LavaFlow Inc., a Citigroup (C) business unit, has consented to pay $ 5million to resolve U.S. Securities and Exchange Commission charges that it did not protect subscribers’ confidential trading data in its alternative trading system. LavaFlow consented to the SEC order without denying or admitting to the allegations.
Per the order, which institutes a settled administrative proceeding, LavaFlow, which runs an electronic communications network ATS, let an affiliate that runs a smart order router application to access and utilize confidential data related to non-displayed orders belonging to subscribers. The order router was not within ECN’s operations and LavaFlow lacked the proper procedures and safeguards to protect this confidential information.
Even though LavaFlow only let the affiliate use the confidential data for ECN subscribers that were also order router customers, the firm did not get subscribers’ consented for their confidential data to be used like this. LavaFlow also failed to disclose this use to the SEC.