(a) General. A regulated entity shall establish and administer a written code of conduct and ethics that is reasonably designed to assure that its directors, officers, and employees discharge their duties and responsibilities in an objective and impartial manner that promotes honest and ethical conduct, compliance with applicable laws, rules, and regulations, accountability for adherence to the code, and prompt internal reporting of violations of the code to appropriate persons identified in the code. The code also shall include provisions applicable to the regulated entity's principal executive officer, principal financial officer, principal accounting officer or controller, or persons performing similar functions, that are reasonably designed to promote full, fair, accurate, and understandable disclosure in reports and other documents filed with the Securities and Exchange Commission and in other public communications reporting on the entity's financial condition.

(b) Review. Not less often than once every three years, a regulated entity shall review the adequacy of its code of conduct and ethics for consistency with practices appropriate to the entity and make any appropriate revisions to such code.