United States: SEC Supervisory Liability FAQs

On Sept. 30, the staff of the SEC's Division of Trading and Markets published answers to eight Frequently Asked Questions (FAQs) concerning supervisory liability for compliance and legal personnel at broker-dealers.

The FAQs follow a speech last year by Commissioner Daniel Gallagher concerning the Urban case, discussed below, in which he acknowledged the need for the SEC to offer guidance so that those overseeing compliance "won't be afraid to be zealous because they'll be tagged as a supervisor." The FAQs, in attempting to clarify when compliance and legal personnel function as supervisors and thereby become subject to potential liability for failure to supervise, reiterate the familiar refrain for determining supervisory status:

Whether, under the facts and circumstances of a particular case, that person has the requisite degree of responsibility, ability or authority to affect the conduct of the employee whose behavior is at issue.

The FAQs further clarify that five fact patterns, by themselves, do not create supervisor status. These fact situations are discussed in section II below.

BD firms may wish to review their compliance procedures in light of the suggestions in the FAQs and make sure that compliance and legal functions are clearly delineated from business line and management functions. Where compliance or legal personnel serve on management committees, BD firms may wish to provide that they serve ex officio or in a nonvoting capacity.

I. Background

Sections 15(b)(4) and 15(b)(6) of the Securities Exchange Act of 1934, as amended (Exchange Act), authorize the SEC to take action against an individual at a broker-dealer for failure to supervise someone who has violated the federal securities laws, the Commodity Exchange Act, the rules or regulations under those statutes, or the rules of the Municipal Securities Rulemaking Board. The FAQs discuss the circumstances that can lead to finding compliance or legal personnel are acting in a supervisory role and, therefore, have the potential for supervisory liability.

The standard by which an individual is deemed to be a supervisor was articulated in 1992 in In re Gutfreund, Rel. No. 34-31554, 51 SEC 93 (Dec. 3, 1992). In that matter, the SEC brought three separate actions against the chairman and CEO of a broker-dealer firm, John Gutfreund; the president; and the vice chairman for failing to take action to prevent the misconduct of a trader who was known by the three men to have submitted false bids in a U.S. Treasury auction. The SEC sanctioned each executive for failure to supervise, stating that supervisory liability attaches where a person has a requisite degree of responsibility, ability or authority to affect the conduct of the employee.

In 2012, the SEC revisited its supervisory liability theory in a case against Theodore Urban, then-general counsel of a former brokerage and investment bank. In the initial decision, the ALJ found that the general counsel had none of the traditional authority associated with a person supervising brokers but was still a supervisor because as general counsel, his opinions on legal and compliance issues were considered authoritative and his recommendations were generally followed. Nonetheless, the ALJ ultimately found the general counsel acted reasonably, and the commission later dismissed the proceeding without an opinion.

Recently in the Johns case, the SEC sanctioned a trader for deceiving the compliance officer (click here for access to our description of the Johns case) but has not pursued an action against the compliance personnel in the SAC/Stephen Cohen case. The SEC published these FAQs in the context of these developments and to attempt to clarify some of the ambiguity surrounding the potential liability associated with the compliance and legal roles.

II. Certain Facts Alone Are Not Sufficient to Create Supervisor Status

Supervisor status in a particular case will always be a facts and circumstances test. Nevertheless, a key takeaway from the FAQs is that certain facts, standing alone, are not sufficient to turn legal or compliance personnel into supervisors. These facts include:

  • Holding a compliance or legal position
  • Providing advice or counsel to business line personnel concerning compliance or legal issues
  • Assisting in the remediation of a business line issue
  • Providing advice to, or consulting with, senior management
  • Participating in, providing advice to or consulting with management or other committees

The SEC staff noted that all of these functions are important parts of the day-to-day responsibilities of legal and compliance personnel and help broker-dealers establish a compliance program that is reasonably designed to ensure compliance with applicable laws and regulations.

III. What Is the Requisite Degree of Responsibility, Ability or Authority to Affect Conduct?

As noted below, it is critical for firms to separate out the functions of compliance personnel from the functions of business line personnel in compliance manuals and written supervisory procedures. The SEC will, however, look beyond policies and procedures to the person's actual responsibilities and authorities. The answer to FAQ No. 2 sets forth questions to be considered in determining whether a person is a "supervisor" for purposes of the Exchange Act:

  • Has the person clearly been given, or otherwise assumed, supervisory authority or responsibility for particular business activities or situations?
  • Did the person have the power to affect another's conduct, such as the ability to hire, reward or punish that person?
  • Did the person otherwise have authority and responsibility such that he or she could have prevented the violation from continuing, even if he or she did not have the power to fire, demote or reduce the pay of the person in question?
  • Did the person know that he or she was responsible for the actions of another, and that he or she could have taken effective action to fulfill that responsibility?
  • Should the person nonetheless reasonably have known in light of all the facts and circumstances that he or she had the authority or responsibility within the administrative structure to exercise control to prevent the underlying violation?

IV. Establishing an Effective Compliance System Without Creating Supervisory Liability

One of the most critical components of an effective compliance system is a clear delegation of supervisory responsibilities to business line supervisors. The compliance policies should specifically define the duties of compliance personnel and designate responsibility to business line personnel for supervision of functions and persons.

The SEC staff also suggested firms consider implementing (i) robust compliance monitoring systems, (ii) processes to escalate identified instances of noncompliance to business line personnel for remediation and (iii) a system to follow up in situations where misconduct may have taken place, to help ensure that the direct supervisor implements a proper response. Compliance and legal personnel may need to escalate situations to persons at a higher level of authority in the business if they determine that concerns have not been addressed.

V. Participation in Management and Other Committees

In light of the Gutfreund and Urban cases, many CCOs have wondered whether their membership on or attendance at meetings of management committees will result in supervisory responsibility and an increased liability profile. The SEC staff recommends that compliance and legal personnel participate in committees in an ex officio or nonvoting capacity because this type of role is more consistent with an advisory function.

VI. Unresolved Issues

Because of the intensely factual nature of the determination of supervisor status, there will be situations that present significant ambiguity. For example, where the CCO or internal legal counsel has more than one role in the firm, it may be hard to determine when actions are limited to a compliance or legal function. In this situation, it could be very important to have a protocol or other mechanism to clearly distinguish business from compliance and legal functions. Other areas that may present significant issues include decisions by management not to implement compliance or legal recommendations, or failure by management to make a timely decision on a recommendation. In addition, as the FAQs involve guidance provided by the SEC staff, it is not clear whether FINRA or other regulators will take a similar approach.

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.

To print this article, all you need is to be registered on Mondaq.com.

Click to Login as an existing user or Register so you can print this article.

Similar Articles
Relevancy Powered by MondaqAI
In association with
Related Topics
Similar Articles
Relevancy Powered by MondaqAI
Related Articles
Related Video
Up-coming Events Search
Font Size:
Mondaq on Twitter
Register for Access and our Free Biweekly Alert for
This service is completely free. Access 250,000 archived articles from 100+ countries and get a personalised email twice a week covering developments (and yes, our lawyers like to think you’ve read our Disclaimer).
Email Address
Company Name
Confirm Password
Mondaq Topics -- Select your Interests
 Law Performance
 Law Practice
 Media & IT
 Real Estate
 Wealth Mgt
Asia Pacific
European Union
Latin America
Middle East
United States
Worldwide Updates
Registration (you must scroll down to set your data preferences)

Mondaq Ltd requires you to register and provide information that personally identifies you, including your content preferences, for three primary purposes (full details of Mondaq’s use of your personal data can be found in our Privacy and Cookies Notice):

  • To allow you to personalize the Mondaq websites you are visiting to show content ("Content") relevant to your interests.
  • To enable features such as password reminder, news alerts, email a colleague, and linking from Mondaq (and its affiliate sites) to your website.
  • To produce demographic feedback for our content providers ("Contributors") who contribute Content for free for your use.

Mondaq hopes that our registered users will support us in maintaining our free to view business model by consenting to our use of your personal data as described below.

Mondaq has a "free to view" business model. Our services are paid for by Contributors in exchange for Mondaq providing them with access to information about who accesses their content. Once personal data is transferred to our Contributors they become a data controller of this personal data. They use it to measure the response that their articles are receiving, as a form of market research. They may also use it to provide Mondaq users with information about their products and services.

Details of each Contributor to which your personal data will be transferred is clearly stated within the Content that you access. For full details of how this Contributor will use your personal data, you should review the Contributor’s own Privacy Notice.

Please indicate your preference below:

Yes, I am happy to support Mondaq in maintaining its free to view business model by agreeing to allow Mondaq to share my personal data with Contributors whose Content I access
No, I do not want Mondaq to share my personal data with Contributors

Also please let us know whether you are happy to receive communications promoting products and services offered by Mondaq:

Yes, I am happy to received promotional communications from Mondaq
No, please do not send me promotional communications from Mondaq
Terms & Conditions

Mondaq.com (the Website) is owned and managed by Mondaq Ltd (Mondaq). Mondaq grants you a non-exclusive, revocable licence to access the Website and associated services, such as the Mondaq News Alerts (Services), subject to and in consideration of your compliance with the following terms and conditions of use (Terms). Your use of the Website and/or Services constitutes your agreement to the Terms. Mondaq may terminate your use of the Website and Services if you are in breach of these Terms or if Mondaq decides to terminate the licence granted hereunder for any reason whatsoever.

Use of www.mondaq.com

To Use Mondaq.com you must be: eighteen (18) years old or over; legally capable of entering into binding contracts; and not in any way prohibited by the applicable law to enter into these Terms in the jurisdiction which you are currently located.

You may use the Website as an unregistered user, however, you are required to register as a user if you wish to read the full text of the Content or to receive the Services.

You may not modify, publish, transmit, transfer or sell, reproduce, create derivative works from, distribute, perform, link, display, or in any way exploit any of the Content, in whole or in part, except as expressly permitted in these Terms or with the prior written consent of Mondaq. You may not use electronic or other means to extract details or information from the Content. Nor shall you extract information about users or Contributors in order to offer them any services or products.

In your use of the Website and/or Services you shall: comply with all applicable laws, regulations, directives and legislations which apply to your Use of the Website and/or Services in whatever country you are physically located including without limitation any and all consumer law, export control laws and regulations; provide to us true, correct and accurate information and promptly inform us in the event that any information that you have provided to us changes or becomes inaccurate; notify Mondaq immediately of any circumstances where you have reason to believe that any Intellectual Property Rights or any other rights of any third party may have been infringed; co-operate with reasonable security or other checks or requests for information made by Mondaq from time to time; and at all times be fully liable for the breach of any of these Terms by a third party using your login details to access the Website and/or Services

however, you shall not: do anything likely to impair, interfere with or damage or cause harm or distress to any persons, or the network; do anything that will infringe any Intellectual Property Rights or other rights of Mondaq or any third party; or use the Website, Services and/or Content otherwise than in accordance with these Terms; use any trade marks or service marks of Mondaq or the Contributors, or do anything which may be seen to take unfair advantage of the reputation and goodwill of Mondaq or the Contributors, or the Website, Services and/or Content.

Mondaq reserves the right, in its sole discretion, to take any action that it deems necessary and appropriate in the event it considers that there is a breach or threatened breach of the Terms.

Mondaq’s Rights and Obligations

Unless otherwise expressly set out to the contrary, nothing in these Terms shall serve to transfer from Mondaq to you, any Intellectual Property Rights owned by and/or licensed to Mondaq and all rights, title and interest in and to such Intellectual Property Rights will remain exclusively with Mondaq and/or its licensors.

Mondaq shall use its reasonable endeavours to make the Website and Services available to you at all times, but we cannot guarantee an uninterrupted and fault free service.

Mondaq reserves the right to make changes to the services and/or the Website or part thereof, from time to time, and we may add, remove, modify and/or vary any elements of features and functionalities of the Website or the services.

Mondaq also reserves the right from time to time to monitor your Use of the Website and/or services.


The Content is general information only. It is not intended to constitute legal advice or seek to be the complete and comprehensive statement of the law, nor is it intended to address your specific requirements or provide advice on which reliance should be placed. Mondaq and/or its Contributors and other suppliers make no representations about the suitability of the information contained in the Content for any purpose. All Content provided "as is" without warranty of any kind. Mondaq and/or its Contributors and other suppliers hereby exclude and disclaim all representations, warranties or guarantees with regard to the Content, including all implied warranties and conditions of merchantability, fitness for a particular purpose, title and non-infringement. To the maximum extent permitted by law, Mondaq expressly excludes all representations, warranties, obligations, and liabilities arising out of or in connection with all Content. In no event shall Mondaq and/or its respective suppliers be liable for any special, indirect or consequential damages or any damages whatsoever resulting from loss of use, data or profits, whether in an action of contract, negligence or other tortious action, arising out of or in connection with the use of the Content or performance of Mondaq’s Services.


Mondaq may alter or amend these Terms by amending them on the Website. By continuing to Use the Services and/or the Website after such amendment, you will be deemed to have accepted any amendment to these Terms.

These Terms shall be governed by and construed in accordance with the laws of England and Wales and you irrevocably submit to the exclusive jurisdiction of the courts of England and Wales to settle any dispute which may arise out of or in connection with these Terms. If you live outside the United Kingdom, English law shall apply only to the extent that English law shall not deprive you of any legal protection accorded in accordance with the law of the place where you are habitually resident ("Local Law"). In the event English law deprives you of any legal protection which is accorded to you under Local Law, then these terms shall be governed by Local Law and any dispute or claim arising out of or in connection with these Terms shall be subject to the non-exclusive jurisdiction of the courts where you are habitually resident.

You may print and keep a copy of these Terms, which form the entire agreement between you and Mondaq and supersede any other communications or advertising in respect of the Service and/or the Website.

No delay in exercising or non-exercise by you and/or Mondaq of any of its rights under or in connection with these Terms shall operate as a waiver or release of each of your or Mondaq’s right. Rather, any such waiver or release must be specifically granted in writing signed by the party granting it.

If any part of these Terms is held unenforceable, that part shall be enforced to the maximum extent permissible so as to give effect to the intent of the parties, and the Terms shall continue in full force and effect.

Mondaq shall not incur any liability to you on account of any loss or damage resulting from any delay or failure to perform all or any part of these Terms if such delay or failure is caused, in whole or in part, by events, occurrences, or causes beyond the control of Mondaq. Such events, occurrences or causes will include, without limitation, acts of God, strikes, lockouts, server and network failure, riots, acts of war, earthquakes, fire and explosions.

By clicking Register you state you have read and agree to our Terms and Conditions