|
2
|
The content and procedures of assessment of legal compliance set by securities firms must comply with the "Regulations Governing the Establishment of Internal Control Systems by Service Enterprises in Securities and Futures Markets" ("Regulations") and these Directions. These Directions provide for the minimum requirements and standards for the content and procedures of assessment of legal compliance to be established by securities firms, and securities firms shall, taking into consideration factors such as the business scale, nature of the business, organizational characteristics etc., establish the content and procedures of assessment that at least meet the standards under these Directions, and make adjustments and amendments accordingly in the event of changes in laws and regulations.
|
|
|
3
|
Securities firms must, at the very least, establish the content and procedures of assessment of legal compliance according to the following content:
- The compliance unit shall establish the content and procedures of assessment of legal compliance ("Procedures") for the company pursuant to the Regulations for the purposes of planning, managing and implementing a compliance system, instilling in practitioners of the company an understanding of the importance of law and order, and reinforcing education and advocacy regarding securities laws and regulations, in order to familiarize all personnel of the company with the rules and regulations related to their work.
- Establish a compliance risk management framework: The compliance unit shall establish the procedures, plans, and mechanisms for identifying, assessing, controlling, evaluating, monitoring, and independently reporting compliance risks, in order to comprehensively control, supervise, and support the relevant compliance matters of individual business units, as well as cross-departmental and cross-border compliance matters, of domestic and overseas departments, branch offices, simple branch offices, and subsidiaries.
- Independent compliance authority and responsibilities:
- The compliance unit shall establish an independent mechanism for reporting, assessing, and responding to compliance risk alerts.
- To monitor the company’s overall compliance risk situation, the compliance unit may request relevant information from each unit.
- The compliance unit shall regularly and ad hoc assess potential compliance risks related to major business activities, products and services, credit or business projects, and significant customer complaints that may involve violations of laws or regulations, and shall establish horizontal communication and liaison mechanisms with other second-line-of-defense functions.
- Reporting and oversight of the effectiveness of compliance:
- The performance review of senior management and department heads shall incorporate the compliance unit’s assessment opinion on their degree of performance of compliance.
- With reference to the compliance matters that the compliance supervisor being in charge of all compliance affairs reports to the board of directors and each supervisor or the audit committee at least every six months, weaknesses in compliance risk management shall be identified in connection with the the onshore and offshore operations of the company, with supervisory and improvement plans and schedules proposed. The board of directors shall provide sufficient resources and establish appropriate incentive and disciplinary mechanisms for business units, in order to foster a company-wide compliance culture progressively.
- The content of assessment of legal compliance must include:
- Establishing clear and appropriate conveyance, consultation, coordination and communication systems regarding laws and regulations.
- Affirming that all procedures and management regulations are updated in a timely manner pursuant to applicable laws and regulations to ensure all operational activities comply with laws and regulations.
- Supervising the regular self-assessment of compliance of each unit.
- Implementing appropriate and proper training on laws and regulations for members of each unit.
- Supervising the compliance of overseas branch offices with the laws and regulations of the countries they are located in.
- Other matters as required by the competent authority.
- The Procedures adopt a self-assessment method, with each unit conducting a self-assessment no less than once every year (subsidiaries of financial holding companies shall conduct a self-assessment no less than once semi-annually). Self-assessment results shall be submitted to the legal compliance unit for recordation. The supervisor of each unit shall appoint persons to specially conduct the self-assessment.
- Self-assessment is divided into two types as below:
- Regular self-assessment items: applicable to units of a company
- Unit self-assessment items: applicable to individual units
- The aforementioned self-assessment shall be conducted using a "Legal Compliance Self-Assessment Chart" (see attachments). "Legal Compliance Self-Assessment Charts" (in lieu of self-assessment working papers) and self-assessment related information shall be kept for a minimum of five years.
- The Procedures shall be implemented after having been approved by the General Manger. Subsequent amendments thereto shall be effected in the same manner.
|
Info
|