Securities Regulation
Control Person
For control person liability under § 20(a) (and also for § 15), there must still be a primary violator.
Control person liability will then create liability to the same extent in anyone who had control over the primary violator.
After showing control, it is then the defendant's burden to prove he didn't have control. However, how it exactly works is kind of vague.