Compliance Procedures and Practices of Registered Investment Companies
SEC Rule 38a-1, codified at 17 C.F.R. § 270.38a-1 under the Investment Company Act of 1940, requires every registered investment company — including open-end mutual funds, closed-end funds, Exchange-Traded Funds, money market funds, and unit investment trusts — to adopt and implement written policies and procedures reasonably designed to prevent violation of the federal securities laws by the fund and its service providers.
To conduct an annual review of those policies and procedures, to designate a chief compliance officer responsible for administering the compliance programme, and to ensure that the chief compliance officer reports annually to the fund's board of directors on the operation of the compliance programme and any material compliance matters that have occurred.
Rule 38a-1 — universally known as the Fund Compliance Rule — was adopted in December 2003 as part of the Commission's direct regulatory response to the mutual fund market timing and late trading abuses that had been publicly exposed in the autumn of 2003, when the New York Attorney General and the Commission simultaneously announced investigations revealing that multiple mutual fund complexes had allowed favoured institutional investors to engage in illegal late trading and undisclosed market timing arrangements that harmed ordinary retail fund shareholders.
The Fund Compliance Rule was designed to move the regulatory paradigm for investment company oversight from reactive enforcement — identifying and penalising violations after they occur — to proactive compliance — requiring every registered fund to establish and maintain the internal governance infrastructure necessary to prevent violations before they cause investor harm.
Adopted simultaneously with Rule 206(4)-7 under the Investment Advisers Act — which imposed the parallel compliance programme obligation on registered investment advisers — Rule 38a-1 together with its companion rule established the compliance programme framework that continues to define the governance architecture of the registered fund industry.
Overview and Regulatory Purpose
The registered investment company industry — encompassing the approximately 13,000 mutual funds, ETFs, money market funds, closed-end funds, and unit investment trusts registered with the Commission as of 2025, managing in aggregate over $30 trillion in assets on behalf of tens of millions of retail and institutional investors — presents a governance challenge of unusual complexity and scale.
Each registered fund is a separate legal entity with its own board of directors, yet most funds do not have their own employees — they rely entirely on external service providers, including the investment adviser, the principal underwriter or distributor, the administrator, and the transfer agent, to conduct every aspect of the fund's operations.
This service provider model creates a compliance oversight challenge: the fund's board is responsible for overseeing compliance with the federal securities laws, but the operational capacity to conduct that compliance lies entirely with third-party service providers who have their own business interests that may not always be perfectly aligned with the interests of the fund and its shareholders.
The mutual fund scandals of 2003 exposed the consequences of this governance challenge. Market timing — the practice of allowing certain investors to rapidly buy and sell fund shares in a manner that exploits pricing inefficiencies at the expense of longer-term shareholders — had been occurring at numerous fund complexes despite written policies in fund prospectuses prohibiting the practice. Late trading — the acceptance of orders after the 4:00 p.m.
ET pricing cutoff that gave certain investors access to prices already known to reflect post-cutoff events — was an outright violation of Rule 22c-1 under the Investment Company Act. In both cases, the abuses occurred because fund management had permitted or condoned the practices for the benefit of preferred investors — institutional clients and hedge funds who directed lucrative ancillary business to the fund complex in exchange for trading accommodations — without the knowledge of the fund's board of independent directors.
The absence of robust compliance infrastructure at the fund level meant that the board's nominal oversight responsibility was unaccompanied by the operational mechanisms necessary to identify and prevent the abusive practices.
Rule 38a-1 directly addresses this governance failure by requiring every registered fund to establish a compliance programme whose design and implementation is subject to board oversight, whose adequacy is reviewed annually, and whose administration is the responsibility of an independently positioned chief compliance officer whose appointment, compensation, and removal require board approval.
The rule's purpose is to ensure that the governance infrastructure for compliance with the federal securities laws is built into the operational architecture of every registered fund — not as a voluntary best practice but as a mandatory regulatory requirement whose violation constitutes an independent breach of the Investment Company Act.
Statutory Authority and Rulemaking History
Rule 38a-1 derives its statutory authority from Section 38(a) of the Investment Company Act of 1940, which grants the Commission authority to make, issue, amend, and rescind such rules and regulations and such orders as are necessary or appropriate to the exercise of the powers conferred upon the Commission elsewhere in the Act.
The Commission also relied on Sections 31(a) and 31(b) of the Investment Company Act — which authorise the Commission to prescribe the records that registered investment companies must maintain and the reports they must make available to the Commission — as additional authority for Rule 38a-1's recordkeeping requirements.
The Commission proposed Rule 38a-1 on February 5, 2003 — Investment Company Act Release No. IC-25925, published at 68 FR 7038, February 11, 2003 — before the full scope of the mutual fund trading abuses had been publicly revealed, reflecting the Commission's assessment that a comprehensive compliance programme rule was necessary for the registered fund industry independent of any specific enforcement-driven reform initiative.
The proposed rule was adopted in its final form on December 17, 2003 — Investment Company Act Release No. IC-26299, published at 68 FR 74714, December 24, 2003 — with an effective date of February 5, 2004 and a compliance date of October 5, 2004, giving funds and their service providers approximately nine months to design, implement, and obtain board approval for their compliance programmes.
The adopting release characterised the Fund Compliance Rule as the Commission's first regulatory action designed to create comprehensive compliance infrastructure for the registered fund industry, noting that the failure of a fund to have adequate compliance policies and procedures in place would constitute a violation of the Commission's rules independent of any other securities law violation — meaning that the absence of a compliant programme is itself actionable regardless of whether any underlying substantive violation has occurred. Rule 38a-1's operative text has not been substantively amended since its December 2003 adoption, reflecting the Commission's determination that the rule's principles-based framework — requiring reasonably designed policies and procedures rather than prescribing specific compliance measures — is sufficiently flexible to accommodate changes in the fund industry and the regulatory environment without requiring formal amendment.
Key Provisions and Operative Requirements
Rule 38a-1(a) establishes the four core compliance programme requirements applicable to every registered investment company.
Rule 38a-1(a)(1) requires the fund to adopt and implement written policies and procedures reasonably designed to prevent violation of the federal securities laws by the fund, and the fund's policies and procedures must provide for the oversight of compliance by the fund's investment advisers, principal underwriters, administrators, and transfer agents.
This dual obligation — requiring compliance policies at the fund level and oversight of compliance by all service providers — directly reflects the service provider model of the registered fund industry, in which the fund itself has no employees and must rely on third-party service providers to conduct every aspect of its operations. A fund cannot satisfy Rule 38a-1(a)(1) by adopting policies addressing only its own operations while ignoring the compliance practices of the adviser, underwriter, administrator, and transfer agent through whom all fund operations are actually conducted.
The fund's board of directors — including a majority of the fund's independent directors — must approve the fund's written policies and procedures and the policies and procedures of each service provider based on a finding that such policies and procedures are reasonably designed to prevent violation of the federal securities laws.
Board approval is not a formality — the adopting release makes clear that the board must make an affirmative finding that the policies and procedures satisfy the reasonably designed standard, which requires that the board be provided with meaningful information about the content of the policies and procedures and a basis for assessing their adequacy.
The areas that a fund's compliance policies and procedures must address include, at minimum, the investment process — including compliance with the fund's investment objectives, policies, and restrictions, and with applicable legal requirements governing portfolio management; the valuation of portfolio securities and the computation of net asset value; the safeguarding of portfolio securities and fund assets; the accuracy of financial statements and reports filed with the Commission; trading practices — including the treatment of trading errors, the management of soft dollar arrangements, and the prevention of market timing and late trading; the fund's distribution and marketing practices; anti-money laundering obligations; and the oversight of service provider compliance.
Rule 38a-1(a)(2) requires the fund to review, at least annually, the adequacy of the policies and procedures established under Rule 38a-1(a)(1) and the effectiveness of their implementation.
The annual review requirement ensures that the compliance programme remains current — responsive to changes in the fund's business, the applicable regulatory environment, and the enforcement and examination experience of the prior year — rather than becoming a static document that progressively loses relevance as circumstances change. The annual review need not be conducted by the fund's full board — it may be conducted by the CCO or a compliance team — but the results of the annual review must be reported to the board as a component of the CCO's annual report required by Rule 38a-1(a)(4).
Rule 38a-1(a)(3) requires the fund to designate a chief compliance officer who is responsible for administering the fund's policies and procedures. The CCO must be an officer of the fund rather than a third-party service provider, though the CCO may be an employee of the fund's investment adviser or other service provider who simultaneously serves as an officer of the fund.
The CCO must be approved by the fund's board of directors — including a majority of the independent directors — and the CCO's compensation as it relates to the CCO's compliance responsibilities, and the CCO's removal from the compliance officer role, must also be approved by the board.
The board approval requirement for CCO appointment, compensation relating to compliance responsibilities, and removal is Rule 38a-1's most distinctive structural feature — the provision that most directly distinguishes the Fund Compliance Rule from the companion Rule 206(4)-7 applicable to investment advisers, which does not impose equivalent board approval requirements on the adviser's CCO.
By placing the appointment and removal of the fund's CCO under board control — including the approval of a majority of independent directors — Rule 38a-1 is designed to insulate the CCO from management pressure that might otherwise compromise the CCO's independence. A fund management team that disagrees with the CCO's compliance judgments cannot simply remove the CCO without board approval, protecting the CCO's ability to exercise independent professional judgment in administering the compliance programme.
Rule 38a-1(a)(4) establishes the CCO's reporting obligations. The CCO must furnish the fund's board of directors with an annual written report on the operation of the fund's policies and procedures and the policies and procedures of each service provider, including any material changes to those policies since the last report, any recommendations for material changes to the policies as a result of the annual review, and any material compliance matters that occurred since the date of the last report.
A material compliance matter is defined to include any compliance matter about which the fund's board would reasonably need to know to oversee fund compliance and that involves a violation of the federal securities laws by the fund or its personnel, a significant weakness in the design or implementation of the compliance programme that could have resulted in such a violation, or the imposition of a significant sanction on the fund or its personnel by a governmental authority.
The CCO must also meet with the fund's independent directors in executive session at least annually — without management or interested directors present — giving independent directors a direct and unmediated channel through which to receive the CCO's candid assessment of the compliance programme's effectiveness and any concerns the CCO may have about management's responsiveness to compliance issues.
This executive session requirement acknowledges that the board's oversight function can only be effective if independent directors have genuine access to the compliance officer's views without the potential inhibiting presence of management.
Rule 38a-1(b) addresses unit investment trusts, which do not have boards of directors in the traditional sense. If the fund is a unit investment trust, the fund's principal underwriter or depositor must approve the fund's policies and procedures and the CCO, must receive all annual reports, and must approve the removal of the CCO.
This modified framework reflects the different governance structure of unit investment trusts, substituting the principal underwriter or depositor — the entities primarily responsible for the trust's operation — for the board of directors in the performance of the oversight functions that Rule 38a-1 assigns to fund boards for open-end and closed-end funds.
Rule 38a-1(c) establishes the undue influence prohibition — one of the most consequential provisions in the rule. No officer, director, or employee of the fund, its investment adviser, or principal underwriter, or any person acting under such person's direction, may directly or indirectly take any action to coerce, manipulate, mislead, or fraudulently influence the fund's CCO in the performance of his or her duties under Rule 38a-1.
This prohibition is independent of the specific board approval requirements for CCO appointment and removal — it applies to any attempt to improperly influence the CCO's exercise of compliance judgment, regardless of whether that attempt rises to the level of seeking the CCO's removal.
The undue influence prohibition has significant enforcement consequences: an attempt to coerce or mislead the CCO is independently actionable under Rule 38a-1(c) even if the specific compliance decision being influenced is ultimately made correctly, because the integrity of the compliance function depends on the CCO's ability to exercise independent judgment free from management pressure.
Rule 38a-1(e) establishes the recordkeeping requirements. The fund must maintain: a copy of the policies and procedures that are in effect or at any time within the past five years were in effect; any material changes to those policies and procedures and the reasons for those changes; a copy of the CCO's annual report; and a record of each material compliance matter, including the steps taken to address the matter. These records must be maintained for at least five years in an easily accessible place for the first two years.
Scope of Application
Rule 38a-1 applies to every registered investment company — the full universe of open-end mutual funds, closed-end funds, Exchange-Traded Funds, money market funds, and unit investment trusts registered under the Investment Company Act.
Its application to ETFs — a category that has grown from approximately $150 billion in assets under management at the time of the rule's adoption to over $10 trillion by 2025 — reflects the rule's durability across dramatically changing product landscapes.
The Division of Examinations' 2026 Examination Priorities specifically identified registered investment companies including mutual funds and ETFs as examination focus areas, with attention to portfolio management practices and disclosures, fees and expenses, marketing materials, and the amended Names Rule whose compliance dates of June 11, 2026 for larger fund groups and December 11, 2026 for smaller fund groups directly implicate the compliance programme infrastructure that Rule 38a-1 requires.
Rule 38a-1 does not itself prescribe the specific content of the compliance policies and procedures that funds must adopt — beyond requiring that those policies provide for oversight of service provider compliance and address the areas of the fund's operations that present significant compliance risk.
The Commission deliberately chose a principles-based standard — reasonably designed to prevent violation of the federal securities laws — rather than a prescriptive checklist, to provide flexibility for the compliance programme's content to be tailored to each fund's specific operational characteristics, risk profile, and service provider relationships.
Relationship to Related Rules and Regulations
Rule 38a-1 was adopted simultaneously with Rule 206(4)-7 under the Investment Advisers Act — the companion compliance programme rule for registered investment advisers — as a coordinated regulatory initiative designed to establish compliance programme requirements across the complete spectrum of Commission-registered fiduciaries.
Where Rule 38a-1 applies to the registered fund as a legal entity, Rule 206(4)-7 applies to the fund's investment adviser as a separate registered entity. The two rules are operationally interconnected in that the fund's compliance programme under Rule 38a-1 must include oversight of compliance by the investment adviser — whose own compliance programme is separately required by Rule 206(4)-7 — creating a layered compliance framework in which the adviser's internal compliance infrastructure is the first line of defence and the fund-level compliance oversight required by Rule 38a-1 is the second.
Rule 38a-1's recordkeeping requirements are directly connected to Rule 204-2 under the Investment Advisers Act. Where Rule 38a-1(e) prescribes the records that the fund must maintain relating to its compliance programme, Rule 204-2 prescribes the records that the fund's investment adviser must maintain relating to its advisory business.
For funds where the adviser serves as the fund's administrator and maintains fund records, the two rules overlap in their practical application — the adviser's Rule 204-2 records and the fund's Rule 38a-1 records may be maintained in the same systems and reviewed by the same examination staff in a coordinated examination of the adviser-fund complex.
Rule 38a-1 connects directly to Rule 206(4)-1 — the Marketing Rule — through the compliance programme oversight requirement for fund marketing practices. A registered fund's compliance programme must include policies and procedures addressing the fund's advertising and marketing materials, and the CCO's annual report must address any material compliance matters relating to marketing — including any identified violations of Rule 206(4)-1 by the fund's adviser or distributor in their promotion of the fund's investment performance.
The Division of Examinations has identified fund marketing practices — including consistency of marketing materials with investment strategy disclosures and the Names Rule requirements — as a 2026 examination priority, directly implicating the compliance programme infrastructure that Rule 38a-1 mandates.
The Names Rule — Rule 35d-1 under the Investment Company Act, as amended in September 2023 — requires funds whose names suggest a particular type of investment or characteristic to adopt an 80% investment policy committing to invest at least 80% of their assets in accordance with that name.
The Names Rule's compliance requirements — including the adoption and implementation of policies ensuring that the 80% investment test is met and maintained — are a component of the compliance programme that Rule 38a-1 requires each fund to maintain.
The extended compliance dates of June 11, 2026 for larger fund groups and December 11, 2026 for smaller groups mean that Rule 38a-1 compliance programmes are actively being updated to incorporate Names Rule compliance policies as of the period encompassed by this entry.
Amendment History and Regulatory Evolution
Rule 38a-1's operative text has remained unchanged since its adoption in December 2003, reflecting the Commission's sustained confidence in the rule's principles-based framework.
The rule's stability in the face of significant changes in the registered fund industry — the growth of ETFs from a niche product to a dominant investment vehicle, the proliferation of alternative investment strategies within registered fund structures, and the expansion of the fund universe to include interval funds, tender offer funds, and other non-traditional structures — demonstrates the adaptability of the reasonably designed standard in accommodating a diverse and evolving product landscape.
The most significant post-adoption developments in the Rule 38a-1 landscape have occurred through the Division of Examinations' examination programme and Risk Alerts rather than through formal rule amendments.
The November 2019 Risk Alert — which documented deficiencies observed in over 300 registered investment company examinations conducted over a two-year period — identified the most common compliance programme failures: programmes that did not consider the nature of the fund's business activities; inadequate oversight of service provider compliance; failure to implement code of ethics procedures; and annual reviews that were nominal rather than substantive.
These examination findings have shaped the compliance programme practices of the registered fund industry, driving enhancements to CCO reporting structures, service provider oversight frameworks, and annual review methodologies across the fund complex.
The 2026 Examination Priorities' identification of registered investment companies as an examination focus area — with specific attention to fees and expenses, portfolio management practices, marketing materials, and Names Rule compliance — signals that the Division of Examinations will assess Rule 38a-1 compliance programme infrastructure as part of its evaluation of whether funds are maintaining the governance systems necessary to prevent violations in the areas identified as examination priorities.
Enforcement Context and SEC Action Patterns
Rule 38a-1 enforcement has proceeded through two channels. The first is the inclusion of Rule 38a-1 charges as a component of broader enforcement actions addressing substantive Investment Company Act violations — where the Commission has alleged that the underlying violation was both a breach of the specific substantive provision and evidence that the fund's compliance programme was inadequate to prevent the violation, constituting an independent Rule 38a-1 failure.
This dual-charge approach reinforces the Commission's position that the absence of adequate compliance infrastructure is independently actionable — a fund that violated Rule 22c-1's late trading prohibition has simultaneously committed a substantive violation of that rule and demonstrated a Rule 38a-1 compliance programme failure by having systems that permitted the late trading to occur.
The second enforcement channel involves standalone Rule 38a-1 actions — charges specifically targeting compliance programme failures rather than underlying substantive violations — where the Commission has identified inadequate compliance infrastructure as the independent harm warranting enforcement action.
Standalone actions have addressed situations where funds lacked written policies and procedures in specific areas, where the CCO's independence was compromised by management pressure, and where annual reviews were documented but substantively inadequate — annual reports that noted no material compliance matters in circumstances where significant compliance issues were in fact present.
The undue influence prohibition of Rule 38a-1(c) has been the basis for enforcement actions against fund management personnel who sought to override CCO compliance judgments, suppress information about compliance failures from board reporting, or influence the tone and content of annual CCO reports in ways that understated the significance of known compliance concerns.
These actions have emphasised that the integrity of the CCO reporting structure — and the board's ability to exercise meaningful oversight — depends on the CCO's freedom from management pressure that Rule 38a-1(c) is specifically designed to protect.
Examination Relevance and Key Takeaways
Rule 38a-1 is examined at the Series 65 level in the context of registered investment company governance and the compliance obligations applicable to mutual funds, ETFs, and other registered funds.
The four-component compliance programme structure — written policies and procedures, annual review, CCO designation with board approval, and annual CCO board reporting including executive session with independent directors — is the foundational examination content.
The distinction between Rule 38a-1's compliance programme requirement and the companion Rule 206(4)-7 requirement for investment advisers — particularly Rule 38a-1's unique provisions requiring board approval of the CCO's appointment and removal and the executive session reporting requirement — is examined in the context of the heightened governance standards applicable to registered funds relative to advisers.
The undue influence prohibition — which bars any officer, director, or employee of the fund, its adviser, or its principal underwriter from coercing, manipulating, misleading, or fraudulently influencing the CCO — is examined as the structural protection for CCO independence that gives the compliance programme its practical credibility.
The key points to retain are these. Rule 38a-1 requires every registered investment company to adopt written policies and procedures reasonably designed to prevent violations of the federal securities laws by the fund and to provide for oversight of compliance by the fund's investment advisers, principal underwriters, administrators, and transfer agents — with board approval including a majority of independent directors.
The fund must conduct an annual review of the adequacy and effectiveness of those policies and procedures. The fund must designate a chief compliance officer whose appointment, compensation related to compliance responsibilities, and removal require board approval including a majority of independent directors.
The CCO must furnish the board annually with a written report addressing the operation of the policies and procedures, material changes, recommendations, and any material compliance matters — and must meet with independent directors in executive session at least annually.
No officer, director, or employee of the fund, its adviser, or principal underwriter may coerce, manipulate, mislead, or fraudulently influence the CCO. Records of policies and procedures, material changes, CCO annual reports, and material compliance matters must be maintained for five years.
Rule 38a-1 was adopted December 2003, became effective February 5, 2004 with a compliance date of October 5, 2004, and has not been substantively amended through June 2026.
