According to FINRA, Ally Invest Securities LLC was censured and fined $850,000 for failing to preserve business-related electronic communications with customers and for supervisory failures.
The firm's violations were significant in scope. Ally Invest failed to preserve customer communications about trade executions, fund transfers, and other account activity, along with an unknown quantity of internal and external communications from group mailboxes. These preservation failures occurred due to separate coding errors and other technical failures in three different systems, causing communications to be permanently lost.
As a result of these technical failures, the firm was unable to fully respond to regulatory inquiries from both FINRA and the Securities and Exchange Commission (SEC). The inability to produce requested records can severely hamper regulators' ability to investigate potential misconduct and protect investors.
The firm also failed to establish and maintain a supervisory system reasonably designed to review business-related electronic communications. Specifically, approximately 120 group mailboxes and a software platform used for customer service communications were not connected to the firm's system for selecting communications for compliance review. The firm's procedures did not require these connections and provided no guidance on verifying that mailboxes and user accounts were properly integrated into the review system.
This supervisory failure resulted in the firm failing to timely review at least 521,000 communications. Notably, FINRA had previously warned the firm about a prior failure to review business-related electronic communications, making this a repeat violation.
This case underscores the critical importance of robust electronic communication preservation and review systems in modern brokerage operations. Record retention requirements exist to protect both investors and the integrity of the securities markets.
For investors, this case serves as a reminder that communications with your broker are supposed to be preserved and may be reviewed by compliance personnel. If you have concerns about a transaction or communication, document it independently and consider following up in writing.