|
15
|
When a securities firm adopts procedures for the use of customer data, maintenance of its confidentiality, and the handling of customer comments, such procedures shall at least include:
- The scope of use and maintenance of customer information and levels of personnel authorization, and control mechanisms to guard against unauthorized disclosure and other improper use of customer information.
- Working procedures governing the processing of customer comments and complaints, and investigation of, response to, and handling of customer comments and complaints. In addition, the person in charge shall periodically monitor and provide guidance on the handling of customer complaints.
|