NASAA Series 65, Uniform Investment Adviser Law ExaminationLaws, Regulations, and Guidelines, including Prohibition on Unethical Business PracticesMedium
A state-registered investment adviser (IA) has decided to outsource its compliance function to a third-party consulting firm. What is the most significant responsibility that the IA firm retains, even after delegating the compliance tasks?
- AThe IA firm must conduct all internal audits of the third-party firm's compliance work.
- BThe IA firm is only responsible for paying the third-party consulting firm's fees, not the actual compliance work.
- CThe IA firm must obtain separate state registration for the third-party consulting firm.
- DThe IA firm retains the ultimate responsibility for ensuring compliance with all applicable securities laws and regulations.
Show answer & explanationAnswer & explanation
Correct answer: D. The IA firm retains the ultimate responsibility for ensuring compliance with all applicable securities laws and regulations.
Even when compliance functions are outsourced, the investment adviser firm itself retains ultimate responsibility for compliance with all applicable securities laws and regulations. Delegation does not absolve the IA of its primary legal and fiduciary obligations.
Why the other options are wrong
- A. While oversight is necessary, conducting all internal audits of the third party is not the 'most significant' retained responsibility, rather it's part of ensuring the ultimate responsibility.
- B. This is incorrect; responsibility goes beyond merely paying for the service.
- C. The consulting firm typically provides advice, not investment advice to clients, and thus usually does not require IA registration itself.
Outsourcing Compliance - IA Responsibility
When an investment adviser (IA) outsources compliance functions, the IA firm retains ultimate responsibility for ensuring full compliance with all securities laws and regulations. The duty cannot be fully delegated away.
- IA remains ultimately responsible for compliance.
- Delegation does not absolve fiduciary duty.
- IA must oversee and monitor the outsourced function.
- Compliance is a core, non-delegable duty of the IA.
Memory trick: Outsource the task, but OWN the ultimate RISK!