Books and Records Retention Requirements
Every securities transaction, customer account, and piece of correspondence creates a paper trail. Federal rules dictate exactly what broker-dealers must keep and for how long.
The Governing Rules
Two SEC rules form the foundation of broker-dealer recordkeeping:
- SEC Rule 17a-3 - specifies which records broker-dealers must create (blotters, ledgers, account records, etc.)
- SEC Rule 17a-4 - specifies how long broker-dealers must retain those records and in what format
FINRA Rule 4511 reinforces these requirements, requiring member firms to make and preserve records in conformity with SEC rules. For any FINRA-required record that has no specified retention period, the default is 6 years.
Retention Periods
This is one of the most frequently tested areas. These periods are worth remembering:
| Record Type | Retention Period | Source Rule |
|---|---|---|
| Blotters (daily records of purchases, sales, receipts, deliveries) | 6 years | SEC Rule 17a-4 |
| General ledger | 6 years | SEC Rule 17a-4 |
| Customer account records (name, address, SSN, investment objectives) | 6 years after account closure | SEC Rule 17a-3 |
| Suspicious Activity Reports (SARs) and supporting documentation | 5 years | Bank Secrecy Act (BSA) / FinCEN |
| Customer complaints | 4 years | FINRA Rule 4513 |
| Trade confirmations | 3 years | SEC Rule 17a-4 |
| Communications (correspondence, ads, sales literature) | 3 years | FINRA Rule 2210 / SEC Rule 17a-4 |
| Written supervisory procedures | 3 years after last use | SEC Rule 17a-4 |
| Partnership articles, corporate charters | Life of firm + 3 years | SEC Rule 17a-4 |
Memory Aid: 6-5-4-3: the "big three" financial records (blotters, ledgers, accounts) get 6 years; SARs get 5; complaints get 4; communications and confirmations get 3.
Exam Tip: Gotchas
- The most commonly tested retention periods are 3 years (communications, confirmations), 4 years (complaints), and 6 years (blotters, ledgers, account records).
- SARs have their own retention period (5 years under BSA/FinCEN), not the 6-year default.
- Customer complaints are 4 years (not 3 or 6). This standalone number is a common exam trap.
The 2-Year Accessibility Rule
Regardless of the total retention period, records must be maintained in an easily accessible format for the first 2 years of the retention period.
- This means firms cannot archive records to hard-to-reach storage immediately
- For the first 2 years, records should be readily available for regulatory examination
Exam Tip: Gotchas
- The 2-year "easily accessible" requirement applies within all longer retention periods, not as a standalone period. A record kept for 6 years must be easily accessible for the first 2 of those 6.
Electronic Storage
Broker-dealers may store records electronically, but the storage system must meet one of two standards:
- WORM (Write Once, Read Many) - records cannot be altered or deleted once written
- Audit-trail alternative - the system preserves records in a way that allows recreation of the original if it is modified or deleted
Think of it this way: WORM storage is like writing in permanent ink; once something is recorded, it cannot be erased or changed. The audit-trail alternative is more like a document with tracked changes: edits are allowed, but every version is saved so regulators can always see the original.
Exam Tip: Gotchas
- Electronic storage is permitted, but only if records cannot be tampered with. The exam tests whether you know the two approved methods (WORM and audit-trail) and why they exist: to preserve record integrity for regulatory review.