FINRA Rule 2210 Checklist: Communications With the Public

TL;DR — FINRA Rule 2210 governs every public-facing communication a broker-dealer produces. The hard parts are not the categories themselves but the operational rigor — principal pre-approval timing, social media nuance, filing windows, and recordkeeping. This checklist organizes the rule into something you can actually run a workflow against.

Table of contents

• What Rule 2210 covers
• The three categories of communication
• Content standards that apply to all communications
• Principal approval workflow
• Social media specifics
• Filing requirements
• Recordkeeping
• The 14-item checklist
• FAQ

What Rule 2210 covers

FINRA (Financial Industry Regulatory Authority) Rule 2210 governs "communications with the public" by member firms and their associated persons. In plain English: anything a broker-dealer or its registered representatives publish, send, post, or say to a customer or prospective customer.

The rule sets:

• Content standards (fair, balanced, not misleading)
• Approval requirements (who can approve what)
• Filing requirements (what must be sent to FINRA, and when)
• Recordkeeping requirements (what must be retained, and for how long)

The rule applies across product types — equities, options, mutual funds, ETFs, variable annuities, structured products — with additional layers for certain products (e.g., options-specific rules under 2220, public communications about debt under separate frameworks).

The three categories of communication

The rule organizes everything into three buckets. Knowing which bucket a piece of communication falls into determines the entire downstream workflow.

1. Retail communication

Any written (including electronic) communication distributed or made available to more than 25 retail investors within any 30-calendar-day period. This is the big bucket: ads, websites, social posts, sales literature, scripts used in retail outreach, mass emails.

Key obligations: - Principal pre-approval: A registered principal must approve before first use, with limited exceptions (e.g., communications that consist solely of certain factual data). - Filing: New member firms must file most retail communications within 10 business days of first use. Other firms must file communications concerning certain product categories (registered investment companies, public DPPs, options, structured products, security futures, bond mutual funds with volatility ratings) within 10 business days of first use (some require pre-use filing). - Content: Full content standards apply (fair and balanced, no misleading statements, no predictions of performance, no promissory language, all required disclosures).

2. Correspondence

Any written (including electronic) communication distributed to 25 or fewer retail investors within any 30-calendar-day period. This is one-to-one and small-group communication: an email to a client, a personalized letter, an instant message.

Key obligations: - Supervisory review: No pre-approval requirement, but the firm must have a supervisory system reasonably designed to review correspondence. Most firms apply lexicon-based monitoring and risk-based sampling. - Content: Content standards still apply — correspondence is not exempt from "fair and balanced." - No filing requirement in most cases.

3. Institutional communication

Any written communication distributed or made available only to institutional investors. Institutional investors are defined narrowly — banks, savings institutions, insurance companies, registered investment companies, certain government entities, qualified employee benefit plans with at least $50 million in assets, and persons with at least $50 million in assets under management.

Key obligations: - Supervisory review: No pre-approval, but the firm must have a written supervisory system. Communications that include retail-investor distribution lose institutional status entirely. - Content: Standards apply but with fewer specific disclosure requirements. - No filing requirement.

Misclassification is the single most common failure. A piece initially scoped as institutional that accidentally reaches retail eyes is now a retail communication — without principal approval, without filing, without disclosures.

Content standards that apply to all communications

Section (d) of Rule 2210 sets the universal content standards. The communication must:

1. Be fair, balanced, and not misleading. Risks must be presented alongside benefits with comparable prominence.
2. Not predict or project performance, except in narrow circumstances (hypothetical illustrations with required disclosures, asset allocation models meeting specific criteria, target dates).
3. Not make promissory or exaggerated claims. "Guaranteed returns" is the canonical violation. So is "consistent" or "stable" when applied to a strategy with material drawdowns.
4. Provide a sound basis for evaluating claims. Statistics need sources. Performance needs methodology.
5. Include required disclosures based on the product (e.g., options risk disclosure documents, mutual fund prospectus offers, performance disclosure for variable annuities).
6. Not omit material information that would make the communication misleading in context.
7. Identify the member firm and, where applicable, the relationship to any affiliated entities mentioned.

The standard is not "technically accurate." It is "fair and balanced in context to a retail investor." A statement that is literally true but creates a misleading impression is a violation.

Principal approval workflow

For retail communications, principal pre-approval is the operational hinge. A registered principal — typically a Series 24, with appropriate registration for the product type — must approve before first use.

Practical workflow elements:

• Defined principal coverage: Map products to qualified principals. Options materials require a Series 4 or similar. Variable products require Series 26. The firm must know who can approve what.
• Documented approval: The approval must be in writing (electronic is fine) and capture: who approved, when, the version approved, and any conditions.
• Version control: If marketing tweaks the headline post-approval, that is a new piece requiring re-approval. A version-controlled platform is not optional once volume exceeds a few dozen pieces per month.
• Turnaround time: Set internal SLAs. Two business days for standard retail, longer for filed product categories. Marketers will route around the process if the process is unpredictable.
• Escalation: Define when principal approval requires legal review (new product, novel claim, regulatory examination underway).

A common failure mode: a principal approves a "template" and marketers later populate it with specific claims that fall outside the approved scope. The fix is to require re-approval when substantive content changes — and to make the platform enforce that automatically.

Social media specifics

Social media has been a recurring source of enforcement. FINRA's interpretations (notably Notices 10-06, 11-39, 17-18, and subsequent guidance on influencers) clarify how 2210 applies online.

The core principles:

• Static vs. interactive: A static post (profile bio, pinned post, advertisement) is a retail communication requiring principal pre-approval. A truly interactive, real-time post (a one-off comment in a conversation) is correspondence and subject to supervisory review.
• Business use of personal accounts: When a registered representative uses a personal social account to discuss firm business or products, the firm's supervision obligations attach. The platform of choice does not exempt the communication.
• Influencers and finfluencers: When a firm engages a third party to promote products, the third party's content is treated as the firm's retail communication. Material connections must be disclosed (FTC overlay applies), and the content must meet 2210 standards including required disclosures.
• Liking, sharing, retweeting: Endorsing third-party content can make it firm content. The "adoption" and "entanglement" doctrines have been applied. If a representative shares an article whose claims would violate 2210 if the firm made them, that share is a violation.
• Recordkeeping: Social posts are records. The firm must capture and retain them, including comments and replies that constitute business communications.

Operational implication: you need a workflow that pre-approves static social, supervises interactive social, and captures everything for the books and records.

Filing requirements

Rule 2210(c) sets filing requirements with FINRA's Advertising Regulation Department. The most common categories:

• First year of FINRA membership: New firms must file most retail communications at least 10 business days before first use.
• Registered investment company communications (including mutual funds, ETFs that are registered investment companies, closed-end funds, variable insurance products): within 10 business days of first use, generally. Some categories require pre-use filing.
• Public DPPs, structured products, options, security futures, bond mutual funds with volatility ratings: 10 business days of first use; certain categories require pre-use filing.
• Investment analysis tools: pre-use filing required.

Filing windows are a frequent source of clerical violations. Build a filing calendar tied to your asset approvals; missed deadlines are easy to find on exam.

Recordkeeping

SEC Rule 17a-4 and FINRA Rule 4511 set the recordkeeping framework. For Rule 2210 communications:

• Retention: 3 years from last use, readily accessible for the first 2 years.
• What is retained: A copy of the communication, the name of the person who prepared it, the principal who approved it, the date of approval, and dates of first and last use. For filed pieces, the FINRA filing reference and any related correspondence.
• Format: Records must be retained in a non-rewriteable, non-erasable format (WORM compliance) or an equivalent audit-trail system that meets SEC requirements.
• Reproduction: The firm must be able to reproduce records on demand.

The "principal approval" and "first/last use" elements are where audit reconstructions go wrong. If your platform does not stamp these automatically, you will spend exam weeks rebuilding the trail.

Three recent enforcement examples

• A broker-dealer was fined for failing to supervise registered representatives' communications on personal social media accounts that promoted firm products without principal approval. The findings cited Rule 2210 and supervision (Rule 3110) violations.
• A firm was sanctioned for retail communications about a structured product that omitted material risks. Approval was on file, but the principal had not been registered for the product type.
• A finfluencer arrangement led to FINRA action against the firm for inadequate review of third-party content and missing required disclosures of the compensation relationship.

The 14-item Rule 2210 checklist

Use this as the operational backbone. Sub-checklists live underneath each item.

1. Classification: Is this retail, correspondence, or institutional? Document the basis.
2. Audience tracking: For institutional pieces, can you prove distribution did not reach retail?
3. Principal qualification: Is the assigned principal registered for the product type?
4. Pre-approval timing: Was approval captured before first use, with version and date stamped?
5. Content standard review: Fair and balanced, no projections, no exaggerated claims, sound basis.
6. Required disclosures: Product-specific disclosures present with required prominence.
7. Filing: Is the piece in a filing category? Is the filing window calendared and tracked?
8. Social media classification: Static vs. interactive determined and documented?
9. Third-party content: Adoption / entanglement reviewed; influencer disclosures present.
10. Version control: Any post-approval changes triggered re-approval?
11. Supervisory review of correspondence: Lexicon and sampling program documented and run.
12. Recordkeeping: 3-year retention, WORM-compliant, reproducible on demand.
13. Approval rationale: For close calls and overrides, is the reasoning captured?
14. Periodic review: Is the program tested at least annually with results to management?

If you cannot answer all 14 with documented evidence, you have a gap.

How leading firms automate this with Sedric

The hardest part of Rule 2210 compliance is not knowing the rule — it is running the workflow at scale across channels, principals, products, and entities.

Sedric is configured for broker-dealer workflows out of the box. The platform classifies retail, correspondence, and institutional communications based on audience and content; routes to the appropriately registered principal; enforces re-approval on substantive changes; flags content that risks 2210(d) standards with the specific clause cited; and produces the audit export — first use date, last use date, principal of record, version, filing reference — that exam staff ask for.

For social media, Sedric captures and reviews static and interactive content across the platforms reps use, including business communications on personal accounts where the firm's policy reaches.

Customers tell us the operational win is the same in every deployment: principal time is reclaimed for the close calls, junior reviewers handle the volume with full citation, and the audit trail rebuilds itself.

FAQ

Q: When does correspondence become a retail communication? At the 26th retail recipient within a 30-day rolling window. If you exceed the threshold, the communication is recharacterized as retail and the full retail workflow applies, including principal pre-approval.

Q: Does an internal email referencing a product count under 2210? Internal-only communications are not "public" under 2210. Internal communications used to populate external pieces (talking points, scripts) are governed when used externally.

Q: How are video and audio handled? Same framework. Video and audio communications distributed to more than 25 retail investors in 30 days are retail communications, requiring principal pre-approval, content review of every spoken claim, and recordkeeping of the actual recording — not just the script.

Q: Do we need to retain LinkedIn posts and comments? Yes, where they constitute business communications. The firm's supervisory system must capture them. Personal LinkedIn use that is not business-related is outside scope, but the line is often factual — when in doubt, capture.

Q: How does Rule 2210 interact with Reg BI? They are complementary. Reg BI sets the conduct standard for retail recommendations. Rule 2210 sets the content and approval standard for communications. A communication that makes a recommendation may need to satisfy both — fair-and-balanced content under 2210 and the Best Interest obligation under Reg BI for the recommendation itself.

Q: What changed in recent FINRA guidance on influencers? The throughline is that firms remain responsible for the content of third-party promotions. Material-connection disclosure (FTC overlay) plus 2210 content standards plus principal review of the script and approval of the final piece are all required. "We didn't write it" is not a defense.

Q: Do registered investment advisers fall under Rule 2210? No — RIAs are subject to the SEC's Marketing Rule (206(4)-1) rather than FINRA 2210. Dual-registrants must satisfy both frameworks for the relevant communications.

Q: How often should the supervisory system be tested? At least annually under the firm's compliance program, with more frequent risk-based testing of high-volume or high-risk channels (social media, recorded sales calls).

Closing CTA

If you are running 2210 review with email, spreadsheets, and tribal knowledge, the gaps are likely larger than you think. Our Marketing Comms Audit ingests 10 of your communications across channels and returns a scored report against the Rule 2210 framework — classification, principal qualification, content standards, disclosure adequacy, and filing posture — with citations. It is the fastest way to see your real exposure.