Safety Norms: Private Wealth and Estate Planning

1Purpose, Scope, and Safety Principles

This document sets out norms for safe, compliant work in private wealth and estate planning. Its purpose is to prevent financial loss, fraud, family harm, and regulatory breach while advisers help clients transfer, protect, and grow assets across generations. Harm in this field is often slow and quiet, so controls must operate before money moves or documents are signed, not after problems surface.

Scope covers advisory staff, trust and estate administrators, operations teams, and support personnel who handle client instructions, account records, distributions, or planning documents. It applies to meetings, video calls, email, secure portals, telephone lines, and paper files. Items marked MANDATORY are firm rules. Items marked RECOMMENDED are good practice to adopt where the firm's risk profile supports them. Laws, licensing rules, fiduciary standards, trust terms, and tax rules differ by jurisdiction and change over time. Verify current requirements with competent authorities, legal counsel, or qualified professionals before relying on any statement here.

• MANDATORY: No client money moves on an unverified instruction.
• MANDATORY: No single person both initiates and approves a financial transaction.
• MANDATORY: Client interests, confidentiality, and documented wishes come before convenience or speed.
• RECOMMENDED: Treat every planning change that benefits a new or recently introduced party as a higher-risk event.

2Roles, Competence, and Accountability

The firm should name a principal accountable for planning governance, an operations lead for money movement, a privacy officer for data protection, and a compliance officer who receives all escalations. In a small practice one person may hold more than one role, but no one may approve a transaction they initiated or a document they drafted and then sign off alone.

Only individuals with documented training, and with licensing or supervision where required, may give regulated advice, sign trust documents, or instruct custodians. Trainees work under direct supervision and cannot release distributions alone. Legal drafting, tax opinions, and trustee decisions belong to qualified attorneys, accountants, or trustees and must not be improvised by operations staff. Competence is confirmed in writing before access is granted and reviewed at least annually.

• MANDATORY: Maintain a current authorization matrix listing who may initiate, approve, and release each transaction type.
• MANDATORY: Refer any question on legal validity, tax treatment, or trustee discretion to the responsible professional in writing.
• MANDATORY: Remove system access within one business day when a person changes role or leaves the firm.
• RECOMMENDED: Name a trained backup for each key role so absences do not lead to shortcuts.

3Course-Specific Hazards and Risk Assessment

Realistic activities include opening trusts, updating wills and beneficiary designations, funding trusts, arranging gifts, processing required and discretionary distributions, managing life insurance and retirement accounts, and coordinating with family offices. The people involved include grantors, beneficiaries, trustees, executors, agents under powers of attorney, elderly or vulnerable clients, family members in dispute, and outside advisers. Tools include custodial platforms, portfolio systems, document signing services, shared drives, email, and telephones. Environments range from client homes and care facilities to conference rooms and remote workspaces.

Each activity should be rated for likelihood and impact using the high, medium, and low levels defined in the firm's risk register. Every high-rated activity needs a named control owner, a written control, and a scheduled review. Ratings should be revisited after any incident, new product, or change in staffing.

• HIGH: Fraudulent payment or wire instruction changes, including business email compromise. Control: callback to a number held in the original client file.
• HIGH: Undue influence or doubtful capacity during a change that favors a new party. Control: private meeting, documented client wishes, and independent counsel review.
• HIGH: Misdirected distribution to the wrong account or person. Control: dual verification of payee identity and account details before release.
• MEDIUM: Disclosure of family financial details through misdirected email, shared screens, or unattended paperwork. Control: encrypted channels and clear desk practice.
• MEDIUM: Outdated beneficiary designations producing outcomes the client did not intend. Control: annual reconciliation against custodian and insurer records.
• LOW TO MEDIUM: Version errors in trust instruments or amendments. Control: version control and written legal review before signature.

4Preventive Controls and Safe Work Practices

Verify identity and authority before acting. MANDATORY: confirm each person's identity using the firm's documented method, confirm that the person holds current authority under the trust, will, power of attorney, or corporate resolution, and retain copies in the client file. Do not accept authority based only on a verbal claim, a forwarded message, or an uploaded image.

Separate duties around money. MANDATORY: the person who prepares a payment must not approve it or release it in the custodian platform. Any change to bank details, mailing address, or contact number requires independent verification and a hold period set by firm policy before the new detail can be used.

Protect vulnerable clients. MANDATORY: if a client appears confused, rushed, isolated from family, or pressured toward a beneficiary change, pause the transaction, record specific observations, and escalate to compliance. RECOMMENDED: meet the client alone for part of the discussion and offer an independent review by counsel.

Control planning documents. MANDATORY: draft, review, and sign only on approved templates, record each version, and have the responsible attorney confirm execution formalities, including witnessing or notarization, under the governing jurisdiction's rules. Never sign for a client unless a verified legal authority expressly permits it.

• MANDATORY: Use only callback numbers taken from the original client file, never numbers supplied in the request itself.
• MANDATORY: Hold large, unusual, or first-time transfers until both approvals and verification are complete.
• MANDATORY: Never share login credentials, and never allow clients or relatives to operate firm systems on their behalf.
• MANDATORY: Document the reason for any control override and obtain written approval from the compliance officer before the override is used.
• RECOMMENDED: Use a checklist for each distribution covering the governing document terms, beneficiary status, and tax questions referred to a qualified professional.
• RECOMMENDED: Test callback procedures periodically with a controlled, simulated change request.

5Equipment, Environment, Information, and Protective Safeguards

Systems must use multifactor authentication, role based access, and automatic session timeouts. Devices that reach client data need current security updates, encrypted storage, and firm approved remote access. Client information is confidential and may be subject to privacy statutes and professional confidentiality duties that vary by jurisdiction. The privacy officer and counsel should confirm the obligations that apply to your firm.

Physical environments need controls too. Paper files containing account numbers, wills, or family details belong in locked storage. Meetings with sensitive content should take place in private rooms where conversations cannot be overheard, and shredding must use approved bins or equipment. Original wills and trust instruments should be held under dual control with logged access.

• MANDATORY: Send sensitive documents only through the encrypted, approved portal, never through personal email or consumer messaging apps.
• MANDATORY: Lock screens when leaving a workstation and sign out of shared devices.
• MANDATORY: Limit file access to staff with a documented business need, and review access rights at least quarterly.
• RECOMMENDED: Use a separate, verified telephone line for callbacks and keep a written call log.
• RECOMMENDED: Avoid discussing client details on speakerphone or in shared public spaces, and provide quiet rooms and comfortable seating for elderly clients.

6Incident Reporting, Emergency Response, and Escalation

Report suspected fraud, unauthorized access, lost or misdirected documents, misdirected funds, and near misses to the compliance officer the same business day. Near misses matter because they reveal weak controls before losses occur. Do not investigate alone, do not confront a suspected perpetrator, and do not attempt recovery through informal contact with unknown parties.

For immediate danger, medical emergencies, or threats to someone's safety, contact local emergency services first and then notify management. For suspected financial exploitation of an elderly or incapacitated person, or a crime in progress, follow the written escalation path. Decisions on reporting to regulators, law enforcement, insurers, or affected parties rest with the compliance function unless law requires an individual to report directly. Verify those obligations with counsel.

• MANDATORY: Freeze the pending transaction and preserve emails, call logs, documents, and system audit trails.
• MANDATORY: Contact the bank or custodian immediately through a verified channel to request a hold or recall, and record the time and the name of the person spoken to.
• MANDATORY: Escalate to compliance with a written summary of facts, not conclusions.
• MANDATORY: Protect good-faith reporters from retaliation.
• RECOMMENDED: Hold a short incident review and record the control gap and the owner of the corrective action.

7Records, Training, Inspection, and Review

Accurate records are a safety control. Every instruction, verification step, approval, document version, and exception should be captured in the system of record with the reason for it. Records must be complete, legible, and retained for the period set by firm policy and applicable law, which varies by jurisdiction.

Training should cover fraud red flags, verification procedures, confidentiality rules, and the escalation path. Staff complete training before handling client money or documents. Refresher training is recommended at least annually and after any incident or procedure change. Training completion is recorded in the personnel file.

• MANDATORY: Reconcile beneficiary designations and trust asset schedules to custodian records at the frequency set by policy, and document each reconciliation.
• MANDATORY: Maintain an exceptions log and have compliance review it on a fixed schedule.
• RECOMMENDED: Walk through one live distribution file each quarter to test whether the records support the payment.
• RECOMMENDED: Track operational measures such as callbacks completed, near misses reported, and access reviews finished.

8Monitoring, Review, and Continuous Improvement

An independent reviewer, such as internal audit or an external assessor, should test whether controls operate as written at least annually. Testing samples real files, reviews call logs, and checks whether approvals match the authorization matrix. Findings receive an owner, a target action, and a follow-up review.

These norms are a starting point, not a finished procedure. Each firm must adapt them into locally approved procedures that reflect its licensing status, jurisdictions, client base, and systems. Refer any conflict between these norms and applicable law, trust terms, or regulator guidance to qualified professionals, and treat the stricter requirement as the working standard until it is confirmed.

Implementation checklist

• Confirm identity and current legal authority before acting on every instruction.
• Verify any payment or account change by callback to the number in the original client file.
• Confirm that the preparer, approver, and releaser of each transaction are different people.
• Pause and escalate any sign of pressure, confusion, or isolation affecting a client.
• Send sensitive information only through approved encrypted channels and lock away paper files.
• Record every verification step, approval, document version, and control exception.
• Report suspected fraud or near misses to compliance the same business day.
• Refer legal, tax, and trustee questions to the responsible qualified professional in writing.
• Review access rights and the authorization matrix on a fixed schedule.