More than $710 million in CFTC penalties for communication-record failures showed that written channel policies need operational enforcement.

The verified record

On 27 September 2022, the CFTC announced settled actions involving swap-dealer and futures-commission-merchant affiliates of 11 financial institutions. The combined civil monetary penalties exceeded $710 million. The agency identified failures to preserve required business communications and to supervise the use of unapproved communication methods. CFTC release 8599-22 ↗

The release described employees, including supervisors, conducting business through channels outside firm policies. These were actions against specified CFTC registrants, not a universal penalty schedule for every company using a messaging application.

Why it matters

For a brokerage, the operating lesson is that policy and evidence must connect. A rule naming approved channels has limited value if ordinary customer or trading discussions move elsewhere without capture or escalation.

That connection also matters when designing a CRM. Storing a final account instruction may leave gaps about how it was authorised or changed. A sensible record model preserves the relevant instruction and its context while making access and retention decisions explicit. This is an editorial design implication, not a claim that installing a CRM automatically satisfies regulatory obligations.

What to check next

A review should establish which legal entities, activities and communication types fall within applicable obligations. Then test whether business records can actually be retrieved with their context. Supervisory responsibility and exceptions need named owners. Do not assume that a channel is compliant merely because staff can export a conversation from it.