Dual registrant pays $25m for recordkeeping violations

Messages sent through unapproved communications methods, such as WhatsApp and other unapproved applications on personal devices, were not monitored, subject to review or archived