Lead Opinion
Opinion for the Court filed by Circuit Judge ROGERS.
Dissenting opinion filed by Circuit Judge RANDOLPH.
KPMG, LLP (formerly KPMG Peat Markwick, LLP) challenges a cease-and-desist order entered by the Securities and Exchange Commission, pursuant to Section 21C(a) of the Securities Exchange Act (“Exchange Act”), 15 U.S.C. § 78u-3(a), on the basis of several violations of the securities laws and regulations. KPMG principally contends that the Commission lacks authority to turn the ancillary authority provided by Section 21C into an independent basis to sanction accountants, failed to give fair notice of its novel interpretation of Rule 302 of the Code of Professional Conduct of the American Institute of Certified Public Accountants (“AICPA”), and adopted an improper presumption in concluding there was a sufficient risk of future violations warranting a cease-and-desist remedy. KPMG also contends that the cease-and-desist order is overbroad and vague. We hold that although KPMG did not have fair notice of the Commission’s interpretation of AICPA Rule 302, the Commission properly could use a negligence standard to enforce violations of the Exchange Act and Commission rules under Section 21C. We also hold that several contentions are waived, not having been raised before the Commission. We further hold that, although the Commission’s explanation on reconsideration of the basis for its conclusion that there was a risk of future harm might leave ambiguous whether simply one or more than one of the violations would be sufficient to meet its standard for entry of a cease-and-desist order, there is no ambiguity here that the Commission on remand would reach the same result. Accordingly, we deny the petition for review.
I.
The Commission issued the cease-and-desist order following an evidentiary hearing that commenced, based on allegations by the Division of Enforcement and the Office of the Chief Accountant (together, “the Division”), with the issuance on December 4, 1997, of an order instituting a proceeding (“OIP”) under Commission Rule of Practice 102(e) and Section 21C of the Exchange Act. The evidentiary hearing was to determine if KPMG had engaged in improper professional conduct violated Rule 2-02 of Regulation S-X and caused violations of Section 13(a) of the Act and Rule 13a-l thereunder, and if so, what remedial actions or sanctions would be appropriate. The evidence at the hearing revealed the following:
In January 1995, as part of an effort to start a separate entity that would provide financial and business consulting services to clients, KPMG (then known as KPMG Peat Marwick) entered into a license agreement with KPMG BayMark, LLC (“BayMark”), and BayMark subsidiaries known as KPMG BayMark Strategies (“Strategies”), and KPMG BayMark Capital. Under its license agreement, KPMG agreed to lend $100,000 to each of the four founding principals to be used by them as equity contributions to BayMark and its
Glenn Perry, a senior partner in KPMG’s Department of Professional Practice (“DPP”) had previously met with Commission staff from the Office of the Chief Accountant (“OCA”) to discuss independence issues surrounding the BayMark arrangement, and when OCA became aware that KPMG was moving forward with the plan, OCA staff asked KPMG for additional information. On October 19, 1995, Perry and a KPMG senior manager named Chris Trattou met with OCA staff. The meeting concluded with OCA staff cautioning KPMG against having BayMark provide services to any of the audit clients of KPMG. Notwithstanding this warning, on November 3, 1995, Strategies entered into an agreement, with PORTA — a longstanding KPMG audit client facing financial difficulties — to provide “turnaround services” and assist it with financing. Leonard Sturm, KPMG’s engagement partner for PORTA’s 1994 audit, had introduced PORTA to BayMark. Under the agreement between PORTA and Strategies, one of BayMark’s founding principals, Edward Olson, would be Chief Operating Officer of PORTA and Strategies would receive a management fee of $250,000 and a “success fee” based on a percentage of PORTA’s earnings, disposed inventory, and restructured debt. On November 9, 1995, PORTA’s Board of Directors elected Olson president and Chief Operating Officer of the company.
Sturm became aware that PORTA-was engaging BayMark and contacted the DPP to determine whether it was okay for Bay-Mark to provide services to an audit client. Trattou indicated that it was okay and that the Commission had no objection to it. Once Sturm learned that Olson was an officer of PORTA, he inquired again as to whether there were any independence concerns with the audit. Trattou discussed the matter with Michael Conway, the partner in charge of the DPP; they disagreed as to the propriety of the arrangement, with Conway (and Perry) expressing concern.
After several meetings in December 1995 between Conway and Perry and OCA staff, OCA staff indicated that in order to resolve its independence concerns, KPMG would need to drop the KPMG initials from the BayMark parties’ names, eliminate the royalty fee arrangement, and bring about the repayment of the $400,000 in loans made to the BayMark principals. Conway agreed to undertake negotiations with BayMark to make these changes. Although Conway alerted OCA staff to the existence of six dual engagements where KPMG was the auditor of record and Bay-Mark had contracts with those clients, Conway did not inform OCA staff of the detañed entanglements involved with PORTA, i.e., the outstanding loan to Olson, Olson’s status as an officer of PORTA and a principal of BayMark, and the success fee arrangement.
The evidence also showed that sometime before December 27, 1995, Trattou called Sturm with an answer to Sturm’s earlier independence inquiries. Trattou indicated that the Commission was aware of the PORTA situation and that the KPMG audit of PORTA could proceed. ■ On December 27, 1995, PORTA signed KPMG’s engagement letter to conduct its 1995 audit. When OCA staff discovered the PORTA audit, it informed Conway that KPMG was not independent from PORTA because none of the structural changes to the Bay-Mark strategic alliance had been implemented- and a loan was outstanding to Olson who was part of PORTA’s manage
In light of this evidence, an administrative law judge (“ALJ”) found that under Generally Accepted Auditing Standards (“GAAS”), KPMG lacked independence from PORTA by virtue of its loan to Olson and that as a result, KPMG engaged in and caused violations charged in the OIP but did not engage in improper professional conduct under Rule 102(e) because KPMG did not act recklessly. See Matter of KPMG Peat Marwick L.L.P., 71 S.E.C. Dkt. 1220,
The Commission conducted “an independent review of the record.” Order at 3. It concluded, on the basis of KPMG’s debt- or/creditor relationship with Olson and its right to share in Strategies’ “success” fee, that KPMG’s independence was impaired under GAAS. Noting that KPMG admitted that the loan to Olson impaired its independence under GAAS, the Commission characterized the violation as a “serious” mistake that arose from KPMG’s failure to exercise ordinary care to maintain its independence. Further, the Commission interpreted AICPA Rule 302 to “flatly prohibit[] an auditor from ‘perfor[ming] for a contingent fee any professional services for, or receiving] such a fee’ from a client,” and found that KPMG violated Rule 302 by receiving such a fee. The Commission concluded that “these relationships, whether considered individually or collectively, impaired [KPMG’s] independence.” Order at 32. Because of these impairments, the Commission concluded that KPMG violated Rule 2 — 02(b)(1) of Regulation S-X, 17 C.F.R. § 210.2-02(b)(1), which requires that the accountant’s report “state whether the audit was made in accordance with generally accepted auditing standards.” In addition, the Commission concluded that PORTA violated Section 13(a) of the Exchange Act, 15 U.S.C. § 78m(a), and Rule 13a-l, 17 C.F.R. § 240.13a-l, which requires issuers to file reports certified by independent public accountants. The Commission repeated that each of the two impairments (the debtor/creditor relationship and the contingency fee arrangement) “considered on its own, compromised [KPMG’s] independence and each is sufficient, on its own, to support our finding of violations of Section 13(a) and Rule 13a-l,” Order at 36, and “[similarly, each impairment is sufficient, standing alone, to compromise independence under GAAS and to support our
Turning to the question of the appropriate sanctions for the violations, the Commission concluded that under Section 21C it could issue a cease-and-desist order for negligent conduct that causes a primary violation of the securities laws and regulations, and that KPMG had acted negligently in determining that it was independent from PORTA. As a result, the Commission issued a cease-and-desist order to KPMG because it acted negligently, which resulted in its primary violation of Rule 2-02(b) of Regulation S-X, and in its being a cause of PORTA’s violations of Section 13(a) of the Exchange Act, 15 U.S.C. § 78m(a), and Rule 13a-l, 17 C.F.R. § 240.13a-l. The Commission denied KPMG’s motion for reconsideration and KPMG appealed to the court.
In Part II, we address KPMG’s challenges to the determinations underlying the Commission’s decision to issue a cease- and-desist order. In Part III, we address KPMG’s challenges to the cease-and-desist order.
II.
KPMG contends that it lacked fair notice in two respects. First, it contends it lacked fair notice of the Commission’s interpretation of AICPA Rule 302 prohibiting the receipt of contingent fees. Second, it contends that it lacked fair notice that it could be sanctioned based on the conduct of Leonard Sturm. KPMG also contends that negligence is an impermissible basis for a cease-and-desist order against accountants who cause a violation of securities laws or regulations. KPMG further contends that it was improper to impose a cease-and-desist order on it for causing a violation of Section 13(a) of the Exchange Act in the absence of such an order against the primary violator, PORTA, and that it cannot be sanctioned as a primary violator of the securities laws under Rule 2-02(b) of Regulation S-X because that provision imposes enforceable duties only on registrants, not accountants.
A.
AICPA Rule 302 provides, in relevant part:
Rule 302 — Contingent fees. A member in public practice shall not
(1) Perform for a contingent fee any professional services for, or receive such a fee from a client for whom the member or the member’s firm performs,
(a) an audit or review of a financial statement;
The prohibition in (1) above applies during the period in which the member or the member’s firm is engaged to perform any of the services listed above and the period covered by any historical financial statements involved in any such listed services.
Except as stated in the next sentence, a contingent fee is a fee established for the performance of any service pursuant to an arrangement in which no fee will be charged unless a specified finding or result is attained, or in which the amount of the fee is otherwise dependent upon the finding or result of such service.
American Institute of Certified Public Accountants (“AICPA”) Code of Professional Conduct Rule 302. The Commission found that KPMG’s “success” fee arrangement with BayMark put it in a position to receive contingent fees in violation of the rule. See Order at 30. This determination that the conglomeration of fee arrangements at issue somehow constituted, in their totality, a contingent fee arrangement in favor of KPMG runs afoul of any
Amicus AICPA points out that the Commission has recognized that AICPA’s interpretation of its rules is generally authoritative, see Opinion at 26 & n.67, and yet disregarded AICPA’s interpretation and applied Rule 302 incorrectly. AICPA states that as defined, the term “contingency fee” does not reach either the “success” fee PORTA paid BayMark or the royalty arrangement between BayMark and KPMG, standing alone. This is because BayMark was not an accounting firm, and thus not a “member in public practice,” and because the royalty Bay-Mark was committed to pay KPMG was not linked to the attainment of any “specified finding or result” and its amount was not “dependent upon the finding or result” of any professional or other service. By lumping the two separate compensation arrangements together, neither of which violates AICPA Rule 302, amicus concludes that the Commission “morph[s] the Rule into something entirely different than [AICPA] intended to promulgate.” Ami-cus Brief at 5.
The plain language of Rule 302 does not forbid, as amicus puts it, “ ‘sets of relationships’ but rather the performance of services for, or the receipt of, fees the existence or amount of which are contingent on particular ‘findings’ or ‘results’ of those services — in this case, the audit — not simply on the ‘financial success of an audit client.’ ” Id. at 5-6. In other words, the rule on its face does not cover all services provided to PORTA, only professional services. Or at least that is the way Rule 302 was understood prior to the Commission’s order in the instant case, according to the testimony of two expert witnesses presented by KPMG. The Commission declined to find that KPMG controlled BayMark. KPMG, then, received only a flat fee from PORTA and did not “perform any professional services” for BayMark; rather, the supposed contingent fee here was not received from a client but was a royalty fee to be paid by a nonclient, BayMark. The Commission does not suggest in its brief to the court that the Commission has previously interpreted AICPA Rule 302 in a manner that would reach BayMark’s “success” fee or KPMG’s royalty fee. Indeed, its own accounting expert did not testify that Rule 302 was to be read the way the Commission did. Nor is there anything to suggest that Congress intended the Commission to fill in gaps left by AICPA; it would be another thing if the Commission had its own rule on contingent fees, but all it has is its general requirement that accountants be independent.
Even assuming that the text of AICPA Rule 302 is reasonably susceptible to the Commission’s interpretation, as prohibiting KPMG from receiving an income stream while it was auditing PORTA’s financial statements that was dependent in part on the size of PORTA’s earnings, because that interpretation is novel and involves a strained reading of the rule, KPMG cannot be said to have had fair notice that the “success” fee/royalty arrangement would be deemed a prohibited contingent fee under AICPA Rule 302. Cf. Checkosky v. SEC,
B.
Regarding Leonard Sturm, KPMG also contends that it lacked fair notice it could be sanctioned based on his conduct. Specifically, KPMG contends that because Commission staff never challenged the propriety of Sturm’s conduct throughout the administrative proceedings, for the Commission to predicate its cease-and-desist order in part on Sturm’s conduct violated administrative due process and KPMG’s right to fair notice. Amicus AIC-PA protests the Commission’s conclusion that Sturm was negligent simply for relying on the DPP’s opinion and proceeding with the PORTA audit. The Commission maintains, however, that because KPMG failed to raise this issue before the Commission it is not properly before the court.
Section 25(c)(1) of the Exchange Act provides that “[n]o objection to an order or rule of the Commission, for which review is sought under this section, may be considered by the court unless it was urged before the Commission or there was reasonable ground for failure to do so.” 15 U.S.C. § 78y(c)(l). The purpose of Section 25(c)(1) is to “assur[e] that the Commission have had a chance to address claims before being challenged on them in court.” Blount v. SEC,
It is clear that the negligence finding based on Sturm’s conduct as audit partner is erroneous given the way the case was tried. The OCA did not challenge Sturm’s conduct, and commented that Sturm was a “careful guy” who had been “kept in the dark.” The ALJ concluded that Sturm had acted in good faith and believed that OCA staff “would not object to finishing the engagements underway.” Matter of KPMG, 71 S.E.C. Dkt. 1220,
In its original opinion the Commission stated that each of the violations it found independently justified its cease- and-desist order. See Order at 54. Given this, and the fact that the Commission found Conway, the head of DPP, to be negligent as well, it might have been “clearly useless” for KPMG to object to a sanction for Sturm’s conduct. See Randolph-Sheppard Vendors of Am. v. Weinberger,
C.
KPMG also challenges the propriety of a negligence standard under Section 21C. In contesting the Commission’s position that this issue is not properly before the court because it was not raised “at any point in these proceedings,” Respondent’s Br. at 35, KPMG responds that because the Commission has previously disclaimed authority to regulate accountants other than pursuant to Rule 102(e) (and its predecessors), and the prosecution proceeded on that basis, its challenge to a negligence standard for Rule 102(e) is properly understood as a challenge to a negligence standard however the Commission might seek to regulate accountants. That may be somewhat of a stretch. But, in its brief before the Commission, KPMG argued that the Division was seeking to impose strict liability under Rule 21C for independence violations and that such constituted “an unwarranted de facto expansion of the Division’s pbwers to sanction professionals.” KPMG noted that under this approach, Rule 102(e) — at issue in Checkosky v. SEC,
Second, the premise of KPMG’s view that the Commission’s invocation of Section 21C is no more than a way to circumvent the scienter requirement of Rule 102(e) is flawed. There is no support for the position that the culpability standards governing Rule 102(e) proceedings can be applied with equal force in Section 21C proceedings. The nature of the two proceedings is different. As the Commission points out, “one is a professional disciplinary proceeding designed to protect the integrity of the Commission’s process while the other is a law enforcement proceeding,” each involving “fundamentally different remedies-” Respondent’s Br. at 46. See Checkosky,
Third, the Commission found that KPMG violated the independence requirement of Rule 2-02(b)(l) of Regulation S-X. See Order at 36. KPMG acknowledges that the Commission has used the independence requirement as a “baseline for assessing the propriety of an accountant’s conduct under its rules of practice.” Petitioner’s Br. at 26. In other words, the Commission has interpreted the independence requirements of Regulation S-X to apply to accountants. The very cases KPMG cites include Matter of Alan S. Goldstein, et al. 57 S.E.C. Dkt. 1419 & 1421,
Moreover, the Commission was virtually compelled by Congress’ choice of language in enacting Section 21C to interpret the phrase “an act or omission the person knew or should have known would contribute to such violation” as setting a negligence standard. See Order at 38. KPMG contends that the court should give no deference to the Commission’s interpretation of Section 21C as regulating accounting negligence as it is an unexplained and unsupportable usurpation of authority. Yet the plain language of Section 21C invokes, as the Commission stated, “classic negligence language.” Order at 38 (citing Davis v. Monroe County Bd. of Educ.,
D.
KPMG further contends that it was improper to impose a cease-and-desist order on it for causing a violation of Section 13(a) in the absence of such an order against the primary violator, PORTA, and that it cannot be sanctioned as a primary violator of the securities laws under Rule 2-02(b) of Regulation S-X because that provision imposes enforceable duties only on registrants, not accountants. Review of the record before the court reveals that KPMG failed to press these objections before the Commission. Consequently, the court lacks jurisdiction to address them.
The record does not show that any of KPMG’s legal briefs before the ALJ or the Commission addressed or mentioned the issue of the Commission’s authority to issue a cease-and-desist order against causing or secondary violators without sanctioning primary violators. The Commission’s brief to this court makes this point, and KPMG did not contest the point in its reply brief. Because the Commission has not had an opportunity to address KPMG’s primary violator contention, it is not properly before the court.
The record further indicates that KPMG effectively abandoned any contention that Regulation S-X does not apply directly to accountants. KPMG mentioned the argument in its post-trial legal brief to the ALJ when it stated, “In any event, Regulation S-X was promulgated to effectuate the registration requirements of Section 13(a), 15 U.S.C. § 78m(a), which, by its terms, applies to issuers of securities, not their auditors.” KPMG made no attempt to elaborate on this comment and made no other mention of this point elsewhere in the proceedings. An argument cannot be merely intimated or hinted at to be raised; it must be “pressed” to be preserved. Hays v. Sony Corp.,
m.
KPMG challenges the cease-and-desist order as improper on a variety of grounds, only one of which we conclude has apparent merit. KPMG makes much of the fact that Congress referred to the cease-and-desist authority of other agencies, see S.Rep. No. 101-337, at 19; H.R.Rep. No. 101-616, at 23, in contending that Section 21C gave the Commission no new authority to regulate professional conduct. But KPMG cites no authority that other agencies had declined to issue cease-and-desist orders as part of their enforcement powers against a person who, although a professional, had been found to violate the relevant laws either directly or by causing another to violate the laws. In fact, the converse is true. See, e.g., Matter of Phillip C. Zarcone, CFTC Dkt. No. 93-18,
The Commission’s cease-and-desist order required that KPMG cease and desist from committing present or future violations of Rule 2-02(b) of Regulation SX, or being the cause of any present or future violation of Section 13(a) of the Exchange Act or Rule 13a-l thereunder due to an act or omission that KPMG knows or should know will contribute to such violation, by having any transactions, interests or relationships that'would impair its independence under Rule 2-01 of Regulation S-X or under GAAS. In addressing KPMG’s challenges to the order, our review of the Commission’s choice of a sanction is limited by both the Administrative Procedure Act (“APA”), 5 U.S.C. § 706(2)(A) (2000), and Supreme Court precedent. See Wonsover v. SEC,
KPMG contends that the cease- and-desist order is overbroad because it bears no reasonable relation to the violations found. KPMG also contends that the order is unduly vague because by prohibiting all relationships that violate GAAS, the order incorporates broad, open-ended standards that require interpretation and exposes KPMG to the possibility of punishment for making good-faith but incorrect judgments about compliance. Neither contention is persuasive..
Section 21C authorizes the entry of a cease-and-desist order to prohibit “any future violation of the same provision” found to have been violated in the instant case. 15 U.S.C. § 78u-3 (emphasis added). The provisions at issue are Rule 2 — 02(b) of Regulation S-X, Section 13(a) of the Exchange Act, and Rule 13a-l promulgated thereunder.- There is, consequently, no “sweeping order to obey the law” as KPMG contends, because the terms of the order are limited to these provisions. Further, the Commission stated.that the order “extends only to violative acts ‘the threat of which in the future is indicated because of their similarity or relation to those [past] unlawful acts.’ ” Order at 47 n. 121. The order thus extends only to a subset of the violations comprehended by the rules and statutory provisions involved, namely those that are independence related. By concluding that the seriousness of KPMG’s misconduct, combined with the flaws in its mode of assessing independence, created a serious risk of future independence-impairing relationships beyond the two circumstances at issue, see Order at 54, the Commission justified an order aimed at preventing violations flowing from a broader array of independence impairments than the precise ones found. In so doing, it cannot be said that the order has “no reasonable relation to the unlawful practices found to exist.” FTC v. Colgate-Palmolive Co.,
Neither is there any requirement on the part' of the Commission to tailor its order more narrowly to specific types of violations of the provisions involved. The “any future violation” language in Section 21C makes this clear and the “reasonable relationship” requirement does not impose such a limit. As the Supreme Court observed in FTC v. Ruberoid Co.
Consequently, the record belies KPMG’s contentions that the order bears no reasonable relation to the violations found and was entered without regard to the nature of the infraction or the good-faith of the accountant involved. The judgment underlying the Commission’s decision that the independence violations were of an order of seriousness that KPMG failed to appreciate is the type of agency expertise to which courts defer. See Svalberg v. SEC,
KPMG’s challenge to the cease- and-desist order on vagueness grounds is similarly without merit. KPMG contends that because GAAS standards are “vague and open-ended” the Commission could not properly enjoin compliance with broad prohibitions that require subjective interpretation and complex judgments over which reasonable professionals may disagree. This court has observed, in light of the severity of monetary penalties under antitrust laws, that cease-and-desist orders should be “sufficiently clear and precise to avoid raising serious questions as to their meaning and application.” Joseph A. Kaplan,
Section 21C allows for the order to enjoin the “causing [of] such violation and any future violation of the same provision, rule, or regulation.” That is all the order did; it ordered KPMG to “cease and desist from committing any violation or future violation of Rule 2-02(b) of Regulation SX, or from being a cause of any violation or future violation of Section 13(a) of the Securities Exchange Act of 1934 or Rule 13a-l thereunder.” The order merely tracks the statutory language and inserts the relevant provisions. Further, although GAAS may be a complex scheme and reasonable professionals may differ as to its application to discrete sets of facts, it is not a set of indefinite and open-ended standards subject to the whims of the Commission. Rather, as with most provisions of the law, there are broad areas of clarity and instances closer to the line where there will be some doubt. See generally Checkosky,
B.
More problematic, however, is KPMG’s contention that in entering the cease-and-desist order, the Commission created an improper presumption that a past violation is sufficient evidence of “some risk” of future violation, and applied it in an arbitrary and capricious manner whereby it is, “in essence, irrebutable,” ignoring KPMG’s evidence of serious remediation and the ALJ’s finding there was no future threat of harm. In seeking reconsideration by the Commission, KPMG argued that the Commission had failed to comply with the standard that it had established for issuance of a cease- and-desist order — namely some likelihood of future violation based on proof of some continuing or threatened conduct by KPMG creating an increased likelihood of future violations — and that there was no such evidence. The plain language of Section 21C, as well as the legislative history, see S.Rep. No. 101-337, at 18; H.R.Rep. No. 101-616, at 24, undermine KPMG’s contention that the Commission erred in proceeding on the basis of a lower risk of future violation than is required for an injunction. However, the precise manner in which the standard is met is unclear from the Commission’s analysis on reconsideration.
In its original opinion, the Commission acknowledged that:
in imposing sanctions, we traditionally have balanced a variety of mitigating and aggravating circumstances, such as the harm caused by the violations, the seriousness of the violations, the extent of the wrongdoer’s unjust enrichment, and the wrongdoer’s disciplinary record. The questions this case poses are whether, as a matter of either statutory command or in the exercise of our broad discretion, we will require some showing of likelihood of future violations before issuing a cease-and-desist order, and how that showing may be made.
Order at 46. The Commission had stated that a single violation sufficed to show the necessary likelihood. See id. at 54. On reconsideration, the Commission explained that, consistent with the history leading up to the enactment of Section 21C, it had applied a standard for showing a risk of future violations that was significantly less than that required for an injunction. See Reconsideration Order at 10. To the Commission, “although ‘some risk’ of future violations is necessary, it need not be very great to warrant issuing a cease-and-desist order and that in the ordinary case and absent evidence to the contrary, a finding of past violation raises a sufficient risk of future violation.” Id. Disclaiming that issuance of a cease-and-desist order is “automatic” on a finding of past violation, the Commission stated that “[a]long with the risk of future violations, we will contin
The Commission proceeded to reject KPMG’s argument that the violative conduct was isolated, inadvertent, and unconnected to any ongoing conduct or engagement. Rather, the Commission explained, that although “the isolated nature of the violations tended to counsel against relief. ... we did not, and do not, consider the lack of care at senior levels that attended the independence determinations in this case to have been merely inadvertent or to be ‘unconnected’ to any ongoing conduct or engagement.” Id. at 11. The risk of future violations arises here, the Commission explained, “from the manifestly inadequate level of scrutiny given to independence issues and [KPMG’s] consistent failure to recognize the seriousness of this misconduct.” Id. The Commission then noted that the loan to Olson, an officer of a registrant, was, in the words of a witness, “an absolute blatant out-and-out violation” of GAAS. Id. More specifically, the Commission stated:
We found that this impairment, as well as the impairment flowing from [KPMG’s] right to receive a fee contingent on the registrant’s success [in violation of AICPA Rule 802], resulted in serious violations and that [KPMG] failed to appreciate that seriousness. We also determined that the violations flowed from the negligent failures of the head of [KPMG]’s DPP [Conway] and the audit partner [Sturm] to inform themselves about facts material to specific issues about independence attending [KPMG]’s audit engagement — when both had questions or concerns about the propriety of the audit and had ready access to relevant information. These findings, as well as others detailed in our opinion, are based on the record as a whole and are more than adequate to support our conclusion that there was not just ‘some’ risk but a ‘serious’ risk of future violation, which, together with the traditional sanctioning factors we considered, fully warranted the cease-and-desist relief we issued. (Emphasis added)
Id. at 11.
The Commission’s statement on reconsideration suggests that it may no longer consider, as it initially made clear, see Order at 54, that any one of its findings of a violation, standing alone, would suffice under its standard to enter a cease-and-desist order. At oral argument counsel for the Commission argued that the language in the Reconsideration Order is insufficiently precise to suggest that the Commission had changed its mind. In truth, the Reconsideration Order leaves this unclear. Nevertheless, in light of the Commission’s having found several serious violations — all but one of which we affirm — we conclude that a remand is unnecessary. See McNulty & Co. v. Sec’y of Labor,
The Commission stated in its original order that either the outstanding loan or the “success” fee/royalty arrangement, standing alone, compromised KPMG’s independence and that “each of the violations we have found today independently calls for cease-and-desist relief.” Order at 54. On reconsideration, the Commission continued to find multiple violations of sufficient seriousness to warrant cease-and-desist relief under either a “some-risk-of-future-violation” standard or a “serious-risk-of-future-violation” standard. Reconsideration Order at 11. Removing the Commission’s erroneous finding that KPMG violated AICPA Rule 302 still leaves what was characterized as “an absolute blatant out-and-out violation” of GAAS in the form of the loan to Olson. Order at
IY.
Accordingly, because KPMG lacked fair notice of the Commission’s interpretation of AICPA Rule 302, we reverse the Commission’s finding that the “success” fee/royalty arrangement violated that rule. As to KPMG’s contention that it also lacked fair notice it could be sanctioned on the basis of Sturm’s conduct, we conclude, in view of our disposition and the Commission’s position on appeal, that we need not decide whether KPMG’s failure to challenge the Commission’s finding as to Sturm falls within the safety valve of Section 25(c)(1). We affirm the Commission’s determination that negligence is an appropriate basis for violations underlying a Section 21C cease-and-desist order, and reject KPMG’s contentions that the order is overbroad and vague. Because not raised before the Commission, we do not address KPMG’s challenges to the Commission’s determinations that it may impose sanctions under Section 21C on secondary violators without also sanctioning primary violators, and that Regulation S-X may apply directly to accountants. Finally, we conclude that a remand to allow the Commission to clarify whether simply one or a combination of two or more of the violations it found suffice to meet its standard for finding a risk of future violation to enter a cease-and-desist order is unwarranted in light of the Commission’s alternative findings of violations in its original order. We therefore deny KPMG’s petition for review.
Dissenting Opinion
dissenting:
I believe the SEC’s cease and desist order should be vacated and remanded to the agency.'
In its first opinion, the SEC nodded in favor of the need to find some risk of future misconduct as a precondition to a cease and desist order. But it then turned around and held that “[a]bsent evidence to the contrary, a finding of violation raises a sufficient risk of future violation.” KPMG challenged this conclusion, and on reconsideration the SEC expressly disclaimed any notion that a cease and desist order is “automatic” after a violation of the securities laws. The SEC said it will continue to consider “our traditional factors” before imposing a cease and desist order, which, according to the SEC’s first opinion, appear to be “the harm caused by the violations” (here none), “the seriousness of the violations,” “the extent of the wrongdoer’s unjust enrichment” (here none), and “the wrongdoer’s disciplinary record” (as acknowledged at oral argument, meager at best). In its opinion on reconsideration, the SEC wrote that its “findings” — (1) the loan to Olson; (2) the contingent fee arrangement; (3) KPMG’s lack of remorse;
The SEC’s contingent fee finding was clearly erroneous. On its face, AICPA’s Rule 302 covers not all services provided to Porta Systems, but only professional services. Rules of Professional Conduct § 302 (American Inst, of Certified Pub. Accountants 2001). The SEC’s interpretation of the rule receives no deference because we have no hint that Congress intended the SEC to fill in gaps left by AICPA. It would be another thing entirely if the SEC had its own rule on contingent fees, but all the agency has is its general requirement that accountants be independent. See 17 C.F.R. § 210.2-01.
It is also clear that the SEC’s negligence finding based on Sturm’s conduct is erroneous given the way the case was tried. There was no charge of wrongdoing regarding Sturm. At trial before the Administrative Law Judge, the SEC enforcement staff called Sturm “a careful guy” who was “kept in the dark.” As to KPMG’s failure to bring this objection to the SEC, we do not require that a party raise arguments when it would be futile to do so. See, e.g., Omnipoint Corp. v. FCC,
The reconsideration order criticizes KPMG for its “consistent failure to recognize the seriousness” of its violations. True, KPMG mounted a vigorous defense to the SEC’s ease, but those charged with misconduct have a right to defend themselves. Also, it is arbitrary for the SEC to fault KPMG for not recognizing the seriousness of Sturm’s so-called misconduct when the SEC enforcement staff praised his behavior.
In light of the SEC’s errors in finding a contingent fee arrangement and in finding Sturm negligent, the cease and desist order cannot be sustained. We should have vacated the order and sent the case back so the SEC could decide whether it still wants to issue the order without these legs of the table.
I would therefore not reach any of the other issues in the case.
