Title 17
SECTION 37.205
37.205 Audit trail.
§ 37.205 Audit trail. Link to an amendment published at 86 FR 9247, Feb. 11, 2021.A swap execution facility shall establish procedures to capture and retain information that may be used in establishing whether rule violations have occurred.
(a) Audit trail required. A swap execution facility shall capture and retain all audit trail data necessary to detect, investigate, and prevent customer and market abuses. Such data shall be sufficient to reconstruct all indications of interest, requests for quotes, orders, and trades within a reasonable period of time and to provide evidence of any violations of the rules of the swap execution facility. An acceptable audit trail shall also permit the swap execution facility to track a customer order from the time of receipt through fill, allocation, or other disposition, and shall include both order and trade data.
(b) Elements of an acceptable audit trail program - (1) Original source documents. A swap execution facility's audit trail shall include original source documents. Original source documents include unalterable, sequentially-identified records on which trade execution information is originally recorded, whether recorded manually or electronically. Records for customer orders (whether filled, unfilled, or cancelled, each of which shall be retained or electronically captured) shall reflect the terms of the order, an account identifier that relates back to the account(s) owner(s), the time of order entry, and the time of trade execution. Swap execution facilities shall require that all orders, indications of interest, and requests for quotes be immediately captured in the audit trail.
(2) Transaction history database. A swap execution facility's audit trail program shall include an electronic transaction history database. An adequate transaction history database includes a history of all indications of interest, requests for quotes, orders, and trades entered into a swap execution facility's trading system or platform, including all order modifications and cancellations. An adequate transaction history database also includes:
(i) All data that are input into the trade entry or matching system for the transaction to match and clear;
(ii) The customer type indicator code;
(iii) Timing and sequencing data adequate to reconstruct trading; and
(iv) Identification of each account to which fills are allocated.
(3) Electronic analysis capability. A swap execution facility's audit trail program shall include electronic analysis capability with respect to all audit trail data in the transaction history database. Such electronic analysis capability shall ensure that the swap execution facility has the ability to reconstruct indications of interest, requests for quotes, orders, and trades, and identify possible trading violations with respect to both customer and market abuse.
(4) Safe storage capability. A swap execution facility's audit trail program shall include the capability to safely store all audit trail data retained in its transaction history database. Such safe storage capability shall include the capability to store all data in the database in a manner that protects it from unauthorized alteration, as well as from accidental erasure or other loss. Data shall be retained in accordance with the recordkeeping requirements of Core Principle 10 for swap execution facilities and the associated regulations in subpart K of this part.
(c) Enforcement of audit trail requirements - (1) Annual audit trail and recordkeeping reviews. A swap execution facility shall enforce its audit trail and recordkeeping requirements through at least annual reviews of all members and persons and firms subject to the swap execution facility's recordkeeping rules to verify their compliance with the swap execution facility's audit trail and recordkeeping requirements. Such reviews shall include, but are not limited to, reviews of randomly selected samples of front-end audit trail data for order routing systems; a review of the process by which user identifications are assigned and user identification records are maintained; a review of usage patterns associated with user identifications to monitor for violations of user identification rules; and reviews of account numbers and customer type indicator codes in trade records to test for accuracy and improper use.
(2) Enforcement program required. A swap execution facility shall establish a program for effective enforcement of its audit trail and recordkeeping requirements. An effective program shall identify members and persons and firms subject to the swap execution facility's recordkeeping rules that have failed to maintain high levels of compliance with such requirements, and impose meaningful sanctions when deficiencies are found. Sanctions shall be sufficient to deter recidivist behavior. No more than one warning letter shall be issued to the same person or entity found to have committed the same violation of audit trail or recordkeeping requirements within a rolling twelve month period.