Securities Regulation: Opportunities Exist to Improve SEC's Oversight of the Financial Industry Regulatory Authority

What GAO Found

Historically, the Securities and Exchange Commission’s (SEC) oversight of the Financial Industry Regulatory Authority’s (FINRA) programs and operations varied, with some programs and operations receiving regular oversight and others receiving limited or no oversight. Through its inspection process, SEC conducted routine and special inspections of various aspects of FINRA regulatory programs, including examinations, surveillance, and enforcement programs. SEC has also conducted routine inspections of FINRA’s advertising and arbitration programs but not as frequently as it had planned. SEC has also regularly reviewed FINRA proposed rule changes that are subject to SEC approval to determine consistency with the Securities Exchange Act of 1934 and related rules and regulations. However, neither SEC nor FINRA conducts retrospective reviews of FINRA’s rules. GAO and others have reported on the usefulness of retrospective reviews as they allow agencies to assess the effectiveness of their rules, and some federal financial regulators, including SEC, have begun pursuing plans to conduct retrospective reviews of their rules in light of a recent executive order that encourages independent regulatory agencies to do so. By not conducting these reviews, FINRA may be missing an opportunity to systematically assess whether its rules are achieving their intended purpose and take appropriate action, such as maintaining rules that are effective and modifying or repealing rules that are ineffective or burdensome. Further, by not reviewing what steps FINRA takes in reviewing its existing rules, SEC may not capture sufficient information to form an opinion about FINRA’s efforts to review its rules. Further, SEC has conducted limited or no oversight of other aspects of FINRA’s operations, such as governance and executive compensation. According to SEC, these operations were not historically considered due to competing priorities and resource constraints. Specifically, SEC officials said that SEC focused its resources on FINRA’s regulatory departments, which were perceived as programs that have the greatest impact on investors.

SEC is in the process of enhancing and expanding its oversight of FINRA using a more risk-based approach. To assess the risks facing FINRA, SEC has collected a substantial amount of information on FINRA’s regulatory programs and operations, including for programs and operations of FINRA for which it has not previously conducted oversight. SEC has analyzed the information it collected, and, according to SEC staff, will use this information as it implements its enhanced risk-based oversight of FINRA later this year. SEC has followed some elements GAO has previously found to be important in a risk-management framework, but officials have not articulated or documented how they will implement all of the elements, such as considering alternative oversight approaches and monitoring the effectiveness of its oversight. Incorporating these other elements will better position SEC to prioritize evolving and varying risks, evaluate alternatives, and monitor its oversight efforts. Without such elements, SEC may be missing opportunities to take a more comprehensive, risk-based approach in overseeing FINRA.