Prior to the financial crisis of the late 2000s, certain brokers had virtually uncontrolled access to markets. This allowed them to make massive high-speed trades, but it often went wrong. Sometimes the broker made the wrong trade. At times, the firm gave clients access to markets without sufficient controls, and they made critical errors.
The growth of electronic trading and sponsored access arrangements increased concerns about whether sufficient pre-trade controls were in place to manage financial and regulatory risks. In 2010, the SEC adopted Rule 15c3-5, requiring broker-dealers with market access to establish and maintain risk-management controls and supervisory procedures.
The goal of the rule is to reduce erroneous trades, mitigate systemic risk and strengthen supervisory controls overall. The rule covers firms that offer sponsored and direct market access.
Why the SEC Implemented the Market Access Rule
Although the trading markets and exchanges are never exactly stable, building some stability into the system is a key aim, for financial stability of the investors and the economies dependent on the markets. Before the Market Access Rule was put in place, broker-dealers could engage in high-frequency trading in moments, or even allow their clients unfettered, sponsored access.
Events such as the May 2010 Flash Crash reinforced industry concerns about automated trading risks and market access controls.
Examples of risks the rule seeks to address include:
- “Fat-finger” trades, where the broker made the wrong trade
- Errors related to faulty algorithms
- Credit limit breaches
The rule ensures that broker-dealers follow supervisory procedures even if the clients submit orders directly.
Who is Subject to Rule 15c3-5?
SEC Rule 15c3-5 relates to activities by certain broker-dealers. Specifically, broker-dealers who provide market access to customers or use proprietary trading systems must follow the rule. The rule includes platforms where investors have direct market access, as well as sponsored access arrangements where the client can submit orders through the broker.
Although it may seem like customers are personally subject to the rule, they are not. The SEC outlines specific protections for customers who may fall victim to faulty trades. For example, the SEC enforces Rule 15c3-3, known as the Customer Protection Rule. This rule requires firms to protect customer assets from the broker-dealer’s proprietary business activities, including when investors choose to use margin securities. Exchange Act Rule 15c3-1 obligates firms to keep a certain amount of liquid assets as net capital.
Core Requirements of SEC Rule 15c3-5
To meet SEC and regulatory compliance guidelines under Rule 15c3-5, broker-dealers must implement a set of controls that are “reasonably designed” and applied before trades take place. Firms must maintain controls reasonably designed to manage the financial and regulatory risks associated with market access.
- Financial Risk Management Controls: The firm must prevent orders that exceed pre-set credit limits or capital thresholds. Trades must also have managed exposure to market risk.
- Regulatory Risk Management Controls: The broker-dealer has to prevent orders that would violate SEC rules or the guidelines of the exchange. The firm must also maintain position limits and block restricted securities transactions.
- Supervisory Procedures: Broker-dealers are required to implement written supervisory procedures, have the CEO certify adherence to compliance processes and provide an independent review of controls.
Firms subject to the rule must utilize these controls for every trade.
Sponsored Access and Direct Market Access (DMA)
The main problem with unfiltered trades prior to the implementation of Rule 15c3-5 was the unrestricted access that many clients had. Broker-dealers are supposed to act on behalf of their clients, and too many of them let the clients take the wheel. This failure of responsibility showed up most often in sponsored access, where the customers made trades using the broker’s market participant ID. Improperly monitored investors were allowed to place orders without adequate controls, and many lost significant funds through risky trades.
By comparison, direct market access routed customer orders through the broker’s infrastructure. That meant the customer could have had some protection or not, depending on the risk controls implemented by the broker. Under Rule 15c3-5, broker-dealers must maintain direct and exclusive control over trades. Broker-dealers must maintain direct and exclusive control over applicable risk-management controls and supervisory procedures.
CEO Certification Requirement
Since Rule 15c3-5 is all about accountability, the SEC takes enforcement to the top of the firm. CEOs are required to certify annually that the firm's risk-management controls and supervisory procedures comply with Rule 15c3-5 requirements.
The CEO must make this certification once a year and keep the record of current and prior certifications. Here, the SEC identifies the importance of maintaining internal documentation of processes and reporting. Heightened personal accountability forces firms to accept individual responsibility for the success of the controls.
Enforcement Actions and Regulatory Risk
Failing to comply with the Market Access Rule can put broker-dealer firms at risk for penalties, such as fines, restrictions on operations or damage to their reputations. Given the reason for the SEC release of this rule, the SEC tends to take a dim view of firms that fail to prove compliance. This attitude falls in line with the trend of greater SEC scrutiny of investor protections.
Common violations of Rule 15c3-5 include:
- Inadequate or ineffective pre-trade checks
- Supervisory procedures that are weak or vague
- Risk parameters that are insufficient or improperly configured
FINRA and the SEC can enforce compliance and issue penalties for violations. Fines can be severe and repetitive for organizations that continue to flout the rule. For example, Morgan Stanley & Co. LLC received a $4 million SEC penalty for violation of the Market Access Rule in 2014, with another $1 million FINRA fine in 2023 for additional control violations.
How DFIN Supports Broker-Dealer Compliance
Compliance with Rule 15c3-5 is a critical part of regular broker-dealer operations. Firms should avoid the risk of hefty fines and increased SEC scrutiny for violations of this rule. Use of SEC reporting software makes a notable difference in compliance process improvements. With DFIN’s compliance solutions, firms can utilize:
- Secure compliance documentation workflows
- Risk disclosure reporting alignment
- Regulatory tracking infrastructure
- Audit-ready documentation systems
- Secure collaboration between compliance, legal and trading teams
DFIN is a compliance infrastructure partner that can help you document, manage and validate regulatory controls in a complex environment for capital markets. We can assist you in streamlining data collection and management, so you can ensure optimal compliance.
