Most MNPI violations don’t start with a rogue trader

Most MNPI violations don’t start with a rogue trader. They start with uncontrolled information inflows nobody mapped.

If you’re a junior PE associate, a hedge fund analyst, or a corp dev person who books an expert call a week, here are the channels your CCO is supposed to be watching — and where they’re most likely to fail.

The six MNPI inflow channels

Expert networks. Bankers and sell-side research. Public company insiders (board seats, observer rights). Customers and suppliers. Alternative data vendors. Informal channels — conference side chats, WhatsApp threads with industry contacts.

Each one is a potential MNPI entry point. And the SEC has been clear about its expectations: your firm’s strategy for controlling MNPI must cover all of them, not just expert networks.

Where the most aggressive enforcement is happening

Alternative data. Specifically, datasets that are aggregate-and-safe in theory but become MNPI when sliced to isolate a single issuer.

Mobile app usage that tracks one publicly traded company’s user activity. Web-scraped pricing at granular levels tied to a specific brand. Geolocation feeds that map store traffic before earnings. All of these can constitute MNPI depending on how they’re used.

The SEC expects firms to map all these channels in their MNPI risk assessment. Most don’t.

Who counts as an “access person”

Under the Code of Ethics, access persons include portfolio managers, analysts, senior leaders, anyone with access to client trading or holdings, and — this is the part people miss — anyone routinely participating in expert network calls or due diligence meetings. Even family members of access persons can create exposure if they trade on tips.

This matters because the SEC’s April 2022 Risk Alert flagged “failure to identify and closely monitor all access persons” as one of the most common deficiencies in deficiency findings. If your firm’s access person list is just the PMs, you have a gap.

The eight deficiencies the SEC keeps finding

1. Written policies that are generic templates, not tailored to the adviser’s actual business

2. Failure to identify and monitor all access persons

3. Weak or nonexistent restricted lists for issuers under NDA or being discussed in calls

4. Superficial documentation around expert network calls

5. No testing of personal trading against research interactions

6. No pre-approval process for expert calls

7. No review of the expert network’s own compliance program

8. Inadequate training on off-limits questions

The brutal one: the SEC doesn’t need to prove you traded on MNPI to sanction you. In one case, a CLO and hedge fund adviser paid a $1.8M civil penalty for MNPI control failures around borrower information. No proof of illegal trading — just bad controls.

The six-step program that actually works

You don’t need a Fortune 500 legal team for this. You need six things: a risk assessment that maps every channel, a written policy tailored to your business, pre-clearance and logging for every expert call, monitoring that compares personal trading against research interactions, training with real scenarios, and an annual review.

I run a research firm called FieldSignal — we built our compliance stack around exactly these controls because most of our clients are mid-market funds that can’t afford to pay GLG-tier retainers but still need the same audit trail. The full breakdown of the legal framework and a vendor-vetting checklist is at the source.

If you remember nothing else: assume your CCO will be asked to produce expert call logs going back 3 to 5 years during your next exam. Plan accordingly.

Source: The full MNPI guide on fieldsignalhq.com