Communications Surveillance and Recordkeeping
Why regulated firms must capture, retain, and monitor employee communications — calls, chats, emails — and how automated surveillance tools scan that archive for signs of market abuse or policy breaches.
Regulators can't rely on trade data alone to catch market abuse — a suspicious trade often only makes sense once you see the conversation behind it. A trader's chat message the morning of a large order, or a call arranging a price with a counterparty, is frequently the piece of evidence that turns a pattern into a case. That's why regulated firms are required not just to monitor trading but to capture and retain essentially every business communication — phone calls, emails, instant messages, and increasingly WhatsApp or other mobile chat — for years, and to be able to produce it on demand.
How the system actually works
Recordkeeping rules (in the US, SEC Rule 17a-4 and FINRA Rule 3110) require broker-dealers to keep communications in an unalterable, time-stamped format for a set retention period — commonly six years — and to be able to retrieve any specific record quickly if a regulator asks. On top of retention sits surveillance: software that continuously scans the archive using keyword lists (mentions of specific tickers alongside words like "guarantee" or "wink"), lexicon changes over time as traders adopt new slang, and pattern matching that links communications to trading activity around the same time. A flagged message gets escalated to a human reviewer, who decides whether it's genuinely concerning or an innocent false positive — much like sanctions or trade-surveillance alerts, the system is tuned to over-flag rather than risk missing something.
A well-known example of what happens when recordkeeping fails: in 2021–2022, US regulators fined a long list of major banks over a billion dollars combined for allowing employees to conduct business over personal phones and unmonitored apps like WhatsApp, meaning years of trade-relevant conversations were never captured at all — a recordkeeping failure rather than evidence of any specific misconduct, but treated by regulators as serious in its own right because it made misconduct undetectable either way.
What this means in practice
For a quant fund, this means every Bloomberg chat, work email, and (increasingly) any business-related mobile message needs to run through an approved, archived channel — using a personal phone to discuss a trade idea outside that system is itself a violation, independent of whether anything improper was actually said. Surveillance teams and compliance officers rely on this archive heavily when investigating any trading anomaly, so its completeness is treated as a control in its own right.
Firms must capture and retain essentially all business communications for years and run automated surveillance over that archive, because trade data alone rarely proves intent — the conversation around a trade often does.
The recurring failure isn't sophisticated evasion — it's employees casually using personal, unmonitored apps for convenience. Regulators now treat the absence of a record as seriously as a bad record, since an unmonitored channel makes any misconduct that happened there permanently invisible.
Further reading
- SEC Rule 17a-4 and FINRA Rule 3110 — Books and Records