10.3 Broker-Dealer Books and Records, Electronic Storage, and Correspondence
Key Takeaways
SEC Rule 17a-3 specifies records broker-dealers must make, while Rule 17a-4 specifies preservation periods, accessibility, format, and production requirements.
Rule 17a-4 sets six-year periods for blotters and ledgers, three years for most other records, six years after closing for account terms, and the life of the enterprise for organizational records; FINRA Rule 4511 defaults to six years.
Electronic recordkeeping systems must satisfy Rule 17a-4 requirements through either the audit-trail alternative or the traditional non-rewriteable, non-erasable approach and related safeguards.
Business communications must be retained and supervised based on content, regardless of whether they occur through email, text, social media, collaboration tools, or a personal device.
SEC Rule 17a-3(a)(11) requires a trial balance of all ledger accounts and a net-capital computation at least monthly.
Creation and Preservation
SEC Rule 17a-3 requires broker-dealers to make specified records, including blotters, ledgers, account records, order information, associated-person records and financial documentation. Rule 17a-4 governs how long and how those records are preserved. FINRA rules add records for supervision, communications, complaints, gifts, continuing education and other functions.
The principal should avoid the shortcut that "all records are kept three years." SEC Rule 17a-4 sets different periods, and FINRA Rule 4511 adds a default: any FINRA-required record with no specified period must be kept at least six years, in a format and media that comply with Rule 17a-4.
| Record | Minimum retention |
|---|---|
| Blotters, general ledger, customer and other ledgers (Rule 17a-3(a)(1)–(3), (5)) | 6 years, first 2 easily accessible |
| Order tickets, confirmations, trial balances and net-capital computations, and communications sent and received | 3 years, first 2 easily accessible |
| Account cards and records on the terms of opening and maintaining an account | 6 years after the account is closed |
| Rule 17a-3(a)(17) customer account record information | 6 years after the earlier of account closing or the information being replaced or updated |
| Associated-person employment records and fingerprint records | 3 years after the person's association ends |
| Partnership articles, articles of incorporation, minute books, and Forms BD and BDW | Life of the enterprise and any successor |
SEC Rule 17a-3(a)(11) requires a broker-dealer to prepare a trial balance of all ledger accounts and a computation of aggregate indebtedness and net capital at least monthly, a point FINRA's own Series 26 sample question tests. A retention schedule should cite the controlling provision for each record and preserve it longer when litigation, investigation or a legal hold applies.
Accessibility and Production
"Readily accessible" concerns the ability to retrieve and produce complete, legible records promptly, not merely whether data exists somewhere in a backup. Indexing must connect a communication or transaction to the associated person, account, date and reviewer. The firm should be able to export records with metadata and explain any codes.
Rule 17a-4 permits electronic preservation through specified alternatives. The traditional approach uses media that preserve records in a non-rewriteable, non-erasable format. The audit-trail alternative preserves a complete time-stamped audit trail showing creation and every modification or deletion so the original and changes can be recreated. Both approaches require controls for verification, indexing, access, backup or redundancy, and production. A generic cloud drive does not satisfy the rule merely because it stores files.
Electronic Communications
Recordkeeping follows business content, not the device or channel. Email, text messages, encrypted apps, social-media direct messages, collaboration platforms and messages from a personal phone are records when they concern the member's business. Prohibiting a channel is insufficient if personnel use it and the firm ignores evidence of use.
| Risk | Control |
|---|---|
| Personal texting with customers | Approved captured channel, device controls, attestations and testing |
| Disappearing messages | Disable feature where possible; block or capture channel; investigate use |
| Edited electronic record | Preserve audit trail or compliant immutable version and metadata |
| Vendor platform | Contractual access, export testing, retention mapping and exit plan |
| Legal hold | Suspend routine deletion for responsive records across systems |
FINRA Rule 2210 communication records generally include the communication, dates of first and last use where applicable, the name of any approving principal, and source materials supporting claims. Correspondence and internal communications use risk-based review under Rule 3110 procedures even where preapproval is not required.
Third-Party and Designated-Executive Controls
Using a vendor does not change the broker-dealer's responsibility. The firm must be able to access and surrender records and should test exports before an examination or failure. Rule 17a-4 also includes undertakings or designated-executive-officer mechanisms designed to ensure regulators can obtain records; procedures must identify current responsible persons and alternatives rather than rely on a departed employee.
Principal Review
The principal should reconcile system populations to the books, test edits and deletions, review access logs, search for off-channel indicators, and verify restoration. A missing record can be both a substantive supervision failure and a books-and-records violation. Once discovered, preserve available evidence, stop further loss, determine scope, correct technology and behavior, and assess reporting obligations.
Lifecycle Controls
Record governance begins before creation. Data fields, timestamps, identities and approvals must be captured in a form that remains understandable after systems and employees change. Migration testing compares counts, hashes, metadata and retrieval between the legacy and replacement systems; a successful login is not proof that all records migrated.
Deletion follows an approved schedule only after the applicable retention period and legal holds expire. Administrators should not be able to alter both records and audit evidence without detection. Access reviews remove departed personnel and unnecessary vendor privileges.
During an examination, the firm should produce the requested population rather than screenshots selected by a business unit. Failed searches, missing attachments or unreadable proprietary formats are recordkeeping issues even if an employee remembers the communication.
Annual vendor certifications are not enough when the firm cannot demonstrate retrieval. Sample requests should include old and recent dates, attachments, edited records and a departed employee. Results and corrective work belong in the recordkeeping control file.
Which statement correctly distinguishes SEC Rules 17a-3 and 17a-4?
Rule 17a-3 specifies records to make, while Rule 17a-4 governs preservation, accessibility, and production.
Rule 17a-4 eliminates the need to create account records under Rule 17a-3.
The rules apply only when records are kept on paper.
Rule 17a-3 governs only privacy notices and Rule 17a-4 only advertising.
A representative uses a personal messaging app to discuss mutual-fund recommendations with customers. Are the messages outside recordkeeping duties because the device is personal?
Yes, because only firm-owned devices create records.
No, but only if a customer later files a complaint.
No. Business content controls, so the firm must retain and supervise the communications under the applicable rules.
Yes, if the representative deletes each message after the trade.
Sections you finish are checked off in the contents.