SAR Privilege Protects U.S. Bank’s Internal Investigation Policies and Procedures

In a broad interpretation of the Suspicious Activity Report (SAR) privilege, a Washington state appellate court ruled that the privilege precludes disclosures of a bank’s policies and procedures for investigating suspicious activity and its specific internal investigations into wrongful conduct. Norton v. U.S. Bank Nat’l Ass’n, 324 P.3d 693 (WaSAR Reportsh. Ct. App. 2014). You may read the opinion here.

A U.S. Bank employee left to start an investment company, which later turned out to be a Ponzi scheme using several accounts at U.S. Bank. The plaintiffs invested in the Ponzi scheme, lost $11 million, and later sued U.S. Bank for breaches of fiduciary duty, fraud, and several other causes of action.

In discovery, the plaintiffs sought all documents related to U.S. Bank’s internal investigation and documents, including policies, generally related to U.S. Bank’s internal monitoring and investigations to detect money laundering. U.S. Bank resisted the discovery on grounds that the SAR privilege protects general and specific internal investigation documents from civil discovery. The Washington appellate court agreed and reversed the trial court’s denial of the privilege.

The SAR privilege arises from the Bank Secrecy Act, 31 U.S.C. § 5318, and its implementing regulations. The confidentiality provisions of 12 CFR § 21.11(k) constitute an “unqualified discovery and evidentiary privilege.” The SAR privilege covers not only the Suspicious Activity Report, but also any information that would reveal whether such a report exists.

In Norton, the state appellate court held that simply redacting explicit references to the existence of a SAR is insufficient to enforce the privilege. The court interpreted the SAR privilege broadly, finding that federal statutes require banks to establish internal policies, procedures, and controls to detect and report money laundering, and that these policies are intertwined with banks’ obligation to report suspicious activity. As such, the court ruled that “discovery into these matters will produce documents suggesting” that the bank either filed or considered filing a Suspicious Activity Report.

The court held that U.S. Bank was not required to produce its internal investigation policies and procedures generally or with specific reference to the Ponzi scheme perpetrated by its former employee. According to the court, “internal reports and methods used to investigate suspicious activity are precisely the type” of supporting documentation that the SAR privilege covers.

SAR Privilege Protects Some, But Not All, Wells Fargo Documents

The USDC for the Middle District of Florida ruled that the Suspicious Activity Report (SAR) Privilege protected evaluative investigative reports and communications about those reports, but did not protect the underlying transactional documents on which the bank, Wells Fargo, based its suspicious activity report.  Slide1Wiand v. Wells Fargo Bank, 2013 WL 5925545 (M.D. Fla. Oct. 25, 2013).  You may access the opinion here.

The SAR Privilege

Federal law requires financial institutions to file a suspicious activity report notifying the government of suspected criminal activity.  31 U.S.C. § 5318.  And federal regulations impose an evidentiary privilege that protects from compelled disclosure all suspicious activity reports, or SARs, and “any information that would reveal the existence of a SAR.”  12 CFR § 21.11(k).

The privilege does not protect the underlying facts, transactions, or documents on which a SAR is based. Courts therefore hold that the SAR privilege “does not shield from discovery reports, memoranda, or underlying transactional documents generated by a bank’s internal investigation procedures.”

Wells Fargo Arguments and Court’s Ruling

Wells Fargo argued that the SAR privilege also protected its materials prepared to detect suspicious activity regardless whether it later filed a SAR.  The court evaluated this argument and divided the putatively privileged documents into three categories for consideration: (1) transaction documents related to bank accounts; (2) internal bank emails and reports; and (3) communications between Wells Fargo and another financial institution.

The court ruled that the SAR privilege did not protect the transaction documents.  Importantly, however, the court distinguished between truly transactional documents, which the privilege did not cover, and “internal reports of an evaluative nature,” which the privilege did cover.

Following this distinction, the court ruled that the SAR privilege did not cover most of Wells Fargo’s internal emails and reports, only a small portion of a page that “could be considered a report of an evaluative nature intended to comply with federal reporting requirements.”

The court held that the SAR privilege protected Wells Fargo’s external communications with another financial institution because those communications “reflect material that could be considered as a report of an evaluative nature intended to comply with federal reporting requirements.”