MNPI Recognition for RIAs: What CCOs Need to Know

3 days ago
9 min read

MNPI Recognition for RIAs: What CCOs Need to Know

MNPI problems rarely arrive with a warning label. They show up in ordinary places: a due diligence packet, a casual comment from an issuer contact, a side conversation at an industry event, or a private fund update that says more than it should.

Every registered investment adviser must establish, maintain, and enforce written policies reasonably designed to prevent the misuse of material nonpublic information under Section 204A of the Investment Advisers Act. Most advisory personnel can repeat the basic definition of MNPI. The harder task is recognizing it before a trade, recommendation, model change, or research note turns a compliance issue into an enforcement problem.

This guide focuses on that practical gap. It explains the legal standard, the types of information the SEC often treats as sensitive, and the places RIAs most often encounter MNPI in real life.

This post is for informational purposes only and is not legal advice.

Close-up view of a sealed envelope beside a red caution tag — MNPI often appears in ordinary communications before anyone recognizes the risk.

The legal standard starts with material, nonpublic, and aware

MNPI has two core parts: the information must be material and nonpublic. A third concept, awareness, matters when assessing trading risk.

Information is material if there is a substantial likelihood that a reasonable investor would consider it important in making an investment decision. Courts also describe material information as something that would significantly alter the “total mix” of available information.

That standard comes from cases such as TSC Industries and Basic v. Levinson. It is intentionally broad. No policy can list every kind of information that might be material because the answer depends on context, the issuer, market expectations, timing, and the specificity of the information.

Information is nonpublic until it has been disseminated in a way that makes it available to investors generally. Common examples include:

A broadly distributed press release
An SEC filing
Broad media coverage
Public earnings calls or investor presentations

Even then, the market generally needs time to absorb the information.

By contrast, information can still be nonpublic if it is:

Known inside a company but not outside it
Shared with only a small group of analysts or investors
Circulating as market rumor
Mentioned privately at a conference
Included in a diligence room or investor update under confidentiality terms

The awareness standard is where employees often underestimate the risk. Under Rule 10b5-1, a trade is “on the basis of” MNPI if the person making the trade was aware of the information at the time. The SEC does not need to prove the person actually used the information in the decision.

That is why recognition matters. Once someone at the firm becomes aware of possible MNPI, the next step is not to debate whether the information “really mattered.” The next step is to escalate, restrict, document, and slow down trading decisions until the firm can assess the issue.

The SEC’s usual categories are only the starting point

The SEC has long treated certain categories of issuer information as especially likely to be material. These categories are not automatic MNPI, but they should trigger heightened attention.

Common examples include:

Earnings and financial results
Preliminary revenue, margin, cash flow, earnings, or guidance changes before public release.
Mergers, acquisitions, and tender offers
Deal negotiations, failed deal talks, financing developments, or changes in deal terms.
Major contracts or customer developments
A lost customer, new supply agreement, backlog change, or contract termination that could affect results.
Changes in management or control
CEO departures, board changes, activist involvement, or succession decisions before announcement.
Liquidity or solvency issues
Covenant breaches, refinancing problems, credit downgrades, bankruptcy planning, or going concern concerns.
Major litigation, investigations, or regulatory action
Government inquiries, settlement discussions, enforcement actions, or significant liability exposure.
Product, trial, or approval developments
Clinical trial results, product defects, approval delays, safety concerns, or launch results.
Cybersecurity incidents
Breaches, ransomware events, service disruptions, data loss, or internal findings that have not yet been disclosed.

The practical point for CCOs is simple: a policy that only defines MNPI will not train people to recognize it. Employees need examples tied to the firm’s investment strategy, research process, client base, and access points.

A long-only equity manager, a credit adviser, a private funds allocator, and an adviser using alternative data face different MNPI paths. The firm’s program should reflect that reality.

RIAs encounter MNPI in predictable places

Most MNPI issues do not begin with insider tips. They begin with legitimate business activity. That makes recognition harder.

Issuer calls and investor relations contact can cross the line

Public companies often speak with investors, analysts, and advisers. Those conversations are allowed, but they can create risk when the discussion moves beyond public information.

Red flags include:

A comment about the current quarter that has not been publicly announced
Confirmation that consensus estimates are “too high” or “too low”
Details about a pending customer loss
A hint that a deal announcement is coming
A response that corrects a market rumor in a selective way

Even silence can create questions if the issuer has a history of answering similar questions and suddenly refuses. Employees should not try to interpret selective signals. They should escalate the interaction and avoid trading in the issuer until compliance reviews it.

Due diligence on private funds and private companies can create public company risk

Advisers often review private fund materials, portfolio company data, investor letters, and data room documents. Those documents may include information about private companies, but they can also include sensitive information about public issuers.

For example, a private equity sponsor may discuss:

A pending sale to a public company
A public company customer that is delaying payments
A supplier disruption affecting listed issuers
A portfolio company contract with a public issuer
A planned IPO, merger, or restructuring

Allocators and advisers that invest in private funds should train their teams to think beyond the name of the fund. The question is not only whether the private fund information is confidential. The question is whether it gives the adviser nonpublic insight into a publicly traded issuer or related securities.

Expert networks and consultants require source discipline

Expert networks can be useful. They can also create MNPI risk when experts share information obtained through current employment, board roles, consulting work, customer relationships, or confidentiality obligations.

A strong expert network process should include:

Pre-call certifications from the expert
Topic restrictions before the call
Employee training on prohibited questions
A process to stop the call if sensitive information appears
Notes that show what was discussed and how issues were handled

The risky questions are often the most tempting ones. “What are you seeing this quarter?” or “Has the company changed its order volume?” may seek information that is not public if the expert has access to current customer, supplier, or internal data.

The best practice is to focus calls on general industry structure, historical context, public information, and non-confidential experience.

Conferences and informal conversations still count

MNPI rules do not pause at conferences, dinners, airport lounges, charity events, or hallway conversations. An employee can become aware of MNPI in a casual setting.

A comment like “the acquisition will be announced next week” does not become safe because it came from a social conversation. A CFO’s aside about weak quarterly bookings does not become public because several people overheard it.

Training should give employees permission to stop conversations. A simple response is often enough:

“I need to stop you there. If this is not public, I should not receive it.”

CCOs should make that response part of the firm’s culture. Employees should not feel that escalation will be treated as an overreaction. Overreporting is far easier to manage than a trade placed while someone had unresolved information.

Wide-angle view of an empty pathway outside a conference venue with a closed notebook on a bench — Informal settings can create real MNPI exposure.

Client and counterparty information can also be MNPI

RIA policies often focus on issuer information. That is necessary, but incomplete.

Client information may also create trading risk. For example, an adviser may know that a large institutional client plans to redeem, rebalance, liquidate a concentrated position, or fund a new allocation. If that activity is large enough to affect market price, the information may be material. It may also raise front-running, confidentiality, and fiduciary duty issues.

Counterparty information can create similar concerns. A firm may receive nonpublic information from lenders, restructuring advisers, placement agents, banks, broker-dealers, or transaction participants. In credit and distressed strategies, this is especially common.

Examples include:

A borrower seeking covenant relief before public disclosure
A restructuring plan shared with a creditor group
A private wall-crossing invitation
A refinancing failure not yet announced
A nonpublic asset sale process
Confidential information about a tender, exchange offer, or consent solicitation

The term “wall-crossing” deserves special attention. If the firm agrees to be wall-crossed, it may receive MNPI and accept trading restrictions. The process must be controlled. No employee should casually agree to receive confidential deal information without compliance involvement.

Alternative data and research vendors need a real review

Many advisers use data sets, research platforms, channel checks, web data, geolocation data, credit card data, app data, or supply chain information. The compliance question is not whether the data is interesting. The question is whether the vendor had the right to collect, use, and sell it, and whether the data reveals nonpublic information in a way that creates trading risk.

Vendor diligence should address:

The original source of the data
Consent and contractual rights
Privacy and confidentiality restrictions
Data aggregation and anonymization
Whether the data can identify specific companies, customers, or transactions
Whether the vendor receives information from insiders or restricted sources

A data set can look clean because it is packaged as a product. That label does not remove MNPI risk. CCOs should require documentation that supports the firm’s decision to use the data.

Recognition should trigger a clear response

A good MNPI program gives employees a path to follow when something feels wrong. The response should be simple enough to remember under pressure.

A practical escalation model can look like this:

Stop

Do not trade, recommend trading, update a model, or share the information further.
Preserve

Save the email, notes, document, chat, or call details. Do not edit the record to make it look cleaner.
Escalate

Contact compliance promptly. Include who shared the information, when, how, and what was said.
Restrict

Compliance should assess whether the issuer or related securities belong on a restricted list or watch list.
Document

Record the analysis, steps taken, trading restrictions, and any decision to permit or block activity.
Monitor

Review trading, personal securities activity, research activity, and communication around the issuer as needed.

The distinction between a watch list and a restricted list should be clear. A restricted list generally blocks or limits trading and recommendations. A watch list allows compliance to monitor activity more closely without broadly announcing the concern. Firms should tailor these tools to their structure, but employees need to know what each list means.

CCOs should test whether employees can spot the issue

Annual MNPI training often fails because it becomes a definition exercise. Better training asks employees what they would do in realistic situations.

Use scenarios based on the firm’s actual business. For example:

A portfolio manager receives an email from an issuer contact correcting an assumption about current-quarter revenue.
An analyst on an expert network call hears current sales figures from someone who recently worked at a major customer.
A private fund manager shares a data room file that names a public company as a likely acquirer.
A trader learns that a large client plans to liquidate a position before the order is placed.
A research vendor offers highly specific data about weekly product demand from a source it will not identify.
An employee’s family member mentions a pending layoff or acquisition at a public company.

For each scenario, ask the same questions:

Is the information specific?
Is it public?
Would a reasonable investor care?
Did the source have a duty to keep it confidential?
Are we aware of it before a trade?
Who needs to know inside the firm?
What should be documented?

Testing should also include trade blotter reviews, email sampling, expert network call reviews, restricted list testing, personal trading checks, and vendor diligence file reviews. Policies are only useful if the firm can show they work in practice.

A practical MNPI program is built around real access points

For CCOs, MNPI Recognition for RIAs should begin with a map of where information enters the firm.

That map might include:

Research calls
Issuer meetings
Expert networks
Private fund diligence
Advisory committee seats
Board observer rights
Client trading information
Alternative data vendors
Credit and restructuring groups
Transaction-related wall crossings
Employee outside business activities
Personal relationships with insiders

Once the firm identifies those access points, the written policy can be more specific. Procedures can assign ownership, define escalation steps, set documentation standards, and explain when trading restrictions apply.

The goal is not to turn every employee into a securities lawyer. The goal is to help them pause when information is specific, market-sensitive, and not clearly public.

MNPI compliance works best when the firm repeats a simple message: if you are unsure, do not trade first and analyze later. Stop, escalate, and let compliance make the call.

A strong policy prevents misuse. A strong culture prevents the firm from receiving, spreading, or acting on MNPI before anyone recognizes what it is.