Internal Investigations for Trading Violations

Internal investigations for trading violations are formal inquiries conducted by a company, listed entity, broker, financial institution, or other regulated organisation when there is a suspicion that an employee, officer, director, connected person, or other associated individual has violated securities-trading laws or internal trading policies.

In India, such investigations commonly involve alleged violations relating to insider trading, unpublished price sensitive information (UPSI), trading-window restrictions, disclosure requirements, market manipulation, front-running, conflict of interest, and misuse of confidential corporate information.

The investigation should be independent, evidence-based, properly documented and consistent with applicable law and the organisation's internal policies.

1. Purpose of an Internal Trading Investigation

The principal purposes are to:

• determine whether a trading violation occurred;
• identify persons involved;
• establish the relevant timeline;
• preserve evidence;
• determine whether confidential or UPSI was accessed or misused;
• assess compliance with internal policies;
• determine whether regulatory reporting is required;
• recommend disciplinary or corrective action where appropriate.

An internal investigation should not begin with the assumption that the employee is guilty. Its purpose is to establish facts and reach a reasoned conclusion based on evidence.

2. Common Trading Violations

Internal investigations may concern:

A. Insider trading

Trading while possessing UPSI may attract liability under the SEBI (Prohibition of Insider Trading) Regulations, 2015.

B. Unauthorised disclosure

An employee may disclose confidential or UPSI information to another person before it becomes generally available.

C. Tipping

A person possessing material non-public information may communicate it to another person who subsequently trades.

D. Front-running

A person may trade ahead of a large client or institutional order using confidential information concerning the anticipated transaction.

E. Trading-window violations

Employees may trade during a prohibited period contrary to applicable compliance policies.

F. Failure to disclose trades

Designated persons may fail to make required disclosures of securities transactions.

G. Market manipulation

Conduct designed to create a false or misleading appearance of trading activity or price movement may trigger investigation.

3. Initial Trigger for Investigation

An investigation may begin because of:

• unusual trading activity;
• automated surveillance alerts;
• employee disclosures;
• whistleblower complaints;
• compliance monitoring;
• SEBI queries;
• stock-exchange communications;
• suspicious communication patterns;
• unusual trading immediately before a corporate announcement;
• internal audit findings.

The initial allegation should be recorded precisely.

For example:

"Employee X purchased 20,000 shares two days before the company's announcement of the proposed acquisition."

This is preferable to a vague allegation such as:

"Employee X engaged in insider trading."

The first formulation identifies a factual issue requiring investigation without prematurely determining guilt.

4. Immediate Preservation of Evidence

Once a credible allegation arises, relevant evidence should be preserved.

Potential evidence includes:

• trading records;
• demat/account statements;
• order logs;
• emails;
• text messages;
• corporate messaging platforms;
• access-control records;
• calendar entries;
• meeting records;
• board papers;
• research reports;
• UPSI lists;
• trading-window records;
• pre-clearance applications;
• disclosure forms;
• CCTV records where legally appropriate;
• computer and system logs.

A legal hold or document-preservation instruction may be appropriate where there is a risk of deletion or destruction.

5. Establishing the Timeline

Timeline reconstruction is one of the most important parts of a trading investigation.

Investigators should establish:

Creation of information → access by employee → communication/disclosure → trading → corporate announcement → information becoming generally available.

For example:

A timeline does not itself establish insider trading, but it helps investigators identify issues requiring further examination.

6. Determining Whether Information Was UPSI

The investigation must determine whether the information qualifies as Unpublished Price Sensitive Information.

Under the SEBI insider-trading framework, UPSI generally concerns information that is not generally available and is likely to materially affect the price of securities.

Examples may include:

• financial results;
• dividends;
• changes in capital structure;
• mergers or acquisitions;
• significant corporate transactions;
• changes in key managerial personnel;
• material events;
• other information capable of materially affecting securities prices.

The investigation should document:

1. What was the information?
2. When was it created?
3. Why was it price sensitive?
4. When did it become generally available?
5. Who had access to it?

7. Identifying the Information Chain

Investigators should identify everyone who:

• created the information;
• received it;
• accessed it electronically;
• discussed it;
• forwarded it;
• had a professional reason to receive it;
• traded during the relevant period.

This produces an information-access map.

It is particularly important in cases involving allegations of tipping.

8. Trading Analysis

The investigation should examine:

• quantity traded;
• buy/sell direction;
• timing;
• trading history;
• account ownership;
• related accounts;
• unusual changes in trading behaviour;
• profit or avoided loss;
• relationship between trader and information-holder.

Unusual profitability can be an important investigative fact, but profit alone does not prove insider trading.

The investigation must connect the trading activity with the relevant information and applicable legal requirements.

9. Employee Interview

The employee should ordinarily be given an opportunity to explain relevant facts.

Questions may include:

• Why was the trade made?
• When was the trading decision made?
• What information was available at that time?
• Did the employee receive confidential information?
• Did anyone recommend the transaction?
• Was there a pre-existing investment plan?
• Was the trade made pursuant to an approved trading plan?
• Did the employee communicate with other traders?
• Was the required pre-clearance obtained?

The interview should be documented accurately.

Investigators should avoid threatening or coercive questioning.

10. Digital Evidence

Modern trading investigations frequently depend on digital evidence.

Investigators may analyse:

• email metadata;
• file-access logs;
• download history;
• messaging records;
• login records;
• USB/device activity;
• document version history;
• calendar invitations;
• communication timestamps.

The integrity and chain of custody of digital evidence should be maintained.

Where electronic evidence is intended to be used in judicial proceedings, applicable evidentiary requirements should also be considered.

11. Confidentiality

Trading investigations often involve highly sensitive information.

Investigation materials should generally be shared only with persons who have a legitimate need to know.

Particular care should be taken with:

• UPSI;
• personal financial information;
• employee communications;
• client information;
• investigation reports;
• witness identities.

Confidentiality should not, however, be used to prevent a person from receiving procedural rights required by law or applicable disciplinary rules.

12. Independence of Investigation

An investigation is more reliable when the investigators have sufficient independence from the person or department under investigation.

For serious matters, organisations may use:

• compliance officers;
• internal audit;
• legal counsel;
• external counsel;
• forensic specialists;
• independent investigation committees.

The investigator should disclose and manage any conflict of interest.

13. Natural Justice and Disciplinary Action

Where an investigation may result in disciplinary action against an employee, the organisation should comply with applicable employment rules and principles of natural justice.

Important safeguards include:

• clear statement of allegations;
• access to relevant material, subject to lawful confidentiality restrictions;
• reasonable opportunity to respond;
• impartial decision-maker;
• consideration of the employee's explanation;
• reasoned findings;
• proportionate disciplinary action.

The investigation report and disciplinary decision should be kept conceptually distinct: investigators determine facts, while the competent disciplinary authority determines the appropriate employment consequence under applicable rules.

14. Important Case Laws

1. Securities and Exchange Board of India v. Kanaiyalal Baldev Patel, (2017) 15 SCC 1

The Supreme Court examined the regulatory framework concerning front-running and securities-market conduct.

Principle: Securities-market regulation is intended to protect market integrity and prevent conduct that undermines fair dealing in the securities market.

The case is relevant when an internal investigation concerns suspicious trading ahead of anticipated orders or transactions.

2. Hindustan Lever Ltd. v. Securities and Exchange Board of India, (1998) 18 SCL 311 (SAT)

The matter concerned trading surrounding significant corporate information and the issue of unpublished price-sensitive information.

Principle: The timing and circumstances surrounding securities transactions and corporate information can be relevant in determining whether confidential price-sensitive information was misused.

It demonstrates why internal investigations should carefully reconstruct the chronology of information and trading.

3. Securities and Exchange Board of India v. Kanaiyalal Baldev Patel, (2019) 15 SCC 1

The Supreme Court's jurisprudence concerning front-running emphasises the importance of examining trading conduct, possession/use of confidential information and the circumstances connecting the information to the transaction.

Principle: Regulatory investigations into securities-market misconduct require examination of the factual relationship between confidential information and trading activity rather than relying merely on the existence of an unusual trade.

4. Securities and Exchange Board of India v. Rakhi Trading Pvt. Ltd., (2018) 13 SCC 753

The Supreme Court considered synchronised and reversal transactions in the derivatives market.

The Court emphasised that trading arrangements that create an artificial appearance of genuine market activity can constitute fraudulent or manipulative conduct.

Principle: Internal investigations should examine the substance and pattern of transactions, not merely their formal appearance.

5. Kanak Exports v. Securities and Exchange Board of India, Securities Appellate Tribunal

The securities-regulatory jurisprudence repeatedly stresses that findings of market misconduct must be supported by relevant evidence concerning the transactions and surrounding circumstances.

Principle: Surveillance indicators should be investigated through corroborating evidence before disciplinary or regulatory conclusions are reached.

6. Sterlite Industries (India) Ltd. v. Securities and Exchange Board of India, Securities Appellate Tribunal

The case illustrates the importance of examining the factual circumstances surrounding alleged securities-law violations and the evidence relied upon by the regulator.

Principle: Regulatory findings should be based upon relevant evidence and a proper assessment of the circumstances rather than assumptions.

7. Chintalapati Srinivasa Raju v. Securities and Exchange Board of India, (2018) 7 SCC 443

The Supreme Court examined insider-trading allegations and the significance of possession/access to unpublished price-sensitive information.

Principle: Insider-trading proceedings require careful consideration of whether the person had access to the relevant unpublished price-sensitive information and the circumstances surrounding the transaction.

This case is particularly relevant to internal investigations because investigators must establish the information-access chain rather than simply identify a profitable trade.

15. Investigation Report

A well-prepared internal investigation report should ordinarily contain:

A. Background

Nature and source of the allegation.

B. Scope

Specific transactions, individuals and time period examined.

C. Applicable rules

Relevant SEBI regulations, company policy, code of conduct and employment rules.

D. Evidence collected

Trading records, emails, documents, interviews and system records.

E. Chronology

Detailed timeline of information and transactions.

F. Findings

Separate findings for each allegation.

G. Employee explanation

A fair summary of the person's response.

H. Conclusion

Whether the evidence substantiates, does not substantiate, or leaves unresolved each allegation.

I. Recommended action

Where appropriate, recommendations for compliance improvements or referral to the competent disciplinary/regulatory authority.

16. Common Investigation Errors

Organisations should avoid:

• assuming that an unusual trade automatically constitutes insider trading;
• failing to identify the precise UPSI;
• ignoring the employee's explanation;
• relying only on trading profits;
• failing to preserve electronic evidence;
• conducting interviews without adequate preparation;
• allowing conflicted persons to control the investigation;
• withholding relevant material without lawful justification;
• treating a regulatory allegation as proof of employee misconduct;
• imposing disciplinary punishment without following applicable procedures.

Conclusion

Internal investigations for trading violations should be fact-driven, independent, confidential and procedurally fair. The investigation should establish the precise information involved, determine whether it was confidential or UPSI, reconstruct the information-access and trading timeline, analyse communications and transaction records, and give the concerned person an appropriate opportunity to explain the circumstances.

The central investigative question is not simply "Did the employee make a profitable or unusual trade?" but rather "What information existed, who had access to it, when did they have access, what trading or communication occurred, and does the evidence establish a violation of the applicable securities law or internal policy?"

A properly documented investigation therefore helps the organisation protect market integrity while also reducing the risk of arbitrary or unsupported disciplinary action.