FINRA Rule 4530: reporting requirements

Rule 4530 is how FINRA hears about trouble at a member firm without waiting for an exam. It binds FINRA members, so broker-dealers and their associated persons; a stand-alone SEC-registered adviser is not a FINRA member and has no 4530 duty. The rule sets up three different reports, and a small firm gets into difficulty mostly by mixing them up.

Paragraph (a) covers events: things that happen to the firm or its people, from a customer alleging forgery to an arbitration settlement or a criminal charge. Paragraph (b) covers the firm's own conclusions that a violation took place. Paragraph (d) is routine: statistics on every written customer complaint the firm receives, filed each quarter whatever the complaints allege. Paragraph (c) feeds the rest: each associated person must “promptly report to the member” any (a)(1) event. The firm's own 30 days run from when it “knows or should have known”, which is why that internal channel matters. Where 4530 sits among a member's other yearly duties is mapped in FINRA compliance for broker-dealers.

The rule wants each event reported once, under the paragraph that fits best. In the words of its supplementary material, members “should not report the same event under more than one paragraph or subparagraph”, though related events, such as a proceeding and the later finding in it, are each reported. The table sorts ten events a small firm meets, with the paragraph each lands in and the clock that runs.

Three rows are the ones firms most often get wrong. A complaint that alleges forgery goes under (a)(1)(B) within 30 days and is also counted in the quarter's statistics: the rule says any written complaint reported under (a)(1)(B) “also must be reported pursuant to paragraph (d)”. A fine the firm imposes on a rep above $2,500 is an (a)(2) report, and once it is reported there the firm need not report the same conduct again under (b). And an exam deficiency letter is not a finding at all: the rule's meaning of “found” excludes “deficiency letters, examination reports” and similar informal resolutions.

Paragraph (a) is a list. The firm reports any listed event that touches the firm or one of its associated persons, and the list reaches well past securities work: insurance, commodities and other financial matters count, and so do foreign regulators and professional bodies.

What counts as “found”

The first event turns on one word. The supplementary material says “found” includes adverse final actions, “including consent decrees in which the respondent has neither admitted nor denied the findings”, and any formal finding “regardless of whether the finding will be appealed.” It excludes informal agreements, deficiency letters, examination reports, memoranda of understanding, cautionary actions and admonishments. A settled state order counts; a letter listing exam deficiencies does not.

The dollar lines

Two events have a money line. Settlements and awards are measured with “any attorneys fees and interest” included, and joint and several liability is counted in full for each party: the rule's own example is a $40,000 joint and several amount, where “the amount reported would be $40,000 for each party.”

A former rep's events still count if they happened while the person was with the firm. The rule excuses a report only where, from its records or Web CRD, the firm “cannot determine that the person was an associated person of the member.”

Card 02

Paragraphs (a) and (b) share one deadline: report “promptly”, and “in any event not later than 30 calendar days”. Thirty days is the outer edge, not a target. For (a) the count starts when the firm “knows or should have known” of the event; for (b) when it “has concluded or reasonably should have concluded” that a violation happened. The rule ties each start to what the firm knew, not to a meeting or a memo.

In a firm of a few people the clock is mostly a habit. Write down the day the firm learned of each event, the paragraph it chose, and the day the report went in; the same log answers the examiner who asks why a report came on day 29. The written procedures that make reps tell the firm promptly sit under FINRA Rule 3110 supervision, and firms that want the deadlines tracked by a system compare broker-dealer compliance software.

Paragraph (b) is the self-report. It applies, in the rule's words, where the member “has concluded or reasonably should have concluded on its own” that a violation occurred; a finding by a court or a regulator belongs under (a)(1)(A) instead. That makes (b) the hardest paragraph for a small firm, because the trigger is an internal judgment, and “reasonably should have concluded” means a firm cannot avoid it by never deciding.

The supplementary material narrows what FINRA expects to see. Not every slip is a (b) report:

The second half of .01 saves a duplicate filing. When the firm concludes a rep broke a rule and disciplines the rep in a way paragraph (a)(2) lists, the firm reports under (a)(2) “and it need not report the event under paragraph (b).” Write the reasoning down either way. A decision that an error was not widespread is itself something an examiner may ask to see, and a firm unsure where its line sits can take that question to outside help, compared in FINRA compliance consultants.

The statistics cover more people than the word “customer” suggests. For paragraph (d), the firm reports “any written grievance” from a person it has done securities business with, and any “securities-related written grievance” from a person it has only “sought to engage”, a prospect. Brokers and dealers are not customers here. Every written complaint already reported under (a)(1)(B) goes into the statistics too.

The rule leaves the detail to FINRA (“in such detail as FINRA shall specify”). Among the notices FINRA lists on the Rule 4530 page is Regulatory Notice 17-21 (May 31, 2017), which revised “the Product and Problem Codes for Reporting Customer Complaints”. Keep the complaint log detailed enough to answer that coding: the product involved, what the customer says went wrong, and the person named.

Rule 4530 does not replace the registration forms. Paragraph (e) says nothing in the rule reduces the duty to “promptly disclose required information on the Forms BD, U4 or U5”, and that the (a), (b) and (d) reports are owed “regardless of whether the information is reported or disclosed pursuant to any other rule or requirement, including the requirements of the Form BD.”

It then removes two duplicates. A firm need not file a separate (a)(1) report for an event it discloses on Form U4, if it also indicates, in the format FINRA requires, that the disclosure satisfies (a)(1). And an (a) or (b) event disclosed on Form U5 needs no separate report. Form BD gets no such exception.

The copies may be filed electronically, “in such manner and format as specified by FINRA”, with summary information alongside. If FINRA's Credentialing, Registration, Education and Disclosure staff ask for the same documents first, producing them “not later than 30 days after receipt of such request” satisfies paragraph (f).

Every 4530 report rests on a record the firm already has to keep. Rule 3110(b)(5) requires procedures “to capture, acknowledge, and respond to all written (including electronic) customer complaints.” Exchange Act Rule 17a-3 requires a complaint record kept “as to each associated person of each written customer complaint received” about that person, and Rule 17a-4(b) keeps it “for a period of not less than three years, the first two years in an easily accessible place.” FINRA's own Rule 4511 adds that FINRA-required records follow 17a-4's format and media rules.

Keep the email or letter itself with the entry: the rule's complaints are written “(including electronic)”, so a complaint by email, text or chat counts as much as one by post. How long each record is kept is worked out in the books and records retention calculator, the format rules are in our guide to FINRA Rule 4511, and the storage itself in SEC Rule 17a-4 and WORM storage.