17 C.F.R. § 240.17a-4
This section applies to the following types of entities: A member of a national securities exchange who transacts a business in securities directly with others than members of a national securities exchange; a broker or dealer who transacts a business in securities through the medium of a member of a national securities exchange; a broker or dealer, including an OTC derivatives dealer as that term is defined in § 240.3b-12, registered pursuant to section 15 of the Act (15 U.S.C. 78o); a security-based swap dealer registered pursuant to section 15F of the Act (15 U.S.C. 78o-10) that is also a broker or dealer, including an OTC derivatives dealer, registered pursuant to section 15 of the Act; and a major security-based swap participant registered pursuant to section 15F of the Act that is also a broker or dealer, including an OTC derivatives dealer, registered pursuant to section 15 of the Act. Section 240.18a-6 (rather than this section) applies to the following types of entities: A security-based swap dealer registered pursuant to section 15F of the Act that is not also a broker or dealer, including an OTC derivatives dealer, registered pursuant to section 15 of the Act; and a major security-based swap participant registered pursuant to section 15F of the Act that is not also a broker or dealer, including an OTC derivatives dealer, registered pursuant to section 15 of the Act.
(b) Every member, broker or dealer subject to § 240.17a-3 must preserve for a period of not less than three years, the first two years in an easily accessible place:
(8) Records which contain the following information in support of amounts included in the report prepared as of the fiscal year end on Part II or IIA of Form X-17A-5 (§ 249.617 of this chapter), as applicable, and in the annual financial statements filed with the Commission required by § 240.17a-5(d), § 240.17a-12(b), or § 240.18a-7(c), as applicable:
(e) Every member, broker or dealer subject to § 240.17a-3 must maintain and preserve in an easily accessible place:
(12)
(14)
(f) Subject to the conditions set forth in this paragraph (f), the records required to be maintained and preserved pursuant to § 240.17a-3 and this section may be immediately produced or reproduced by means of an electronic recordkeeping system or by means of micrographic media and be maintained and preserved for the required time in that form.
(1) For purposes of this paragraph (f):
(2) An electronic recordkeeping system must:
(i)
(A) Preserve a record for the duration of its applicable retention period in a manner that maintains a complete time-stamped audit trail that includes:
(1) All modifications to and deletions of the record or any part thereof;
(2) The date and time of actions that create, modify, or delete the record;
(3) If applicable, the identity of the individual creating, modifying, or deleting the record; and
(4) Any other information needed to maintain an audit trail of the record in a way that maintains security, signatures, and data to ensure the authenticity and reliability of the record and will permit re-creation of the original record if it is modified or deleted; or
(v)
(3) A member, broker, or dealer using an electronic recordkeeping system must:
(iii) For a broker-dealer operating pursuant to paragraph (f)(2)(i)(B) of this section, the member, broker, or dealer must have in place an audit system providing for accountability regarding inputting of records required to be maintained and preserved pursuant to § 240.17a-3 and this section to the electronic recordkeeping system and inputting of any changes made to every original and duplicate record maintained and preserved thereby.
(v)
(A) Have at all times filed with the designated examining authority for the member, broker, or dealer the following undertakings with respect to such records signed by either a designated executive officer or designated third party (hereinafter, the “undersigned”):
The undersigned hereby undertakes to furnish promptly to the U.S. Securities and Exchange Commission (“Commission”), its designees or representatives, any self- regulatory organization of which [Name of the Member, Broker, or Dealer] is a member, or any State securities regulator having jurisdiction over [Name of the Member, Broker, or Dealer], upon reasonable request, such information as is deemed necessary by the staff of the Commission, any self-regulatory organization of which [Name of the Member, Broker, or Dealer] is a member, or any State securities regulator having jurisdiction over [Name of the Member, Broker, or Dealer], and to download copies of a record and its audit trail (if applicable) preserved by means of an electronic recordkeeping system of [Name of the Member, Broker, or Dealer] into both a human readable format and a reasonably usable electronic format in the event of a failure on the part of [Name of the Member, Broker, or Dealer] to download a requested record or its audit trail (if applicable). Furthermore, the undersigned hereby undertakes to take reasonable steps to provide access to the information preserved by means of an electronic recordkeeping system of [Name of the Member, Broker, or Dealer], including, as appropriate, downloading any record required to be maintained and preserved by [Name of the Member, Broker, or Dealer] pursuant to §§ 240.17a-3 and 240.17a-4 in a format acceptable to the staff of the Commission, any self-regulatory organization of which [Name of the Member, Broker, or Dealer] is a member, or any State securities regulator having jurisdiction over [Name of the Member, Broker, or Dealer]. Specifically, the undersigned will take reasonable steps to, in the event of a failure on the part of [Name of the Member, Broker, or Dealer] to download the record into a human readable format or a reasonably usable electronic format and after reasonable notice to [Name of the Member, Broker, or Dealer], download the record into a human readable format or a reasonably usable electronic format at the request of the staffs of the Commission, any self-regulatory organization of which [Name of the Member, Broker, or Dealer] is a member, or any State securities regulator having jurisdiction over [Name of the Member, Broker, or Dealer].
(B) A designated executive officer who signs the undertaking required pursuant to paragraph (f)(3)(v)(A) of this section may:
(1) Appoint in writing up to two designated officers who will take the steps necessary to fulfill the obligations of the designated executive officer set forth in the undertakings in the event the designated executive officer is unable to fulfill those obligations; and
(2) Appoint in writing up to three designated specialists.
(4) A broker-dealer using a micrographic media system must:
(iv) Organize and index accurately all information maintained on both original and duplicate storage media.
(i)
(1)
(i) If the records required to be maintained and preserved pursuant to the provisions of § 240.17a-3 and this section are prepared or maintained by an outside service bureau, depository, bank, or other recordkeeping service, including a recordkeeping service that owns and operates the servers or other storage devices on which the records are preserved or maintained, (none of which operate pursuant to § 240.17a-3(c)) on behalf of the member, broker, or dealer required to maintain and preserve such records, such outside entity must file with the Commission a written undertaking in a form acceptable to the Commission, signed by a duly authorized person, to the effect that such records are the property of the member, broker, or dealer required to maintain and preserve such records and will be surrendered promptly on request of the member, broker, or dealer and including the following provision:
With respect to any books and records maintained or preserved on behalf of [Name of the Member, Broker, or Dealer], the undersigned hereby undertakes to permit examination of such books and records at any time or from time to time during business hours by representatives or designees of the Securities and Exchange Commission and to promptly furnish to said Commission or its designee true, correct, complete and current hard copies of any or all or any part of such books and records.
(ii)
(A) If the records required to be maintained and preserved pursuant to the provisions of § 240.17a-3 and this section are maintained and preserved by means of an electronic recordkeeping system as defined in paragraph (f) of this section utilizing servers or other storage devices that are owned or operated by an outside entity (including an affiliate) and the broker, dealer, or member has independent access to the records as defined in paragraph (i)(1)(ii)(B) of this section, the outside entity may file with the Commission the following undertaking signed by a duly authorized person in lieu of the undertaking required under paragraph (i)(1)(i) of this section:
The undersigned hereby acknowledges that the records of [name of member, broker, or dealer] are the property of [name of member, broker, or dealer] and [name of member, broker, or dealer] has represented: one, that it is subject to rules of the Securities and Exchange Commission governing the maintenance and preservation of certain records, two, that it has independent access to the records maintained by [name of outside entity], and, three, that it consents to [name of outside entity] fulfilling the obligations set forth in this undertaking. The undersigned undertakes that [name of outside entity] will facilitate within its ability, and not impede or prevent, the examination, access, download, or transfer of the records by a representative or designee of the Securities and Exchange Commission as permitted under the law. Further, the undersigned undertakes to facilitate within its ability, and not impede or prevent, a trustee appointed under the Securities Investor Protection Act of 1970 to liquidate [name of member, broker, or dealer] in accessing, downloading, or transferring the records as permitted under the law.
(B) A broker, dealer, or member utilizing servers or other storage devices that are owned or operated by an outside entity has independent access to records with respect to such outside entity if it can regularly access the records without the need of any intervention of the outside entity and through such access:
(1) Permit examination of the records at any time or from time to time during business hours by representatives or designees of the Commission; and
(2) Promptly furnish to the Commission or its designee a true, correct, complete and current hard copy of any or all or any part of such records.
(k)
(m) When used in this section:
(5) The term business as such includes security-based swap activity.
Cross Reference: For interpretative releases applicable to § 240.17a-4, see No. 3040 and No. 8024 in tabulation, part 241 of this chapter.
Editorial Note:For Federal Register citations affecting § 240.17a-4, see the List of CFR Sections Affected, which appears in the Finding Aids section of the printed volume and at www.govinfo.gov.
[13 FR 8212, Dec. 22, 1948]