Related provisions for MCOB 13.3.11
1 - 20 of 209 items.
The records and internal controls required by CASS 8.3.1 R must include:(1) an up-to-date list of each mandate that the firm has obtained, including a record of any conditions placed by the client or the firm's management on the use of the mandate;(2) a record of each transaction entered into under each mandate that the firm has;(3) internal controls to ensure that each transaction entered into under each mandate that the firm has is in accordance with any conditions placed by
11For complaints related to collective portfolio management services of a UK UCITS management company for a UCITS scheme or an EEA UCITS scheme, DISP 1.1.3R (1) applies, except where modified as follows:(1) the consumer awareness rules, complaints handling rules and complaints record rule apply in respect of complaints from Unitholders rather than from eligible complainants; and(2) the consumer awareness rules, the complaints handling rules and the complaints record rule, as modified
For complaints related to collective portfolio management services of an EEA UCITS management company for a UCITS scheme, DISP 1.1.3R (1) applies, except where modified as follows:(1) where the services are provided from a branch in the United Kingdom, the consumer awareness rules, complaints handling rules and complaints record rule apply in respect of complaints from Unitholders rather than from eligible complainants; and(2) this chapter, except the consumer awareness rules,
Where the subject matter of a complaint is subject to a review directly or indirectly under the terms of the policy statement for the review of specific categories of FSAVC business issued by the FSA on 28 February 2000, the complaints resolution rules, the complaints time limit rules, the complaints record rule,9 the complaints reporting rules and the complaints data publication rules9 will apply only if the complaint is about the outcome of the review.9
(1) A firm,
payment service provider8
or electronic money issuer1340 falling within the Compulsory Jurisdiction which does not conduct business with eligible complainants and has no reasonable likelihood of doing so, can, by written notification to the
FCA
, claim exemption from the rules relating to the funding of the Financial Ombudsman Service, and from the remainder of this chapter.1340(2) Notwithstanding (1):11(a) the complaints handling rules and complaints record rule
A firm must introduce adequate organisational arrangements to minimise the risk of the loss or diminution of clients' safe custody assets,2 or the rights in connection with those safe custody assets,2 as a result of the misuse of the safe custody assets,2 fraud, poor administration, inadequate record-keeping or negligence.[Note: article 16(1)(f) of the MiFID implementing Directive]222
To the extent practicable, a firm must effect appropriate registration or recording of legal title to a
safe custody asset2
in the name of:2(1) the client (or, where appropriate, the trustee firm), unless the client is an authorised person acting on behalf of its client, in which case it may be registered in the name of the client of that authorised person;(2) a nominee company which is controlled by:(a) the firm;(b) an affiliated company;(c) a recognised investment exchange
4If:(1) the safe custody asset is an emission auction product that is a financial instrument; and(2) it is not practicable or possible for a firm to effect registration or recording of legal title in this asset in the manner set out in CASS 6.2.3 R, the firm must register or record legal title in its name provided it has notified the client in writing.
A firm may register or record legal title to its own
applicable assets2
in the same name as that in which legal title to a
safe custody asset2
is registered or recorded, but only if:22(1) the firm'sapplicable assets2
are separately identified in the firm's records from the safe custody assets;2 or22(2) the firm registers or records a
safe custody asset2
in accordance with CASS 6.2.3R (4).2
(1) A firm need not treat this chapter as applying in respect of a delivery versus payment transaction through a commercial settlement system if it is intended that the
safe custody asset2
is either to be: 2(a) in respect of a client's purchase, due to the client within one business day following the client's fulfilment of a payment obligation; or(b) in respect of a client's sale, due to the firm within one business day following the fulfilment of a payment obligation;unless
When a firm temporarily handles a safe custody asset,2 in order to comply with its obligation to act in accordance with Principle 10 (Clients' assets), the following are guides to good practice:2(1) a firm should keep the
safe custody asset2
secure, record it as belonging to that client, and forward it to the client or in accordance with the client's instructions as soon as practicable after receiving it; and2(2) a firm should make and retain a record of the fact that the firm
2The custody rules do not apply to a personal investment firm when it temporarily holds a designated investment, other than in bearer form, belonging to a client, if the firm:(1) keeps it secure, records it as belonging to that client, and forwards it to the client or in accordance with the client's instructions, as soon as practicable after receiving it; (2) retains the designated investment for no longer than the firm has taken reasonable steps to determine is necessary to check
2When a trustee firm or depositary acts as a custodian for a trust or collective investment scheme, (except for a firmacting as trustee or depositary of an AIF),7 and:
- (1)
the trust or scheme is established by written instrument; and
- (2)
the trustee firm or depositary has taken reasonable steps to determine that the relevant law and provisions of the trust instrument or scheme constitution will provide protections at least equivalent to the custody rules for the trust property or scheme property;
the trustee firm or depositary need comply only with the custody rules listed in the table below.
Reference |
Rule |
CASS 6.1.1 R to CASS 6.1.9 G and CASS 6.1.15 G to CASS 6.1.16C R |
Application |
Trustees and depositaries |
|
General purpose |
|
Protection of clients' safe custody assets |
|
Registration and recording |
|
Holding |
|
Use of safe custody assets |
|
Records, accounts and reconciliations |
- (1)
7Subject to (2), when a firm is acting as trustee or depositary of an AIF the firm need comply only with the custody rules in the table below:
Reference
Rule
CASS 6.1.1 R, CASS 6.1.9 G, CASS 6.1.9A G and CASS 6.1.16IB G
Application
General purpose
CASS 6.2.3 R and CASS 6.2.4 R to CASS 6.2.6 G
Registration and recording
Holding
Arranging registration
CASS 6.5.1 R, CASS 6.5.2A R, CASS 6.5.3 R, CASS 6.5.13R (1A) and CASS 6.5.14 G
Records, accounts and reconciliations
- (2)
When a firm is acting as trustee or depositary of an AIF that is an authorised AIF the firm must, in addition to the custody rules in (1), also comply with the custody rules in the table below:
Reference
Rule
Application
CASS 6.5.4G (1A) to CASS 6.5.4G (4), CASS 6.5.5 R, CASS 6.5.7A G, CASS 6.5.8A G8 , CASS 6.5.9 G and CASS 6.5.15 G
8Records, accounts and reconciliations
2Only the custody rules in the table below apply to a firm when arranging safeguarding and administration of assets.
Reference |
Rule |
CASS 6.1.1 R to CASS 6.1.9 G and CASS 6.1.15 G to CASS 6.1.16B R |
Application |
Arrangers |
|
General purpose |
|
Arranging for assets to be deposited with third parties |
|
Records |
CREDS 2.2.8 R requires a credit union's system of control to be fully documented. The documentation helps the committee of management to assess if systems are maintained and controls are operating effectively. It also helps those reviewing the systems to verify that the controls in place are those that have been authorised, and that they are adequate for their purpose.
(1) The committee of management should decide what form this documentation should take, but the committee should have in mind the following points.(a) Documents should be comprehensive: they should cover all material aspects of the operations of the credit union.(b) Documents should be integrated: separate elements of the system should be cross-referred so that the system can be viewed as a whole.(c) Documents should identify risks and the controls established to manage those
Documentation should not be restricted to "lower level" controls applied in processing transactions, but should also cover "high level" controls including:(1) identifying those powers to be exercised only by the committee of management, and the powers delegated to others;(2) the purpose, composition and reporting lines of sub-committees, and senior managers to whom responsibilities are delegated;(3) the specific roles and responsibilities of individual officers;(4) the timing,
SYSC 9.1.1 R requires that a credit union takes reasonable care to make and retain adequate records of all matters governed by the Act, secondary legislation under the Act, or rules (including accounting records). These records should be capable of being reproduced in the English language and on paper.
The main reasons why a credit union should maintain adequate accounting and other records are:(1) to provide the committee of management with adequate financial and other information to enable it to conduct its business in a prudent manner on a day-to-day basis;(2) to safeguard the assets of the credit union and the interests of members and persons too young to be members; (3) to assist officers of the credit union to fulfil their regulatory and statutory duties in relation to
Some important compliance issues include:(1) insurance against fraud and dishonesty;(2) arrangements for the prevention, detection and reporting of money laundering;(3) establishing and maintaining a satisfactory system of control;(4) keeping proper books of account;(5) computation and application of profits;(6) investment of surplus funds;(7) capital requirements; (8) liquidity requirements;(9) limits on shares and loans;(10) maintenance of membership records;(11) submission
The purposes of an internal audit are:(1) to ensure that the policies and procedures of the credit union are followed;(2) to provide the committee of management with a continuous appraisal of the overall effectiveness of the control systems, including proposed changes;(3) to recommend improvements where desirable or necessary;(4) to determine whether the internal controls established by the committee of management are being maintained properly and operated as laid down in the
The key elements of a satisfactory system of internal audit include the following:(1) Terms of reference. These should be specified with precision and include, amongst other things, scope and objectives of the audit committee and the internal audit function (see CREDS 2.2.11G), access to records, powers to obtain information and explanations for officers, and reporting requirements. These should be approved by the committee of management.(2) Risk analysis. Key risks in each area
(1) A firm will be able to comply with SYSC
2.2.1 R by means of records which it keeps for its own purposes provided
these records satisfy the requirements of SYSC
2.2.1 R and provided the firm takes reasonable care to keep them up
to date. Appropriate records might, for this purpose, include organisational
charts and diagrams, project management documents,
job descriptions, committee constitutions and terms of reference provided
they show a clear description of the firm's major
functions.(2)
(1) A firm may arrange for records to be kept in such form as it chooses, provided the record is readily accessible for inspection by the FCA.(2) Where a firm chooses to maintain records in electronic form, it should take reasonable steps to ensure that:(a) the electronic record accurately reflects the original information; and (b) the electronic record has not been subject to unauthorised or accidental alteration.
1This sourcebook does not specify detailed record keeping requirements for a firm that carries on a home purchase activity or that communicates or approves a financial promotion of a home purchase plan (but note the high-level record-keeping provisions in the Senior Management Arrangements, Systems and Controls sourcebook).
(1) This section deals with matters relating to the register of unitholders of units in an AUT or ACS1 including its establishment and contents. The authorised fund manager or depositary1 may be responsible for the register. In any event, the person responsible for the register must be stated in the trust deed or contractual scheme deed1 and this section details what his duties are. The provisions relating to documentsevidencingtitle to units, including the issue of bearer certificates
(1) Either:11(a) the manager or the trustee (as nominated in the trust deed); or1(b) the authorised contractual scheme manager or the depositary of the ACS (as nominated in the contractual scheme deed);1must establish and maintain a register of unitholders as a document in accordance with this section.1(2) The manager or trustee or the authorised fund manager or depositary1 in accordance with their duties under (1) must exercise all due diligence and take all reasonable steps
(1) Subject to (3), if1 no person is entered in the register as the unitholder of a unit, the authorised fund manager1 must be treated as the unitholder of each such unit which is in issue (other than a unit which is represented by a bearer certificate).11(2) Where units are transferred to the authorised fund manager1, they need not be cancelled and the authorised fund manager1 need not be entered on the register as the new unitholder.11(3) In the case of a limited partnership
(1) Every unitholder of an AUT1 is entitled to transfer units held on the register by an instrument of transfer in any form that the person responsible for the register may approve, but that person is under no duty to accept a transfer unless:(a) it is permitted by the trust deed or prospectus; and(b) the transfer is excluded by Schedule 19 of the Finance Act 1999 from a charge to stamp duty reserve tax, or there has been paid to the trustee, for the account of the AUT, an amount
(1) Following the sale of units or as a result of COLL 6.4.6 R (Transfer of units by act of parties: AUTs and ACSs1) a document recording title to those units may be issued in such a form as the trust deed or contractual scheme deed1 permits.(2) The person responsible for the register must issue any document in (1) or provide relevant information in a timely manner where the procedures for redeeming units require the unitholder to surrender that document.(3) Bearer certificates
(1) The ACD and any other directors of an ICVC or the person responsible for the register of an AUT or an ACS1 may arrange for a plan register to be established and maintained.(2) Where payments are made out of scheme property to establish and maintain a plan register, plan investors must be treated as unitholders for the purposes of COLL 4.3 to COLL 4.5 and COLL 6.4.4 R (Register: general requirements and contents).
The firm should recognise that oral evidence may be sufficient evidence and not dismiss evidence from the complainant solely because it is not supported by documentary proof. The firm should take account of a complainant's limited ability fully to articulate his complaint or to explain his actions or decisions made at the time of the sale.
Where the complainant's account of events conflicts with the firm's own records or leaves doubt, the firm should assess the reliability of the complainant's account fairly and in good faith. The firm should make all reasonable efforts (including by contact with the complainant where necessary) to clarify ambiguous issues or conflicts of evidence before making any finding against the complainant.
In determining a particular complaint, the firm should (unless there are reasons not to because of the quality and plausibility of the respective evidence) give more weight to any specific evidence of what happened during the sale (including any relevant documentation and oral testimony) than to general evidence of selling practices at the time (such as training, instructions or sales scripts or relevant audit or compliance reports on those practices).
In considering the information communicated to the complainant and the complainant's information needs, the evidence to which a firm should have regard includes:(1) the complainant's individual circumstances at the time of the sale (for example, the firm should take into account any evidence of limited financial capability or understanding on the part of the complainant);(2) the complainant's objectives and intentions at the time of the sale;(3) whether, from a reasonable customer's
A firm must arrange for orderly records to
be kept of its business and internal organisation, including all services
and transactions undertaken by it, which must be sufficient to enable the appropriate
regulator or any other
relevant competent authority under MiFID or the UCITS Directive4 to monitor the firm's compliance
with the requirements under the regulatory
system, and in particular to ascertain that the firm has complied with all obligations with
respect to clients.[Note:
article
Subject
to any other record-keeping rule in
the Handbook, the records required
under the Handbook should be
capable of being reproduced in the English language on paper. Where a firm is required to retain a record of a
communication that was not made in the English language, it may retain it
in that language. However, it should be able to provide a translation on request.
If a firm's records relate to
business carried on from an establishment in a country or territory outside
the
In
relation to the retention of records for non-MiFID
business, a firm should
have appropriate systems and controls in place with respect to the adequacy
of, access to, and the security of its records so that the firm may
fulfil its regulatory and statutory obligations. With respect to retention
periods, the general principle is that records should be retained for as long
as is relevant for the purposes for which they are made.1
5A firm should ensure that the systems and controls include:(1) appropriate training for its employees in relation to money laundering;(2) appropriate provision of information to its governing body and senior management, including a report at least annually by that firm'smoney laundering reporting officer (MLRO) on the operation and effectiveness of those systems and controls;(3) appropriate documentation of its risk management policies and risk profile in relation to money laundering,
(1) Depending on the nature, scale and complexity of its business, it may be appropriate for a firm to have a separate compliance function. The organisation and responsibilities of a compliance function should be documented. A compliance function should be staffed by an appropriate number of competent staff who are sufficiently independent to perform their duties objectively. It should be adequately resourced and should have unrestricted access to the firm's relevant records as
(1) Depending on the nature, scale and complexity of its business, it may be appropriate for a firm to have a separate risk assessment function responsible for assessing the risks that the firm faces and advising the governing body and senior managers on them.(2) The organisation and responsibilities of a risk assessment function should be documented. The function should be adequately resourced and staffed by an appropriate number of competent staff who are sufficiently independent
A firm should plan its business appropriately so that it is able to identify, measure, manage and control risks of regulatory concern (see SYSC 3.2.11 G (2)). In some firms, depending on the nature, scale and complexity of their business, it may be appropriate to have business plans or strategy plans documented and updated on a regular basis to take account of changes in the business environment.
(1) A firm must take reasonable care to make and retain adequate records of matters and dealings (including accounting records) which are the subject of requirements and standards under the regulatory system.(2) Subject to (3) and to any other record-keeping rule in the Handbook, the records required by (1) or by such other rule must be capable of being reproduced in the English language on paper.(3) If a firm's records relate to business carried on from an establishment in a
A firm should have appropriate systems and controls in place to fulfil the firm's regulatory and statutory obligations with respect to adequacy, access, periods of retention and security of records. The general principle is that records should be retained for as long as is relevant for the purposes for which they are made.
2The report referred to in ICOBS 8.4.4R (1)(c) must:(1) be prepared on the basis of providing an opinion under a limited assurance engagement confirming whether the auditor has found no reason to believe that the firm, solely in relation to the firm's extraction of information from its underlying records, has not materially complied with the requirements in ICOBS 8.4.4R (2) and ICOBS 8 Annex 1 in the production of its employer’s liability register, having regard in particular
(1) A firm must make available:(a) the information on the employers’ liability register either:(i) on the firm's website at the address notified to the FCA in ICOBS 8.4.6R (1); or(ii) by arranging for a tracing office which meets the conditions in ICOBS 8.4.9 R to make the information available on the tracing office’s website; and(b) the latest director's certificate and the latest report prepared by an auditor for the purposes of ICOBS 8.4.4R (1)(c), to a tracing office which
The conditions referred to in ICOBS 8.4.4R (2)(d) and ICOBS 8.4.7R (1)(a)(ii) are that the tracing office is one which:(1) maintains a database which:(a) accurately and reliably stores information submitted to it by firms for the purposes of complying with these rules;(b) has systems which can adequately keep it up to date in the light of new information provided by firms;(c) has an effective search function which allows a person inputting data included on the database relating
2The requirement referred to in ICOBS 8.4.9R (7)(b) is that the report must include an opinion from the auditor confirming whether, in all material respects, the tracing office maintains a database which accurately and reliably stores information submitted to it by firms for the purpose of complying with relevant requirements in ICOBS 8.4 and that it has systems which can adequately keep it up to date in the light of new information provided by firms.
3A firm with actual or potential liability for United Kingdom commercial lines employers' liability insurance claims must take reasonable steps to conduct effective searches of their records when they receive a request to carry out a search for a historical policy from persons falling into one of the categories in ICOBS 8.4.4R (2)(c) or a tracing office which meets the conditions in ICOBS 8.4.9 R.
3A firm must put in place a written policy for complying with ICOBS 8.4.14 R and operate in accordance with it. The policy must cover at least the following matters:(1) details of where the firm's historical policies are held or are likely to be held (including details of records which are archived or stored off site);(2) details of the different types of records to be searched by the firm, such as electronic files, paper files, and microfiche; and(3) details of how the searches
(1) 3Where a firm has established that a historical policy does exist, the response should confirm what cover was provided and set out any available information that is relevant to the request received.(2) Where there is evidence to suggest that a historical policy does exist, but the firm is unable to confirm what cover was provided, the response should set out any information relevant to the request and describe the next steps (if any) the firm will take to continue the search.
(1) The rules in this chapter specify the types of documents and records that must be maintained in a firm'sCASS resolution pack and the retrieval period for the pack. The firm should maintain the component documents of the CASS resolution pack in order for them to be retrieved in accordance with CASS 10.1.7 R, and should not use the retrieval period to start producing these documents.(2) The contents of the documents that constitute the CASS resolution pack will change from time
For the purpose of this chapter, a firm will be treated as satisfying a rule in this chapter requiring it to include a document in its CASS resolution pack if a member of that firm'sgroup includes that document in its own CASS resolution pack, provided that:(1) that group member is subject to the same rule; and(2) the firm is still able to comply with CASS 10.1.7 R.
(1) A firm must ensure that it reviews the content of its CASS resolution pack on an ongoing basis to ensure that it remains accurate(2) In relation to any change of circumstances that has the effect of rendering inaccurate, in any material respect, the content of a document specified in CASS 10.2.1 R, a firm must ensure that any inaccuracy is corrected promptly and in any event no more than five business days after the change of circumstances arose.
A primary pooling event occurs:(1) on the failure of the firm;(2) on the vesting of assets in a trustee2 in accordance with an 'assets requirement' imposed under section 55P(1)(b) or (c) (as the case may be) of the Act;2(3) on the coming into force of a requirement for all client money held by the firm; or(4) when the firm notifies, or is in breach of its duty to notify, the FCA, in accordance with
CASS 7.6.16 R
(Notification requirements), that it is unable correctly to identify
If a primary pooling event occurs:(1) 1all client money held in a client bank account or a client transaction account1 of the firm is treated as pooled (forming a notional pool) except for client money held in a client transaction account at an authorised central counterparty;3 or a clearing member which is, in either case, held as part of regulated clearing arrangement;3(2) the firm must distribute client money comprising the notional pool in accordance with CASS 7.7.2 R, so
When a bank fails and the firm decides not to make good the shortfall in the amount of client money held at that bank, a secondary pooling event will occur in accordance with CASS 7A.3.6 R. The firm would be expected to reflect the shortfall that arises at the failed bank in its records of the entitlement of clients and of money held with third parties.
Money held in each general client bank account and client transaction account of the firm must be treated as pooled and:(1) any shortfall in client money held, or which should have been held, in general client bank accounts and client transaction accounts, that has arisen as a result of the failure of the bank, must be borne by all the clients whose client money is held in either a general client bank account or client transaction account of the firm, rateably in accordance with
For each client with a designated client bank account held at the failed bank:(1) any shortfall in client money held, or which should have been held, in designated client bank accounts that has arisen as a result of the failure, must be borne by all the clients whose client money is held in a designated client bank account of the firm at the failed bank, rateably in accordance with their entitlements;(2) a new client money entitlement must be calculated for each of the relevant
Money held in each designated client fund account with the failedbank must be treated as pooled with any other designated client fund accountsof the firm which contain part of the same designated fund and:(1) any shortfall in client money held, or which should have been held, in designated client fund accounts that has arisen as a result of the failure, must be borne by each of the clients whose client money is held in that designated fund, rateably in accordance with their entitlements;(2)
A firm must make the following records on each of its appointed representatives:(1) the appointed representative's name;(2) a copy of the original contract with the appointed representative and any subsequent amendments to it (including details of any restrictions placed on the activities which the appointed representative may carry on);1(3) the date and reason for terminating or amending its contract with the appointed representative, whenever such termination or amendment gives
The firm should also satisfy itself that:(1) the appointed representative is making and retaining records in accordance with the relevant record keeping rules in the Handbook, if these records are not maintained by the firm;(2) the appointed representative (other than an introducer appointed representative) is making and retaining records sufficient to disclose with reasonable accuracy the financial position of the business it carries on in its capacity as the firm's appointed
Firms are reminded that they should make and retain records in relation to any person who falls within the scope of the rules in TC or who performs a controlled function under an arrangement entered into by a firm or by an appointed representative. See SUP 10 and TC for the applicable record keeping rules.
Schedule to the Recognition Requirements Regulations, paragraph 3
2(1) |
The [UK RIE] must ensure that the systems and controls used in the performance of its [relevant functions] are adequate, and appropriate for the scale and nature of its business. |
|
(2) |
Sub-paragraph (1) applies in particular to systems and controls concerning - |
|
(a) |
the transmission of information; |
|
(b) |
the assessment, mitigation and management of risks to the performance of the [UK RIE'srelevant functions]; |
|
(c) |
the effecting and monitoring of transactions on the [UK RIE]; |
|
(ca) |
the technical operation of the [UK RIE], including contingency arrangements for disruption to its facilities; |
|
(d) |
the operation of the arrangements mentioned in paragraph 4(2)(d); and |
|
(e) |
(where relevant) the safeguarding and administration of assets belonging to users of the [UK RIE's] facilities. |
|
In assessing a UK recognised body's systems and controls for the safeguarding and administration of assets belonging to users of its facilities, the FCA3 may have regard to the totality of the arrangements and processes by which the UK recognised body: 3(1) records the assets held and the identity of the owners of (and other persons with relevant rights over) those assets; (2) records any instructions given in relation to those assets;(3) records the carrying out of those instructions;(4)
Information technology is likely to be a major component of the systems and controls used by any UK recognised body. In assessing the adequacy of the information technology used by a UK recognised body to perform or support its relevant functions, the FCA3 may have regard to:3(1) the organisation, management and resources of the information technology department within the UK recognised body;(2) the arrangements for controlling and documenting the design, development, implementation
The FCA3 may also have regard to the arrangements for maintaining, recording and enforcing technical and operational standards and specifications for information technology systems, including:3(1) the procedures for the evaluation and selection of information technology systems;(2) the arrangements for testing information technology systems before live operations;(3) the procedures for problem management and system change;(4) the arrangements to monitor and report system performance,
A3firm to which SYSC 9 applies 3is required to keep orderly records of its business and internal organisation (see SYSC 9, General rules on record-keeping). Other firms are 3 required to take reasonable care to establish and maintain such systems and controls as are appropriate to their 3business (see SYSC 3, Systems and controls). The records may be expected to reflect the different effect of the rules in this chapter depending on whether the client is a retail client or a professional
A1firm must retain its records relating to suitability for a minimum of the following periods:(1) if relating to a pension transfer, pension opt-out or FSAVC, indefinitely;(2) if relating to a life policy,2personal pension scheme2or stakeholder pension scheme, five years;(3) if relating to MiFID or equivalent third country business, five years; and(4) in any other case, three years.
A primary information provider must record the following information for each announcement of regulated information it disseminates: (1) the name of any person who communicates regulated information on behalf of an issuer or other organisation to the primary information provider;(2) the name of the issuer or organisation on whose behalf the regulated information is communicated;(3) the security validation details of the issuer or organisation;(4) the date and time the regulated