Requirements to Preserve Electronic Communication
In a world of ever-changing and advancing technology, the SEC has made it clear that it will act against companies utilizing external communication platforms that fail to preserve electronic records of relevant communications in violation of Section 17(a)(1) of the Securities Exchange Act of 1934 and Rule 17g-2(b)(7) thereunder.
Two years ago, the SEC handed out $1.8 billion dollars in fines to 11 of the world’s largest banks and brokerages for using messaging apps that fail to preserve records of communication. These 11 banks admitted that they violated SEC rules by failing to store written communications.2
In furtherance of what is being called US regulators’ WhatsApp investigations, on September 3, 2024, the SEC hit 6 credit rating agencies a combined $49 million in fines. The largest fines were given to Moody's Investors Service and S&P Global Ratings, both of which agreed to pay $20 million in fines, while Fitch Ratings agreed to an $8 million penalty.
“In addition to significant financial penalties, each credit rating agency was ordered to cease and desist from future violations of these provisions and was censured.” Four firms were “ordered to retain compliance consultants [and] have agreed to, among other things, conduct comprehensive reviews of their policies and procedures relating to the retention of electronic communications….and their respective frameworks for addressing non-compliance by their personnel with those policies and procedures.”3
What’s the best path forward for these companies and others similarly situated?