The Desk and the Firm · The firm
17Regulators and Licences
A firm that trades only its own money need not be a client of anyone, and it has no clients of its own. Whether it needs a licence is another matter. The second Markets in Financial Instruments Directive keeps an exemption for firms dealing on their own account in the European Union, and then takes it away from almost every firm this series describes: from market makers, from members of a trading venue and firms with direct electronic access to one, and from any firm that applies a high-frequency algorithmic trading technique, however small it is and although it has no clients. Where a firm may trade, and what it must be to do so, is set by rules that differ by country and by activity, and the map of them is part of the firm’s design.
17.1 Why a trading firm needs permission
Regulation follows activities, not firms. The same firm can be unregulated for one thing it does, registered for another and licensed for a third, and a new desk, product or office can move it across a line it did not know was there.
Definition 17.1 (Regulatory perimeter, authorisation)
The regulatory perimeter of a jurisdiction is the boundary between the activities that require permission from a regulator and those that do not, drawn by the legislation’s definitions of regulated activities and its exemptions. Authorisation is the permission, granted by a regulator on application, to carry on specified regulated activities, with the conditions, capital and supervision that go with it.
Definition 17.2 (Dealing on own account, investment firm)
Dealing on own account is trading against proprietary capital that results in transactions in financial instruments. An investment firm is, in European law, a legal person whose regular occupation or business is providing investment services to third parties or performing investment activities on a professional basis; dealing on own account is one of those activities.
The chapter’s working tool is a map of these rules as data, each row naming a jurisdiction, an activity, the regime it touches, the legal reference, the statutory decision period where there is one, the month it was checked and the ledger rows that source it (Listing 17.1). The map is information about where the rules are; whether a particular firm is inside a perimeter is a question for its lawyers and its regulator.
def check(rows):
problems = []
for i, r in enumerate(rows):
missing = [k for k in FIELDS if k not in r]
if missing:
problems.append((i, "missing " + ", ".join(missing)))
continue
for k in ("reference", "as_of", "source"):
if not r[k]:
problems.append((i, f"empty {k}"))
if r["status"] not in STATUSES:
problems.append((i, f"bad status {r['status']}"))
if len(r["as_of"]) != 7 or r["as_of"][4] != "-":
problems.append((i, "as_of not YYYY-MM"))
return problems
def query(rows, profile):
"""profile: iterable of (jurisdiction, activity)."""
p = set(profile)
return [r for r in rows if (r["jurisdiction"], r["activity"]) in p]
def regimes(rows):
return sorted({(r["jurisdiction"], r["regime"]) for r in rows})
17.2 The United States: the SEC, the CFTC and the self-regulatory organisations
The United States divides the field by instrument. Securities fall to the Securities and Exchange Commission, futures, options on futures and swaps to the Commodity Futures Trading Commission; each delegates much of the registration and day-to-day supervision to a membership body.
Definition 17.3 (Self-regulatory organisation)
A self-regulatory organisation is a membership body, such as a securities association or an exchange, that writes and enforces rules for its members under the supervision of a government regulator, and to which registered firms are required to belong.
Definition 17.4 (Swap dealer, commodity pool operator, introducing broker)
A swap dealer holds itself out as a dealer in swaps, makes a market in them, or regularly enters into swaps with counterparties for its own account in the ordinary course of business. A commodity pool operator operates a pool that combines funds from several persons to trade futures, options on futures or swaps, and solicits funds for it. An introducing broker solicits or accepts orders in futures, options on futures or swaps but does not accept money or other assets from customers to support them.
As of September 2026 — US registration
Securities. A broker or dealer must register with the SEC to effect securities transactions (Exchange Act s. 15(a)); within 45 days of an application the SEC grants registration or opens proceedings, which must end within 120 days, extendable by up to 90 (s. 15(b)(1)). A registered broker-dealer must also join a registered securities association unless it trades solely on exchanges of which it is a member (s. 15(b)(8)); Rule 15b9-1, as amended in September 2023, limits that exemption to exchange members with no customer accounts that trade solely on their exchanges, with narrow exceptions. An investment adviser must register under the Advisers Act (s. 203(a)), on the same 45-day timetable. Derivatives. The Commodity Exchange Act requires certain firms to register with the CFTC, which has delegated registration to the National Futures Association; with few exceptions registered firms must be NFA members. The categories include futures commission merchants, introducing brokers, commodity pool operators, commodity trading advisors and swap dealers.
For a proprietary trading firm the 2023 amendment is the hook in American form: a firm that trades off-exchange, even for itself, now needs the securities association’s membership and its rulebook. Market access (Rule 15c3-5, Book 11) adds pre-trade controls whoever sponsors the firm’s orders.
17.3 Europe and the United Kingdom
Definition 17.5 (Passporting)
Passporting is the right of a firm authorised in one member state of the European Union or the European Economic Area to provide the services its authorisation covers in the others, on notification to its home regulator, without a further authorisation.
As of September 2026 — EU authorisation under MiFID II
Directive 2014/65/EU requires prior authorisation for investment services and activities performed as a regular occupation (art. 5), and the regulator must decide within six months of a complete application (art. 7(3)); an authorised firm may provide its services in other member states (art. 34). Firms dealing only on own account are exempt (art. 2(1)(d)) unless they are market makers, members or participants of a regulated market or MTF, have direct electronic access to a trading venue, apply a high-frequency algorithmic trading technique, or deal on own account when executing client orders. A firm engaged in algorithmic trading must have effective systems and risk controls, business continuity and tested systems (art. 17(1)), and must notify the authorities of its home state and of the venues where it trades (art. 17(2)).
As of September 2026 — UK permission
Under the Financial Services and Markets Act 2000 no person may carry on a regulated activity in the United Kingdom unless authorised or exempt (s. 19, the general prohibition). An application for permission must be determined within six months of the regulator receiving it complete, and an incomplete one within twelve months (s. 55V). The UK’s exemptions for own-account dealing are its own and are not restated here: the map marks the UK rows as checks.
The European exemption is worded so that almost no electronic trading firm meets it. A proprietary firm that is a member of an exchange, or that reaches one through direct electronic access, is out; one that co-locates, generates its orders without human intervention and sends many messages is applying a high-frequency technique (Book 10’s definition in the directive’s words, article 4(1)(40)) and is out again. What it gains in return is the passport.
17.4 Asia-Pacific
Asia’s markets are regulated country by country. In Hong Kong a corporation carrying on a business in a regulated activity needs a licence from the Securities and Futures Commission; the Securities and Futures Ordinance lists thirteen types, among them dealing in securities (type 1), dealing in futures contracts (type 2), providing automated trading services (type 7) and asset management (type 9). Whether a firm trading only its own money is carrying on such a business turns on the ordinance’s definitions and exemptions, so the map marks it as a check, not a requirement. Singapore, Japan and Australia each have their own licences; this chapter’s map carries only the rows it has sourced, and says so.
17.5 Rules for algorithmic trading
Once inside the perimeter, an electronic firm carries obligations specific to algorithms. They are the controls of Book 11’s chapter on risk controls, written into law: in the European Union, article 17 of MiFID II and its technical standards; in the United States, the market access rule for the broker whose connection the firm uses (Table 17.1).
| where | obligation | reference |
|---|---|---|
| EU | systems and risk controls, limits, no erroneous orders | Directive 2014/65/EU art. 17(1) |
| EU | business continuity; tested and monitored systems | Directive 2014/65/EU art. 17(1) |
| EU | notify home and venue authorities | Directive 2014/65/EU art. 17(2) |
| EU | detailed organisational requirements | Delegated Regulation (EU) 2017/589 (Book 11) |
| US | pre-trade risk controls for market access | Rule 15c3-5 (Book 11) |
firm.regmap.ALGO_CHECKLIST, each item with its reference.17.6 Tutorial: three offices
Goal. Query the map for a proprietary high-frequency firm that starts in London and adds offices in Chicago and Hong Kong. End state: the regimes each step touches (Table 17.2) and the statutory decision periods on the path (Figure 17.4).
- The map.
fm_regmap.rows()loads the 20 rows ofdata/desk/regmap.csv(four jurisdictions, ten regimes) andfirm.regmap.checkconfirms that every row has a reference, an as-of month and a source. - The profiles. London: own-account exchange trading with a high-frequency technique. Chicago adds the same in US securities. Hong Kong adds own-account exchange trading there.
- The queries.
fm_regmap.profiles()lists the rows, the distinct regimes and the longest statutory decision period. - The upkeep.
firm.regmap.stale(rows, today, 12)lists rows not checked for a year.
| profile | rows | regimes | required | to check | longest decision |
|---|---|---|---|---|---|
| London | 2 | 1 | 0 | 2 | 6 months (UK) |
| London and Chicago | 5 | 4 | 2 | 2 | 6 months (UK) |
| London, Chicago and Hong Kong | 6 | 5 | 2 | 3 | 6 months (UK) |
fm_regmap.profiles.fm_regmap.profiles.fm_regmap.PERIODS; sources in the chapter’s ledger.The London firm touches one regime, a set of checks on the UK’s general prohibition; Chicago adds three (broker-dealer registration, association membership unless it trades only on its own exchanges, and the market access rule); Hong Kong adds a licence check. The longest statutory decision on the path is the UK’s six months for a complete application, twelve for an incomplete one; the US broker-dealer decision is 45 days, or up to 210 if the SEC opens proceedings and extends them. The statutory periods start when the application is complete: the months spent writing the programme of operations, hiring the approved persons and capitalising the entity come first, and the periods are the part of the path a firm does not control.
Remark 17.6 (Keeping the map true)
Every row of the map is a dated fact about a law that changes. The map’s value is in its upkeep: an owner for each jurisdiction, a review date for each row, and a stale-row report that the compliance function reads. A year after this chapter’s check, every row will be stale.
17.7 Build: the regulatory map
Purpose. No build in the running-project sense: the subject is law. The analytical tool keeps the map as data, checked and queried.
Interface. firm.regmap: load, check, query, regimes, stale, longest_decision, ALGO_CHECKLIST; data in data/desk/regmap.csv.
Rules. Every row has a reference, an as-of month and a source; statuses are required, obligation or check; nothing is inferred beyond the rows.
Acceptance tests. code/firm/regmap/tests/: queries, regimes and longest periods on a three-row map; the schema check and the stale report.
Stretch. Rows for Singapore, Japan and Australia with their sources; capital requirements per row (chapter 2); a diff between two versions of the map.
Sources and further reading
- Directive 2014/65/EU (MiFID II), articles 2, 4, 5, 7, 17 and 34.
- Financial Services and Markets Act 2000, sections 19 and 55V.
- Securities Exchange Act of 1934, section 15; 17 CFR 240.15b9-1; Investment Advisers Act of 1940, section 203; NFA, registration categories.
- Securities and Futures Commission, licensing: types of regulated activity.
17.8 Exercises
Exercise 17.1 ★
A firm deals only on its own account in EU equities, through a broker, with no direct electronic access and no algorithm. Is it within the MiFID II exemption? What changes if it becomes a member of the exchange?
Solution
Solution of Exercise 17.1.
On the text of article 2(1)(d), yes, if it is not a market maker, provides no other investment service and does not deal on own account when executing client orders. Membership of the exchange is one of the listed exceptions: it would then need authorisation.
Exercise 17.2 ★
Name the three features of a high-frequency algorithmic trading technique in MiFID II.
Solution
Solution of Exercise 17.2.
Latency-minimising infrastructure (co-location, proximity hosting or high-speed direct electronic access); system-determined order initiation, generation, routing or execution without human intervention; high message intraday rates.
Exercise 17.3 ★
What is the longest period the SEC can take on a broker-dealer application under section 15(b)(1)?
Solution
Solution of Exercise 17.3.
45 days to grant or open proceedings; proceedings concluded within 120 days of filing, extendable by up to 90: 210 days in all.
Exercise 17.4 ★★
What does the 2023 amendment of Rule 15b9-1 change for a proprietary firm that trades on an exchange and also off-exchange?
Solution
Solution of Exercise 17.4.
The exemption from securities-association membership now requires trading solely on exchanges of which the firm is a member; off-exchange trading, beyond the narrow exceptions, brings association membership and its rules.
Exercise 17.5 ★★
A US firm runs a futures fund for outside investors and gives trading advice. Which CFTC categories does the map point to, and through whom does it register?
Solution
Solution of Exercise 17.5.
Commodity pool operator for the fund and commodity trading advisor for the advice; registration with the CFTC through the NFA, with NFA membership.
Exercise 17.6 ★★
Why does the map mark the UK and Hong Kong own-account rows as checks rather than requirements?
Solution
Solution of Exercise 17.6.
The general prohibition and the licensing requirement apply to regulated activities carried on as a business; whether own-account trading is one depends on definitions and exemptions the map does not restate, so the row points to the rule and says it must be checked.
Exercise 17.7 ★★★
Coding. Query the map for an EU market maker using a high-frequency technique. How many rows and regimes, and what is the longest statutory decision?
Solution
Solution of Exercise 17.7.
Three rows (authorisation as a market maker, authorisation for the high-frequency technique, and the article 17 obligations), two regimes, and a six-month decision period.
Exercise 17.8 ★★★
Find the flaw. “We only trade our own money, so we don’t need a licence anywhere.”
Solution
Solution of Exercise 17.8.
Regulation follows activities, not clients: in the EU exchange membership, direct electronic access or a high-frequency technique removes the own-account exemption; in the US off-exchange trading brings association membership; elsewhere the definitions must be checked.
17.9 Problem: Three Offices
Problem 17.1
Weekend problem — three offices
A London proprietary firm plans offices in Chicago and Hong Kong and asks its chief operating officer for the regulatory path.
Part I — The perimeter.
- Define the regulatory perimeter and authorisation.
- Define dealing on own account and an investment firm.
- State the MiFID II own-account exemption and its exceptions.
- Define passporting and say what it gives an EU-authorised firm.
Part II — The United States.
- Define a self-regulatory organisation and name two.
- State the broker-dealer registration and membership rules and their timetable.
- Define a swap dealer, a commodity pool operator and an introducing broker.
- What does the market access rule add?
Part III — The map.
- What does each row of the map carry, and why?
- Query the three profiles and give rows and regimes.
- Give the statutory decision periods on the path.
- What does the stale-row report show a year later?
- What does the map not tell the firm?
Part IV — The plan.
- What obligations follow for the firm’s algorithms in the EU?
- What must be done before an application’s statutory clock starts?
- Which step of the path does the firm control, and which not?
- How would you keep the map up to date?
- Why is Hong Kong a check and not a requirement in the map?
- State the named result: the regimes the firm’s activities touch as it adds a second and a third jurisdiction, and the longest statutory decision period on its path to trading.
- In two sentences, write the plan.
Solution
Solution of Problem 17.1.
- See Definition 17.1.
- See Definition 17.2.
- See Box 17.2.
- See Definition 17.5; the right to provide its authorised services in other member states.
- See Definition 17.3; a registered securities association and the NFA.
- See Box 17.1: 45 days, up to 120 plus 90 with proceedings.
- See Definition 17.4.
- Pre-trade risk controls and supervisory procedures on the broker’s market access.
- Jurisdiction, activity, status, regime, category, reference, decision period, as-of month and source: so that each statement can be checked and dated.
- 2, 5 and 6 rows; 1, 4 and 5 regimes.
- Six months in the UK (twelve if incomplete), six months in the EU, 45 to 210 days for a US broker-dealer.
- Every row stale, since each was checked in September 2026.
- Whether the firm is inside a perimeter, what its application must contain, and what the regulator will ask: questions for its lawyers.
- Systems and risk controls, business continuity, testing, notification to the home and venue authorities, and the technical standards.
- The programme of operations, the governance and approved persons, the capital, and the systems and controls the application describes.
- It controls the preparation; it does not control the regulator’s period, which starts from a complete application.
- An owner per jurisdiction, a review date per row, and a stale-row report read by compliance.
- Licensing depends on carrying on a business in a regulated activity, and the map does not restate the ordinance’s definitions.
- One regime in London, four with Chicago, five with Hong Kong; the longest statutory decision is six months (UK, complete application).
- Prepare complete applications in each jurisdiction, UK first since its decision period is longest, with algorithmic controls documented for all three; keep the map dated and reviewed, with legal advice on every check row.
17.10 Interview questions
Interview question 17.1 ★ trader
Why does a proprietary trading firm that has no clients need a licence in the EU?
Solution
Solution of Interview question 17.1.
Because the exemption for own-account dealing is lost by exchange members, firms with direct electronic access and firms using a high-frequency technique, which covers almost every electronic trading firm.
What the interviewer is looking for: the exceptions to the exemption.
Interview question 17.2 ★ developer
What does it mean, legally, for your firm to engage in algorithmic trading in the EU?
Solution
Solution of Interview question 17.2.
The firm must have effective systems and risk controls, business continuity and tested systems, and must notify its home and venue authorities, who may ask for descriptions of its strategies and controls.
What the interviewer is looking for: article 17.
Interview question 17.3 ★★ risk
Your firm wants to trade swaps with banks for its own account. What would you check in the US?
Solution
Solution of Interview question 17.3.
Whether its swap activity makes it a swap dealer (holding out, making a market, regularly entering swaps in the ordinary course of business), and if so CFTC registration through the NFA.
What the interviewer is looking for: the dealer definition.
Interview question 17.4 ★★ developer
Design a data model for a regulatory map that can be audited.
Solution
Solution of Interview question 17.4.
Rows with jurisdiction, activity, status, regime, reference, decision period, as-of date and source; append-only versions with a diff; a schema check and a stale report.
What the interviewer is looking for: sources and dates on every row.
Interview question 17.5 ★★ trader, risk
What is passporting, and what happens to it when a country leaves the single market?
Solution
Solution of Interview question 17.5.
The right of an authorised firm to serve other member states on its home authorisation; it rests on the directive, so a firm authorised only in a state outside the single market no longer has it and needs authorisation within it.
What the interviewer is looking for: the passport’s legal basis.
Interview question 17.6 ★★★ risk
Plan the regulatory path for a firm moving from trading its own money to managing outside money, in the US and the EU.
Solution
Solution of Interview question 17.6.
US: investment adviser registration, and CPO or CTA registration for futures; EU: authorisation for portfolio management or a fund manager’s regime; both with timetables, capital and compliance functions, and legal advice on each.
What the interviewer is looking for: activities mapped to regimes.