FINRA Rule 2210 governs all communications of FINRA member firms — including broker-dealers and dually registered advisors who maintain a broker-dealer affiliate or are themselves registered as broker-dealers. For independent RIAs that are not FINRA members, Rule 2210 does not apply directly. However, many independent RIAs operate through dual-registrant structures or have affiliated broker-dealers, and virtually every RIA marketing practice that could be scrutinized under SEC Rule 206(4)-1 has a parallel in Rule 2210's analytical framework. The two rules share conceptual DNA, and understanding Rule 2210 is useful for any compliance officer who deals with marketing, client communications, or archived records regardless of registration type.
This checklist is structured around the operative provisions of Rule 2210 as amended through 2023 FINRA guidance. Nothing in this article constitutes legal advice.
Communication Categories: Getting the Classification Right First
Rule 2210 distinguishes three categories of communications, each carrying different pre-approval and filing requirements.
Retail communications are written communications distributed or made available to more than 25 retail investors within any 30-calendar-day period. A retail investor is any person other than an institutional investor as defined in FINRA Rule 4512(c). Retail communications are subject to principal pre-approval before use, with limited exceptions.
Correspondence means written communication distributed to 25 or fewer retail investors within any 30-calendar-day period. Correspondence does not require pre-approval before use but must be reviewed in the ordinary course of business. Firms must have procedures for reviewing and supervising correspondence; the review may be after the fact, but it must be systematic and documented.
Institutional communications are written communications distributed only to institutional investors. They do not require principal pre-approval before use, but must be reviewed by a registered principal in the ordinary course of business. When a communication is addressed to an institutional investor, a member must have a reasonable basis for believing that all recipients are institutional investors.
The first question in reviewing any communication is: which category does it fall into? A CCO's checklist should begin there. Misclassifying a retail communication as institutional correspondence — and thereby skipping pre-approval — is a recurring examination finding.
Pre-Approval Requirements for Retail Communications
Rule 2210(b)(1) requires that retail communications be approved by a registered principal of the member before first use. There are limited exceptions: the pre-approval requirement does not apply to retail communications that are not investment products and do not make any financial or investment recommendation if the member has procedures reasonably designed to ensure compliance with the content standards. The exception is narrower than it appears; most marketing materials describing investment products or advisory services will not qualify.
The pre-approval must be by a registered principal of the firm — typically a Series 24 (General Securities Principal) or, for limited products, an appropriately licensed supervisor. The principal conducting the review must understand the content standards and must have authority over the person who created the communication. Documentation of pre-approval — a log showing the communication, the reviewer, the date, and any conditions imposed — is required under FINRA Rule 4511 (general books-and-records rule) and, for broker-dealer activity, under SEC Rule 17a-4.
A mid-size independent broker-dealer in the Southeast encountered this issue during a routine examination in late 2023: the firm had a formal pre-approval checklist, but the log showed several social media posts that had been live for weeks with no pre-approval entry. The posts were created by a registered representative and distributed to a public LinkedIn profile. The posts constituted retail communications, required pre-approval, and the log gap became a finding. We are not saying a digital approval workflow is the only way to address this — paper logs work if they are consistently maintained. The point is that the log must reflect actual communications activity, not just materials that were submitted for review.
Content Standards: What Rule 2210 Actually Prohibits
Rule 2210(d) sets out the content standards applicable to all communications regardless of category. No communication may include any false, exaggerated, unwarranted, promissory, or misleading statement. Communications must be based on principles of fair dealing and must present a balanced picture — describing potential risks as well as potential benefits. Recommendations must have a reasonable basis, and any material information must not be omitted if omission would make the communication misleading.
For performance data, Rule 2210 requires that performance include all material information. When showing hypothetical, back-tested, or model portfolio performance, specific disclosures are required explaining that the results do not represent actual trading results, that actual results may differ materially, and describing the assumptions underlying the hypothetical. These disclosures must be prominent, not buried in footnotes set in reduced type.
Comparisons to indices or benchmarks are permitted but must meet specific standards: the comparison must be to an appropriate benchmark given the nature of the product or strategy being advertised, and the communication must disclose any material differences between the portfolio or product and the benchmark (such as differences in volatility, diversification, or the fact that the benchmark is not directly investable). Selecting a benchmark that makes a strategy's performance appear favorable by comparison, when a more appropriate benchmark would show a different picture, implicates the "misleading" prohibition.
Social Media and Digital Communications
FINRA has addressed social media communications through multiple regulatory notices, including Regulatory Notice 10-06, 11-39, and 17-18. The operative principle is that the platform does not change the analysis: a post on LinkedIn, a tweet (or post on any microblogging platform), a YouTube video, a podcast, or a website page is a "communication" for purposes of Rule 2210 if it is distributed or made available in connection with the business of the firm.
Static content — content that does not change in response to user interaction — is a retail communication if it reaches more than 25 retail investors. Interactive content — real-time posting and messaging — may be treated as correspondence. However, a social media post that is pre-drafted and scheduled for publication is static content and should be treated as a retail communication requiring pre-approval. The fact that the post appears on a social platform does not make it correspondence.
Third-party posts, endorsements on social platforms, and client testimonials present additional analysis. If a registered representative requests, suggests, or arranges for a client to post a testimonial on the firm's behalf, that testimonial is likely an "adoption" of the communication by the firm under Rule 2210. Adoption creates all the obligations that would apply if the firm had authored the content directly. The checklist for social media should include: who has authorization to post to firm-branded accounts; what is the pre-approval workflow for scheduled posts; and how are client testimonials and third-party shares of firm content evaluated for adoption.
Filing Requirements with FINRA
Certain retail communications must be filed with FINRA's Advertising Regulation Department. New member firms must file all retail communications for the first year of membership, at least ten business days prior to first use. Thereafter, filing is required for retail communications that include performance data for registered investment companies, certain government-securities communications, and public offering materials under Rule 2210(c). The filing workflow — which types require filing, when filing occurs relative to first use, and who confirms FINRA staff comments are resolved — should be mapped explicitly in the compliance manual. Missing a required filing is a reportable event and creates examination exposure.
Recordkeeping Under Rules 4511 and 17a-4
Rule 4511 requires member firms to maintain and preserve books and records as required by SEC rules and FINRA rules. For communications, the relevant retention requirement is three years, with the first two years in an easily accessible place — consistent with SEC Rule 17a-4(b)(4). The records that must be maintained include copies of all retail communications and institutional communications, along with any approval or review records.
For electronic communications — email, social media, messaging platforms — Rule 17a-4(f) governs the format requirements: electronic records must be maintained in a non-rewriteable, non-erasable format, or under a system with equivalent controls, using a vendor that provides access in connection with an examination. This requirement creates practical obligations: firms cannot simply archive emails in a standard email server; they must use a compliant archiving solution that meets the non-alteration requirements.
A checklist item that is frequently missed is messaging platforms. Many registered representatives use text messaging, WhatsApp, or other platforms for client communications. If business communications occur on these platforms, they are subject to Rule 17a-4 archiving requirements. The firm's written supervisory procedures should address which platforms are approved for business communications and what the archiving mechanism is for each approved platform. Unapproved platform use — sometimes called "off-channel" communications — has been the subject of significant FINRA and SEC enforcement, resulting in substantial fines across the industry in 2022 and 2023.
Annual Review and Supervisory Procedures
Rule 3110 requires that member firms establish and maintain written supervisory procedures reasonably designed to achieve compliance with applicable securities laws and FINRA rules. For communications, the written supervisory procedures must address the categories of communications, the pre-approval workflow, the training of personnel who create or review communications, and the escalation process when compliance staff identifies a potential violation.
An annual review of the communications supervisory program — distinct from the broader annual review of the overall compliance program — should assess: whether the pre-approval log reflects actual volume of communications; whether the reviewers conducting pre-approval are appropriately licensed and trained; whether the archiving system is capturing all required electronic communications; and whether the firm's social media policy reflects current platform usage. Given the pace of platform change and the evolution of AI-generated content tools, what was an adequate policy in 2022 may not be adequate today.
Nothing in this article constitutes legal advice. FINRA Rule 2210 requirements are subject to change through FINRA rulemaking, interpretive guidance, and regulatory notices. Dually registered and affiliated broker-dealer structures require analysis under both FINRA and SEC rules. Consult qualified legal counsel for guidance specific to your firm's registration and communications obligations.