Regulation, Governance, Conduct and Ethics

Introduction and Context

Financial and capital markets allocate savings to productive investment, facilitate risk transfer, provide liquidity, and support price discovery. Their benefits depend on confidence. Investors must believe that prices are formed through reasonably fair processes, that intermediaries are financially sound, that material information is disclosed, and that misconduct will be detected and sanctioned. Regulation, governance, conduct and ethics are therefore not peripheral compliance topics; they are institutional foundations of market integrity.

Regulation establishes enforceable rules and supervisory institutions. Prudential oversight protects the solvency, liquidity and resilience of financial institutions. Disclosure reduces information asymmetry. Conduct regulation governs how firms deal with clients and markets. Governance determines how power, accountability and risk are organised within institutions. Ethics addresses the quality of judgement where rules are incomplete, ambiguous or open to manipulation.

This chapter adopts a principles-based and institutionally comparative perspective. Specific requirements differ across jurisdictions, but the underlying objectives are broadly shared: market integrity, investor protection, financial stability, transparency, competition and prevention of financial crime.

Learning Objectives

After studying this chapter, the learner should be able to:

1. Explain the purposes and architecture of securities regulation and prudential supervision.
2. Distinguish disclosure, conduct, prudential and systemic-risk regulation.
3. Apply principles of investor protection, AML/KYC and market-abuse prevention.
4. Analyse insider trading, manipulation and conflicts of interest.
5. Explain fiduciary duties, corporate governance and ethical decision-making.
6. Evaluate a regulatory failure or conduct incident and recommend controls.
7. Assess how technology and artificial intelligence create new compliance risks and opportunities.

1. The Economic Rationale for Regulation

Markets do not automatically produce fair or stable outcomes. Regulation responds to several forms of market failure.

Information asymmetry occurs when one party knows more than another. An issuer may know that a project is failing while investors do not. Disclosure requirements, financial reporting standards and continuous-reporting rules reduce this asymmetry.

Agency problems arise when managers, directors, advisers or asset managers act on behalf of beneficiaries whose interests may differ from their own. Incentive systems, independent oversight, fiduciary duties and accountability mechanisms reduce agency costs.

Externalities occur when one institution’s failure imposes costs on others. A highly interconnected dealer may transmit losses through payment systems, derivatives or funding markets. Capital, liquidity, recovery and resolution frameworks address these risks.

Market power and coordination problems can impair competition or facilitate collusion. Licensing, competition law, trading surveillance and rules against market manipulation are relevant responses.

Behavioural biases such as overconfidence, herd behaviour and loss aversion can make investors vulnerable to unsuitable products and misleading sales practices. Product governance, suitability and financial education seek to mitigate these vulnerabilities.

Regulation cannot eliminate risk. Its aim is to make risks visible, bounded and responsibly managed while preserving useful innovation and market access.

2. The Regulatory Architecture

A modern financial system normally contains several layers of authority:

The same institution may be supervised by more than one authority. A bank’s securities business may be subject to conduct supervision, while its deposit-taking activity is subject to prudential supervision. Effective regulation therefore requires coordination, clear mandates and information sharing.

Rules-based and principles-based regulation

Rules-based regulation specifies detailed prohibited or required actions. It promotes consistency and makes enforcement more predictable, but can encourage box-ticking and regulatory arbitrage. Principles-based regulation states high-level outcomes, such as acting fairly or managing conflicts effectively. It permits innovation and professional judgement but requires capable supervisors and firms.

Most systems combine both approaches. A rule may prohibit trading while in possession of material non-public information, while a broader principle requires a firm to treat customers fairly. Compliance should therefore ask not only, “Is this technically permitted?” but also, “Does this outcome defeat the purpose of the rule?”

3. Prudential Oversight and Systemic Resilience

Prudential regulation concerns the financial condition and risk-taking of institutions. Its central objectives are depositor and policyholder protection, continuity of critical services and reduction of systemic contagion.

Important prudential tools include:

• minimum capital and leverage requirements;
• liquidity and stable-funding requirements;
• governance and risk-management standards;
• concentration and large-exposure limits;
• stress testing and scenario analysis;
• recovery and resolution planning; and
• supervisory review and prompt corrective action.

Capital absorbs unexpected losses. In simplified form, a capital ratio may be expressed as:

Eligible capital is the regulatory capital recognised by the applicable framework, and risk-weighted assets are exposures adjusted for prescribed risk weights. The ratio is dimensionless. The formula is meaningful only when capital and risk-weighted assets are measured under the same regulatory definitions; it is not a complete measure of solvency because risk weights may not capture every source of risk.

Liquidity risk is the possibility that an institution cannot meet obligations when due, even if its assets exceed liabilities in value. Solvency and liquidity are distinct: a solvent institution can fail through a funding run, while an illiquid institution may possess valuable but difficult-to-sell assets.

Stress testing asks whether an institution could withstand specified adverse conditions, such as a rise in interest rates, a fall in asset prices, deposit withdrawals or counterparty defaults. Stress results are not forecasts. They are decision tools that reveal vulnerabilities under assumptions.

Prudential supervision also has a macroprudential dimension. Macroprudential policy considers the financial system as a whole and may address procyclical leverage, common exposures, interconnectedness and the risks posed by systemically important institutions.

4. Disclosure and Transparency

Disclosure regulation seeks to ensure that investors receive information that is accurate, timely, complete and understandable. It commonly covers:

• offering documents and prospectuses;
• audited financial statements;
• management discussion and analysis;
• material events and continuous disclosure;
• beneficial ownership and related-party transactions;
• risk factors and use of proceeds; and
• remuneration and governance information.

A disclosure is material when a reasonable investor would likely consider it important in making an investment decision, or when it would reasonably be expected to affect the price or value of a security. Materiality is contextual; a small amount may be material to a distressed issuer, while a larger amount may not be material to a very large diversified group.

Disclosure does not guarantee a good investment. It enables informed assessment but cannot remove business, market or execution risk. Excessive or poorly organised disclosure can also obscure important facts. Effective disclosure therefore requires prominence, plain language, balanced presentation and avoidance of selective omission.

Investment banks have particular responsibilities when acting as underwriters, advisers, arrangers or research distributors. Due diligence should test financial information, legal ownership, business assumptions, contingent liabilities, related-party relationships and the credibility of projections. A comfort letter or legal opinion does not transfer all responsibility for professional judgement.

5. Investor Protection and Conduct Standards

Investor protection is concerned with the relationship between a firm and its client. Core principles include:

1. Know your customer (KYC): understand identity, ownership, financial circumstances, objectives and risk tolerance.
2. Suitability: recommend a product or strategy only when it is reasonably suitable for the client’s circumstances.
3. Appropriateness: assess whether a client can understand the risks of a product, particularly where the firm is not providing advice.
4. Best execution: take sufficient steps to obtain the best reasonably available result, considering price, cost, speed, likelihood of execution and settlement, and other relevant factors.
5. Fair treatment: communicate fairly, clearly and not misleadingly.
6. Asset protection: segregate and safeguard client assets as required.
7. Complaints handling: provide accessible, independent and timely resolution processes.

Suitability is not the same as profitability. A product may generate high expected returns but still be unsuitable because of leverage, illiquidity, complexity or mismatch with the client’s objectives. Firms should document the reasoning behind recommendations rather than relying on standardised forms alone.

6. AML/KYC and Countering Financial Crime

Anti-money-laundering and counter-terrorist-financing controls protect the financial system from being used to disguise criminal proceeds or finance prohibited activity. Money laundering is often described through three stages: placement of illicit funds into the financial system, layering through transactions designed to obscure origin, and integration into apparently legitimate wealth. The stages may overlap and are not present in every case.

A risk-based AML/KYC programme normally includes:

• customer identification and verification;
• identification of beneficial owners and controlling persons;
• customer-risk classification;
• enhanced due diligence for higher-risk relationships;
• sanctions and politically exposed person screening;
• transaction monitoring;
• suspicious-transaction reporting;
• record retention and audit trails; and
• staff training and independent testing.

A beneficial owner is the natural person who ultimately owns or controls a customer, directly or indirectly. Complex ownership chains, trusts, nominee arrangements, rapid movement of funds and inconsistent business explanations are potential risk indicators, not automatic proof of misconduct.

The risk-based approach requires proportionality. A small domestic customer with transparent ownership may require less intensive monitoring than a cross-border corporate structure involving high-risk jurisdictions. However, proportionality must not become an excuse for weak controls.

Confidentiality is important, but it does not justify tipping off a customer about a suspicious-transaction report or obstructing lawful requests from competent authorities. Firms must also manage data protection, ensuring that personal information is collected, used and retained lawfully.

7. Insider Trading and Market Manipulation

Insider trading generally involves dealing in securities while possessing material non-public information, or communicating that information improperly so another person can trade. Essential concepts are:

• Material: likely to influence an investment decision or security price.
• Non-public: not broadly disseminated through authorised channels.
• Inside information: sufficiently precise, non-public information that would likely have a significant price effect.

A firm’s controls may include restricted lists, watch lists, information barriers, deal-team protocols, pre-clearance, personal-account dealing rules, wall-crossing procedures and electronic surveillance.

Market manipulation is conduct that creates a false or misleading appearance of trading, supply, demand or price, or that artificially affects a market. Examples may include wash trades, matched orders, spoofing, layering, pump-and-dump schemes, marking the close and dissemination of false rumours. Legitimate trading can appear unusual, so surveillance alerts require investigation and context rather than automatic conclusions.

Information barriers are organisational and technological arrangements designed to prevent inappropriate flow of confidential information between teams. They are not effective if staff circumvent them, if access rights are excessive, or if commercial pressure causes senior personnel to override controls.

8. Conflicts of Interest and Fiduciary Duties

A conflict exists when a person or firm has an interest that may interfere with an obligation to a client, investor, issuer or employer. Conflicts may be actual, potential or perceived. Examples in investment banking include:

• advising both a buyer and seller in a transaction;
• underwriting an issuer while publishing favourable research;
• allocating scarce securities among preferred clients;
• receiving issuer fees while presenting an apparently independent valuation;
• personal trading by employees; and
• remuneration linked to transaction completion rather than client outcomes.

The hierarchy of conflict management is generally: avoid the conflict where possible; identify and assess it; control it through segregation, independence and information barriers; disclose it clearly where disclosure is sufficient; and decline or cease acting where the conflict cannot be managed.

Disclosure alone is not a universal solution. A sophisticated client may understand a disclosed conflict, but disclosure does not cure a conflict involving misuse of confidential information, deception or a duty that prohibits divided loyalty.

Fiduciary duties vary by legal system and relationship. They commonly involve loyalty, care, good faith, confidentiality, proper purpose and avoidance of unauthorised profit. A fiduciary must not place personal interest ahead of the beneficiary’s interest or exploit an opportunity obtained through the fiduciary relationship, subject to applicable law and informed consent.

9. Corporate Governance

Corporate governance is the system through which organisations are directed, controlled and held accountable. A sound governance framework aligns authority with responsibility and creates credible challenge.

Key elements include:

• a competent and appropriately independent board;
• clear separation of oversight and executive management;
• audit, risk, remuneration and nomination committees;
• effective internal controls and internal audit;
• transparent remuneration linked to sustainable performance;
• whistleblowing and speak-up arrangements;
• reliable financial and non-financial reporting; and
• board oversight of culture, conduct, technology and climate-related risk.

The board is responsible for oversight, not merely approval of management proposals. It should understand the institution’s strategy, risk appetite, capital position, major exposures and control weaknesses. Directors must receive information that is timely, accurate and sufficiently challenging.

A “three lines” model is frequently used: business and operational functions own and manage risk; independent risk and compliance functions provide oversight and challenge; and internal audit provides independent assurance. The model is useful only when responsibilities are genuinely distinct and escalation is respected.

10. Ethical Decision-Making

Compliance asks whether an action meets a rule. Ethics asks whether it is responsible, fair and defensible. In professional markets, ethical reasoning is essential because not every harmful action is expressly prohibited and not every formally permitted action is appropriate.

A practical decision framework is:

1. Define the facts and identify affected stakeholders.
2. Identify applicable law, regulation, contract and professional standards.
3. Identify conflicts, incentives and information asymmetries.
4. Consider alternatives and likely short- and long-term consequences.
5. Apply principles of honesty, fairness, loyalty, care and proportionality.
6. Escalate uncertainty to compliance, legal, risk or senior governance forums.
7. Document the reasoning and monitor the outcome.

Useful tests include the publicity test—would the decision withstand publication?—the reversibility test—would it be acceptable if roles were reversed?—and the stakeholder test—who bears the benefit and who bears the risk? These tests support, but do not replace, legal analysis.

Ethical culture is shaped by incentives. Aggressive revenue targets, weak supervision and tolerance of boundary-pushing can cause misconduct even where policies are extensive. Senior leaders therefore communicate ethics through resource allocation, promotion decisions, remuneration and their response to bad news.

11. Technology, Data and Artificial Intelligence

Electronic markets create advantages in speed, liquidity and monitoring, but they also create risks. Algorithmic trading can amplify errors, generate disorderly markets or facilitate manipulation. Firms require model governance, testing, access controls, change management, kill switches and post-trade review.

Artificial intelligence introduces additional issues: opaque decision-making, biased training data, hallucinated or fabricated outputs, privacy breaches, model drift and unclear accountability. An AI system used for client classification, surveillance or research should have a defined purpose, validated data, human oversight, documented limitations and an auditable record of material decisions.

Automated compliance is not automatically effective. A surveillance model may generate many false positives and miss novel conduct. Human investigators must understand model thresholds, data gaps and escalation duties. Accountability remains with the regulated institution and responsible individuals, not with the software supplier alone.

12. Illustrative Case: Selective Disclosure in a Bond Offering

Background. Meridian Capital, an illustrative investment bank, is advising Orion Infrastructure on a bond issue. During due diligence, Orion’s chief financial officer privately tells the deal team that a major concession contract may be terminated. The information is not disclosed in the draft offering document. A relationship manager proposes telling several large clients informally so that they can decide whether to participate.

Problem. The information may be material and non-public. Selective disclosure could create an unfair information advantage, expose the bank and clients to insider-trading risk, and undermine the accuracy of the offering document. Commercial pressure is high because the transaction is scheduled to price within forty-eight hours.

Analysis. The deal team should record the information, restrict access and immediately escalate it to legal, compliance and the issuer’s senior governance body. The bank should assess materiality, verify the facts, determine whether disclosure is required, and consider delaying or restructuring the transaction. Relationship managers must not selectively brief clients. If the information is sufficiently precise and price-sensitive, relevant securities should be placed on a restricted list and personal and proprietary trading stopped.

Approach and solution. The issuer conducts an urgent review of the contract. The offering document is amended to describe the risk accurately, including uncertainty and potential financial effects. The bank refreshes due diligence, reopens investor communications on an equal basis, documents approvals and reviews all employee trading during the relevant period.

Outcome. The bond prices at a wider spread after investors reassess risk. The transaction proceeds, but the issuer accepts a higher financing cost. The bank avoids selective disclosure and creates an audit trail demonstrating responsible escalation.

Learning points. Revenue urgency does not override market integrity. Materiality requires judgement, not a mechanical threshold. Disclosure, information barriers, trading restrictions and governance escalation operate together. A delayed transaction may be preferable to an invalid or unfair one.

13. Challenges and Limitations

Regulation faces several persistent challenges. Global transactions cross jurisdictions with different definitions, reporting systems and enforcement capacity. Firms may engage in regulatory arbitrage by relocating activities or designing products to fall outside a rule’s formal scope. Excessive compliance costs can reduce competition and exclude smaller firms, while insufficient regulation permits abuse.

Disclosure can overwhelm investors; prudential ratios can create false comfort; surveillance can generate false positives; and enforcement after a failure may not compensate injured investors. Regulation also involves trade-offs between privacy and transparency, innovation and control, and financial inclusion and customer-protection safeguards.

The appropriate response is not simply more rules. It includes better supervisory data, credible enforcement, clear accountability, proportionality, international cooperation, strong professional competence and continuous evaluation of whether rules produce their intended outcomes.

14. Professional Best Practices

Professionals in investment banking should:

• treat compliance as part of transaction design rather than a late approval stage;
• maintain accurate records of decisions, assumptions and escalations;
• separate confidential information from commercial persuasion;
• challenge unrealistic projections and incomplete disclosures;
• identify the ultimate beneficial owner and purpose of transactions;
• use independent review for conflicts, valuation and risk;
• report concerns promptly and protect good-faith whistleblowers;
• test controls through realistic scenarios;
• ensure remuneration does not reward misconduct; and
• remain professionally sceptical, especially when a transaction appears unusually easy, urgent or profitable.

Chapter Summary

Financial regulation supports market integrity, investor confidence and financial stability. Securities regulation focuses on disclosure, fair markets and investor protection, while prudential supervision focuses on the safety, liquidity and resilience of institutions. AML/KYC controls prevent the financial system from being misused, and market-abuse rules address insider trading and manipulation. Conflicts of interest require avoidance, control, disclosure where appropriate and withdrawal when they cannot be managed. Fiduciary duties impose loyalty, care, confidentiality and proper-purpose obligations. Corporate governance creates accountability through boards, committees, risk management, internal controls and independent assurance. Ethical judgement extends beyond technical compliance by considering fairness, consequences and stakeholder interests. Technology and AI improve monitoring but create model, data, privacy and accountability risks. Effective professionals combine legal knowledge, evidence-based judgement, documentation and the courage to escalate concerns.

Key Terms

Regulation: Enforceable framework governing financial institutions and markets.

Prudential supervision: Oversight focused on the safety and soundness of financial institutions.

Market integrity: Fair, orderly, transparent and trustworthy market functioning.

Information asymmetry: Unequal distribution of relevant information between parties.

Material information: Information reasonably likely to influence an investment decision or price.

Continuous disclosure: Ongoing reporting of material developments by an issuer.

Suitability: Assessment that a recommendation fits a client’s circumstances and objectives.

Best execution: Obligation to seek the best reasonably available execution outcome for a client.

KYC: Know-your-customer processes for identifying and understanding clients.

Beneficial owner: Natural person who ultimately owns or controls a customer.

AML: Anti-money-laundering controls and obligations.

Inside information: Precise, non-public, price-sensitive information.

Market manipulation: Conduct creating a false or misleading market appearance.

Information barrier: Control restricting inappropriate movement of confidential information.

Conflict of interest: Circumstance in which interests may interfere with duties.

Fiduciary duty: Duty of loyalty, care and proper conduct owed in a fiduciary relationship.

Corporate governance: System by which an organisation is directed and controlled.

Risk appetite: Level and types of risk an organisation is willing to accept.

Whistleblowing: Reporting suspected wrongdoing through protected channels.

Model governance: Controls over the development, validation, use and monitoring of models.

Review Questions

Short Answer Questions

1. What are the principal economic rationales for financial regulation?
2. Distinguish prudential regulation from conduct regulation.
3. What is the difference between solvency risk and liquidity risk?
4. Why is disclosure alone not always sufficient to manage a conflict of interest?
5. Identify four components of a risk-based AML/KYC programme.

Long Answer Questions

1. Explain how securities regulation, prudential supervision and corporate governance complement one another.
2. Discuss the purpose, benefits and limitations of principles-based and rules-based regulation.
3. Analyse the role of disclosure in reducing information asymmetry and protecting investors.
4. Explain the controls an investment bank should use to prevent insider trading and market manipulation.
5. Discuss how incentives and organisational culture influence ethical conduct in financial institutions.

Analytical / Application Questions

1. An investment bank advises an issuer while its research department plans to publish a favourable report. Identify the conflicts, applicable controls and circumstances in which the bank should decline to act.
2. A corporate client has a complex offshore ownership structure, rapid unexplained payments and a politically exposed beneficial owner. Design a proportionate KYC, enhanced-due-diligence and escalation response.
3. A trading algorithm generates repeated large orders that are cancelled before execution and appears to influence closing prices. Analyse the possible conduct concern, immediate controls, investigation steps and governance lessons.

Multiple Choice Questions with Answers

Question 1

Which regulatory objective primarily addresses the possibility that failure of one institution may impose costs on others?

A. Systemic-risk reduction

B. Client suitability

C. Prospectus formatting

D. Personal-account dealing

Correct Answer: A. Systemic-risk reduction

Question 2

In the simplified capital ratio, the denominator is:

A. Total revenue

B. Risk-weighted assets

C. Net income

D. Liquid cash only

Correct Answer: B. Risk-weighted assets

Question 3

Which statement best describes material information?

A. Any information known only to directors

B. Information reasonably likely to influence an investment decision or security price

C. Only information already filed with a regulator

D. Information that guarantees a profit

Correct Answer: B. Information reasonably likely to influence an investment decision or security price

Question 4

What is the principal purpose of identifying a beneficial owner?

A. To calculate market share

B. To determine the natural person who ultimately owns or controls the customer

C. To guarantee investment performance

D. To replace transaction monitoring

Correct Answer: B. To determine the natural person who ultimately owns or controls the customer

Question 5

Which activity is most clearly associated with market manipulation?

A. Diversifying a portfolio

B. Conducting a genuine purchase for investment

C. Entering orders intended to create a false appearance of demand and then cancelling them

D. Disclosing a material risk in an offering document

Correct Answer: C. Entering orders intended to create a false appearance of demand and then cancelling them

Question 6

A suitable recommendation is one that:

A. Has the highest possible return

B. Matches the client’s circumstances, objectives and risk profile

C. Is always the least expensive product

D. Has been profitable in the past

Correct Answer: B. Matches the client’s circumstances, objectives and risk profile

Question 7

Which response is generally strongest when a conflict cannot be effectively managed?

A. Ignore it if the transaction is profitable

B. Disclose it only after completion

C. Decline or cease acting

D. Transfer it to an unrelated client

Correct Answer: C. Decline or cease acting

Question 8

Which function normally provides independent assurance in the three-lines model?

A. The revenue-generating business unit

B. Internal audit

C. The client relationship team

D. The issuer’s marketing department

Correct Answer: B. Internal audit

Question 9

A suspicious transaction report should generally be handled by:

A. Tipping off the customer immediately

B. Following internal escalation and lawful reporting procedures

C. Deleting the transaction record

D. Publishing the customer’s identity publicly

Correct Answer: B. Following internal escalation and lawful reporting procedures

Question 10

Why does ethical decision-making extend beyond technical compliance?

A. Rules are never relevant

B. Every harmful action is illegal

C. Some responsible decisions require judgement where rules are incomplete or formal permission would still produce unfair outcomes

D. Ethics eliminates the need for governance

Correct Answer: C. Some responsible decisions require judgement where rules are incomplete or formal permission would still produce unfair outcomes