PH COVID-19 Client Alert Series: Regulatory and Corporate Governance Implications
This communication constitutes the next installment of our Client Alert series considering the legal and business impacts of the 2019 Novel Coronavirus (“COVID-19”), commonly referred to as the “Coronavirus.” This communication focuses on the implications of the Coronavirus upon regulatory and corporate governance issues, particularly with respect to entities subject to the jurisdiction of the Securities and Exchange Commission (“SEC”) and the Commodity Futures Trading Commission (“CFTC”).
I. SEC and CFTC Statements on the Coronavirus
With the spread of the Coronavirus comes the specter of disrupted markets, volatile trading activity, and regulatory and governance implications extending far beyond the recent market corrections attributable to the epidemic. Both the SEC and the CFTC have issued statements on the Coronavirus; the SEC has instructed agency personnel to “monitor” and “provide guidance and other assistance to” market participants and issuers in connection with their disclosures related to the current and potential future effects of the Coronavirus, urging issuers to work together with their auditors and audit committees to “ensure that their financial reporting, auditing and review processes are as robust as practicable in light of the circumstances.”
Of particular importance for SEC- and CFTC-regulated entities, investors, and other market participants is how the uncertainty surrounding the Coronavirus will impact federal regulatory oversight and enforcement approaches. The SEC has indicated that regulated entities may need to make specific risk-related disclosures about the Coronavirus in their public filings, including proactively updating their filings (via Forms 8-K or otherwise) as new information develops.
Potential disruptions the virus may have upon operations and supply chains, and consequently, continuity of operations and associated revenues;
Potential impact of the Coronavirus on earnings; and
Plans to address the crisis, including any risk management plans in place or in progress, both internally and potentially with respect to key third-party vendors who may encounter similar difficulties related to the Coronavirus.
More generally, SEC rules mandate that public companies “warn investors of plausible business or legal risks,” including those attributable to the Coronavirus, and failure to do so may subject a company to SEC oversight and enforcement, as well as shareholder scrutiny and potential investor litigation in the event of a drop in stock price.
The Coronavirus also has the potential to impact trading operations themselves; indeed, if the Coronavirus prompts market closures, then market participants holding open positions may encounter settlement risks (though force majeure clauses in some contracts may include contingency plans for how to address such risks). This would not be the first time that the markets close for emergencies, however; the U.S. stock markets remained closed for the rest of the week following the September 11, 2001 terrorist attacks, for example.
In addition, many participants in the securities, commodities, and derivatives markets have ongoing reporting obligations to the SEC or CFTC, including in some instances real-time or near-real-time reporting requirements following the execution of a trade.
Further, given that many market participants require their traders or brokers to trade or broker from the company’s physical office (as opposed to remotely), using company devices and on recorded telephone lines or instant messages (and under the oversight of compliance personnel), these market participants should consider whether and how to shift trading or brokerage operations from a centralized facility to a remote workplace while maintaining compliance with the SEC’s or CFTC’s various reporting, recordkeeping, oversight, and other risk management obligations, in the event that a Coronavirus outbreak requires extensive office closures or incapacitates a significant portion of a company’s workforce. A number of regulated entities already have begun “testing their ability to work remotely,” including via potential recording of remote telephone lines, should traders need to work remotely.
II. What Regulated Entities Can Do
To the extent Coronavirus-related disruptions create risks to operations, continuity of operations, revenue reductions, or other similar issues, management should consult with counsel regarding disclosure obligations and the timing of any required disclosures. Regulated entities also should consider putting in place the following controls to ease operational stress:
Ensure a regular supply of up-to-date medical supplies (e.g., alcohol-based hand sanitizer), and maintain sanitized facilities;
Encourage telecommuting, minimizing unneeded inter-jurisdictional travel. Where face-time is required, a company must have sufficient medical resources and an emergency management system in place, in the event the virus spreads to the workplace;
Formulate a risk management plan outlining contingency operations in the event that a Coronavirus outbreak cripples a significant portion of a company’s workforce and/or trading, brokering, or reporting operations, to ensure the continuity of mandatory risk management, reporting, and related obligations and functioning of remote electronic systems;
Evaluate the sufficiency of current insurance coverage and whether any updates or upgrades may be necessary to cover events associated with the Coronavirus outbreak or similar future issues;
Contact key third-party providers and vendors to ensure that they have similarly appropriate risk management and contingency plans in place; and
Prepare to address these issues with regulators or self-regulatory organizations (“SROs”), as appropriate, including in connection with regular examinations or audits.
Businesses should recognize their obligations to plan for continuity and to address identified risks in the current crisis but also keep in mind that the Coronavirus is not a unique event or even the first one in this realm; we already have seen epidemics or fears of epidemics related to Severe Acute Respiratory Syndrome (“SARS”), Middle East Respiratory Syndrome (“MERS”), Ebola, and the Swine Flu, for example. The Coronavirus is only the latest in this series. Consequently, businesses also should consider longer-term plans to introduce flexibility and advance planning to address likely future events that would affect supply chains, operating hours, or arrangements and availability or quarantine of staff, and reduce travel and meeting time to minimize the possibility of an in-office outbreak.