Private Fund Compliance Forum 2019

I spent Wednesday and will spend Thursday at Private Equity International’s 10th annual Private Fund Compliance Forum. I’ve attended this event at least a half-dozen times and enjoy coming back.

The organizers asked that most of the sessions be off-record. I had detailed notes that I published on Wednesday, but took them down. Instead, I’ll share a few general observations.

It sounds like exams of private equity funds are down. Many regional offices are allocating exam resources to other registrants. New registrants are often getting a hello and welcome to registration message from their regional office. The Private Funds Unit is still active and examining fund managers. It sounds like the focus is on managers who have not yet been examined. The regional offices do act on tips and complaints about fund managers.

When you end up with an SEC exam, make sure you focus on the document request and try to scope it. Scoping is hard, but can save the fund manager and the SEC examiners a great deal of time. Reach out to the SEC to make sure you understand what they are looking for. The document request list often looks like a wide-ranging shotgun blast. Examiners are not looking for huge stacks of documents from smaller firms.

The SEC is stalling registrants from the EU. The concern is that GDPR will prevent the SEC from getting the information they need as part of the reporting and examination process.

There is a great deal of discussion around cybersecurity. None of the attendees indicated that they had subject to any of the cybersecurity sweep exams. Those sweeps are now in their third iteration. See: New SEC Cyber Enforcement Initiative.  If you report a breach, you have increased your chances of a cybersecurity exam from the SEC.

It’s not just SEC examiners who are focused on cybersecurity. Expect investors to also conduct a fair amount of diligence on cyber.

CCOs need to stay laser focused on fees and expenses when that money comes back to the fund manager or an affiliate of the manager. If the fund documents state that a service will be provided at market rate, make sure you are conducting periodic surveys of the market rates. If the fund manager is being reimbursed for an employee’s time spent on a portfolio company, make sure you know what part of the employee’s compensation can be included in the rate. If the fund documents say salary, that means you can’t include the cost of benefits.

There was much more knowledge shared from panelists and even more shared among attendees. Plan on coming next year.

Notes from the Private Fund Compliance Forum 2018

I attended PEI Media’s Private Fund Compliance Forum 2018.

As I typically do at conferences, I typed up my notes. Many sessions asked to be off the record and I’m complying and not publishing them. Everything  is “Chatham House Rule” so I don’t attribute any of my notes to any particular speaker.

Keynote Interview with David Sorkin

A discussion between the General Counsel and Chief Compliance Officer of a public company is fraught with disclosure and they asked the session be off record. The discussion was interesting and provide a great insight to the evolution of private fund compliance.

Restructuring the compliance function

My notes: Restructuring the compliance function at the Private Fund Compliance Forum 2018

SEC exams—what do they look like now?

This session was off the record. A general note is that examiners have not stopped looking at private equity firms. Many of those exams are the second time around. But the exams are shorter than they have been. In another session’s poll, it appeared that about 20% of the attendees indicated that they had not been examined.

Fees and expenses: allocation and regulation

My notes: Fees and expenses: allocation and regulation at the Private Fund Compliance Forum 2018

Assessing the influence of tax reform on private funds and portfolio companies

This session was off the record. The overall thoughts were that there are good things and bad things in the tax law. It definitely makes things more complicated.

Secondary Sales in Private Funds

My Notes: Secondary sales in private funds – at the Private Fund Compliance Forum 2018

Portfolio company risk management

My Notes: Portfolio company risk management – at the Private Fund Compliance Forum 2018

Assessing the current regulatory environment and navigating its impact on your compliance program

This session was off-the-record

International compliance for managers with a global presence in Europe

My notes: International compliance for managers with a global presence in Europe – at the Private Fund Compliance Forum 2018

Identifying conflicts at your firm – at the Private Fund Compliance Forum

This session was off the record.

Strategies for marrying ESG implementation and compliance

My notes: Strategies for marrying ESG implementation and compliance – at the Private Fund Compliance Forum 2018

Regulatory considerations for the use of subscription lines and borrowing

My notes: Regulatory considerations for the use of subscription lines and borrowing – at the Private Fund Compliance Forum 2018

Regulatory considerations for the use of subscription lines and borrowing – at the Private Fund Compliance Forum 2018

Funds use a lines of credit to fund capital. The most common is a bridge between funding an investment and calling capital from investors. Based on a poll the audience indicated a wide range of uses and durations for their credit lines. Some indicated that they use the credit line to fund capital to portfolio companies.

Investors are asking questions about credit line use, but their does not seem to be a consensus on how a credit line should be used. Limited partners generally like to get their assets to work. There are also investors who like the lines because it can deflect some of the J curve effect.

Do you notify investors about the use of the credit facility as you go. According to a poll, about 20% of the attendees sent a notice to limited partners when they draw on the line of credit. Some of the audience indicated that they report on the line balance quarterly.

According to an audience poll, 15% of the attendees allowed LPs to opt out of use of the line of credit. The opt out creates an accounting headache.

ILPA has issued guidance on the use of lines of credit.  The guidance has a 6 months term limit. Many investors seem comfortable with a longer term, up to 12 months.

There seemed to be a lot of disdain for running the waterfall as if the capital call was made instead of the draw from the line of credit.

There are many ways to calculate returns and investors have different ways for calculating net returns. Of course, use of the line affects performance. The bigger effect is on IRR, not on the equity multiple. It may make sense to have a prepared response on how your firm’s use of a credit line differs from the ILPA guidance.

One key to avoid regulatory problems is disclosure around use of the credit line. The ability to use the line should be disclosed in the PPM. You should note that the returns in marketing materials may be affected by the use of the line of credit.

Can you use the line to make distributions? Everybody seemed uncomfortable with this. It seems better to wait and let the sale happen. People noted that they have run into situations where they realized on an investment before they called capital.

You should pay attention to how the use of the credit line has changed over time and may affect a history of funds’ performance in a marketing track record.

(This session was subject to the Chatham House Rule so I have not identified the participants and have not attributed any of the statements to anyone.)

Strategies for marrying ESG implementation and compliance – at the Private Fund Compliance Forum 2018

Investors have increased their focus on Environmental, Social and Governance issues. This panel focused on the compliance role in ESG.

According to a poll at the conference, about half of the attendees have a written ESG policy and consider ESG as part of their strategy. There is the balance between wanting to invest for good and to invest for returns. There is a larger push to just block investments in particular areas such as tobacco, pornography, arms manufacturers, etc.

Investors are specifically asking for a written ESG policy. The policies have a great deal of discretion. Investors often do not have specific requirements for the substance of the ESG policy. Investors want to know that you are thinking about these issues.

Fund limited partners are reporting their ESG goals, or at least those issues they are most interested in, as part of their reporting. So they are expecting their funds to report on these issues. The challenge is that investors are asking a wide range of questions on a wide range of issues. It’s a challenge to gather the disparate data and put together quantitative numbers.

The #MeToo issue is a current hot topic. Fund managers are pushing down to their portfolio companies to implement ESG policies, as well as implementing them at the fund manager.

Compliance can help by doing what compliance does: drafting policies, implementing procedures to effectuate the policy, and track the data in the implementation.

There are many ways to approach ESG, pick one and try it out if you haven’t yet. Get someone in senior management to sponsor the effort. It’s not just about being a treehugger, it’s about creating value in your portfolio companies and value in your fund management.

(This session was subject to the Chatham House Rule so I have not identified the participants and have not attributed any of the statements to anyone.)

International compliance for managers with a global presence in Europe – at the Private Fund Compliance Forum 2018

GDPR is big boogeyman right now. The General Data Protection Regulation has a compliance deadline rapidly approaching in the EU. It protects the personal data of EU residents. It has extra-territorial implications. Firms need consent for use of the data or a specific business relationship. Data breach notifications have to be made within 72 hours. The terrifying aspect is the enormous fines that can be levied for violations. The deadline is May 25.

One tricky aspect under GDPR is website cookies and tracking data. And what do you do with business cards?

You need to keep logs of collected personal information and arrange for destruction upon request. GDPR has a broader definition of personal information than US laws which are generally limited to a name and account number.

GDPR and the new FinCEN anti-money laundering rules are coming online at the same time. leading firms to ask for new personal information, while also increasing the rules an penalties around have possession of that information.

MiFID II targets securities trading. The big change is having to pay for research costs, separate from paying for securities transactions. There are lots of reporting requirements. There is a requirement for recording phone calls. “Inducements” is one of the items to focus on, such as gifts and entertainment.

Anti-Money laundering rules are keyed around ownership of more than 25% of the fund.

The new Cayman AML law requires an AML officer and a Deputy AML officer. It also proscribes certain procedures.

(This session was subject to the Chatham House Rule so I have not identified the participants and have not attributed any of the statements to anyone.)

Portfolio company risk management – at the Private Fund Compliance Forum 2018

To the extent you are managing risk at your firm, are you managing the risks at your underlying investments. The SEC has been asking about this topic in exams.

The most obvious area is cybersecurity. Many of those requirements are not dependent on the company, so cybersecurity compliance carries over.

Compliance can create value to the portfolio by helping them navigate cybersecurity risk. With that risk monitored and a compliance program in place, the portfolio company may be more valuable to future buyers.

The challenge is that many private fund CCOs barely have (or don’t have) the knowledge/background to fully tackle cybersecurity risk.

There is also the problem of portfolio company liability being passed up to the fund if there is a cybersecurity problem. The fund manager could be blamed for the problem instead of the portfolio company. It’s hard to make that go away. The key would not be scaling back the cyber program. You are probably better off showing that you increased the effectiveness of the cyber program even if it was not enough to prevent the problem.

(This session was subject to the Chatham House Rule so I have not identified the participants and have not attributed any of the statements to anyone.)

Secondary sales in private funds – at the Private Fund Compliance Forum 2018

Volume of secondary sales is dramatically higher this year, compared to last year. $58 billion.

One of the key aspects that secondary purchasers like is avoidance of the blind pool. Usually, the fund is far along in allocating capital. To some extent, it avoids the J-curve problem. Secondaries are able to return capital back to their investors faster.

It has become less of an ad hoc investment strategy only targeting distressed positions. There has been a development for liquidity in the market and an investor demand for secondary positions, directly or trough investment funds. It has become an active strategy.

There has been an increase in GP-led transactions to lengthen a fund life or change the structure/strategy of the fund. As much as 20% of the transaction volume is GP-led. GP needs to be careful of the conflicts that come with the GP being involved in the sales transaction. If the GP is setting the pricing, there is a concern that the GP is underpaying the existing investors, or causing the new investors to overpay. Disclosure is very, very important.

There are two levels of diligence: the fund interest and the underlying investments. For a primary investment as part of fundraising, there is little or no portfolio to review. It’s all operational/GP diligence. Of course, the secondaries buyer wants the GP to consent to the deal. A GP may not want a secondaries purchaser who the GP considers to be a pain in the neck based on excruciating diligence.

GPs need to be cautious about injecting themselves into an LP trying to market an interest to avoid broker-dealer issues. However, the GP may know which LPs are interested in acquiring interests. In particular, the GP should avoid taking compensation in consideration of facilitating the transaction.

The GP buying the interest for itself may be considered a principal transaction requiring consent of the client (i.e. the fund).

(This session was subject to the Chatham House Rule so I have not identified the participants and have not attributed any of the statements to anyone.)

Fees and expenses: allocation and regulation at the Private Fund Compliance Forum 2018

What is the compliance officers’s role in fees and expenses policies and procedures?

Compliance may not make the decision, but will be responsible for documenting the agreed-upon allocation. Compliance will be responsible for monitoring.

Some allocations can be based on the compliance manual or desktop accounting processes. The SEC wants to make sure you document any allocation. It does not have to be as formal as the compliance manual.

Think about flexibility in allocation or default rules that can be overridden to more equitably allocate the expenses properly.

Allocation of D&O insurance? Perhaps allocate to funds based on AUM. Perhaps the retainage sits with the management to take the risk. Some just split it 50/50. Some split it based on risks based on the different risk profiles with some to the management company. There is definitely a wide range of allocations. The emphasis is on consistency.

Dealing with business travel when a single trip involves multiple meeting with multiple purposes. For example, meeting with a potential LP, meeting with an investor, meeting on an investment. Equitably pro-rate the expenses. With investor meetings, it’s common to over-allocate to the current fund because that is where the investment action is occurring.

How to deal with co-investments. If you can get LPs to commit to co-invest up front, they should take the burden of the some of the broken deal expenses. If co-investors come in at the end and get solicited after the investment decision has been made, it does not seem right to allocate broken deal expenses. Of course, if the deal fell through after committing to the investment, perhaps there is an open issue. Several firms that do lots of co-investments stated that they cannot any instance of paying broken deal costs for prospective investments. However, a poll indicated that broken deal expenses are allocated to co-investors at least in some instances by 20% of the responding attendees.

Be cautious about mixing business and personal trips. Focus on the right way to allocate and not let personal expenses leak into the investor costs. A spouse on a business trip is a problem.

Annual meeting expense allocations. The SEC staff has dug into these allocations. Some split equally to the active funds. Some split based on AUM. Fund service providers or non-investors should be charged to the management company.

How to make sure fees are being properly allocated. Make sure there is process for the calculation and a procedure for approval. Generally, private funds will have the fees audited as part of the audit for compliance with the custody rule.

(This session was subject to the Chatham House Rule so I have not identified the participants and have not attributed any of the statements to anyone.)

Restructuring the compliance function at the Private Fund Compliance Forum 2018

A panelists of fund compliance officers was moderator by a lawyer.

The regulatory landscape is changing rapidly, so the compliance function needs to be able to change rapidly.

Compliance should have a seat at the table and be embedded in key functions with conflicts and regulatory concerns. Bolted on compliance will be less effective. It’s better to get compliance in the decision-making process to avoid later problems.

The difficult part is balancing the strategic approach to compliance with the day-to-day requirements. It can be a struggle to stay on top of the issues.

Running the machine.
Advisory judgments to the business units
Strategic initiatives

There are particular challenges that come from being an SEC regulator coming into a business, with the change in decision-making.

CCO liability is not in the forefront of concerns. You are operating way outside the norm if you are worried about this. It’s about being reasonable and thoughtful about the issues and the business.

Strategic initiatives includes a focus on staffing the compliance department and the technology you use to handle the compliance load. And also how much you outsource compliance functions to third parties. You need to prove to management that you need more resources and how the resources need to be deployed. You need to build a use case.

Think of compliance as a business unit, not merely a cost center.

How do you stay on top of substantive issues, especially where you may not have the expertise? Aspects of cybersecurity and GDPR are beyond the skill set on many compliance officers. Peer groups are incredibly useful. (One reason to attend this conference.) Identify internal expertise. That means a strong relationship with IT to understand the IT issues around cyber, data security and privacy issues. It’s also important to understand when compliance should be at the front of issues and when compliance should be supporting another business function.

Law firm newsletters are a good source of upcoming issues. There is lots of channel of inbound information. But it’s often better to hear from peers about issues. It’s better stay focused on internal changes in the firm business.

When to outsource? Repeatable tasks are ripe for being outsourced. Substantive items are harder to outsource. If there is a business judgement to be made, it should be made by internal people, not outsourced. Look for manual processes that could be automated. The more the complexity, the better to keep it internal. Look at your staff’s expertise. You should look to outsource if you lack the expertise. Privacy and sensitivity of the underlying task is another factor. It’s hard to outsource trading review if your people are sensitive to that information being more widely reviewed.

Multi-point reporting is common. The CCO often works under the GC, but has escalation channels and multiple points of contacts with other business units and firm leadership. A compliance oversight committee is common. It obviously provides oversight to compliance and also a reverse feature of making the business units aware of compliance issues.

(This session was subject to the Chatham House Rule so I have not identified the participants and have not attributed any of the statements to anyone.)

Private Fund Compliance Forum 2018

I’m in New York for PEI Media’s Private Fund Compliance Forum 2018.

If you are here in attendance, grab a guy with a bowtie and say “hi” to me. Depending on how many other people are wearing bowties, there is good chance it will be me.

I’ll be typing up my notes and sending them out over the course of the event. Here is part of the agenda:

  • Restructuring the compliance function
  • SEC exams—what do they look like now?
  • Fees and expenses: allocation and regulation
  • Assessing the influence of tax reform on private funds and portfolio companies
  • Portfolio company risk management
  • Assessing the current regulatory environment and navigating its impact on your compliance program
  • Identifying conflicts at your firm – at the Private Fund Compliance Forum
  • Strategies for marrying ESG implementation and compliance
  • Regulatory considerations for the use of subscription lines and borrowing