Every securities transaction, customer account, and piece of correspondence creates a paper trail. Federal rules dictate exactly what broker-dealers must keep and for how long.
The Governing Rules
Two SEC rules form the foundation of broker-dealer recordkeeping:
- The broker-dealer books-and-records rule: specifies which records broker-dealers must create (blotters, ledgers, account records, etc.)
- The broker-dealer recordkeeping rule: specifies how long broker-dealers must retain those records and in what format
FINRA reinforces these requirements, requiring member firms to make and preserve records in conformity with SEC rules. For any FINRA-required record that has no specified retention period, the default is 6 years.
Retention Periods
This is one of the most frequently tested areas. These periods are worth remembering:
| Record Type | Retention Period | Source |
|---|---|---|
| Blotters (daily records of purchases, sales, receipts, deliveries) | 6 years | SEC recordkeeping rule |
| General ledger | 6 years | SEC recordkeeping rule |
| Customer account records (name, address, SSN, investment objectives) | 6 years after account closure | SEC books-and-records rule |
| Suspicious Activity Reports (SARs) and supporting documentation | 5 years | Bank Secrecy Act (BSA) / FinCEN |
| Customer complaints | 4 years | FINRA written customer complaints rule |
| Trade confirmations | 3 years | SEC recordkeeping rule |
| Communications (correspondence, ads, sales literature) | 3 years | FINRA communications rule / SEC recordkeeping rule |
| Written supervisory procedures | 3 years after last use | SEC recordkeeping rule |
| Partnership articles, corporate charters | Life of firm + 3 years | SEC recordkeeping rule |
Memory Aid: 6-5-4-3: the "big three" financial records (blotters, ledgers, accounts) get 6 years; SARs get 5; complaints get 4; communications and confirmations get 3.
Exam Tip: Gotchas
- The most commonly tested retention periods are 3 years (communications, confirmations), 4 years (complaints), and 6 years (blotters, ledgers, account records).
- SARs have their own retention period (5 years under BSA/FinCEN), not the 6-year default.
- Customer complaints are 4 years (not 3 or 6). This standalone number is a common exam trap.
The 2-Year Accessibility Rule
Regardless of the total retention period, records must be maintained in an easily accessible format for the first 2 years of the retention period.
- This means firms cannot archive records to hard-to-reach storage immediately
- For the first 2 years, records should be readily available for regulatory examination
Exam Tip: Gotchas
- The 2-year "easily accessible" requirement applies within all longer retention periods, not as a standalone period. A record kept for 6 years must be easily accessible for the first 2 of those 6.
Electronic Storage
Broker-dealers may store records electronically, but the storage system must meet one of two standards:
- WORM (Write Once, Read Many) - records cannot be altered or deleted once written
- Audit-trail alternative - the system preserves records in a way that allows recreation of the original if it is modified or deleted
Think of it this way: WORM storage is like writing in permanent ink; once something is recorded, it cannot be erased or changed. The audit-trail alternative is more like a document with tracked changes: edits are allowed, but every version is saved so regulators can always see the original.
Exam Tip: Gotchas
- Electronic storage is permitted, but only if records cannot be tampered with. The exam tests whether you know the two approved methods (WORM and audit-trail) and why they exist: to preserve record integrity for regulatory review.