The Signature That Could Not Have Been Signed

Elena owes duties to the client, to the firm, to the insurer, and to her own professional standing, and they point in the same direction.

To the client first. The application may contain an unauthorized or forged signature and a risk profile that contradicts the planning file. A $60,000 annual premium variable policy for a 68-year-old with significant health issues and a stated preservation objective is a serious suitability question on its own. If the application is inaccurate, the client's coverage - and any future claim - is at risk. He needs to know.

Steps:

1. Preserve everything. Copy the application, the planning file, the travel records, and any correspondence. Do not alter, annotate, or destroy the original, and do not place a copy in a location that could be edited.
2. Verify with the client directly. Ask him, without leading him, whether he signed the application, when, and whether he understood the premium and the risk profile recorded. Record his answer accurately.
3. Escalate outside the chain. The senior partner is the subject of the concern and Elena's reviewer, so the report must go to the chief compliance officer or another principal, in writing, with the facts and the preservation steps already taken.
4. Do not sign or attest to anything about the accuracy of that file, and do not let the file be 'corrected' retroactively.
5. Check her own conduct. She booked the trip and can document the dates, which is evidence, not disloyalty. She should keep her own contemporaneous record of what she did and when.

She is not being asked to investigate or accuse. She is being asked to report a specific, verifiable discrepancy through the correct channel and to make sure the client is not harmed while it is resolved.

Confidentiality protects the client's information from disclosure to outsiders; it is not a shield for misconduct inside the firm.

Permitted and appropriate:

• Internal disclosure on a need-to-know basis. Reporting to the compliance officer, the firm's counsel, or an independent principal is part of her job, not a breach. She should share only what is necessary: the application, the travel dates, and the conflict between the application and the planning file.
• Speaking with the client about his own information. She can ask him directly about the signature and the risk profile. That is not a disclosure to a third party.
• Disclosure required by law or to prevent substantial harm. Most professional standards and firm policies permit disclosure where required by law or where necessary to prevent serious harm - a forged signature on an insurance application that could void the client's coverage falls within that territory. Reporting to the insurer and the state insurance department is a step for the firm, taken on legal advice, not something Elena does unilaterally on day one.

Not permitted:

• Discussing the matter with colleagues who do not need to know, with the client's family, or with other clients.
• Posting, hinting, or venting on social media.
• Using the information to protect herself in a way that exposes the client unnecessarily.

The general principle: confidentiality governs the boundary between the firm and the outside world. Within the firm, the obligation is to route the information to the right person rather than to keep it quiet.

This is the point at which the case becomes a test of escalation rather than of analysis.

1. Do not accept the instruction to drop it. An instruction from the person implicated does not discharge Elena's obligation. She should respond in writing, factually and without accusation: the application is dated during his absence, the risk profile conflicts with the file, and she is asking for the matter to be reviewed by someone independent.
2. Go around the compromised channel. If the compliance officer reports to the partner, escalate to the firm's board, an independent director, outside counsel, or the firm's designated whistleblowing contact. Many firms have a confidential reporting line; the firm's policies and applicable whistleblower protections should be reviewed before acting.
3. Consider the client's exposure independently of the internal dispute. The client may be paying $60,000 a year for a policy whose application misstates his health and objectives, which could support a rescission claim later. Elena should make sure someone with authority is addressing that, and if no one is, she should tell the client plainly that he should verify what was submitted on his behalf.
4. Keep a personal, dated record of every report, request, and response, including the instruction to drop it. Retaliation risk is real; contemporaneous documentation is the best protection.
5. External reporting becomes an option if internal channels fail - to the insurer, the state insurance regulator, and, where the conduct involves a CFP® professional, to CFP Board. This is a serious step; it should be taken with advice, but the possibility that internal escalation fails is precisely why the obligation does not end at the firm's door.
6. Consider her own position. She may need her own counsel, and she should not sign a review or attestation that she believes to be false.

The judgment being tested is the difference between loyalty to a supervisor and loyalty to the client and the profession. They are not the same obligation, and when they conflict, the client prevails.