Securities & Exchange Commission
Financial Industry Regulatory Authority
Commodity Futures Trading Commission
Key Focus: Off-Channel Communications
Regulators are scrutinizing business communications conducted via personal devices, text messages, and messaging apps outside of approved channels. Organizations are expected to retain, supervise, and produce records with a defensible audit trail.

Personal Devices & BYOD
Use of personal devices and BYOD programs for business communications.
Informal Messaging
Informal text messaging and chat apps used for business communications.
Ad Hoc Collection Methods
Manual or ad hoc collection methods lacking auditability.
Over-Collection Risk
Over-collection that increases privacy and data protection risk.
Inconsistent Preservation
Inconsistent preservation across business units and regions.