Even when the exchange detected violations , it often failed to take disciplinary action , the SEC said .
Even when the exchange detected such violations , it " often failed to take appropriate disciplinary actions " against individuals or firms .