Regulator claimed now-deceased lawyer misused non-public information but firm said he was exempt from requirements