Employment in Financial Services

Anyone in an executive position (i.e. members of the legal administrative body, the effective management and independent controllers) at a financial institution must, at all times, have the necessary professional standing and expertise to perform their duties.

This will be assessed by the NBB through standard forms to complete if there is a new appointment, new elements during employment, termination of appointment or renewal of appointment.

"N-1" effective managers must meet the same criteria, but authorisation by the NBB is not necessary (see question 2).

Yes, special certification is required for financial services employers to undertake their duties.

The CPA-10 (ANBIMA Series 10 Professional Certification) is designed for professionals who distribute investment products for retail in bank branches or service platforms.

The CPA-20 (ANBIMA Series 20 Professional Certification) is for professionals who distribute investment products to clients in the high-income retail, private, corporate, and institutional investor segments in bank branches or on service platforms.

The CEA (ANBIMA Certification of Investment Specialists) is a certification that qualifies financial market professionals to act as investment specialists. These specialists can recommend investment products to clients in different segments and advise account managers.

The CFG (ANBIMA Certification of Fundamentals in Management) is for certified professionals who know the sector's technical basis, which is an advantage for occupying various positions in asset-management companies.

The CGA (ANBIMA Manager Certification) qualifies professionals to work with the management of third-party resources in fixed-income investment funds, shares, foreign exchange, multimarket, managed portfolios, and index funds.

The CGE (ANBIMA Manager Certification for Structured Funds) qualifies professionals to work with third-party resource management in the structured products industry.

Since 1 July 2010, the FMA General Regulation requires investment services providers to pass an examination to ensure that certain employees have a minimum knowledge base in the field.

This applies to salespersons, managers, financial instrument clearing managers, post-trade managers, financial analysts, financial instruments traders, compliance and internal control officers, and investment services compliance officers.

Since 1 January 2020, the following must also obtain certification: natural persons acting as a financial investment advisor; natural persons with the power to manage the legal person authorised as a financial investment advisor; and persons employed to provide investment advice by the legal person authorised as a financial investment advisor.

FMA certification must be obtained within a maximum of six months of the beginning of that person’s employment with an investment services provider. Certification is issued by FMA-certified organisations.

People already in practice before 1 July 2010 are exempt from this certification. This is known as a grandfather clause.

In addition to this minimum knowledge requirement, certain professionals are subject to an assessment of their knowledge and skills. This applies to natural persons who provide not only information but also financial advice, and generally takes the form of an annual evaluation interview.

Taking on certain tasks requires prior proof of competence, which varies depending on the financial services sector and the role. As an example, investment services must notify BaFin of investment advisors, sales representatives, and compliance officers, who in each case must be knowledgeable and reliable, and whose expertise must be reviewed at least annually (section 87, WpHG and the corresponding Employee Notification Ordinance). Institutions must deliver proof of professional suitability (ie, sufficient theoretical and practical knowledge of the relevant business and management experience) and reliability for certain key employees, managing directors, and members of the supervisory or administrative board (sections 25c paragraph 1 and 25d paragraph 1 KWG, sections 20 and 21 WpIG).

SFC

The “Guidelines on Competence” published by the SFC lists the necessary qualifications for employees carrying on regulated activities. For academic qualifications, employees should attain at least Level 2 in either English or Chinese as well as in Mathematics in the Hong Kong Diploma of Secondary Education or equivalent. In addition, employees are expected to obtain recognised industry qualifications and pass the local regulatory framework paper. For responsible officers (ROs), the SFC requires higher levels of educational qualifications and experience.

IA

The “Guideline on ‘Fit and Proper’ Criteria for Licensed Insurance Intermediaries Under the Insurance Ordinance” published by the IA sets out the education requirements for licenced employees under the IO. Higher levels of educational qualifications are required for responsible officers.

The recruitment of financial services employees for public-sector enterprises may be done through competitive scores secured through multi-level tests held for generalist and specialist posts. For instance, the Institute of Banking Personnel Selection conducts tests for selection for public sector banks; and the Securities and Exchange Board of India (SEBI), LIC, etc, hold similar tests for their recruitment.

In terms of industry practice, eligibility to appear at the preliminary levels or the final interview stages of the above tests may sometimes require certain specific certifications (eg, computer certifications for clerical posts in the banking sector. These certifications are prescribed by industry regulators and are actioned by industry collectives. For instance, the RBI[1] has made it mandatory for all banking and non-banking financial institutions to obtain certification for their employees. Industry collective the Indian Banking Association provides such certifications in specific areas like treasury operations, risk management, accounting and credit management. Along with this, further certifications may also be required for Anti-Money Laundering (AML), Know Your Customer (KYC), compliance with foreign exchange regulations, awareness of legal aspects of cyber security, etc.[2]

Similarly, the National Institute of Securities Markets (NISM), an institute promoted by SEBI, accredits institutions that coach and certify wealth management advisors. NISM-accredited qualifications are compulsory for wealth managers in the capital market segment. Also, the Indian Institute of Banking and Finance (IIBF) gives certification for Debt Recovery Agents based on RBI guidelines. Various collectives like the Fixed Income Money Market and Derivatives Association of India, Foreign Exchange Dealers Association of India and the Institute of Company Secretaries of India, inter alia, collaborate with the IIBF in the certification process in the treasury, forex and compliance sectors. The IIBF’s certification for customer service, KYC/AML programmes of the IIBF, and other similar certified courses from the NISM/AMFI/IRDA etc, are essential before hiring employees for certain specialised roles.

As part of the registration process, the SEBI regulations relating to portfolio managers and investment advisors require certain specific employees to be employed with minimum qualifications.

Yes, under the Minimum Competency Regime (see question 1), employees who perform certain prescribed functions and roles in prescribed RFSPs such as insurance businesses and credit unions, must meet the required competencies and qualifications standards.

The 2023 Act also introduces a new requirement that persons can only be permitted to perform a CF role (including a PCF role) where a certificate of compliance with the F&P Standards given by the firm is in force (Certification Regime).

As part of the Certification Regime, a certificate of compliance may only be given if:

1. the firm is satisfied on reasonable grounds that the person complies with the F&P Standards; and
2. the person has agreed to abide by the F&P Standards and to notify the firm without delay if for any reason they no longer comply with the F&P Standards.

Yes, please see question 2.

Any individual performing a prescribed key role must be pre-approved by the IoM FSA and be certified as “fit and proper”. The IoM FSA has issued detailed guidance for financial institutions that set out the criteria that they normally apply in considering the fitness and propriety of individuals who wish to undertake Controlled Functions. Appendix 2 of the guidance contains a table setting out which Controlled Functions require consent and which functions are notification only.

Guidance can be found here: https://www.iomfsa.im/media/2464/regulatoryguidancefitnessandpropriety.pdf

Employees in general positions are not required to obtain specific certification to perform their duties within financial entities. However, in brokerage houses, individuals involved in operations with the public, counselling, promotion and, if applicable, acquisition and sale of securities, must be authorised by the CNBV and obtain a certification issued by a regulated body recognized by the CNBV.  

The CNBV and CNSF, as applicable, may caution, remove, adjourn, or disqualify board members and the general manager if they believe the individual does not comply with legal requirements to occupy such positions or if their conduct constitutes a breach of applicable laws and regulations.

According to Dutch law, financial services sector companies must guarantee the quality of their services. This means, among other things, that they must have skilled employees for the subjects on which they advise. After all, the consumer must be able to trust that an employee has the right knowledge and skills to provide appropriate advice.

Therefore, all financial services sector employees with substantive customer contact must have up-to-date professional competence at all times. This means that employees must be skilled, aware of current developments in their field, and can apply these in their work. The obligation to maintain up-to-date professional competence at all times is an open standard. Financial services companies may, therefore, decide for themselves how to implement this standard.

There is, however, a mandatory Wft diploma requirement for employees who provide financial advice. Which products and services an employee may provide advice on depends on the specific Wft diplomas he or she has obtained (after passing an exam). A Wft diploma is valid for a definite period (with a maximum of three years). To renew a Wft diploma, an employee must pass a new exam.

Furthermore, all candidates who will (co-)determine the policy of a financial services company must also be assessed by local authorities and will be tested for reliability and suitability.

Representatives, senior management employees and other office holders may require MAS’ approval prior to an appointment or assuming an office (see question 2).

In particular, MAS must be notified of the appointment of representatives providing financial advisory services under the Financial Advisers Act 2001 or carrying out regulated activities under the Securities and Futures Act 2001 (dealing in capital markets products, advising on corporate finance, fund and REIT management, product financing, providing credit ratings or custodial services). With some exceptions, they must be at least 21 years old, satisfy minimum academic qualification requirements, and complete prescribed modules of the Capital Markets and Financial Advisory Services examinations.

Depending on the status of the employing entity and the position of the financial services employee, a special certification or, more generally, proof of relevant work experience and sufficient education is required.

As a general rule, persons holding executive, overall management, oversight or control functions (eg, a member of the board, CEO, compliance officer, risk officer or their deputies) in regulated companies such as banks, insurance companies, securities firms, fund management companies, managers of collective assets or asset managers are required to demonstrate to FINMA that they have sufficient relevant work experience and education. As proof, FINMA requests current CVs, diplomas, certifications and contact details of references. The scope and nature of the future business activity and the size and complexity of the company in question also need to be considered.

Furthermore, client advisers of so-called financial service providers (eg, investment advisers) must have sufficient expertise on the code of conduct and the necessary expertise required to perform their work. Client advisors often prove that these requirements have been met by successfully attending special courses. In addition, insurance intermediaries registered with FINMA’s insurance intermediary register have to prove that they have undergone sufficient education and have sufficient qualifications. For this purpose, FINMA has published a list of different Swiss and foreign educational qualifications deemed to be sufficient on its website.

As noted in question 2 -, employees undertaking certain regulated roles must obtain the pre-approval of the relevant regulatory authority.  The regulators in each case will assess the fitness and propriety of the relevant individual.
 

See question 2.

All individuals performing an SMF, as classified by the FCA or PRA, will be subject to the SMR. SMFs are described in the Financial Services and Markets Act 2000 (FSMA) as functions that require the person performing them to be responsible for managing one or more aspects of a firm’s affairs authorised by the FSMA, and those aspects involve, or might involve, a risk of serious consequences for the firm or business or other interests in the UK. As noted, any individual performing an SMF will need to be pre-approved by the relevant regulator before they can start their role, and thereafter they must be certified as fit and proper by their firm annually. Applications to the regulator for pre-approval must disclose all matters relating to a candidate’s fitness and propriety and be accompanied by a statement of responsibilities. Firms must carry out a criminal records check as part of the application for approval.

Additionally, employees of firms who are not senior managers but who, because of their role, could still pose a risk of significant harm to the firm or any of its customers, may be subject to the CR. The certification functions that place an employee within the ambit of the CR are different under the rules of the FCA and the PRA but include persons such as those dealing with clients or those subject to qualification requirements. These employees must be certified by their firm as fit and proper for their roles both at the outset of their employment and on an annual basis thereafter (certified staff). Firms are not required to carry out criminal records checks for certified staff, but firms can choose to do so to the extent it is lawful.

The regulators have set out detailed guidance for firms to consider when assessing an individual’s fitness and propriety. This includes assessing an individual’s honesty, integrity and reputation; competence and capability; and financial soundness.

For an individual’s FINRA registration to become effective, they must pass the Securities Industries Essentials examination. FINRA rules also require registered persons to participate in continuing education courses. Failure to do so may result in a covered person’s registration being deemed inactive until the requirement has been satisfied.

California Financing Law requires the licensing and regulation of finance lenders and brokers making and brokering consumer and commercial loans, unless exempt.

If a new element occurs that can influence one or more of the five criteria assessing the suitability of a person for the “fit and proper” authorisation (see question 2), the financial institution must file the adequate form with the NBB.

Notification to the NBB is also required in the event of termination or reappointment.

From a labour perspective, there are no circumstances in which notifications relating to the employee or their conduct must be made to local or international regulators.

Considering that the National Financial System is extremely regulated, there may be cases in which a mistake by an employee results in a duty to report to the authorities (information security breach, prevention of money laundering, and prevention of terrorist financing, among others, which could not be exhaustively included in this questionnaire).

There is no general code defined by law or regulation.

Each company can adopt its standard of behaviour, as a rule.

Some activities require specific protocols for the prevention of money laundering and combating the financing of terrorism:

• the capture, intermediation, and investment of financial resources from third parties in national or foreign currency;

• the purchase and sale of foreign currency or gold as a financial asset or exchange instrument; and

• the custody, issuance, distribution, settlement, negotiation, intermediation, or securities administration.

Within the scope of the system for preventing and combating money laundering and the financing of terrorism, it is up to institutions and their employees to adequately comply with Central Bank regulations; promote the effectiveness of the apparatus to combat and prevent money laundering; carry out risk management with the implementation of effective policies, procedures, and controls; and help the Brazilian state to locate which financial operations are suspicious so that they can be investigated.

In principle, the relationship between companies and employees in the financial services sector is private. As such, companies do not have to communicate confidential information about their employees to third parties, as this would constitute an infringement of their fundamental freedoms. However, in certain cases, employers must alert the competent authorities in the event of behaviour or "suspicions" of behaviour by one of their employees that is contrary to the law.

Thus, the Monetary and Financial Code provides that companies in the financial services sector, referred to in article L.561-2 of the code (the list of which was updated by Ordinance no. 2023-1139 of December 6, 2023 on credit managers and credit buyers to include "Credit managers"), must report to the national financial intelligence unit (Tracfin) all sums or transactions that they suspect to be the result of an offence punishable by a prison sentence of more than one year, or related to the financing of terrorism or tax evasion. This declaration may be made in respect of any employee of one of these companies.

In addition, when facts likely to constitute violations of the anticorruption code of conduct or to qualify as corruption or influence peddling are brought to the attention of the company and its managers, an internal investigation must be conducted (article 17 of Law No. 2016-1691 of 9 December 2016 on transparency). If the investigation confirms the suspicions, the employer must, on the one hand, sanction the employee, but also inform the prosecuting authority of the facts.

In smaller companies, the employer will also be able to report to the prosecution authorities any behaviour that could lead to criminal sanctions.

Yes. Under section 87 WpHG, investment firms must notify BaFin of any changes regarding employees providing investment advice, sales representation, and compliance advice. This includes, for example, personal data or a change of the responsible sales representative, but also the termination of the activity. Changes must be communicated to BaFin within one month.

Further, investment firms must notify BaFin as soon as a substantial customer complaint is made against one or more employees based on his or her activities in connection with investment advice. This applies, for example, to allegations of incorrect investment advice. The notification to BaFin must be submitted within six weeks of receipt of the complaint. Details on the content of the notification are governed by section 8 paragraph 4 of the Securities Trading Act Employee Notification Ordinance.

There are further notification obligations if there are doubts about an employee‘s reliability under the relevant statutory rules. For example, in their initial declaration of reliability under section 24 paragraph 1 No. 1 KWG and section 5b Ordinance on Notifications and Submission of Documents under the KWG, future managing directors and persons acting as sole representatives of credit institutions and financial services institutions must immediately report to BaFin in writing any subsequent changes that may be relevant to their reliability. This applies to all facts that were also relevant for the initial reliability assessment (eg, because an employee was convicted of certain financial crimes). In addition, BaFin must also receive notifications of preliminary proceedings, indictments and convictions of certain financial sector employees according to the Order on Notifications in Criminal Matters.

SFC – Self-reporting obligation

An SFC-licensed intermediary is subject to the self-reporting obligation under paragraph 12.5 of the “Code of Conduct for Persons Licensed by or Registered with the Securities and Futures Commission”. A licensed or registered person should report to the SFC immediately upon the occurrence of any material breach, infringement or non-compliance with any laws, rules regulations, and codes administered or issued by the SFC, exchange or clearing house of which it is a member or participant of, and the requirement of any regulatory authority applicable to that intermediary. This encompasses both actual and suspected breaches, infringements or non-compliance. In the report, the particulars of the actual or suspected breach, infringement or non-compliance, and relevant information and documents must be included to fulfil the obligation.

The same is to be reported by the registered institutions to the HKMA. The HKMA also requires authorised institutions to submit an incident report on the same day of discovering the incident.

SFC - Internal investigation disclosure obligation

In addition, a licensed corporation is required to provide the SFC with information about whether a licensed individual who ceases to be accredited to it (outgoing employee) was under any investigation commenced by the licensed corporation within six months preceding his or her cessation of accreditation. If the internal investigation commences after the notification of cessation of accreditation, the licensed corporation should also notify the SFC as soon as practicable. In addition, even if a firm has completed its investigation and made no negative findings against an outgoing employee, the firm will still be required to notify the SFC of the investigation.

The SFC expects licensed corporations to proactively disclose information about all investigative actions and the following is a non-exhaustive list of examples of investigations involving an outgoing employee that a licensed corporation should disclose to the SFC:

• investigations about a suspected breach or breach of applicable laws, rules and regulations;
• investigations about a suspected breach or breach of the licensed corporation's internal policies or procedures;
• investigations about misconduct that are likely to give rise to concerns about the fitness and properness of the outgoing employee;
• investigations about any matter that may have an adverse market or client impact; and
• investigations about any matter potentially involving fraud, dishonesty and misfeasance.

HKMA – Reporting incidents to HKMA

According to the “Incident Response and Management Procedures” published by the HKMA, once an authorised institution has become aware that a significant incident has occurred, the authorised institution concerned should notify the HKMA immediately and provide it with whatever information is available at the time. An authorised institution should not wait until it has rectified the problem before reporting the incident to the HKMA.

According to the Supervisory Policy Manual SB-1 “Supervision of Regulated Activities of SFC-Registered Authorized Institutions”, to be in line with the reporting requirements imposed by the SFC on licensed representatives, authorised institutions will be required to notify the HKMA in writing within seven business days upon knowledge of the occurrence of certain information (including any subsequent changes) of the relevant individuals. The required information is on whether or not the person is or has been:

• convicted of or charged with any criminal offence (other than a minor offence) in Hong Kong or elsewhere;
• subject to any disciplinary action, or investigation by a regulatory body or criminal investigatory body (as the case may be) in Hong Kong or elsewhere;
• subject to, or involved in the management of a corporation or business that has been or is subject to, any investigation by a criminal investigatory body or any regulatory body in Hong Kong or elsewhere concerning offences involving fraud or dishonesty;
• engaged in any judicial or other proceedings, whether in Hong Kong or elsewhere, that is material or relevant to the fitness and propriety of the individual; or
• bankrupt or aware of the existence of any matters that might render him insolvent or lead to the appointment of a receiver of his property under the Bankruptcy Ordinance.

HKMA – Guidance Note on Cooperation with HKMA Investigations

Under the “Guidance Note on Cooperation with the HKMA in Investigations and Enforcement Proceedings”, the HKMA encourages and recognises the cooperation of authorised institutions, banks and their staff in investigations and enforcement proceedings. Under this Guidance Note, cooperation includes early and voluntary reporting of any suspected breach or misconduct, taking a proactive approach to assist the HKMA’s investigation, and making timely arrangements to provide evidence and information.

IA – Self-reporting obligation

Under “the Code of Conduct for Licensed Insurance Agents/Brokers”, there is a self-reporting obligation by licensed insurance agencies or brokerages to the IA. A licensed insurance agency or brokerage is required to have proper controls and procedures to ensure the following incidents are reported to the IA as soon as is reasonably practicable:

• a disciplinary action taken by the HKMA, the SFC or the Mandatory Provident Fund Schemes Authority;
• a criminal conviction (other than a minor offence) by any court in Hong Kong or elsewhere;
• any material breaches of requirements under the IO or any rules, regulations, codes or guidelines administered or issued by the IA; and
• any material incidents which happen to the agency or brokerage.

The RBI requires banks to conduct an annual review of fraud committed and provide a note of the total number to the board of directors or the local advisory board. These reports are not to be sent to the RBI but are to be preserved for verification by the RBI’s inspecting officers[1]. Necessary disclosures may also need to be made to SEBI under some of its regulations.

Publicly listed financial services companies may be required to make necessary disclosures, including to the stock exchanges and their auditors, in case of workplace fraud.

The CBI expects RFSPs to be open and transparent in their engagement, including concerning compliance with the F&P Standards and the Common Conduct Standards. While early versions of the IAF regulations and related guidance contained an obligation on a RFSP to report to the CBI if disciplinary action had been taken against an individual, the obligation was removed from the latest version of the draft legislation. The Guidance indicated that the CBI would expect that they would have already received relevant details as it provides that firms and persons performing PCF roles are required to report to the CBI where they suspect that a "prescribed contravention" may have occurred for the purposes of the CBI legislative framework and the CBI states that a breach of the Common Conduct Standards and/or Additional Conduct Standards is a "prescribed contravention" for these purposes.

Yes, please see question 9.

Financial institutions in the Isle of Man are required to comply with various statutory requirements. Breaches of those statutory requirements impose an obligation on the relevant entity to self-report to the IoM FSA. While ordinarily, businesses will endeavour not to supply information about individuals within the business to the regulator as part of this reporting, from time to time this may be necessary to comply with their regulatory obligations. Where this is the case, usually the regulator will be asked to use their powers of compulsion to seek the information rather than such information being given voluntarily. This is particularly the case where the regulator may have formed concerns about an individual’s fitness and propriety and wishes to investigate this further.

Regulators from other jurisdictions may use certain reciprocal agreements and reciprocal enforcement legislation to seek information from the IoM FSA or more directly from a financial services business. Where such requests are made, this may include information about individual employees (ordinarily those exercising Controlled Functions). However, any mechanism for reciprocal enforcement or exchange of information is subject to scrutiny and such information would normally only be offered by an employer under compulsion.

Pursuant to the Federal Law for the Prevention and Identity of Transactions with Illegally Obtained Resources, all acts carried out by financial entities are considered a vulnerable activity; therefore, financial entities must:

• set forth measures and procedures to prevent and detect acts and operations;
• file reports to the SHCP regarding acts, operations and services carried out by clients and employees if they suspect illegal resources are involved; and
• keep for at least 10 years any information and documents related to the identification of clients and users.

Given the above, if any action, operation or service is identified as undertaken with illegal resources or there is a breach of any of the provisions outlined in the above law, employers must inform the SHCP and prosecutor.

Also, if officers and general managers no longer comply with the legal requirements to occupy their positions (eg, not having a satisfactory credit record, or no longer being in good standing), financial entities may inform the CNBV or CNSF, as applicable, so the authorities may disqualify or remove those individuals from their positions.

Furthermore, if there is a breach of the code of conduct, the regulatory comptroller must inform the board of directors and keep such information available to the CNBV at all times. The board of directors will be in charge of establishing disciplinary measures.

Finally, if employees breach psychological risk prevention obligations (see question 11), employers must inform the labour authorities to impose corresponding sanctions.

Financial services companies must report to local regulators any behaviour or event that poses a serious threat to the ethical conduct of the business of the company or may affect the reliability of policymakers, sound and controlled business operations and continuity.

Furthermore, there are several local disciplinary authorities where reports can be made about financial services employees who fail to comply with Dutch law, guidelines and rules of conduct.

Forms need to be submitted to the MAS when an individual ceases to act as a representative in regulated activities or financial advisory services. Depending on the FI, the MAS may also have to be informed of appointments or changes of representatives, directors, chief executive officers, and other key officeholders (see questions 2 and 4).

MAS notices are also required for the reporting of misconduct for employees who are representatives of certain capital market service providers, financial advisers, and insurance broking staff. Examples of reportable misconduct include acts involving fraud, dishonesty or other offences of a similar nature, and non-compliance with regulatory requirements. Specific declaration forms and timelines may apply depending on the FI. An FI may also be required to submit updates on cases where investigations have not concluded or disciplinary action was not taken, or submit a declaration that there was no misconduct reported in a given calendar year.  

While not specific to financial services employees, the Corruption, Drug Trafficking and Other Serious Crimes (Confiscation of Benefits) Act 1992 requires any person with knowledge, or reasonable grounds to suspect, that any property is being used in connection with criminal activity to file a Suspicious Transaction Report with the Suspicious Transaction Reporting Office. MAS notices concerning the prevention of anti-money laundering and incidents of fraud emphasise this obligation.

As a general principle, supervised companies are required to ensure that persons holding, in particular, executive, overall management, oversight or control functions fulfil the requirements of the “fit and proper” test. Consequently, such persons must be of good repute and can guarantee compliance with applicable laws and regulations.

If a person cannot guarantee that the regulatory requirements are fulfilled at all times (eg, because of a material breach of its duties) the employing entity and its audit companies may be required to immediately report to FINMA, respectively, any incident that is of significance.

Both the DFSA General Rulebook and FSRA General Rulebook provide that where an authorised firm requests the withdrawal of an authorised individual, they must provide to the regulator details of any circumstances in which they consider the individual is no longer fit and proper.  Where the individual is to be dismissed or has requested to resign, the firm must provide to the regulator a statement of the reason, or reasons, for the dismissal or resignation.

In addition, the DFSA and FSRA General Rulebooks contain broad obligations on any authorised firm to report to the regulator if it becomes aware of a range of occurrences, including any matter which could have a significant adverse effect on the authorised firm’s reputation, or a matter in relation the authorised firm which could result in serious adverse financial consequences to the financial system or to other firms, or a significant breach of a rule by the authorised firm or its employees.

Yes. There are multiple potential reporting obligations with various timing imperatives. We include below a snapshot of some of the key obligations:

• under FCA Principle 11, firms have a general duty to inform the FCA of matters about which it would reasonably expect notice;
• a firm must notify the FCA immediately it becomes aware, or has information which reasonably suggests, that a matter which could have a significant adverse impact on the firm’s reputation has occurred, may have occurred or may occur in the foreseeable future;
• a firm must notify the FCA immediately it becomes aware, or has information which reasonably suggests, that a significant breach of a rule (including a significant breach of a Conduct Rule) has occurred, may have occurred or may occur in the foreseeable future; and
• a firm must also notify the FCA if it takes disciplinary action against an individual for a breach of the Conduct Rules. Where the relevant individual is a senior manager, the notification must be made within seven business days. Where the relevant individual is certified staff, the notification must be made in the firm’s annual reporting.

FINRA members must report to FINRA within 30 calendar days after the firm has concluded, or reasonably should have concluded, that an associated person of the firm or the firm itself has violated any securities, insurance, commodities, financial or investment-related laws, rules, regulations or standards of conduct of any domestic or foreign regulatory body or self-regulatory organisation.

While there is no requirement to report misconduct to regulators, the SEC routinely gives credit to organisations that voluntarily choose to self-report, which can lead to reduced fines, non-prosecution agreements, deferred prosecution agreements, waivers of disqualification following regulatory or criminal actions, or more organisation-friendly language in settlement documents. However, such disclosed information may later be discoverable by private plaintiffs.

The SEC has issued guidance that a failure to self-report significant misconduct can lead to more severe penalties.