The Firm failed to evidence any review of incoming or outgoing written and electronic correspondence; failed to review the incoming and outgoing electronic correspondence of its CCO’s personal email account that he used to conduct securities related business, and the CCO had business cards with his personal email address included.
The firm failed to maintain its electronic correspondence (email) and electronic internal communications (email) for almost two years, and failed to maintain the incoming and outgoing electronic communications of an individual’s personal email account used to conduct business. The firm failed to notify FINRA prior to employing electronic storage media.
The Firm failed to file an attestation by at least one third party who has access and the ability to download information from its electronic storage media to an acceptable media for such records that are exclusively stored electronically. The firm’s electronic storage media failed to have in place an audit system providing for accountability regarding inputting of records required to be maintained and preserved, and inputting of any changes to every original and duplicate record maintained and preserved.
The firm failed to evidence the disclosure of its privacy notice upon account opening and annually thereafter; although the firm produced a privacy policy and procedures, it failed to provide initial, annual and revised privacy notices.