The Problem with Selective Disclosure

If you want to see a classic case of the problems with selective disclosure take a look at the recent SEC case against Presstek, Inc. and its former CFO.

Presstek was having a bad quarter in 2006. The CFO knew that the company would be reporting bad financial performance for the quarter. The CFO told an investor that the results would be bad. The investor immediately sold its shares in Presstek. The next day Presstek publicly released its poor financial performance for the quarter.

Slam dunk.

It’s that kind of selective disclosure that the SEC was trying to prevent when it enacted Regulation FD. It is bad that some investors could preferential treatment to material information and be able to act on that information before the general public.

“This investigation related to matters that occurred prior to the changes in executive leadership which took place in 2007,” said Jeff Jacobson, Presstek’s Chairman, President and Chief Executive Officer. “We feel very strongly about corporate governance and we are pleased to put this legacy issue behind us.”

In addition to the $400,000 settlement with the SEC, Presstek also had to pay a $1.25 million to settle a securities class action case related to the matter.

Even though it was a straightforward violation, the question I have is: How did the SEC find out? Perhaps they noticed the spike in the selling of shares and the purchasing of puts by the investor. Perhaps somebody blew the whistle? Perhaps the company self-reported?

Sources:

New Codes of Conduct for Real Estate Companies

It’s always useful to look at what your competition is doing. The same is true in drafting your code of conduct (or code of ethics or whatever name you chose). It is useful to look at you what your competitors’ codes of conduct look like.

Since Sarbanes-Oxley requires a public company to have a code of conduct, its fairly easy to dig around the investor relations portion of their website or SEC filings to get your hands on examples.

Since my company is a real estate company, I put together a database of Codes of Conduct for Real Estate Companies.

My original goal was to find codes for other real estate private equity companies. I struck out.

So I expanded to public REITs and real estate investment advisers. All of the companies in the database are public.

So far I have not found a private real estate company that has published its Code of Conduct. This is what I expected and not a criticism. In fairness, I haven’t publicly published my Code of Conduct.

With compliance, it’s better to think of competitors as peers instead of the competition. You might get some market gain with a competitor lost to a compliance or ethical failure. You’re more likely to get more government oversight and regulation, less of investor confidence and many more headaches.

Database of Codes of Conduct for Real Estate Companies

Image of Columbia Center is by simonsonjh from Wikimedia Commons

w:en:Creative Commons
attribution share alike

New Anti-Money Laundering Guidance

Money Laundering is bad and financial institutions need to have internal controls policies, procedures and processes to identify higher-risk accounts and monitor the activity. At the core of an anti-money laundering program is that an institution must know its customers and the risks presented by its customers.

The program becomes more difficult when the customer is a corporation or legal entity.

An alphabet soup of federal regulators just jointly issued new guidance “to clarify and consolidate existing regulatory expectations for obtaining beneficial ownership information for certain accounts and customer relationships.” The Financial Crimes Enforcement Network, Federal Reserve System, Federal Deposit Insurance Corporation, National Credit Union Administration, Office of the Comptroller of the Currency, Office of Thrift Supervision, Securities and Exchange Commission, and Commodity Futures Trading Commission all joined in the guidance.

Identifying the ownership and control of a legal entity can be difficult. Often, the only way to get the information is from the entity itself, with no third party way to identify the veracity of the information. Most financial institutions struggle with how far to dive into a legal entity to determine the beneficial ownership.

This joint guidance effectively adopts the FinCEN definition of beneficial owner:

“[T]he individual(s) who have a level of control over, or entitlement to, the funds or assets in the account that, as a practical matter, enables the individual(s), directly or indirectly, to control, manage, or direct the account. The ability to fund the account or the entitlement to the funds of the account alone, however, without any corresponding authority to control, manage, or direct the account (such as in the case of a minor child beneficiary), does not cause the individual to be a beneficial owner.” [31 CFR 103.175(b)]

The first step is to obtain enough information about the structure and ownership of the entity so you can determine if the account will pose a heightened risk. With a heightened risk, you should conduct enhanced due diligence.

Accounts for senior foreign political figures always require Enhanced Due Diligence that is reasonably designed to detect and report transactions that may involve the proceeds of foreign corruption. [31 CFR 103.178 (b)(2) and (c)]

The one interesting statement is that financial institutions should consider implementing policies on an enterprise-wide basis to share information about beneficial ownership of their customers. Anti-money laundering staff should be able to cross-check for information with other departments. Avoid silos of information.

The guidance does not offer anything new or insightful. But it is good to see the regulators joining together to try to standardize the expectations across different types of financial institutions.

Sources:

Image is by AlwaysAwake: Money Laundering: Hiding ownership and profits in offshore jurisdictions using myriad mechanisms in Switzeland, money laundering capital of the world, & other islands and nations. Favorite tool of mega-rich arch-criminal banking & corporate investors

National Consumer Protection Week

National Consumer Protection Week

National Consumer Protection Week 2010 is March 7-13.

Take advantage of the FTC’s free resources, which can help you protect your privacy, manage money and debt, avoid identity theft, understand credit and mortgages, and steer clear of frauds and scams.

This year’s theme is Dollars & Sense: Rated “A” for All Ages. The idea is to highlight the importance of using good consumer sense at every age, from grade school to retirement.

In the meantime, Congress still seems to be thinking about whether there should be a federal consumer protection agency and who should be in charge of it. Senator Dodd appears to want it under the umbrella of the Federal Reserve. US Representative Barney Frank wants a Consumer Financial Protection Agency to be an independent watchdog on financial issues.

For a more light-hearted view:

Sources:

Weekend Book Review: Shades of Grey by Jasper Fforde

shades of grey book cover (US edition)

Books about compliance, business ethics, law and financial markets can be well written, interesting and thought-provoking. But they’re not fun.

So I decided I needed change and found a whimsically absurd novel that touches upon compliance: Shades of Grey, by Jasper Fforde.

Chromatacia is a world where people have limited ability to see color and your standing in the community depends on the colors you can see and how well you can see them. At the top of the social order stand those who see purple. At the bottom are the greys who can’t see any colors. Society is dominated by color and you are what you can see.

The protagonist is Eddie Russert, a red-seeing youth who has been punished with a humility reassignment for a school prank. Eddie is sent out to a fringe city with a “Pointless Task” of conducting of a chair census.

The book is more about a totalitarian regime than compliance. But it’s the rules that run the regime and compliance with rules that keeps society in order.

“But they were the Rules – and presumably for some very good reason, although what that might be was not entirely obvious.” For instance it is forbidden to count sheep, make new spoons or use acronyms. There is also a ban on the numbers between 72 and 74.

“The Rule book tells us precisely what is right or wrong — that’s the point. the predictability of the Rules and the unquestioning compliance and application is the bedrock of —” Eddie is cut off by Jane, a grey in the village of East Carmine. It’s his interest in Jane that sends Eddie on his adventures in Shades of Grey.

Jasper Fforde is probably best known for his Thursday Next series of books where literature has a prominent place in everyday life. Thursday Next herself being in the Literary Detective Division of Special Operations at starts the series by looking into who has stole a manuscript and killed one of the characters in it, changing the story forever. If you enjoyed those books, you will also enjoy Shades of Grey.

Compliance Bits and Pieces for March 5

Here are some compliance related stories from the past week:

Setting Off Alarm Bells at Work by Steven D. Levitt on Freakonomics

Apparently, the use of such internet sites [Facebook]  is not tolerated by CPS and rather than block those websites altogether, accessing them causes this ear-piercing noise to go off that sounds something like a fire-department wagon passing directly by you.

…

The firm gives the workers an incomplete list of which sites are banned.  Thus, the worker can never be quite sure when they go to a site that should be banned (but may or may not actually be alarmed due to the difficulty of identifying and banning every naughty site), if they will trigger the alarm.

CNBC Video: Madoff Whistleblower Speaks from Securities Docket

CNBC’s Mary Thompson’s interview with Harry Markopolos, the Madoff whistleblower who is now promoting a book on how he he tried to warn the SEC and others about Madoff’s Ponzi scheme.

The Depressing Tone of Bank of America by Matt Kelly of Compliance Week

Sometimes corporate leaders step up and do the simple, ethical thing, and their tone at the top is a harmonized chorus delightful to hear. Sometimes they do the wrong thing, and their tone is more like a tribal screech of self-interest.

Internal Review of a Proposed Foreign Business Partner by Thomas Fox

A Foreign Business Partner Review Committee should be established which is tasked with reviewing all the investigative due diligence and the Business Unit’s case for partnering with the person or entity. The next area of review should of the proposed Foreign Business Partner’s ethics and compliance program. Such a program should have, at a minimum, the following elements of a Foreign Corrupt Practices Act (FCPA)-style compliance program in place.

To Be or Not to Be Honest with the SEC by Suzanne Barlyn in the WSJ’s Financial Advisor

Weighing the risks and rewards of voluntarily reporting compliance lapses to the Securities and Exchange Commission is a tricky issue for investment advisers. Gene Gohlke, associate director of the SEC’s Office of Compliance Inspections and Examinations, recently tried to ease advisers’ concerns about self-reporting violations that their compliance programs catch, such as certain trading errors.

Wikis, Learning, Teaching and Compliance

wikipedia

I am a believer that the use of 2.0 tools can help compliance professionals. (Hopefully, this blog is a part of that proof.)

Moving to the inherently open communication of 2.0 tools from the inherently private channel communication of email can expose sunlight on behavior and expose information. Incorrect information and behavior can be corrected. Bad information and bad behavior can be seen and stopped before it snowballs into something larger.

I often hear people take the position that the digital youngsters coming out of college can use these Web 2.0 tools as easily as dialing a phone or that they are demanding them in the workplace. I don’t think that’s not true.

Law Schools and Wikis

Eric Goldman and Luis Villa shared their experiences in using wikis as part of their classrooms. It certainly sounds like their students struggled with using these tools, both behind the firewall and in the public Wikipedia.

In Mr. Goldman’s case he offered his law students the opportunity to publish an article in Wikipedia for 20% of their grade. About a quarter of the students in his cyberlaw class at Santa Clara University School of Law took him up on his offer.

In reaction to that article, Mr. Villa recounted his experience using a school-hosted wiki as part of his classes at Columbia Law School.

Other wiki concepts, like extensive linking, or publishing drafts to the world in wiki-style, were apparently even more strange to most of my classmates. None of the four class wikis were deeply interlinked or cross-referenced, outside of what was necessary to create a table of contents and occasional outlinks to wikipedia. Similarly, few students were willing to post works-in-progress to the wiki and refine them there- most students preferred to work privately and then put a final text into the wiki.

Collaboration Between Generations

I found the same to be true at my old law firm. In particular, the younger attorneys did not want interim drafts to be seen and were reluctant to contribute content. The more seasoned attorneys were more willing to edit and add information. The vast majority of article creation was limited to a small group.

In my view, younger team members are reluctant to produce content because they do not want to expose their lack of knowledge, they do not want to expose themselves for criticism and they have little grasp of the technology.

The lack of knowledge is true regardless of how you teach collaboration. It would seem silly to put the youngest members of the team in charge of the team’s knowledge and content production. They have the least understanding of the subject matter.

Dealing with Criticism

The criticism issue has two parts. On one side, I don’t think students are taught to collaborate. They go through school being graded on their individual performance. The few classes that grade as a team are outliers.

The second issue is the internal culture of  your company. Collaboration requires trust. You need to work as a team and avoid individual blame. It also requires sharing the credit for good work among the team. That is just how your company or group at the company operates. Technology does not change culture.

The Technology

As both Goldman and Villa point out, the technology is still a barrier. There are many inherent limitation in a wiki that you don’t have with Microsoft Word. I think the wiki markup language is a mistake. I think platforms should just use html based code.

Regardless of the underlying code, web-based documents do not have the rich formatting of Word. Arguably, you don’t need the vast majority of that formatting. It’s still very frustrating when something easy to do in Word is hard to do in a wiki.

Printing is another issue. In the end you may want to print hard copies. I have experienced widely different quality in what happens when a wiki page goes to the printer.

Wiki for One

I have to admit that I have not been preaching the benefits of 2.0 tools within my company. I use them purely as a knowledge tool for me. I use this blog and an internal wiki to store information for me to find as part of the compliance program. Most of the company is numbers driven, something for which web 2.0 tools are poorly suited.

I did collaborate with a summer intern on a compliance project using the wiki. I had the same experience as Goldman and Villa. Using a wiki did not come naturally to her. It took time for me to develop the trust for her to use it effectively.

In the end we worked together to create a tremendous amount of content for the compliance program that is well-organized and easy to find.

Other Examples

Over the last year I have seen an increase in the public use of Web 2.0 tools by compliance professionals. There has been a dramatic increase in the use of blogs. You can look at my blogroll for other examples.

One to take a close look at is Kathleen Edmond’s Blog. She publishes disciplinary examples from Best Buy. As you might expect, the examples do not include specific people or products. She is able to get the ethics story from Best Buy out into the public. She can get comments on her reasoning and the results.

Sources:

Madoff Losses Down from $65 Billion to $20 Billion

How do you value fraud?

When the Madoff ponzi scheme collapsed the claim was that there was $65 billion in losses. That was the total dollar value on the account statements given to investors. Of course, that number was fictional because there were not real assets behind those numbers.

The trustee overseeing the liquidation of the assets looked at the cash that came into Madoff and the cash that came out. The bankruptcy judge agreed. In a decision filed on Monday, Federal Bankruptcy Judge Burton R. Lifland ruled that losses should be defined as the difference between the cash paid into a Madoff account and the amount withdrawn before the fraud collapsed in mid-December 2008.

The Madoff trustee, Irving H. Picard, took the position that “the only verifiable amounts” reflected in the Madoff records are the differences between how much investors put into their accounts and how much they took out.

The result is that those investors who didn’t pull out their initial capital will get a greater percentage of their money out than those who took withdrawals from their accounts.

To put it another way, the people are getting the greatest percentage of money back are:

  1. Those who least need the money. Since they took less money out they presumably have other income or capital to support their needs.
  2. Those most trusting of Madoff.  Since they trusted Madoff, they did not pull money out of their investment accounts. They rode those returns and let their fictional returns keep accumulating.

Those who took out more cash from Madoff than they put in were labeled the “net winners” and get nothing. Even worse, it looks like the “net winners” may have to give back some of their “winnings” to the bankruptcy estate to pay off the net losers.

Of course, the opposite ruling is just as bad since the early investors would be paid by later investors, effectively extending the Ponzi scheme.

The judge is taking the position that people should be put back to their position as if they had not invested with Madoff. In the end its going to bad for all the investors. It’s just a question of who feels the most pain.

Sources:

Data breach Sharing Framework

verizon business logo

With the Massachusetts Data Privacy Law now in place (and presumably you are in compliance with it), you need to think about what to do if you have an incident.

Verizon has published the Verizon Incident Sharing Framework to help.

Our goal for our customers, friends, and anyone responsible for incident response, is to be able to create data sets that can be used and compared because of their commonality. Together, we can work to eliminate both equivocality and uncertainty, and help defend the organizations we serve.

The framework is set up to help classify incidents, their discovery, mitigation and impact.

Sources: