Category: Laws and Regulations

FINRA Recordkeeping

Also known as: FINRA Books and Records Requirements, FINRA Records Retention

Simply put

FINRA recordkeeping refers to the obligations that broker-dealers in the United States have to create, preserve, and maintain accurate books and records under rules issued by the Financial Industry Regulatory Authority (FINRA). These requirements typically work alongside related U.S. Securities and Exchange Commission (SEC) rules that govern what records must be made and how they must be retained. The aim is to ensure that firms keep reliable evidence of their business activities and communications for regulatory oversight.

Formal definition

FINRA recordkeeping denotes the set of obligations imposed on broker-dealers under FINRA rules, most notably FINRA Rule 4511, which sets general requirements for creating, preserving, and maintaining accurate books and records, to keep records in a manner consistent with applicable regulatory standards. Rule 4511 does not operate in isolation; it typically incorporates and works in conjunction with the SEC's Securities Exchange Act rules, particularly Rule 17a-3 (which governs the records that must be made) and Rule 17a-4 (which governs the format, accessibility, and periods for preservation and retention of those records). Separately, FINRA Rule 6890, part of the Rule 6800 Series governing the Consolidated Audit Trail (CAT), imposes recordkeeping obligations on Industry Members specifically for information reportable under that series; this is a distinct and narrower obligation focused on CAT-related data rather than the broader books-and-records regime. The precise records covered, retention periods, and permissible storage formats depend on the applicable rule, the type of record (including electronic communications), and evolving regulatory guidance; practitioners should consult the current rule text and related SEC provisions rather than relying on a single generalized statement.

Why it matters

FINRA recordkeeping obligations are central to how U.S. broker-dealers demonstrate accountability to regulators. Because these firms handle client assets, execute trades, and communicate extensively with the public, the ability to reconstruct business activity after the fact is a foundation of regulatory oversight. Accurate, preserved books and records provide the evidentiary basis for examinations, investigations, and dispute resolution. When records are incomplete, altered, or inaccessible, a firm may be unable to substantiate its conduct, which can expose it to enforcement risk independent of any underlying misconduct.

A distinctive feature of this area is the interplay between FINRA rules and SEC rules under the Securities Exchange Act. FINRA Rule 4511 sets general requirements for creating, preserving, and maintaining accurate books and records, but it typically works in conjunction with SEC Rule 17a-3, which governs which records must be made, and SEC Rule 17a-4, which governs the format, accessibility, and periods for preservation and retention of those records. Understanding that the format and retention obligations flow substantially from the SEC rules, while FINRA rules incorporate and reinforce them, is essential to interpreting the regime correctly rather than treating it as a single self-contained set of requirements.

Electronic communications deserve particular attention within this framework. As firms conduct business across an expanding range of digital channels, the question of whether communications are captured, preserved in an appropriate format, and made accessible for the required periods has become a recurring focus of compliance efforts. The precise records covered, retention periods, and permissible storage formats depend on the applicable rule, the type of record, and evolving regulatory guidance, so firms generally treat recordkeeping as a program to be maintained rather than a one-time configuration.

Who it's relevant to

Broker-Dealers and Their Compliance Officers

Broker-dealers registered with FINRA carry the primary obligation to create, preserve, and maintain accurate books and records. Compliance officers within these firms are typically responsible for translating FINRA Rule 4511 and the related SEC Rules 17a-3 and 17a-4 into operational recordkeeping practices, and for monitoring evolving guidance that may affect covered records, retention periods, or permissible formats.

Records and Information Governance Professionals

Those responsible for records and information governance within financial firms often coordinate the systems and policies that capture and preserve records across their lifecycle. Their work generally includes ensuring records remain authentic, accessible, and retained for the applicable periods, and distinguishing authoritative records from copies, drafts, or transitory information within a regulated environment.

Electronic Communications and Surveillance Teams

Because electronic communications fall within the scope of these recordkeeping requirements, teams managing communications capture, archiving, and surveillance are directly affected. They typically focus on ensuring that communications across relevant channels are preserved in an appropriate format and remain accessible for the required periods, in line with FINRA and SEC expectations.

CAT Reporting and Data Management Staff

Personnel handling Consolidated Audit Trail (CAT) reporting at Industry Members are relevant to the distinct obligation under FINRA Rule 6890, part of the Rule 6800 Series. This is a narrower requirement focused on maintaining and preserving records of information reportable under that series, separate from the broader books-and-records regime under Rule 4511.

Auditors, Examiners, and Legal Advisers

Internal auditors, regulatory examiners, and legal advisers rely on preserved books and records to assess compliance and reconstruct business activity. Their work depends on records being reliable and accessible, and they generally consult current rule text and related SEC provisions rather than generalized summaries when evaluating specific obligations.

Inside FINRA Recordkeeping

FINRA Rule 4511 (General Requirements)

The core FINRA recordkeeping rule requiring member firms to make and preserve books and records as required under FINRA rules and the applicable Securities Exchange Act rules. Rule 4511 generally does not stand alone; it operates by reference to the underlying Exchange Act recordkeeping regime rather than creating a fully self-contained scheme.

SEC Rule 17a-3 (Records to be Made)

An Exchange Act rule administered by the SEC that specifies the books and records broker-dealers are required to create. FINRA's recordkeeping obligations typically incorporate and supplement these federal requirements, so practitioners generally read FINRA Rule 4511 together with 17a-3.

SEC Rule 17a-4 (Records to be Preserved)

The companion Exchange Act rule governing how long required records must be preserved and, importantly, the manner and format of preservation, including requirements historically associated with non-rewriteable, non-erasable ('WORM') storage or comparable protections. FINRA Rule 4511 and related provisions incorporate the retention periods and format expectations flowing from 17a-4; the specific technical conditions depend on the current text of the rule and any SEC guidance, which practitioners should verify against the authoritative source.

Retention periods

The minimum durations for which particular categories of records must be preserved. These are set primarily through the SEC rules that FINRA incorporates and vary by record type. Where a FINRA rule does not specify a period, Rule 4511 generally directs that the record be retained for the period required by the applicable Exchange Act rule, and otherwise commonly for a default minimum. Exact periods depend on record category and the governing rule text, which should be confirmed rather than assumed.

Format and preservation conditions

Requirements addressing the medium and integrity of preserved records, such as protection against alteration and the ability to reproduce records in a usable form. These conditions derive largely from the SEC preservation rule rather than from FINRA rules in isolation, and they bear on authenticity, integrity, and usability of the retained record.

Rule 6890 within the CAT (Rule 6800 Series)

A recordkeeping-related provision situated within FINRA's Consolidated Audit Trail (CAT) rule set, the Rule 6800 Series. Its scope is limited to obligations connected to the CAT reporting framework and should not be read as the general firm recordkeeping rule; the broad books-and-records duty sits in Rule 4511 and the incorporated Exchange Act rules.

Common questions

Answers to the questions practitioners most commonly ask about FINRA Recordkeeping.

Is FINRA recordkeeping the same as SEC recordkeeping under the Exchange Act rules?

No, though they are closely related and often work together. FINRA rules such as Rule 4511 generally establish requirements for members to make and preserve books and records, but they typically operate alongside and incorporate the underlying SEC recordkeeping rules adopted under the Securities Exchange Act, notably Rule 17a-3 (concerning the records that must be made) and Rule 17a-4 (concerning how long and in what format records must be preserved). In practice, a member firm's obligations depend on both the FINRA rules and the SEC rules, and the exact interplay depends on the firm's business activities. Professionals should treat FINRA requirements as layered on top of, rather than a replacement for, the applicable SEC rules.

Does FINRA Rule 6890 govern general recordkeeping for member firms?

Not in a general sense. Rule 6890 sits within the Consolidated Audit Trail (CAT) framework, often referred to as the Rule 6800 Series, and its scope is limited to that context rather than serving as a broad, firm-wide recordkeeping mandate. Readers should be careful not to generalize a CAT-related definition into an organization's overall books-and-records obligations, which are typically addressed by other rules such as Rule 4511 and the incorporated SEC rules. The scope of any single rule should be confirmed against the specific activity it governs.

How should a firm approach retention periods for its FINRA-related records?

Retention periods typically vary by record type and are shaped by both the applicable FINRA rules and the incorporated SEC preservation requirements. Because a single firm may hold many categories of records, a common approach is to build a retention schedule that maps each record type to its governing requirement rather than applying one uniform period across all records. Firms should confirm the specific periods against the current text of the applicable rules and any jurisdictional or business-specific obligations, since these can differ and change over time.

What format considerations arise when preserving records subject to these requirements?

Format and preservation method are generally addressed through the SEC preservation rule (Rule 17a-4) that FINRA rules incorporate, which has historically included conditions on how electronically stored records are maintained and made accessible. Because the specifics of acceptable formats and any associated safeguards can change and depend on how a firm stores its records, firms typically confirm current requirements before selecting or validating a storage system. Distinguishing the authoritative preserved record from working copies or drafts is also important, since preservation obligations attach to records rather than to transitory information.

How does a firm demonstrate that its preserved records are reliable and accessible?

Demonstrating reliability and accessibility typically involves controls that support the authenticity, integrity, and usability of records over their required retention period, along with the ability to produce them when requested. In practice this often includes documented policies, controlled processes for capture and preservation, and the capacity to retrieve records in a usable form. The specific expectations depend on the applicable rules and the firm's systems, so firms generally align their controls to the current requirements rather than to a fixed checklist.

How do CAT-related obligations fit alongside a firm's broader recordkeeping program?

CAT-related obligations under the Rule 6800 Series, including Rule 6890, address a defined reporting and audit-trail context and are generally narrower than a firm's overall books-and-records program. A common implementation approach is to treat CAT requirements as a distinct workstream that is coordinated with, but not merged into, the broader recordkeeping obligations arising under rules such as Rule 4511 and the incorporated SEC rules. Keeping these scopes explicit helps avoid over- or under-applying any single rule's requirements.

Common misconceptions

FINRA Rule 4511 is a complete, self-contained recordkeeping regime.

Rule 4511 generally operates by incorporating the underlying SEC Exchange Act rules, notably 17a-3 (records to be made) and 17a-4 (records to be preserved). Practitioners typically must read the FINRA and SEC requirements together to determine what must be created, how long it must be kept, and in what form.

Rule 6890 is FINRA's general recordkeeping rule.

Rule 6890 sits within the Consolidated Audit Trail (CAT) Rule 6800 Series and addresses recordkeeping obligations tied to the CAT framework. Its scope is narrow; the general books-and-records obligation rests in Rule 4511 and the incorporated Exchange Act rules.

Meeting FINRA retention periods is the same as having a compliant records program.

Retention duration is only one element. The applicable rules also address the manner of preservation, protection against alteration, and the ability to reproduce records in a usable form. Retaining a record for the required period without preserving its integrity and accessibility may not satisfy the format and preservation conditions flowing from the SEC rules.

Best practices

Map each record category to both the relevant FINRA rule and the incorporated SEC Exchange Act rules (particularly 17a-3 and 17a-4), rather than relying on FINRA rules in isolation, and verify current rule text before setting periods.

Confirm retention periods per record type against the authoritative rule text, since periods vary by category and a default may apply only where no specific period is stated.

Address the format and preservation conditions of the applicable SEC rule, protection against alteration and reliable reproduction in usable form, not just how long records are held.

Treat CAT-related recordkeeping obligations under the Rule 6800 Series (including Rule 6890) as a distinct, narrower workstream separate from general Rule 4511 books-and-records duties.

Maintain the authenticity, reliability, integrity, and usability of preserved records so that a retained item remains a defensible authoritative record and not merely stored data.

Document how your retention schedule and storage arrangements satisfy each incorporated requirement, and revisit the mapping when rule texts or SEC guidance change.