Don’t Be Blindsided by Regulatory Compliance: The Problem With “Set It and Forget It”

| March 11 2020

It’s 2020—where’s my flying car? For that matter, where’s my fully autonomous car? Elon Musk keeps promising it’s almost here. But if you’re hoping that your car will cheerfully schlep you to the office by the end of this year, get used to disappointment.

photo-1550899194-91c07fe1dcb0

Photo by Ciel Cheng on Unsplash

The draw of self-driving cars—and other futuristic technologies promising effortless convenience—is the time that they would free up from repetitive daily tasks. We want to just be able to “set it and forget it” with mindless tasks like commuting so we can get down to the good stuff, making more productive, or more enjoyable, use of our time.

The problem is that people who overestimate the autonomy of their not-really-self-driving cars have tried to set it and forget it, with disastrous results. A few notable incidents where people have been blindsided by situations that their cars couldn’t handle have demonstrated that we’re nowhere near achieving fully autonomous cars

The same potential for disaster applies to other set-it-and-forget-it scenarios, such as archiving your website for regulatory compliance.

photo-1511762180596-d03b808430fe

Photo by Casey Horner on Unsplash

Financial and insurance companies are in a Catch-22: they want to attract customers with creative, engaging, interactive websites, but they know they have to create up-to-date archives of their online communications. And they don’t want to have to spend hours upon hours monitoring those archives or maintaining site maps for their vendor to use. The temptation is to just get their archiving lined up and go on to more interesting things. But as with overreliance on self-driving cars, setting it and forgetting it can lead to being blindsided by technological failures.

 

Meeting Regulatory Compliance Demands for Website Archives 

 

What do you have to archive from your website? If you’re in the financial or insurance industries, you’re probably keenly—even painfully—aware of your compliance obligations

photo-1580397500354-44dacc7d6334

Photo by Brad Stallcup on Unsplash

For example, under Financial Industry Regulatory Authority (FINRA) Regulatory Notice 10-06, broker-dealers are explicitly required to keep records of their online communications. That includes any content on company websites and social media accounts that constitutes “electronic communications” with the public related to the company’s “business as such.” FINRA Regulatory Notice 17-18 extended the recordkeeping rule to text messages, instant messages, and chat applications, requiring that “every firm that intends to communicate” through those means “must first ensure that it can retain records of those communications as required.” Those archives must be maintained in a complete, non-rewritable, and functional format—because a company’s compliance is only ever as good as its ability to prove that compliance. 

Are you prepared to defend yourself in a regulatory inquiry? Can you establish exactly what you’ve communicated or offered to customers and website visitors? Can you demonstrate that you had the correct disclaimers, that you didn’t make financial guarantees, and that your offerings were fair and equitable? You may think your archives are locked down … but when is the last time you checked that they were as solid as you expected them to be?

 

The Problem With “Set It and Forget It”

 

Some vendors urge their customers to “set it and forget it” thanks to their “automated” archives. That technology is terrific … until it’s not.

Say you do set up your archives and then forget all about them. For a while, everything might be fine. Then one day, your website or social media account logs the archiving system out and it fails to log back in. From that day forward, all that your archives will capture is a login screen, not the relevant content behind the login. 

 

Website Complexity Adds Collection and Preservation Challenges

 

Or suppose you upgrade your website to use a complex new content management system like Adobe Experience Manager or Sitecore Experience Manager. These systems are amazing for creating personalized website experiences. For example, if your business offers supplemental Medicare insurance, you can customize your plans to the viewer’s personal characteristics. The site first detects the viewer’s IP address and displays the plans that are available in their zip code. The user then selects their age range, gender, and current insurance coverage, and the site shows exactly which plans are available. This kind of user experience is great for prospective customers, who can get their hands on exactly the information they need.

photo-1546443046-ed1ce6ffd1ab

 

Photo by Sweetheart 陆初雪 on Unsplash

But can your archiving system access all that information? If you’re called on to demonstrate your regulatory compliance, you need to be able to capture the full visitor experience and walk the auditor through the steps to see the plans that were offered at the time of capture. 

If your website archiving technology isn’t up to that, you can’t afford to set it and forget it. We’ve had countless companies contact us because they’ve been blindsided by the discovery—days or weeks later—that their archiving system was incapable of capturing their new complex website. To make matters worse, the companies themselves have been the ones to find the errors, when they checked their archives and found that they weren’t capturing the upgraded website information. The autopilot never even realized anything was wrong. 

 

photo-1548138999-0dc78ea2c953

Photo by James Lee on Unsplash

Like driving, archiving a modern website is a tremendously complex job. Keeping track of and managing all the steps along a personalized customer journey is not for the faint of heart. Why put everything on the line with autopilot when total automation  isn’t quite equipped to handle every situation that could arise in an ever changing web environment. Having the additional service of a human pilot at the wheel—someone who’s paying attention to the surroundings, keeping a trained eye out for odd occurrences,  based on data metrics, best practices and experience is of great benefit if something is amiss. Correcting the course for compliance just became that much easier.

Remember, it’s not enough for your archives to get you just part of the way there. Partial compliance doesn’t count as compliance when a regulatory agency comes knocking. You need archives that fully comply with your archiving requirements—and you need someone keeping an eye on them to make sure that nothing is being missed. 

That’s what we do at Hanzo. 

 

The Hanzo Advantage: We Never Forget Your Archives

 

Fortunately, just because you can’t set it and forget it doesn’t mean that you need to be the one responsible for watching the road. With Hanzo, you can delegate the task of monitoring your website archives, to not only the efficiency of technology but supported by an experienced human QA services team whose number one priority is customer experience. 

That means your marketers can go crazy with your website design and your social media campaigns. Go on and create those interactive surveys. Personalize the heck out of your site. Make the best, most intuitive, most user-friendly website you can imagine. We’ll make sure you’re never blindsided. 

Hanzo’s staff has got its eye on your archives. You don’t have to worry about them. Not only does our technology automatically crawl your entire website at whatever frequency you’ve set up, but our team of human reviewers also routinely checks those archives to confirm that they’re keeping you in full compliance with your regulatory obligations. 

And we’re not just taking “snapshots” of your website using PDF or image captures. Your website is as interactive as if you were navigating the live site. Remember, you can’t interact with a snapshot, which means you can’t fully demonstrate your compliance. Hanzo’s archives are the only ones on the market that use native capture technology to create fully functional website replicas. While other companies claim to let you view your website as “as if it were live,” only Hanzo lets you effectively travel back in time to interact with the website you really had on the date of capture. 

 

We can’t give you a flying car—or even a functional self-driving car—but we can put your website archives safely on autopilot, supported by a human driver who’s on the lookout for trouble.

Want to see for yourself? Take a test drive

Related posts

7 Reasons Your Legal Department Wants You to Upgrade to Slack Enterprise Grid

7 Reasons Your Legal...

The global coronavirus pandemic has required that companies—practically overnight—restructure their offices to achieve ...

Read More >
The Bottom Line on Archiving Online Communications Under SEC Rules 17a-3 and 17a-4

The Bottom Line on Archiving...

If you’re in the financial services industry, you’ve got a lot on your plate. You’re researching investments, advising ...

Read More >
Ediscovery And Compliance Considerations In A Work-From-Home World

Ediscovery And Compliance...

Practical actions to ensure business continuity while reducing risk and preparing businesses to thrive in the future. ...

Read More >