Principal Approval and Supervisory Review

The category-to-approval chain is the most-tested piece of the communications framework. Get the category right, and the approval rule follows mechanically. The principal-approval line is a bright line: pre-use, before first use or filing, whichever comes first.

The Approval Workflow by Category

Think of it this way: Retail content is approved one piece at a time. Correspondence and institutional content is approved by policy: the firm establishes written supervisory procedures (WSPs), trains personnel, and reviews on a sampling or risk basis. The principal does not initial each correspondence email, but the firm's review program must catch problems.

Exam Tip: Gotchas

• Retail = pre-use principal approval (every piece). Correspondence and institutional = supervisory review per WSPs (no pre-use sign-off). This three-way distinction is the most-tested point in the entire section.
• Approval must be evidenced by signature or initials and date (or electronic equivalent under the FINRA recordkeeping framework). A principal who reviews and approves but does not document the approval has not satisfied the approval requirement.

Pre-Use Principal Approval for Retail Communications

For retail communications, an appropriately qualified registered principal must approve each piece before the earlier of:

• Its first use, OR
• Its filing with FINRA's Advertising Regulation Department

The principal must hold a registration that qualifies them to approve the type of communication. Common qualifying registrations:

• Series 24 General Securities Principal: most communications
• Series 26 Investment Company Principal: variable contracts and investment company communications
• Series 53 Municipal Securities Principal: municipal securities communications
• Series 27 / 28 Financial and Operations Principal: not a content-approval registration

The principal's approval must be evidenced by signature or initials (or electronic equivalent) and the date of approval. The record becomes part of the firm's communications retention file.

Exam Tip: Gotchas

• The pre-use deadline runs against first use or filing, whichever comes first. A firm that files a retail communication with FINRA before using it must have principal approval by the filing date, not by the eventual first-use date.
• A Series 27 or 28 principal cannot approve communications. Financial and operations principals are not communication-approval principals. The exam will sometimes hand you a fact pattern with the wrong principal approving and ask whether the file is complete.

Approval Exceptions for Retail Communications

The communications-with-the-public framework lists three narrow exceptions where pre-use principal approval is not required for a retail communication:

• A retail communication that is excepted from filing under the framework's filing-exception list AND does not make any financial or investment recommendation or otherwise promote a product or service of the firm (for example, generic firm-name listings, business cards)
• A retail communication that is posted on an online interactive electronic forum (still subject to post-use supervision and review under the supervisory system requirement)
• Retail communications that are filed with the SEC under the investment-company prospectus-advertising rule, where a different qualified principal already approved under that rule's standards

The interactive-forum exception is meaningful: a registered representative's tweet, LinkedIn post, or Reddit reply that is publicly visible (and thus a retail communication if it reaches more than 25 retail investors in 30 days) does not need pre-use approval. It does need post-use supervisory review under the supervisory system requirement, and it must satisfy the framework's content standards.

Exam Tip: Gotchas

• The interactive-forum exception is post-use review, not no review at all. The firm must still have a written program to monitor what associated persons post in real-time interactive venues.
• A static social-media post that is more than a real-time conversation reverts to the standard rule. A pre-drafted promotional tweet scheduled and posted on a firm's official corporate account is still a retail communication requiring pre-use principal approval. The exception is for interactive dialogue, not scheduled marketing.
• A scripted post that recommends a security loses the recommendation-free exception. A business card with the rep's name and contact info is fine without approval; a card adding "Ask me about XYZ stock" is a retail communication needing pre-use approval.

Supervisory Review for Correspondence and Institutional

Correspondence and institutional communications do not require pre-use approval, but each member must establish written procedures appropriate to the firm's business, size, structure, and customers for the principal review of these communications. The procedures must be reasonably designed to ensure compliance with applicable standards.

For correspondence specifically, the supervisory system requires:

• Written procedures for the review of incoming and outgoing correspondence and internal communications
• Review by a registered principal or supervisor of selected correspondence on a risk basis (sampling, lexicon-based searches, or other reasonable means)
• Documentation of who reviewed, what they reviewed, when, and any actions taken
• Training of personnel on what to escalate

For institutional communications, the supervisory procedures must include training of associated persons on the firm's procedures and on the recipient-restriction rule (the only-to-institutional limit).

Think of it this way: Correspondence supervision is risk-based sampling, not 100% pre-use review. The firm picks a methodology (every 100th email, all emails containing trigger words, all emails from new reps), documents the methodology, and reviews accordingly.

Exam Tip: Gotchas

• Correspondence does not require pre-use principal approval, but it requires post-use supervisory review per WSPs. The exam will sometimes describe a firm with no correspondence-review program and ask which rule is violated. The answer is the communications-with-the-public framework and the supervisory system requirement together.
• A registered rep's social-media post visible to more than 25 retail investors in 30 days is a retail communication requiring principal pre-approval. Ordinary one-on-one emails to a few clients are correspondence subject to supervisory review.

Documentation and Records of Approval

Every approval and review must be documented and retained per the communications-with-the-public framework:

• A copy of the communication plus dates of first and (if applicable) last use
• For retail communications: name of the registered principal who approved and the date of approval
• For correspondence: name of the reviewer under the supervisory system requirement, date of review, and any actions taken
• For institutional: name of the person who reviewed under the firm's institutional-review procedures

These records pair with the SEC books-and-records framework, which requires preservation of all communications for 3 years from creation, with the most recent 2 years easily accessible.

Exam Tip: Gotchas

• The records must show who approved or reviewed, not merely that approval or review occurred. A communication file with no name attached is incomplete under the FINRA recordkeeping rule even if a principal actually approved it.