The SEC’s latest stock manipulation case might be titled “How to make (almost) over $400,000 in just 27 minutes.” The key is to use Williams Act filings not to alert the market and issuer to a potential take-over but to fake one. SEC v. Aly (S.D.N.Y. Filed May 24, 2016).

Defendant Nauman Aly is a resident of Pakistan. He claims to have a business in Elkhart, Indiana and Portland, Oregon. In mid-April 2016 he is alleged to have manipulated the share price of Integrated Devices Technology, Inc. or IDTI, a high tech firm based in San Jose, California. To effectuate his plan Mr. Aly took the following steps:

Options: On April 12, 2016 at 11:50 ET he purchased IDTI call options at a cost of $18,500 for 185,000 shares of stock with a strike price of $20.00. The options were set to expire three days later. On the date of the option purchase the share price for IDTI was $19.01. The purchase was made from a computer in Pakistan.

EDGAR: Approximately eight minutes after the option purchase Mr. Aly logged on to EDGAR from the same IP address as the one used to purchase the options.

Filing: Eighteen minutes after the option purchase a Schedule 13D was filed on EDGAR for a group of six Chinese citizens. The filing stated the six individuals constituted a group and had acquired beneficial ownership of 5.1% of IDTI stock. The group reputedly owned stock and call options. The filing had Mr. Aly’s electronic signature.

Offer: Attached to the Schedule 13D was a draft merger agreement and a copy of the letter to IDTI. The filing represented that a letter had been sent to the IDTI board containing an offer to acquire all of the outstanding shares of the company at a price of $32, a 65% premium to market.

The IDTI share price increased 25% to $23.99 by 12:17 p.m. or 27 minutes after the option purchase. At 12:18 p.m. Mr. Aly sold the options using the same computer employed to make the filing and the purchase. The sale netted him $425,000.

Fifty-three minutes after the option purchase Mr. Aly filed a second Schedule 13D. The filing stated that the Reporting Group no longer owned a beneficial interest of over 5% of IDTI stock because Mr. Aly had sold the call options. Later the same day IDTI issued a press release stating that the firm had not received a letter about the merger or the draft merger agreement.

The complaint alleges violations of Securities Act Section 17(a) and Exchange Act Section 10(b). The Commission obtained a freeze order over the trading profits on filing. The case is pending.

Tagged with: , ,

Compliance programs, Chief Compliance Officers and liability have been the subject of a great deal of debate in recent months. Members of the Commission, for example, debated charging decisions regarding CCOs last year in comments that must have made those holding compliance positions yearn for another profession despite the intentions of the Commissioners.

At the same time, the SEC has over the years stressed compliance and its potential to minimize liability. Over a decade ago, for example, the Commission issued what is generally known as the Seaboard release, an Exchange Act Section 21(a) report of an investigation discussing cooperation and compliance that might minimize or eliminate liability. In 2012 the SEC, along with the DOJ, issued A Resource Guide to the U.S. Foreign Corrupt Practices Act (here). The Guide, built on Seaboard and concepts taken from the U.S. Sentencing Guidelines, identifies five key points regarding compliance programs: 1) Establishing an effective tone at the top of the organization; 2) adopting an appropriate code of conduct; 3) assigning responsibility; 4) training personnel and updating systems; and 5) third party due diligence.

While the Guide and its basic building blocks focus on the FCPA, the principles articulated regarding compliance programs are fundamental to virtually any corporate program. Indeed, following the issuance of the Guide, Associate Director of Enforcement Stephen Cohen emphasized those principles as the basics of effective compliance (here).

Andrew Donohue, Chief of Staff, in remarks delivered May 20, 2016 titled “New Directions in Corporate Compliance,” (here) also focused on compliance. There Mr. Donohue approached the question from the viewpoint of a CCO. He began by articulating four basic points that should be considered when evaluating a corporate compliance program:

Integrity and personal responsibility: The effectiveness of a corporate compliance program is a function of “the integrity of those people you have in your organization and their ownership of personal responsibility for themselves and the areas for which they are responsible,” according to Mr. Donohue. Without the right people, the chances of having an effective program diminish.

Culture: This is a critical point Mr. Donohue noted. The culture of the organization must be one of “always doing the right thing, not tolerating bad practices or bad actors is essential. The culture should encourage people to ask questions and to discuss openly what is the proper response . . .” In this regard there should be a correlation between ethical behavior and the reward structure.

Keep it simple and intuitive: The policies and procedures that make up the system should be simple, straight forward, written in plain English and “intuitive to those that have to comply with them.”

Role of technology: Technology provides opportunities for eliminating human error, providing increased testing and monitoring. At the same time it is not a substitute for individual responsibility, Mr. Donohue noted.

Complexity: As firms become more complex it can be more challenging to develop and implement effective compliance programs. For example, the firm may have a number of computer systems which do not effectively communicate with each other. The organization may have a number of complex areas. It is critical that there be not just those with segregated duties but personnel who understand how it all works.

While these principles are the predicates for a compliance system, for the CCO a series of pragmatic points are key. Those, according to Mr. Donohue, include:

  • Knowledge of business: The CCO should know the business better than those who run it and have a deep knowledge of the regulatory regimes under which the organization operates;
  • Risks: It is essential to identify the key risks faced by the organization;
  • People: The CCO must understand and appreciate the people and their focus;
  • Systems: It is critical to understand the systems employed, their limitations and the people involved with them; and
  • Resolution: When an issue is identified it must be addressed and resolve quickly.

Perhaps the final point is most important. The effective CCO must constantly be asking “What am I missing?” Stated differently, the system must, as the Guide notes, be constantly evaluated and updated. If that is done it can improve the functioning of the business. In addition, if an issue arises which comes to the attention of the SEC or another regulator, the organization will be able to follow the advise of Mr. Cohen – address the issue first by pointing to the effective compliance program of the organization; then discuss the question as an outlier rather than waiting to the remediation stage of the discussion to mention compliance as do many firms. That approach argues for a much more favorable outcome of the regulatory inquiry since compliance is a key question in any charging decision.

Tagged with: , ,