CAT Needed Now More Than Ever
The Consolidated Audit Trail is exactly what the industry needs right now.

I was talking with Waters’ US editor Anthony Malakian on a recent episode of the Waters Wavelength, our weekly podcast that runs every Thursday on our website, iTunes and SoundCloud, when the topic of Navinder Singh Sarao came up.
Sarao is the now-infamous British day trader whose spoofing led to the 2010 Flash Crash, according to some. Anthony found this egregious. Some exhaustive studies on the Flash Crash have found no evidence that Sarao was the sole cause of the market dive. It’s still unclear what exactly triggered it. Still, citing several different market factors as the cause of the Flash Crash isn’t what the US Department of Justice wants to do. People want a scapegoat, and Sarao fits the bill.
I’m not here to label Sarao as a victim. At the end of the day, he broke the law by spoofing and should be punished for that. However, to say such a massive market event like the Flash Crash was solely Sarao’s doing seems far-fetched. And if it is indeed the case that a lone day trader can trigger such a massive market crash, as Anthony pointed out on the podcast, the industry has far larger problems to worry about than putting Sarao behind bars.
Better Vision
So what does this have to do with the Consolidated Audit Trail (CAT)? The CAT was, after all, conceived after regulators struggled to grasp what had happened during the Flash Crash. The industry recognized the need for a massive audit trail that would track trading activity in the US equity and options markets, and the US Securities and Exchange Commission passed Rule 613, which required self-regulatory organizations (SROs) to submit a plan on how to build it.
Having an audit trail can respond to a lot of questions that have, to the public’s dismay, remained unanswered for a long time.
That was July 2012. Over four years later the need for an audit trail of trading activity is greater than ever. There have been more “mini” Flash Crashes, and regulators continue to struggle to come up with answers around causes. The general public is getting frustrated, believing the markets are becoming too electronic and out of control.
All of this has led to regulators pushing back, sometimes in extreme ways. Regulation Automated Trading (Reg AT), which was proposed by the US Commodity Futures Trading Commission (CFTC), is a prime example. The CFTC felt it didn’t have a strong enough handle on algorithmic trading, and therefore proposed Reg AT in order to reduce risk in the market and offer greater transparency.
Part of Reg AT requires firms to hand over their source code to be stored in a repository at the CFTC, a point that has caused many firms, and even CFTC commissioner J. Christopher Giancarlo himself, to criticize it.
What has caused the CFTC to take such drastic measures? Part of it is due to the public denouncing the CFTC for not having proper oversight of the firms it is charged with regulating. Something like the CAT can ease those concerns, as it will provide a better view of the market that regulators are tasked with running.
No Perfect Fit
I understand the CAT isn’t the solution to all the regulators’ problems. In fact, it only addresses the needs of a portion of the financial markets.
Still, one can see how, in general, having an audit trail can respond to a lot of questions that have, much to the public’s dismay, remained unanswered for a long time. It won’t be an easy journey, as is evident by how long it’s taken the CAT to get this far, but I don’t think it can be overstated how important its success is. The markets aren’t getting any slower or less complex, and there most certainly will be more events like the Flash Crash in the coming years.
The coverage of the speed and complexity of markets continuing to pick up in the mainstream media will only lead to more questions about what regulators are doing to monitor it. And, whether it should or not, the general public does have an impact on regulation.
However, if the regulators are able to point to data that’s been reported to them—and put together an actual audit trail of how the event unfolded—that will ease concerns and take some pressure off of them.
More on Regulation
Doing a deal? Prioritize info security early
Engaging information security teams early in licensing deals can deliver better results and catch potential issues. Neglecting them can cause delays and disruption, writes Devexperts’ Heetesh Rawal in this op-ed.
SEC pulls rulemaking proposals in bid for course correction
The regulator withdrew 14 Gensler-era proposals, including the controversial predictive data analytics proposal.
Trading venues seen as easiest targets for Esma supervision
Platforms do not pose systemic risks for member states and are already subject to consistent rules.
The Consolidated Audit Trail faces an uncertain fate—yet again
Waters Wrap: The CAT is up and running, but with a conservative SEC in place and renewed pressure from politicians and exchanges, Anthony says the controversial database faces a death by a thousand cuts.
Exchanges plead with SEC to trim CAT reporting requirements
Letters from Cboe, Nasdaq and NYSE ask that the new Atkins administration reduce the amount of data required for the Consolidated Audit Trail, and scrap options data collection entirely.
EU banks want the cloud closer to home amid tariff wars
Fears over US executive orders have prompted new approaches to critical third-party risk management.
Friendly fire? Nasdaq squeezes MTF competitors with steep fee increase
The stock exchange almost tripled the prices of some datasets for multilateral trading facilities, with sources saying the move is the latest effort by exchanges to offset declining trading revenues.
Europe is counting its vendors—and souring on US tech
Under DORA, every financial company with business in the EU must report use of their critical vendors. Deadlines vary, but the message doesn’t: The EU is taking stock of technology dependencies, especially upon US providers.