The board of trade shall maintain rules and procedures to provide for the recording and safe storage of all identifying trade information in a manner that enables the contract market to use the information:

(a) To assist in the prevention of customer and market abuses; and

(b) To provide evidence of any violations of the rules of the contract market.

A designated contract market must capture and retain all audit trail data necessary to detect, investigate, and prevent customer and market abuses. Such data must be sufficient to reconstruct all transactions within a reasonable period of time and to provide evidence of any violations of the rules of the designated contract market. An acceptable audit trail must also permit the designated contract market to track a customer order from the time of receipt through fill, allocation, or other disposition, and must include both order and trade data.

(a) Original source documents. A designated contract market's audit trail must include original source documents. Original source documents include unalterable, sequentially identified records on which trade execution information is originally recorded, whether recorded manually or electronically. Records for customer orders (whether filled, unfilled, or cancelled, each of which shall be retained or electronically captured) must reflect the terms of the order, an account identifier that relates back to the account(s) owner(s), and the time of order entry. For open-outcry trades, the time of report of execution of the order shall also be captured.

(b) Transaction history database. A designated contract market's audit trail program must include an electronic transaction history database. An adequate transaction history database includes a history of all trades executed via open outcry or via entry into an electronic trading system, and all orders entered into an electronic trading system, including all order modifications and cancellations. An adequate transaction history database also includes:

(1) All data that are input into the trade entry or matching system for the transaction to match and clear;

(2) The customer type indicator code;

(3) Timing and sequencing data adequate to reconstruct trading; and

(4) Identification of each account to which fills are allocated.

(c) Electronic analysis capability. A designated contract market's audit trail program must include electronic analysis capability with respect to all audit trail data in the transaction history database. Such electronic analysis capability must ensure that the designated contract market has the ability to reconstruct trading and identify possible trading violations with respect to both customer and market abuse.

(d) Safe storage capability. A designated contract market's audit trail program must include the capability to safely store all audit trail data retained in its transaction history database. Such safe storage capability must include the capability to store all data in the database in a manner that protects it from unauthorized alteration, as well as from accidental erasure or other loss. Data must be retained in accordance with the recordkeeping requirements of Core Principle 18 and the associated regulations in subpart S of this part.

(a) Annual audit trail and recordkeeping reviews. A designated contract market must enforce its audit trail and recordkeeping requirements through at least annual reviews of all members and persons and firms subject to designated contract market recordkeeping rules to verify their compliance with the contract market's audit trail and recordkeeping requirements. Such reviews must include, but are not limited to, the following:

(1) For electronic trading, audit trail and recordkeeping reviews must include reviews of randomly selected samples of front-end audit trail data for order routing systems; a review of the process by which user identifications are assigned and user identification records are maintained; a review of usage patterns associated with user identifications to monitor for violations of user identification rules; and reviews of account numbers and customer type indicator codes in trade records to test for accuracy and improper use.

(2) For open outcry trading, audit trail and recordkeeping reviews must include reviews of members' and market participants' compliance with the designated contract market's trade timing, order ticket, and trading card requirements.

(b) Enforcement program required. A designated contract market must establish a program for effective enforcement of its audit trail and recordkeeping requirements for both electronic and open-outcry trading, as applicable. An effective program must identify members and persons and firms subject to designated contract market recordkeeping rules that have failed to maintain high levels of compliance with such requirements, and levy meaningful sanctions when deficiencies are found. Sanctions must be sufficient to deter recidivist behavior. No more than one warning letter may be issued to the same person or entity found to have committed the same rule violation within a rolling twelve month period.