Principal Approval and Supervisory Review

The category-to-approval chain is the most-tested piece of the communications framework. Get the category right, and the approval rule follows mechanically. The principal-approval line is a bright line: pre-use, before first use or filing, whichever comes first.

The Approval Workflow by Category

Think of it this way: Retail content is approved one piece at a time. Correspondence and institutional content is approved by policy: the firm establishes written supervisory procedures (WSPs), trains personnel, and reviews on a sampling or risk basis. The principal does not initial each correspondence email, but the firm's review program must catch problems.

Exam Tip: Gotchas

• Retail = pre-use principal approval (every piece). Correspondence and institutional = supervisory review per WSPs (no pre-use sign-off). This three-way distinction is the most-tested point in the entire section.
• Approval must be evidenced by signature or initials and date (or electronic equivalent under the FINRA recordkeeping framework). A principal who reviews and approves but does not document the approval has not satisfied the approval requirement.

Pre-Use Principal Approval for Retail Communications

For retail communications, an appropriately qualified registered principal must approve each piece before the earlier of:

• Its first use, OR
• Its filing with FINRA's Advertising Regulation Department

The principal must hold a registration that qualifies them to approve the type of communication. Common qualifying registrations:

• Series 24 General Securities Principal: most communications
• Series 26 Investment Company Principal: variable contracts and investment company communications
• Series 53 Municipal Securities Principal: municipal securities communications
• Series 27 / 28 Financial and Operations Principal: not a content-approval registration

Retain the approving principal's name and approval date, along with evidence of approval under the firm's procedures. A signature, initials, or an electronic approval record may provide that evidence.

Exam Tip: Gotchas

• The pre-use deadline runs against first use or filing, whichever comes first. A firm that files a retail communication with FINRA before using it must have principal approval by the filing date, not by the eventual first-use date.
• A Series 27 or 28 principal cannot approve communications. Financial and operations principals are not communication-approval principals. The exam will sometimes hand you a fact pattern with the wrong principal approving and ask whether the file is complete.

Approval Exceptions for Retail Communications

The communications framework permits the following exceptions from pre-use principal approval:

• A retail communication that does not make any financial or investment recommendation or otherwise promote a product or service of the firm (for example, generic firm-name listings, business cards); this is a standalone exception, it does not also have to be excepted from filing
• A retail communication that is posted on an online interactive electronic forum (still subject to post-use supervision and review under the supervisory system requirement)
• Certain communications excluded from the research-report definitions, if they make no financial or investment recommendation
• An unaltered communication another member filed with FINRA and received a favorable review letter for, when its use complies with that letter's conditions

The first three categories remain subject to supervision and review in the same manner as correspondence. A qualified principal must approve any communication before the member files it with FINRA, notwithstanding an otherwise available exception. SEC filing alone does not substitute for this approval.

The interactive-forum exception applies to communications posted in an online interactive electronic forum. A platform name alone does not establish that exception: static promotional profile content and interactive discussion can have different treatment on the same site. A qualifying retail forum post can be supervised like correspondence without pre-use approval, and remains subject to content standards, retention and supervisory review.

Exam Tip: Gotchas

• The interactive-forum exception is post-use review, not no review at all. The firm must still have a written program to monitor what associated persons post in real-time interactive venues.
• Static content and interactive forums have different approval treatment. A promotional profile or banner generally requires pre-use approval when it is a retail communication. Scheduling a post does not, by itself, remove the interactive-forum exception. The firm may impose stricter approval procedures.
• Recommendation and promotion are separate disqualifiers for the content-based exception. Basic identifying business cards can qualify. Adding promotional language may remove that exception; then assess the audience and any other applicable approval exception. Scripted wording or scheduling alone does not decide interactive-forum treatment.

Supervisory Review for Correspondence and Institutional

Correspondence and institutional communications do not require pre-use approval, but each member must establish written procedures appropriate to the firm's business, size, structure, and customers for the principal review of these communications. The procedures must be reasonably designed to ensure compliance with applicable standards.

For correspondence specifically, the supervisory system requires:

• Written procedures for the review of incoming and outgoing correspondence and internal communications
• Review by a registered principal or supervisor of selected correspondence on a risk basis (sampling, lexicon-based searches, or other reasonable means)
• Documentation of who reviewed, what they reviewed, when, and any actions taken
• Training of personnel on what to escalate

For institutional communications, the supervisory procedures must include training of associated persons on the firm's procedures and on the recipient-restriction rule (the only-to-institutional limit).

If the firm has reason to believe material will be forwarded to retail investors, institutional-only treatment is unavailable. Once it knows a recipient is forwarding institutional material to retail, it must treat future communications to that recipient as retail or stop distribution until it reasonably concludes the practice has ceased. Legends and controls do not override known forwarding.

Think of it this way: Correspondence supervision is risk-based sampling, not 100% pre-use review. The firm picks a methodology (every 100th email, all emails containing trigger words, all emails from new reps), documents the methodology, and reviews accordingly.

Exam Tip: Gotchas

• Correspondence does not require pre-use principal approval, but it requires post-use supervisory review per WSPs. The exam will sometimes describe a firm with no correspondence-review program and ask which rule is violated. The answer is the communications-with-the-public framework and the supervisory system requirement together.
• Audience determines the category; an exception can change the approval requirement. A business social-media post made available to more than 25 retail investors in 30 days is a retail communication, but an interactive-forum post can qualify for supervisory review without pre-use principal approval.

Social Media Governance: What Must the Firm Supervise?

Social media is part of the firm's communications supervisory system. A principal must distinguish permission to use a site for business from approval of each communication.

• Approve business use before launch. A registered principal reviews the associated person's proposed site before business use and determines whether the person can comply with the firm's procedures, content standards, and recordkeeping requirements.
• Distinguish static content from interactive participation. A publicly available, static profile page promoting the firm's services requires principal approval before use. An interactive discussion reply can qualify for the pre-use approval exception, but remains subject to the firm's supervisory review and content standards.
• Train and monitor personnel. Written procedures must address business versus personal communications, permitted uses, retention, and supervision. Risk-based review may include sampling and searches for concerning language; the firm must respond to violations.
• Retain business communications regardless of device. Business messages on a personal phone or personal account still require retention and supervision. Before permitting a messaging app or chat service for business, the firm must ensure it can preserve the communications. Calling an account "personal" does not exempt its business messages.
• Evaluate third-party content. An unsolicited customer comment generally is not the firm's own communication for approval and content-standard purposes. The firm can become responsible if it helps prepare the content (entanglement) or endorses it (adoption). Business-related incoming comments still require retention even when neither occurs.

Example: A representative uses an approved networking site, posts a static description of the firm's advisory services, and answers a customer's question in an interactive discussion. The static promotional description requires pre-use approval. The interactive reply can receive post-use supervisory review. Both business communications must be retained.

Exam Tip: Gotchas

• Approval of the site does not approve every future communication. Apply the content-specific approval requirements after the site is authorized.
• The interactive exception removes pre-use approval, not supervision or recordkeeping. A business message on a personal device is still a business record.

Documentation and Records of Approval

Every approval and review must be documented and retained per the communications-with-the-public framework:

• A copy of the communication plus dates of first and (if applicable) last use
• For retail communications: name of the registered principal who approved and the date of approval
• For correspondence: name of the reviewer under the supervisory system requirement, date of review, and any actions taken
• For institutional: name of the person who reviewed under the firm's institutional-review procedures

These records pair with the SEC books-and-records framework, which requires preservation of all communications for 3 years from creation, with the most recent 2 years easily accessible.

Exam Tip: Gotchas

• The records must show who approved or reviewed, not merely that approval or review occurred. A communication file with no name attached is incomplete under the FINRA recordkeeping rule even if a principal actually approved it.

What Should You Check on Exam Day?

• Can you state the deadline for principal approval of a retail communication: before the earlier of first use or filing with FINRA?
• Do you know why a Series 27 or Series 28 principal cannot approve a retail communication for use?
• Can you distinguish an interactive-forum post from static promotional content without treating scheduling alone as the approval test?
• Do you know what evidence a principal's approval must include: signature or initials, plus the date of approval?