Module 10 — Conduct, Records and Resolution · Lesson 10.3
Books, Records, Confirmations and Statements
What is created, what is sent, and how long everything is kept
~12 min
What you'll learn
- State what a customer confirmation must disclose and when it must be sent
- State the frequency requirement for customer account statements
- Apply the principal retention periods under SEC Rules 17a-3 and 17a-4
- Describe Regulation S-P's privacy notice and opt-out requirements
- Explain the purpose of the customer protection rule
Records are not bureaucracy; they are the only evidence of what happened. Every enforcement case, every arbitration and every customer dispute is reconstructed from them, which is why the rules are specific about content and unforgiving about retention.
Confirmations
SEC Rule 10b-10 requires that a broker-dealer give or send a written confirmation to the customer at or before completion of the transaction — in practice, at or before settlement.
The confirmation must disclose the date and time of the transaction, or a statement that the time will be furnished on request; the identity, price and number of shares or units; whether the firm acted as agent for the customer, as agent for another person, as agent for both, or as principal; the capacity-dependent compensation — the commission if acting as agent, or the markup or markdown in the circumstances the rule specifies; whether payment for order flow was received, with details available on request; the yield on a debt security and how it was calculated; whether a debt security is callable and that further call information is available; and the settlement date.
For a debt security, the yield disclosure is substantive rather than formal. As lesson 3.2 established, a premium bond must be shown at the lower of yield to call or yield to maturity, and MSRB Rule G-15 imposes the parallel requirement for municipal securities along with disclosure of the dollar price, the capacity, any credit or liquidity enhancement, and whether the security is subject to the alternative minimum tax.
FINRA Rule 2232 governs customer confirmations and, for certain retail transactions in corporate and agency debt, requires disclosure of the member's markup or markdown from the prevailing market price expressed both in dollars and as a percentage. That requirement exists because a markup buried in a net price is otherwise invisible.
Rule 15g-6 requires additional monthly account statements for penny stock customers showing the estimated market value of their positions.
Account statements
FINRA Rule 2231 requires a member to send an account statement at least quarterly to each customer with a security position, money balance or account activity during the period. In practice firms send monthly statements to accounts with activity.
The statement must show all positions and money balances and all activity since the last statement, identify the introducing and clearing firms where applicable, and carry a legend advising the customer to promptly report any inaccuracy or discrepancy and providing contact details.
Statements and confirmations go to the customer at their address of record. Sending them to a third party requires the customer's written instruction, and a duplicate to a third party requires the customer's written consent. Holding mail is permitted only for a limited period and only at the customer's written request, with specified conditions.
A change of address requires notification to the customer at both the old and new addresses, which exists to catch an unauthorized redirection.
Any customer complaint about a statement must be handled under the complaint rules covered in the next lesson.
Retention
SEC Rule 17a-3 specifies the records that must be made; Rule 17a-4 specifies how long they are preserved. The periods that appear on the exam:
Six years: blotters, general ledgers, stock records, customer account records including the account information required by FINRA Rule 4512, and records of associated persons' compensation. Six years is the period for the records that describe the firm's overall business and its customer relationships.
Three years: order tickets, confirmations, trial balances, communications received and sent relating to the business, advertising and sales literature, records of written customer complaints, powers of attorney and trading authorizations, and the associated person's employment application. Three years is the period for records of individual transactions and communications.
Lifetime of the firm plus three years after termination: articles of incorporation or partnership agreements, minute books and stock certificate books.
Records must generally be kept in an easily accessible place for the first two years of any period.
MSRB Rules G-8 and G-9 set the parallel requirements for municipal securities activity — G-8 for the records to be made and G-9 for their preservation.
The practical exam approach: six years for the firm's books and the customer account record; three years for tickets, confirms and communications. When a question names a record, ask whether it describes the relationship or a single event.
Privacy and customer protection
Regulation S-P implements the privacy provisions of the Gramm-Leach-Bliley Act for broker-dealers.
It requires an initial privacy notice to a customer no later than when the customer relationship is established, and an annual notice thereafter, describing the categories of non-public personal information collected and disclosed and the categories of third parties who receive it.
It requires an opt-out notice and a reasonable opportunity to opt out before disclosing non-public personal information to a non-affiliated third party — with exceptions, including disclosures necessary to process a transaction the customer requested, disclosures to service providers under a confidentiality agreement, and disclosures required by law or made to regulators.
And its safeguards rule requires written policies and procedures addressing administrative, technical and physical safeguards for customer records and information, and, under later amendments, a response programme for unauthorized access with customer notification.
Separately, SEC Rule 15c3-3 — the customer protection rule — requires a broker-dealer to maintain physical possession or control of fully paid and excess margin securities of customers, and to maintain a special reserve bank account for the exclusive benefit of customers holding cash the firm owes them beyond what customers owe the firm. Its purpose is that customer property survives the firm's failure, and it is the operational counterpart to SIPC: SIPC covers what is missing, and 15c3-3 exists so that as little as possible is missing.
Rule 15c3-1, the net capital rule, requires a broker-dealer to maintain minimum liquid net capital, for the same underlying reason.
Key takeaways
- ·A confirmation must go out at or before completion of the transaction and must state the firm's capacity and its compensation.
- ·Debt confirmations must show yield, and for a premium bond that means yield to the call — the lower of the two.
- ·Account statements are required at least quarterly for any account with a position, balance or activity.
- ·Six years for blotters, ledgers, stock records and customer account records; three years for tickets, confirms, communications and complaints.
- ·Regulation S-P requires initial and annual privacy notices, an opt-out before disclosure to non-affiliated third parties, and written safeguards.
- ·Rule 15c3-3 keeps customer property segregated so that it survives the firm; SIPC covers what is nonetheless missing.
When something goes wrong anyway, there is a defined process. Complaints, arbitration and mediation come next.
Sources
- 1.17 CFR 240.10b-10 — Confirmation of transactions
Securities and Exchange Commission · Electronic Code of Federal Regulations
Written confirmation at or before completion of a transaction and its required content — capacity, compensation, yield and call disclosure for debt securities, payment for order flow and the settlement date.
- 2.17 CFR 240.17a-4 — Records to be preserved by certain exchange members, brokers and dealers
Securities and Exchange Commission · Electronic Code of Federal Regulations
The six-year and three-year preservation periods, the lifetime-of-the-firm categories, and the requirement that records be readily accessible for the first two years.
- 3.17 CFR Part 248 — Regulations S-P, S-AM and S-ID
Securities and Exchange Commission · Electronic Code of Federal Regulations
The initial and annual privacy notices, the opt-out right and its exceptions, and the safeguards rule for customer records and information.
- 4.FINRA Rule 2231 — Customer Account Statements
Financial Industry Regulatory Authority (FINRA) · FINRA Manual
The at-least-quarterly statement requirement, the content and legend requirements, and the conditions on holding mail and sending statements to third parties.
- 5.MSRB Rule G-15 — Confirmation, Clearance, Settlement and Other Uniform Practice Requirements
Municipal Securities Rulemaking Board · MSRB Rule Book
Municipal confirmation content, including dollar price and yield computed to the lower of call or maturity, capacity, credit enhancement and alternative minimum tax status.