--- title: Gurbir Grewal and 'A Culture of Proactive Compliance' description: Is the SEC Director of Enforcement's vision achievable? image: https://www.mirrorweb.com/hubfs/Imported_Blog_Media/659eb4dae210bf863e3d7f0b_redd-f-5U_28ojjgms-unsplash.jpg --- [Skip to content](https://www.mirrorweb.com/blog/gurbir-grewal-and-a-culture-of-proactive-compliance#main-content) [![Master Logo - ColourWhite Landscape](https://www.mirrorweb.com/hs-fs/hubfs/Master%20Logo%20-%20Colour%EF%80%A2White%20Landscape.png?width=178&height=40&name=Master%20Logo%20-%20Colour%EF%80%A2White%20Landscape.png "Master Logo - ColourWhite Landscape")](https://www.mirrorweb.com/) - [Unified Platform](https://www.mirrorweb.com/platform/) Show submenu for Unified Platform - [Mira - Supervision Agent](https://www.mirrorweb.com/mira) - [Website Archiving](https://www.mirrorweb.com/platform/website-archiving/) - [Email & Communication Archiving](https://www.mirrorweb.com/platform/email-archiving/) - [Social Media Archiving](https://www.mirrorweb.com/platform/social-media-archiving/) - [Mobile Archiving](https://www.mirrorweb.com/platform/mobile-archiving/) - Solutions Show submenu for Solutions - [By Industry](https://www.mirrorweb.com/industries/) Show submenu for By Industry - [Financial Services](https://www.mirrorweb.com/industries/financial-services/) - [Government](https://www.mirrorweb.com/industries/government/) - [Healthcare](https://www.mirrorweb.com/industries/healthcare-pharma/) - [Insurance](https://www.mirrorweb.com/industries/insurance/) - [Legal](https://www.mirrorweb.com/industries/legal/) - [Technology](https://www.mirrorweb.com/industries/technology/) - [By Use Case](https://www.mirrorweb.com/use-cases/) Show submenu for By Use Case - [Agentic Communications Supervision](https://www.mirrorweb.com/mira) - [Communication Capture](https://www.mirrorweb.com/use-cases/communication-capture/) - [Prevent Compliance Violations](https://www.mirrorweb.com/use-cases/prevent-compliance-violations) - [Audit-Ready Recordkeeping](https://www.mirrorweb.com/use-cases/audit-ready-automated-record-keeping/) - [Reduce Costs & Improve Efficiency](https://www.mirrorweb.com/use-cases/compliance-cost-efficiency/) - [Website Archiving](https://www.mirrorweb.com/use-cases/website-archiving/) - [By Channel](https://www.mirrorweb.com/channels/) Show submenu for By Channel - [Website](https://www.mirrorweb.com/use-cases/website-archiving/) - [Email](https://www.mirrorweb.com/channels/email/) - [Social Media](https://www.mirrorweb.com/channels/social-media/) - [Instant Messaging](https://www.mirrorweb.com/channels/instant-messaging/) - [Mobile](https://www.mirrorweb.com/channels/mobile/) - Why MirrorWeb Show submenu for Why MirrorWeb - [Customer Success](https://www.mirrorweb.com/case-studies) - [About Us](https://www.mirrorweb.com/why-mirrorweb/about) - [Careers](https://www.mirrorweb.com/careers/) - [Partnerships](https://www.mirrorweb.com/partnerships/) - Resources Show submenu for Resources - [Blog](https://www.mirrorweb.com/blog) - [Events](https://www.mirrorweb.com/events) - [Help Center](https://help.mirrorweb.com/en/) - [Legal Resources](https://www.mirrorweb.com/help-centre/legal/) [Request a demo](https://www.mirrorweb.com/demo) [Login](https://my.mirrorweb.com/login) # Gurbir Grewal and 'A Culture of Proactive Compliance' [![](https://www.mirrorweb.com/hubfs/Blog_Author.png) Sean Stapleton](https://www.mirrorweb.com/blog/author/sean-stapleton) [Financial Services](https://www.mirrorweb.com/blog/tag/financial-services) Published: 09 Jan 2024 ![](https://www.mirrorweb.com/hubfs/Imported_Blog_Media/659eb4dae210bf863e3d7f0b_redd-f-5U_28ojjgms-unsplash.jpg) #### Table of Contents [Contact Us](https://www.mirrorweb.com/contact/) Share When a new year begins, it’s natural to reflect on our direction and make improvements where we can. This doesn't just apply to individuals, but organizations too – it's a clean slate across the board. As we enter 2024, the Director of the SEC’s Division of Enforcement, Gurbir Grewal, is focused less on resolutions, and more an actual revolution. Speaking at the New York City Bar Association Compliance Institute in October 2023, he stated: “Public trust in our institutions is faltering....but it is clear that we cannot reverse those trends alone. We need your help to do so. We need to work together to create what I call a *culture of proactive compliance*.” Thankfully, Mr Grewal also revealed guidelines for compliance staff and financial organizations to follow in order to establish his desired principles. Here we will unpick his vision, why he has chosen now to be so candid, and how his guidelines can help the firms tasked with making progress. #### **What led to this?** Gurbir Grewal has occupied his role since July 26th, 2021. He recently revealed that [his ambition was to enhance public trust in institutions](https://www.arnoldporter.com/en/perspectives/blogs/enforcement-edge/2023/03/sec-priorities-discussed-at-sifma), and that he wished to ‘impose penalties that would have a lasting impact across the industry’.   When analyzing Grewal’s comments at the Compliance Institute, it’s important to consider the regulatory developments that preceded them. During his speech, he refers to an erosion of public trust. “No sector is immune to this trend … If the public doesn’t think the system is fair … they are not going to invest their hard-earned money. This hurts all those companies, professionals, and other market participants who are playing by the rules and doing the right thing” The elephant in the room here is undoubtedly the WhatsApp fines that have dominated the last couple of years, and that have prompted intense (and very public) media scrutiny. Grewal is aware that this doesn’t fill consumers with confidence, and so has made it very clear that for the sake of market integrity, penalties must be applied across the board, and all bad actors must be held accountable. The regulator’s unwavering application sends a strong message. Firstly, fairness, with no concessions made to culpable firms, whether large or small. Secondly, it demonstrates that Grewal’s vision isn’t a flavor of the month box-ticking exercise, but a real shift in mindset and behavior that will promote the right decisions being made naturally rather than in a prescriptive manner. It’s not a quick fix, but a long-term solution to an age-old problem, coaxing people to ‘do the right thing’ rather than what they can get away with. #### **Stuck in the middle** During his speech, Grewal also clarified when CCOs would be held accountable for their actions, and charges would be filed against them. This would happen... - where compliance personnel affirmatively participated in misconduct unrelated to the compliance function; - where they misled regulators; and - where there was a wholesale failure by them to carry out their compliance responsibilities.   CCOs were also reassured that the SEC *“*does not second-guess good faith judgments of compliance personnel made after reasonable inquiry and analysis*”.* He appears to acknowledge that compliance is a difficult profession - they're tasked with enforcing measures set out by regulators while enabling their companies to flourish, and so give and take on either side will always be tested.   It’s helpful for Grewal to clarify exactly where compliance professionals stand, and what actions will trigger the SEC to act against them. He is clearly sympathetic to the challenging nature of their responsibilities, but needs to convey that a role in compliance is not a get-out-of-jail-free card. #### **The three E’s** Grewal has shared ‘three E’s’ for firms to adhere to to enable a culture of proactive compliance. **Education –** This entails proactively keeping on top of new legislation, regulatory enforcement, and cultural developments that may have an influence on proceedings (the impact of AI, for example). By issuing fines publicly and vehemently, Grewal insists that the SEC is doing its bit in contributing to this education. **Engagement –** Only by engaging with personnel across organizations can CCO’s learn about their ‘activities, strategies, risks’. This is vital to accurately assess the compliance gaps in an organization, and where improvements can be made and processes changed. Engaging with staff also builds trust and accountability. **Execution –** It's all well and good having written procedures in place – you need to follow them if you want to enact meaningful change. In the case of the WhatsApp fines, relevant policies were formalized but largely ignored, and firms were eventually held accountable for their misconduct.   As Grewal explains, “through leadership, training, constant oversight and the right tone at the top, you need to ensure that the policies are actually implemented and followed. That’s what proactive compliance requires.” #### **The buffer period** An interesting thing to consider is that with the proliferation of digital channels and developments in technology, regulators take time to catch up with consumer behavior. They need to be very precise with the rules they enforce, and so cannot dive headfirst into issues as they emerge.   That is what has happened with WhatsApp, and while many companies were flagrantly breaching [record-keeping regulations](https://en.wikipedia.org/wiki/SEC_Rule_17a-4), you could also argue that the SEC’s inaction on the matter lulled firms into a false sense of security, resulting in complacency. It’s clear that having looked the other way for some time, the regulator has now drawn a line in the sand.   This perfectly exemplifies the value of proactive compliance; businesses have a headstart on regulators, and just because something is not yet explicitly prohibited, that doesn’t make it a loophole. After all, who knows what the next WhatsApp will be? It’s safest for firms to ‘do the right thing’ and apply [fundamental principles](https://en.wikipedia.org/wiki/Securities_Exchange_Act_of_1934) to modern technology, or it could cost them, financially and reputationally.   By acknowledging the difficult space compliance personnel occupy and applying some common sense to proceedings, Grewal may well have recruited more supporters within the compliance sector. Those individuals need support themselves, and with the right systems in place ([growing dependence on RegTech platforms](https://bit.ly/47i9rAA) is anticipated in 2024), they'll be better equipped to manage a snowballing workload and adhere to his guidelines. This will make a difference, and help realize his vision; to build a proactive culture that regulators and compliance personnel can both buy into, together.  #### **How MirrorWeb can help** The MirrorWeb Insight platform captures and archives internal and external digital communications, from iMessage and websites to social media and WhatsApp. This means transparency and accountability, halting improper conduct at source and empowering a culture of compliance across your firm.   Insight was built to lighten the load for compliance personnel, and to streamline the processes critical to full regulatory oversight. Proactivity is rewarded, so book a demo above to take a closer look! ## Read On [![](https://www.mirrorweb.com/hs-fs/hubfs/Imported_Blog_Media/65410a4d0aecec5cc446f41d_adem-ay-ik_AuIWeBBM-unsplash%20(1).jpg?width=352&name=65410a4d0aecec5cc446f41d_adem-ay-ik_AuIWeBBM-unsplash%20(1).jpg)](https://www.mirrorweb.com/blog/update-how-the-sec-keeps-raising-the-stakes-on-mobile-messaging) #### [UPDATE - How the SEC Keeps Raising the Stakes on Mobile Messaging](https://www.mirrorweb.com/blog/update-how-the-sec-keeps-raising-the-stakes-on-mobile-messaging) When JP Morgan Chase was fined $200 million for recordkeeping failures in 2021, it felt monumental.... [Read story](https://www.mirrorweb.com/blog/update-how-the-sec-keeps-raising-the-stakes-on-mobile-messaging) [![](https://www.mirrorweb.com/hs-fs/hubfs/Imported_Blog_Media/65410a4d0aecec5cc446f41d_adem-ay-ik_AuIWeBBM-unsplash%20(1)-1.jpg?width=352&name=65410a4d0aecec5cc446f41d_adem-ay-ik_AuIWeBBM-unsplash%20(1)-1.jpg)](https://www.mirrorweb.com/blog/how-the-sec-keeps-raising-the-stakes-on-mobile-messaging) #### [How the SEC Keeps Raising the Stakes on Mobile Messaging](https://www.mirrorweb.com/blog/how-the-sec-keeps-raising-the-stakes-on-mobile-messaging) When JP Morgan Chase was fined $200 million for recordkeeping failures in 2021, it felt monumental.... [Read story](https://www.mirrorweb.com/blog/how-the-sec-keeps-raising-the-stakes-on-mobile-messaging) [![Two business professionals passing a relay baton, illustrating the shift in off-channel communications enforcement from the SEC to FINRA in financial services compliance](https://www.mirrorweb.com/hs-fs/hubfs/Baton_blog%20image.webp?width=352&name=Baton_blog%20image.webp)](https://www.mirrorweb.com/blog/how-finra-took-the-sec-baton-with-off-channel-penalties) #### [How FINRA Took the SEC's Baton With Off-Channel Penalties](https://www.mirrorweb.com/blog/how-finra-took-the-sec-baton-with-off-channel-penalties) It started with JPMorgan in December 2021 - a $125 million fine for WhatsApp recordkeeping failures... [Read story](https://www.mirrorweb.com/blog/how-finra-took-the-sec-baton-with-off-channel-penalties) [![Master Logo - ColourWhite Landscape](https://www.mirrorweb.com/hs-fs/hubfs/Master%20Logo%20-%20Colour%EF%80%A2White%20Landscape.png?width=178&height=40&name=Master%20Logo%20-%20Colour%EF%80%A2White%20Landscape.png "Master Logo - ColourWhite Landscape")](https://www.mirrorweb.com/) Stay Connected. Stay Compliant. #### Quick Links - [Communication Capture](https://www.mirrorweb.com/use-cases/communication-capture/) - [Prevent Compliance Violations](https://www.mirrorweb.com/use-cases/prevent-compliance-violations) - [Audit-Ready Recordkeeping](https://www.mirrorweb.com/use-cases/audit-ready-automated-record-keeping/) - [Supervising Digital Communications](https://www.mirrorweb.com/use-cases/supervised-digital-communication/) - [Reduce Costs & Improve Efficiency](https://www.mirrorweb.com/use-cases/compliance-cost-efficiency/) #### Find Us **North America** 701 Brazos St Suite 970 Austin, Texas 78701-3232 **United Kingdom** Manchester House 18-22 Bridge Street Manchester M3 3BZ #### Speak to us If you have any questions, please don’t hesitate to get in touch! [Contact Us](https://www.mirrorweb.com/contact/) © MirrorWeb 2026 • [Terms](https://www.mirrorweb.com/help-centre/legal/terms/) | [Privacy Policy](https://www.mirrorweb.com/help-centre/legal/privacy-policy/) ![673cba813eccf634bab46632_Motherboard 300 x 300 signatory badge](https://www.mirrorweb.com/hs-fs/hubfs/673cba813eccf634bab46632_Motherboard%20300%20x%20300%20signatory%20badge.jpg?width=200&height=200&name=673cba813eccf634bab46632_Motherboard%20300%20x%20300%20signatory%20badge.jpg) ![65eeeb5ba22a2ed7014d4f4d_21972-312_SOC_NonCPA](https://www.mirrorweb.com/hs-fs/hubfs/65eeeb5ba22a2ed7014d4f4d_21972-312_SOC_NonCPA.png?width=200&height=200&name=65eeeb5ba22a2ed7014d4f4d_21972-312_SOC_NonCPA.png) ![64b658f3e0cbdcbe04e83981_27001 RGB Purple-p-500](https://www.mirrorweb.com/hs-fs/hubfs/64b658f3e0cbdcbe04e83981_27001%20RGB%20Purple-p-500.png?width=200&height=200&name=64b658f3e0cbdcbe04e83981_27001%20RGB%20Purple-p-500.png) ![64b6590db2301cbb306c2e34_9001 RGB Purple-p-500](https://www.mirrorweb.com/hs-fs/hubfs/64b6590db2301cbb306c2e34_9001%20RGB%20Purple-p-500.png?width=200&height=200&name=64b6590db2301cbb306c2e34_9001%20RGB%20Purple-p-500.png) ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Sean Stapleton", "url" : "https://www.mirrorweb.com/blog/author/sean-stapleton" }, "dateModified" : "2025-04-24T08:31:45.020Z", "datePublished" : "2024-01-09T06:00:00.000Z", "headline" : "Gurbir Grewal and 'A Culture of Proactive Compliance'", "image" : [ "https://www.mirrorweb.com/hubfs/Imported_Blog_Media/659eb4dae210bf863e3d7f0b_redd-f-5U_28ojjgms-unsplash.jpg" ], "mainEntityOfPage" : { "@id" : "https://www.mirrorweb.com/blog/gurbir-grewal-and-a-culture-of-proactive-compliance", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://www.mirrorweb.com/hubfs/Offical%20Logos%20-%20Flat%20Colours%202024_Black%20Logo-1.png" }, "name" : "MirrorWeb, Inc." } } ``` ```json { "@context" : "https://schema.org", "@id" : "https://www.mirrorweb.com/#organization", "@type" : "Organization", "areaServed" : [ { "@type" : "Country", "identifier" : "US", "name" : "United States" }, { "@type" : "Country", "identifier" : "GB", "name" : "United Kingdom" } ], "contactPoint" : { "@type" : "ContactPoint", "areaServed" : [ "US", "GB" ], "contactType" : "sales", "url" : "https://www.mirrorweb.com/demo" }, "description" : "MirrorWeb is the communications supervision platform for SEC- and FINRA-regulated financial services firms, unifying communications capture, archiving, and AI-native supervision.", "foundingDate" : "2012", "foundingLocation" : { "@type" : "Place", "name" : "Manchester, United Kingdom" }, "knowsAbout" : [ "communications supervision", "AI communications supervision", "electronic communications archiving", "email archiving", "SEC Rule 17a-4 compliance", "WORM storage", "FINRA Rule 3110 compliance", "Written Supervisory Procedures", "off-channel communications compliance", "BYOD archiving", "WhatsApp compliance", "mobile communications archiving", "social media archiving", "website archiving", "web content archiving", "FINRA Rule 2210 compliance", "SEC marketing rule compliance", "web changes tracking", "eDiscovery", "digital communications governance and archiving", "communications compliance software", "RegTech" ], "knowsLanguage" : [ "en" ], "legalName" : "MirrorWeb Inc.", "logo" : { "@id" : "https://www.mirrorweb.com/#logo", "@type" : "ImageObject", "url" : "https://www.mirrorweb.com/hubfs/master-logo.png" }, "name" : "MirrorWeb", "sameAs" : [ "https://www.linkedin.com/company/mirrorweb", "https://www.youtube.com/@mirrorweb", "https://www.g2.com/products/mirrorweb", "https://www.capterra.com/p/171780/Website-Social-Media-Archiving/", "https://www.crunchbase.com/organization/mirrorweb" ], "slogan" : "The communications supervision platform.", "url" : "https://www.mirrorweb.com/" } ``` ```json { "@context" : "https://schema.org", "@id" : "https://www.mirrorweb.com/#website", "@type" : "WebSite", "name" : "MirrorWeb", "publisher" : { "@id" : "https://www.mirrorweb.com/#organization" }, "url" : "https://www.mirrorweb.com/" } ```