Recordkeeping and Surveillance Obligations

intermediatePublished: 2026-01-01

Recordkeeping and Surveillance Obligations

Financial firms trading derivatives must maintain comprehensive records of trading activity and conduct surveillance to detect manipulative, abusive, or unauthorized trading. Recordkeeping requirements specify what must be retained and for how long, while surveillance programs monitor for suspicious patterns and regulatory violations.

Definition and Key Concepts

Recordkeeping Requirements

RegulatorPrimary RuleScope
SECRule 17a-4Broker-dealers
CFTCRegulation 1.31FCMs, swap dealers
FINRARule 4511FINRA members
NFACompliance Rule 2-10NFA members

Record Categories

CategoryExamples
Order recordsOrder tickets, time stamps, modifications
Trade recordsExecution reports, allocations, confirmations
Account recordsCustomer agreements, statements, correspondence
Position recordsDaily positions, margin, P&L
CommunicationsEmails, chats, voice recordings

Retention Periods

Record TypeSEC/FINRACFTC
Trade blotters6 years5 years
Order tickets6 years5 years
Customer records6 years5 years
Communications3-6 years5 years
Position records6 years5 years

How It Works in Practice

Required Trade Records

Order record requirements:

FieldDescription
Order IDUnique identifier
TimestampReceipt and execution time
AccountCustomer or firm account
ProductSecurity/contract details
SideBuy or sell
QuantityOrdered and executed
PriceLimit price and execution price
Order typeMarket, limit, stop
Time in forceDay, GTC, IOC
Execution venueExchange, ATS, OTC

Trade record requirements:

FieldDescription
Trade IDUnique identifier
Execution timestampPrecise time
CounterpartyExecuting broker or counterparty
CapacityPrincipal or agent
CommissionFees charged
Settlement detailsDate, instructions

Electronic Recordkeeping

WORM (Write Once, Read Many) requirements:

RequirementDescription
Non-rewriteableCannot alter or delete
IndexedSearchable and retrievable
AccessibleImmediate access for examination
VerifiedIntegrity checks
Backed upRedundant storage

Storage standards:

StandardRequirement
FormatIndustry-standard, readable
LocationSecure, fire-protected
BackupGeographic redundancy
TestingAnnual restoration test
Audit trailAll access logged

Surveillance Obligations

Areas of surveillance:

AreaFocus
Market manipulationSpoofing, layering, wash trades
Insider tradingMaterial non-public information
Front-runningTrading ahead of customer orders
Position limitsExceeding regulatory limits
Marking the closeManipulation at settlement
Best executionFair pricing for customers

Surveillance methods:

MethodApplication
Pattern detectionAlgorithmic analysis of trading patterns
Threshold alertsTriggers based on volume, P&L, etc.
Exception reportsUnusual activity flagging
Correlation analysisCross-market pattern detection
Communication reviewKeyword and pattern searches

Worked Example

Trade Recordkeeping Process

Scenario: Options trader executes order for customer account.

Order entry (9:30:15 AM):

FieldValue
Order IDORD-2025-0117-00001
AccountCUST-12345
ProductSPY Feb 480 Call
SideBuy to open
Quantity100 contracts
Order typeLimit
Price$5.50
Time in forceDay
Received2025-01-17 09:30:15.123
Rep IDREP-789

Execution (9:30:18 AM):

FieldValue
Trade IDTRD-2025-0117-00001
Execution time2025-01-17 09:30:18.456
Quantity filled100 contracts
Price$5.48
VenueCBOE
CapacityAgent
Commission$65.00
CounterpartyMarket maker ABC

Confirmation generated:

FieldValue
Trade dateJanuary 17, 2025
Settlement dateJanuary 21, 2025
Net amount$54,865.00
StatusPending settlement

Records retained:

RecordRetentionLocation
Order ticket6 yearsTrade archive
Execution report6 yearsTrade archive
Confirmation6 yearsCustomer records
Voice recording3 yearsCommunication archive
Audit trail6 yearsSystem logs

Surveillance Alert

Alert generated:

FieldValue
Alert IDSURV-2025-0117-042
TypeUnusual trading pattern
AccountPROP-567
Trigger300% of average daily volume
ProductAAPL options
DateJanuary 17, 2025

Investigation steps:

StepActionFinding
1Review trading activityLarge position built
2Check for newsEarnings announcement scheduled
3Review communicationsNo red flags
4Interview traderExplained strategy rationale
5Document conclusionLegitimate hedging activity

Documentation:

DocumentContent
Alert recordOriginal alert details
Investigation notesSteps taken, findings
ConclusionNo violation, rationale
ApprovalSupervisor sign-off
Retention5 years

Risks, Limitations, and Tradeoffs

Recordkeeping Risks

RiskDescriptionConsequence
Missing recordsIncomplete retentionRegulatory finding
Altered recordsImproper modificationObstruction allegation
Access failureCannot produce on demandExamination failure
Format obsolescenceCannot read old formatsRetention violation

Surveillance Risks

RiskDescriptionConsequence
False positivesToo many alertsAlert fatigue
False negativesMissed violationsRegulatory liability
Delayed detectionPattern found too lateHarm occurred
Inadequate coverageGaps in monitoringExamination finding

Common Pitfalls

PitfallDescriptionPrevention
Off-system communicationPersonal devicesClear policies, monitoring
Incomplete audit trailGaps in recordsSystem validation
Delayed archivingRecords not preservedAutomated capture
Poor indexingCannot find recordsMetadata standards
Siloed systemsFragmented recordsIntegrated archive

Penalties

ViolationTypical Penalty
Recordkeeping failure$10,000 - $500,000
Surveillance deficiency$50,000 - $1,000,000
Failure to produce$10,000 per day
Alteration/destructionCriminal referral

Regulatory Examination Focus

Common Examination Requests

RequestResponse Time
Trade blotter for periodSame day
Specific order/trade recordsSame day
Customer communications1-3 days
Surveillance alerts and resolution1-3 days
Policies and proceduresImmediate

Examination Preparation

ActivityFrequency
Mock examinationAnnual
Record retrieval testQuarterly
Surveillance system reviewSemi-annual
Policy updateAs needed

Checklist and Next Steps

Daily operations checklist:

  • Verify all trades captured
  • Archive communications
  • Review surveillance alerts
  • Investigate exceptions
  • Document resolutions
  • Backup critical records

Weekly review checklist:

  • Reconcile records to source systems
  • Review open surveillance items
  • Check system health
  • Update exception tracking
  • Report to supervision
  • Archive completed investigations

Monthly compliance checklist:

  • Test record retrieval
  • Review surveillance coverage
  • Assess alert thresholds
  • Update monitoring rules
  • Train staff as needed
  • Report to management

Annual assessment checklist:

  • Full recordkeeping audit
  • Surveillance program review
  • Regulatory update implementation
  • Technology assessment
  • Policy and procedure update
  • Staff training certification

Related articles:

Related Articles