On March 8, 2013, the SEC released proposed Regulation Systems Compliance and Integrity (the “Proposed Rule” or “Reg SCI”). The Proposed Rule reflects sweeping changes in the securities market resulting from increased automation and the proliferation of trading venues. The “vast majority” of stocks are now traded electronically in a multiplicity of venues, and no single exchange accounts for more than 20 percent of equities transaction volume. These changes have made the market more vulnerable to systems disruptions such as those that occurred in the May 2010 “Flash Crash,” the difficulties encountered by Nasdaq in the Facebook IPO and by BATS in its own IPO, and the shutdown of the markets during the recent Superstorm Sandy.
The Proposed Rule announces the SEC’s view that in this increasingly automated era, the rules promoting systems compliance and integrity should be mandatory rather than voluntary. The Proposed Rule would affect a broad spectrum of market participants such as self-regulatory organizations (“SROs”), alternative trading systems (“ATSs”), the Municipal Securities Rulemaking Board, and “plan processors” that provide market data to investors. Reg SCI would include not only trading systems, but also certain related systems, such as those that provide security for trading systems. The Proposed Rule would require affected parties to establish policies and procedures governing the function and integrity of their systems, to file notices and reports about the occurrence of certain adverse system events or material changes to such systems, and would require SRO members to participate in routine and industry-wide testing of their systems.
The 370 page proposing release includes more than 200 requests for comments, including regarding the scope of its application to market participants and trading venues, and estimated compliance burdens. The release asks whether the rule should be extended beyond SROs and ATSs to certain broker-dealer or other entities, including market makers, clearing firms, broker-dealers providing market access, and swap facilities, among others. For those likely to be affected by the rule, now is the time to weigh in; comments must be submitted by May 24, 2013. Below we describe the major elements of the Proposed Rule.
Background
The Proposed Rule would replace the SEC’s existing Automation Review Policy (“ARP”), a voluntary program conducted by the SEC’s Division of Trading and Markets, and related Rule 301(b)(6) of Regulation ATS. The ARP, applicable to SROs, focuses on systems that process and disseminate quotation and transaction data on behalf of the National Market Systems (“NMS”) plans.
Entities Subject to the Proposed Rule
The Proposed Rule will apply to “SCI entities,” which includes not only SROs, but also ATSs that meet specified volume thresholds, “plan processors,” and “exempt clearing agencies subject to ARP.”
The term “SCI entity” includes “SCI self-regulatory organizations, SCI alternative trading system, plan processors, and exempt clearing agencies.”
Requirements and Obligations of SCI Entities:
The Proposed Rule would require that each SCI entity:
Systems Subject to the Proposed Rule
The Proposed Rule is intended to cover “all of the systems that would be reasonably likely to impact an SCI entity’s operational capability and the maintenance of fair and orderly markets.” Accordingly, the Proposed Rule covers not only “SCI systems” operated by or on behalf of an SCI entity, but also any “SCI security systems” that share network resources with an SCI system and that, if breached, would pose a security threat to SCI systems.
Relevant/Reportable Events Under the Proposed Rule
The systems events for which an SCI entity must take corrective action, and/or report to the SEC, are defined as an “SCI event” and include any “event at an SCI entity that constitutes: (1) a systems disruption; (2) a systems compliance issue; or (3) a systems intrusion.” The SCI entity must notify its members or participants upon the occurrence of a “dissemination SCI event” (defined below) and must notify the SEC in advance of any “material systems changes.”
Possible Expansion of Proposed Rule to Other Market Participants
Conclusion
Proposed Reg SCI shows that the SEC is committed to impose enhanced mandatory compliance and reporting obligations on market participants with respect to IT systems that connect to the national markets. Reg SCI follows other measures, such as the recent implementation of Exchange Act Rule 15c3-5 regarding direct market access systems, designed to achieve the same goal. The Release explains the likely scope and shape of the Proposed Rule, although the large number of specific questions and requests indicate that the SEC will consider changes in light of public comment, and there may be considerable revisions to any final rule. Given that the SEC has suggested that the Proposed Rule may be extended to additional market participants, all broker-dealers and service firms should review the Proposed Rule in order to assess the potential for impact on their operations, and evaluate whether to submit comments to the SEC.
*This alert was co-authored by Bingham alumnus Frances Cohen, as well as W. Hardy Callcott and Timothy Foley.
Contacts
If you have any questions or would like more information on the issues discussed in this LawFlash, please contact any of the following Morgan Lewis lawyers:
Burke-Timothy1 These thresholds differ from current threshold in Rule 301(b)(6) of Reg ATS, which has a volume threshold of 20 percent of average daily trading volume for any NMS stock.
2 “Securities information processor” means “any person engaged in the business of (i) collecting, processing, or preparing for distribution or publication, or assisting, participating in, or coordinating the distribution or publication of, information with respect to transactions in or quotations for any security (other than an exempted security) or (ii) distributing or publishing (whether by means of a ticker tape, a communications network, a terminal display device, or otherwise) on a current and continuing basis, information with respect to such transactions or quotations.” 15 U.S.C. 78c(22)(A).
3 “Exclusive processor” means “any securities information processor or self-regulatory organization which, directly or indirectly, engages on an exclusive basis on behalf of any national securities exchange or registered securities association, or any national securities exchange or registered securities association which engages on an exclusive basis on its own behalf, in collecting, processing, or preparing for distribution or publication any information with respect to (i) transactions or quotations on or effected or made by means of any facility of such exchange or (ii) quotations distributed or published by means of any electronic system operated or controlled by such association.” 15 U.S.C. 78c(22)(B).
This article was originally published by Bingham McCutchen LLP.