This page explains FINRA's rules, together with related federal law, for broker-dealer firms and registered and associated persons in New York who receive a request under FINRA Rule 8210. FINRA is the self-regulatory organization for broker-dealers; its rules bind its members and the people associated with them. KOR Law LLP's regulatory and enforcement practice defends clients in securities enforcement matters involving the SEC, FINRA, state securities regulators and private actions.
What can FINRA demand under Rule 8210?
For "an investigation, complaint, examination, or proceeding authorized by the FINRA By-Laws or rules," FINRA staff or an adjudicator may require "a member, person associated with a member, or any other person subject to FINRA's jurisdiction to provide information orally, in writing, or electronically" and "to testify at a location specified by FINRA staff, under oath or affirmation," and may "inspect and copy the books, records, and accounts" of the member or person (Rule 8210(a)). Supplementary Material .01 explains that this reaches records the firm or person makes or keeps relating to its broker-dealer operations or the person's association with the member, including records about outside business activities and private securities transactions.
The duty to comply is stated plainly: "No member or person shall fail to provide information or testimony or to permit an inspection and copying of books, records, or accounts pursuant to this Rule" (Rule 8210(c)).
How are requests delivered?
Rule 8210(d) treats notice as received in specific ways. A notice to a member firm is deemed received when transmitted through FINRA Gateway. A notice to a current or former registered person is deemed received when mailed or otherwise sent to the last known residential address in the Central Registration Depository (CRD). If staff know the CRD address is out of date, they must also send it to the last known address and any more current address they know. And if staff know the person has counsel for the matter, the notice goes to counsel and is deemed received by the person. Keeping CRD addresses current is therefore part of protecting yourself.
| Topic | Rule | Source |
|---|---|---|
| Who must comply | Members, associated persons and others subject to FINRA's jurisdiction | Rule 8210(a), (c) |
| What can be required | Information in any form, testimony under oath, inspection and copying of books and records | Rule 8210(a) |
| Service on firms | Deemed received when sent via FINRA Gateway | Rule 8210(d) |
| Service on individuals | Last known CRD residential address; counsel if represented | Rule 8210(d) |
| Electronic media | Information on portable devices must be encrypted, key sent separately | Rule 8210(g) |
| Failure to respond | Notice of suspension; corrective action within 21 days | Rule 9552(a) |
| No termination request within three months | Automatic expulsion or bar | Rule 9552 |
What happens if you do not comply?
FINRA has an expedited path. If a member or person "fails to provide any information, report, material, data, or testimony requested or required," staff may serve a written notice stating that failure to take corrective action within 21 days after service "will result in suspension" (Rule 9552(a)). The notice must state the grounds and the factual basis and explain how to avoid the action. The suspension takes effect 21 days after service unless stayed by a written request for a hearing, filed before the effective date, that sets out "with specificity any and all defenses." A suspended firm or person may ask to end the suspension on the ground of full compliance. If no termination request is filed within three months of the original notice, the firm or person "will automatically be expelled or barred."
Because a bar can end a career in the securities industry, Rule 8210 requests should be answered, negotiated or contested on the record, not ignored.
How should you respond, step by step?
- Read the request closely. Note what is requested, the deadline, and whether testimony is required.
- Preserve records. Suspend deletion of relevant email, texts and files. If the matter is or becomes a federal investigation, destroying records to obstruct it is a felony (18 U.S.C. 1519).
- Engage counsel early. Once staff know you are represented, notices go to counsel (Rule 8210(d)).
- Discuss scope and timing with staff. Rolling productions and reasonable extensions are often possible; get any agreement in writing.
- Produce securely. Encrypt any portable media and send the key separately (Rule 8210(g)).
- Prepare for testimony. On-the-record testimony is under oath, and a witness may later inspect, and on request obtain, a copy of the transcript for a fee, subject to limits before a complaint is issued (Rule 8210(f)).
- Calendar any Rule 9552 notice. The 21-day clock is short.
How does FINRA relate to the SEC?
The SEC oversees self-regulatory organizations and may refer matters to them or give them access to its files (17 CFR 202.5(b)). FINRA may also share information with domestic federal agencies and foreign regulators under confidentiality agreements, and may use its Rule 8210 powers for other regulators with which it has information-sharing agreements (Rule 8210(b)). What a firm or person tells FINRA can therefore become relevant in an SEC matter; the SEC's charging stage is explained in what an SEC Wells notice is and how to respond. State regulators may be involved as well; see what powers the New York Attorney General has in a business investigation.
What changes the answer?
- Whether you are subject to FINRA's jurisdiction. The rule reaches members, associated persons and others subject to FINRA's jurisdiction (Rule 8210(a)).
- What records are requested. Records relating to broker-dealer operations or the person's association with the member are covered (Supplementary Material .01).
- Representation. Counsel receives notices once staff know of the representation (Rule 8210(d)).
- A Rule 9552 notice. It starts a 21-day clock to cure or request a hearing (Rule 9552).
- Parallel matters. SEC, state or criminal exposure affects how much to say and when (17 CFR 202.5(b)).
- Customer claims. The conduct behind a FINRA inquiry may also prompt private claims by investors, whose elements are discussed in what you have to prove to win a fraud claim in a New York business case. Those claims have their own deadlines; see how long you have to sue for breach of contract, fraud, or a sale of goods in New York.
- The firm's own review. An internal investigation run with counsel may be underway; see how to run an internal investigation without losing privilege.
For example: a registered representative asked about an outside business
For example, imagine a registered representative at a broker-dealer in Manhattan who receives a Rule 8210 letter at her home address asking for bank statements and emails about a real estate venture she ran on the side, and for on-the-record testimony in three weeks. (This is a made-up illustration, not a real client or result.)
The request falls within the rule's reach for records relating to outside business activities (Rule 8210, Supplementary Material .01). Her lawyer notifies FINRA staff of the representation, so future notices go to counsel (Rule 8210(d)), negotiates a two-stage production, and sends documents on an encrypted drive with the password by separate email (Rule 8210(g)). Because the venture involved investors, counsel also considers whether the SEC or a state regulator could become involved before preparing her testimony.
Common mistakes
- Ignoring the letter. Non-response can lead to suspension and, after three months, a bar (Rule 9552).
- An outdated CRD address. Notices sent there are deemed received (Rule 8210(d)).
- Missing the 21-day window. A hearing request must be filed before the suspension takes effect (Rule 9552).
- Sending unencrypted drives. Encryption is required (Rule 8210(g)).
- Testifying unprepared. Testimony is under oath and may be shared with other regulators (Rule 8210(a), (b)).
- Assuming it stays at FINRA. Information can be shared with the SEC and others (Rule 8210(b); 17 CFR 202.5(b)).
What to do this week
- Note the date received and every deadline in the request.
- Confirm your CRD address and update it if needed.
- Preserve relevant records, including personal devices used for business.
- Retain counsel and have counsel contact FINRA staff.
- Gather the requested documents and identify any privileged material.
- If a Rule 9552 notice has arrived, calendar day 21 immediately.
The general steps after any regulatory demand are in what a company should do in the first week after a government subpoena.
Frequently asked questions
Does Rule 8210 apply after I leave the industry?
The rule's notice provisions address current and formerly registered persons, deeming notices received at the last known CRD residential address (Rule 8210(d)). Whether FINRA retains jurisdiction over a particular former associated person depends on FINRA's By-Laws and the timing.
Can I get a copy of my testimony?
A witness may inspect the official transcript and, on written request, obtain a copy for the appropriate fee, though before a complaint is issued staff may deny the request for good cause (Rule 8210(f)).
Is a suspension under Rule 9552 permanent?
Not necessarily. A suspended firm or person may request termination on the ground of full compliance, but without a request within three months of the original notice, the result is an automatic expulsion or bar (Rule 9552).
Can FINRA share my documents with the SEC?
FINRA may share information with domestic federal agencies and foreign regulators under agreements requiring confidentiality (Rule 8210(b)). The FTC and other agencies have their own processes; see what the deadlines are for an FTC civil investigative demand.
What if the firm and I disagree?
Firms and their associated persons may have different interests in a FINRA inquiry, and individuals often retain their own counsel, especially where conduct like outside business activities is at issue.