General Books-and-Records Requirements (FINRA-SEC Bridge)

The umbrella rule ties the FINRA rulebook to the SEC's recordkeeping infrastructure. It does not create new substantive recordkeeping content of its own. It pulls the SEC's recordkeeping mechanics into the FINRA jurisdiction so that a records-retention format failure can be charged as a FINRA violation.

The Three Sources of Recordkeeping Authority

A FINRA member is bound by recordkeeping obligations from three overlapping rule systems:

The umbrella rule requires members to comply with all three. When two systems specify different retention periods for the same record, the longer period controls.

Think of it this way: The umbrella rule is a "kitchen rule" that says: whatever recipes the SEC writes, the FINRA kitchen must follow. If the SEC says preserve for 6 years, FINRA also requires 6 years. If FINRA itself adds a longer retention floor, that longer floor controls. The purpose is to give FINRA examiners the same enforcement reach that SEC examiners already have under the records-retention rule.

The Bridge Function

Before the umbrella rule, a firm that violated the SEC's records-retention rule by, for example, storing records in a non-compliant format had to be charged by the SEC. FINRA could not directly enforce the SEC's books-and-records rules. The umbrella rule closes that gap by making the SEC's format and accessibility standards a FINRA rule as well, so a books-and-records format failure becomes a sanctionable FINRA offense.

• A FINRA umbrella violation is a standalone offense even if the underlying SEC rule is also charged
• FINRA can pursue the firm for the format failure (FINRA jurisdiction) and for the underlying recordkeeping failure (SEC jurisdiction) separately
• The umbrella is sometimes called the "format compliance" requirement even though it covers more than format

Exam Tip: Gotchas

• The FINRA umbrella violation is a separate offense from the underlying SEC rule. A firm that fails to preserve records in a compliant electronic format can be charged under both FINRA jurisdiction and SEC jurisdiction. The exam may probe whether the FINRA charge stands alone; it does.
• The umbrella does NOT replace the SEC rules. It pulls them into the FINRA rulebook. The substantive obligation is still in the SEC's recordmaking and records-retention rules; the FINRA layer makes the same obligation enforceable by FINRA.

The Default 6-Year Retention Floor

For any FINRA record where no specific retention period is stated under FINRA rules or applicable Exchange Act rules, the member must preserve the record for at least 6 years:

The 6-year default is a floor, not a ceiling:

• If the FINRA rule itself specifies a longer period, the longer period controls
• If the SEA rule specifies a longer period, the longer period controls
• The 6-year floor applies only when no other rule has set a period for that record

What "Default" Actually Means

Most major books and records have specific retention periods stated elsewhere, so the 6-year default is a fallback rather than a primary requirement:

• Customer account information: 6 years after update / 6 years after account closure (the customer-account rule itself states the period; not a default)
• Written customer complaints - 4 years (specific FINRA period)
• Negotiable-instrument authorizations - 3 years after expiration (specific FINRA period)
• Communications - 3 years (specific SEC period)
• Compliance manuals - 3 years after superseded

The 6-year default applies, for example, to a FINRA-required record of a particular activity for which the rule says "the firm must keep this record" but does not specify how long.

Exam Tip: Gotchas

• The default is 6 years, but communications-related records are 3 years under the SEC's records-retention rule. Email, instant messages, and social-media business communications are governed by the SEC's communications retention floor, not the FINRA default. A firm that purges emails at 6 years is fine; a firm that purges them at 2.5 years has violated the SEC communications floor regardless of the FINRA default.
• For account-related records, the 6-year clock starts when the account is CLOSED, not when the record is made. A 5-year-old open account still has its records subject to ongoing retention; the 6-year clock does not start until the account is closed.

Format Compliance: The SEC Format Mandate

All preservation under FINRA rules must comply with the SEC's records-retention rule format and accessibility standards. The permitted formats are:

• Paper
• Microfilm or microfiche
• Electronic storage media that meets either:
  • The WORM (Write Once, Read Many) standard (non-rewriteable, non-erasable format with automatic verification, time-stamping, and indexing), OR
  • The audit-trail alternative added by the 2022 amendments: a system that permits recreation of an original record if it is modified or deleted, with a complete time-stamped audit trail of every change

The detailed mechanics of electronic storage are covered in the Records to Be Preserved section. For the umbrella's purposes, the takeaway is that records preserved under FINRA rules must satisfy these federal format standards.

Exam Tip: Gotchas

• Format compliance is a separate compliance item from content compliance. A firm can capture the right records (content compliance) and still violate the FINRA umbrella by storing them in a format that does not meet the SEC's electronic-storage standards (format failure). Both are required.

What the Umbrella Does Not Do

The umbrella books-and-records rule is a gateway. It does not, by itself:

• Create the substantive recordkeeping list (that is in the SEC's recordmaking rule and the dedicated FINRA records series)
• Set the electronic-storage standards (those are in the SEC's records-retention rule itself)
• Cover communications retention (that is in the SEC's records-retention rule)
• Address taping requirements (that is the Taping Rule)
• Govern post-withdrawal custody (that is the post-withdrawal custodian requirement)

What the umbrella does is pull all of those obligations into the FINRA jurisdiction so that FINRA examiners have the same enforcement reach as SEC examiners on records and recordkeeping.