to confirm the acts, operations and services of individuals are carried out in an ethical, professional and legal manner;
• policies regarding the prevention of acts and operations with illegal resources;
• policies to prevent psychological risk factors;
• policies that allow the identification, follow-up and control of risks inherent to operations; and
• conflict of interest resolution policies.

Under the general provisions applicable to operations with securities carried out by members of the board of directors, officers and employees of financial entities and other obligated parties, the principles that must be complied with are the following:

• transparency in operations;
• equal opportunity before all other market participants in sureties operations;
• compliance with fair stock market customs and practices;
• absence of a conflict of interest; and
• prevention of improper behaviour that may have as its origin the use of privileged or confidential information.

Policies, manuals and codes must also include guidelines for the resolution of potential conflicts of interest, as well as the mechanisms to avoid the existence of such conflicts.

Financial entities must inform the CNBV annually, within 15 days, a report on the conduct, operations, and services of individuals. If any act or operation with illegal resources is detected, financial entities must inform the authorities immediately, including the CNBV and the SHCP.

The board of directors of operating companies of investment funds, distribution entities, and stock appraisers of investment funds must approve a code of conduct, which must consider:

• activities in compliance with the applicable laws;
• internal control rules for the compliance of provisions and policies contained in the code, including investment provisions issued by the CNBV;
• security mechanisms to ensure confidential information is used solely for authorised purposes and security measures to protect clients’ files from fraud, robbery or misuse;
• an obligation on the general manager, officers and employees to conduct themselves in a fair, honest and professional manner in the performance of their activities; and
• a prohibition on officers, employees and proxies executing any type of operation with the public that contravenes market practices.

Members of the board of directors, the general manager, officers, regulatory comptrollers, proxies, and other employees must immediately report the existence of illegal or unethical conduct or activity to the regulatory comptroller.

Under Dutch law, financial services companies must maintain integrity and ensure safety, stability and integrity within their company. This also means that financial services companies must prevent their employees from committing criminal offences, other violations of the law or socially inappropriate behaviour that undermines confidence in the financial services sector or financial markets. For these reasons, it is common to implement company-specific codes of conduct.

There are many statutory general regulations and standards of behaviour that financial services employees are expected to adhere to. Moreover, all industries have their own specific industry-wide guidelines and codes of conduct.

An important statutory obligation for directors, (other) policymakers and employees with customer contact is to take an oath or promise before entering into employment. The oath or promise contains a declaration that – among other things – the employee will perform his or her duties with care and integrity, will put customer interests first and will make every effort to maintain and promote confidence in the financial services sector.

In addition to the oath or promise as mentioned above, there is also the “banker's oath”. This oath goes further than the oath or promise mentioned above and is mandatory for all employees who work for banks.

Breaching guidelines, codes of conduct or the statutory oath could lead to disciplinary sanctions being taken by the company itself (such as termination of the employment contract) or by disciplinary supervisors (such as a reprimand or a fine).

Generally, MAS’ Guidelines on Individual Accountability and Conduct emphasises the importance of reinforcing standards of proper conduct among all employees, while employees conducting regulated activities must remain fit and proper for their roles under MAS’ Guidelines on Fit and Proper Criteria.

Guidelines, codes, directions, notices and legislation in relation to corporate governance and risk management (including those mentioned in questions 5 and 6) should also be considered.

Depending on the regulatory status of the employing entity and, as the case may be, on the exact activities of a financial service employee, a financial service employee needs to adhere to certain code of conduct rules (eg, regarding transparency and care, documentation and accountability).

Supervised companies in Switzerland are, in principle, required to set up an organisation that ensures the compliance with Swiss financial market laws and its statutory code of conduct rules. For this purpose, among others, companies are required to issue regulations that their employees must follow.

Under Swiss financial market laws, code of conduct rules are generally based on abstract statutory rules and concretized by recognised privately organised associations.

In particular, several professional organisations (eg, the Swiss Bankers Association or the Asset Management Association) and self-regulated organisations issue their own set of code of conduct rules that members are required to follow.

In the DIFC, the DFSA General Rulebook provides that authorised individuals must adhere to six principles, as follows:

• Principle 1 – Integrity
• Principle 2 – Due skill, care and diligence
• Principle 3 – Market conduct
• Principle 4 – Relations with the DFSA
• Principle 5 – Management, systems and control
• Principle 6 – Compliance
   

In the ADGM, the FSRA General Rulebook provides that authorized individuals must adhere to eleven principles, as follows:

• Principle 1 – Integrity
• Principle 2 – Due skill, care and diligence
• Principle 3 – Management, systems and control
• Principle 4 – Resources
• Principle 5 – Market conduct
• Principle 6 – Information and interests
• Principle 7 – Conflicts of Interest
• Principle 8 – Suitability
• Principle 9 – Customer assets and money
• Principle 10 – Relations with regulators
• Principle 11 – Compliance with high standards of corporate governance

Yes. Both the FCA and PRA have established their own high-level required standards of conduct known as the Conduct Rules. The FCA’s conduct rules are set out in the FCA’s Code of Conduct sourcebook. The PRA’s conduct rules are set out in the PRA Rulebook (and different versions apply to different types of PRA-regulated firms).

The FCA’s conduct rules apply to most individuals working at an SM&CR firm. The PRA’s conduct rules apply to more limited individuals working at dual-regulated SM&CR firms: senior managers (approved by the PRA or FCA); individuals within the PRA’s certification regime; key function holders; and non-executive directors.

The Conduct Rules apply to conduct relating to the carrying out of an individual’s role. They do not extend to conduct within an individual’s private life, provided that the conduct is unrelated to the activities they carry out for their firm. Nevertheless, an individual’s behaviour outside of work can still be relevant to the separate consideration of their fitness and propriety.

There are two tiers of Conduct Rules: a first tier of rules applicable to all individuals subject to the Conduct Rules; and a second tier applicable to senior managers only.

The rules of the first tier are:

• Rule 1 – You must act with integrity.
• Rule 2 – You must act with due skill, care and diligence.
• Rule 3 – You must be open and cooperative with the FCA, PRA and other regulators.
• Rule 4 – You must pay due regard to the interests of the customer and treat them fairly.
• Rule 5 – You must observe proper standards of market conduct.

The rules of the second tier (applicable to senior managers) are:

• SC1 – You must take reasonable steps to ensure that the business of the firm for which you are responsible is controlled effectively.
• SC2 – You must take reasonable steps to ensure that the business of the firm for which you are responsible complies with the relevant requirements and standards of the regulatory system.
• SC3 – You must take reasonable steps to ensure that any delegation of your responsibilities is to an appropriate person and that you oversee the discharge of the delegated responsibility effectively.
• SC4 – You must disclose appropriately any information for which the FCA or PRA would reasonably expect notice.
• SC5 (certain dual-regulated firms only) – When exercising your responsibilities, you must pay due regard to the interests of current and potential future policyholders in ensuring the provision by the firm of an appropriate degree of protection for their insured benefits.

Firms must notify the FCA if they take disciplinary action against an individual for a breach of the Conduct Rules.

Employees in some states, including California and New York, are required to receive periodic sexual harassment training.

Employers are also required to implement anti-discrimination and anti-harassment policies that:

• contain information about where and how employees can report improper conduct;
• prohibit retaliation for reporting or opposing improper conduct, or participating in an investigation regarding misconduct; and
• comply with state and local provisions that require employer policies to contain certain provisions (eg, New York, Los Angeles and San Francisco).

New York law prohibits employers from mandating confidentiality or non-disclosure provisions when settling sexual harassment claims (though it allows such provisions where it is the employee’s preference to include them).

California law prohibits employers from mandating confidentiality or non-disclosure provisions in employment agreements, settlement agreements, and separation agreements that are designed to restrict an employee's ability to disclose information about unlawful acts in the workplace, including information pertaining to harassment or discrimination or any other conduct the employee has reason to believe is unlawful.

FINRA and the SEC both have requirements and recommendations for social media use.

FINRA requires that broker-dealers retain records of social media communications related to the broker-dealer’s business made using social media sites and adopt policies and procedures designed to ensure that their employees who use social media sites for business purposes are appropriately supervised and trained, and do not present an undue risk to investors.

The SEC similarly requires that social media use complies with all federal security laws, including antifraud, compliance, and recordkeeping provisions.

Banking regulators provide guidance stating that each financial institution is expected to carry out an appropriate risk assessment that takes social media activities into consideration.