FINRA Rule 3110

The Supervisory System Requirement

Rule 3110(a) establishes the baseline architecture every member firm's supervisory system
must contain. At a minimum, the system must provide for the establishment and maintenance of
written procedures, the designation of appropriately registered principals with authority to carry
out supervisory responsibilities for each type of business the firm conducts, and the registration
and designation of every qualifying location as a branch office or an Office of Supervisory
Jurisdiction. It must also provide for the designation of one or more appropriately registered
principals in each OSJ, the assignment of every registered person to a specific supervisor
responsible for that person's activities, reasonable efforts to confirm that supervisory personnel
are qualified by experience or training, and participation by every registered representative and
principal in an annual compliance interview or meeting.

These six components are not independent checkboxes; they function as an interlocking chain
of accountability. The written procedures requirement gives the system its documented shape,
principal designation gives the system qualified personnel to execute it, and the assignment ofeach registered person to a named supervisor closes the loop so that no individual's activities
fall through a supervisory gap. FINRA examiners routinely test this chain by asking a simple
question of any given registered representative: who supervises this person, under what written
procedure, and how is that supervision evidenced? A firm that cannot answer cleanly has a
Rule 3110(a) problem regardless of how sophisticated its underlying compliance technology
may be.

The Written Supervisory Procedures Requirement

The foundational requirement of Rule 3110(b)(1) obligates every member firm to establish,
maintain, and enforce written supervisory procedures, commonly referred to as WSPs, to
supervise the types of business in which it engages and the activities of its associated persons.
Written supervisory procedures are the documented operational framework through which a
firm's supervisory obligations are translated into specific, executable daily compliance activities.
They are not high-level policy statements or general commitments to compliance culture; they
are detailed operational procedures that specify exactly what will be reviewed, who will conduct
each review, how frequently each review will occur, what documentation will be generated to
evidence the review, and what escalation process follows when a review identifies a potential
problem.

Rule 3110(b)(6) requires the WSPs themselves to document the supervisory system established
under paragraph (a), including the titles, registration status, and locations of required
supervisory personnel and the responsibilities of each supervisory person relative to the type of
business engaged in. The firm must also preserve a record, for not less than three years, of the
names of all persons designated as supervisory personnel and the dates each designation was
effective. This recordkeeping obligation exists precisely because supervisory accountability
tends to blur during personnel transitions, and FINRA examiners frequently find that firms
cannot reconstruct who was responsible for supervising a given activity during a period under
review.

A particularly consequential feature of Rule 3110(b)(6)(C) is its prohibition on associated
persons who perform a supervisory function from supervising their own activities, or from
reporting to, or having their compensation or continued employment determined by, a person or
persons they are supervising. 

This provision directly targets the structural conflicts of interest
that recur in enforcement cases: a producing branch manager reviewing their own transactions,
or a supervisor whose bonus depends on the revenue generated by the very representative
being supervised. Where a firm determines that full compliance is not possible because of its
size or a supervisory person's position within the firm, the WSPs must document the factors
behind that determination and explain how the resulting arrangement otherwise satisfies the
supervisory system requirement of Rule 3110(a). Supplementary Material .10 identifies the
situations in which this exception typically arises, including sole-proprietor single-person firms
and firms where a registered person is among the most senior executive officers.

Rule 3110(b)(6)(D) extends this conflicts-of-interest analysis beyond the reporting-line structure,
requiring procedures reasonably designed to prevent the supervisory system from beingcompromised by conflicts arising from the position of the person being supervised, the revenue
that person generates for the firm, or any compensation the supervisor derives from the person
being supervised. A branch manager whose own compensation rises in step with a
high-producing representative's revenue has an economic incentive to overlook red flags, and
Rule 3110(b)(6)(D) requires firms to build procedural safeguards against exactly that incentive
rather than relying on the supervisor's individual judgment.

The WSPs must also be current. A WSP that accurately described a firm's supervisory system
five years ago but has not been updated to reflect subsequent business changes, new product
offerings, new regulatory requirements, or new technology capabilities is not compliant with Rule
3110(b)(7). Rule 3110(b)(7) requires each member to promptly amend its written supervisory
procedures to reflect changes in applicable law and in its own supervisory system, and to
promptly communicate those procedures and amendments to every associated person to whom
they are relevant. Supplementary Material .11 permits firms to satisfy this communication
obligation through electronic media, such as a firm intranet, provided the procedures remain
readily accessible, amendments are promptly posted and flagged to affected personnel, the
posted material is protected against unauthorised alteration, and prior versions are retained in
accordance with SEA Rule 17a-4(e)(7).

Designation of Supervisory Principals and Offices of Supervisory Jurisdiction

Rule 3110(a)(2) requires every member firm to designate appropriately registered principals with
the authority and responsibility to carry out the firm's supervisory obligations for each type of
business the firm conducts. The designated supervisors must be registered principals rather
than merely registered representatives, because the supervisory function requires a higher level
of regulatory qualification than the activities being supervised. A General Securities Principal
registered through the Series 24 examination is the primary supervisory qualification for firms
engaged in general securities business, authorising the holder to supervise the full range of
activities conducted by General Securities Representatives.

Rule 3110(f) defines an Office of Supervisory Jurisdiction as any office where one or more
specified supervisory functions take place, including order execution or market making,
structuring of public offerings or private placements, maintaining custody of customer funds or
securities, final acceptance of new accounts, review and endorsement of customer orders, final
approval of retail communications, or responsibility for supervising the activities of associated
persons at other branch offices. 

Supplementary Material .02 directs firms to consider several
additional factors when deciding whether to designate a location as an OSJ even if it does not
meet the formal definition, including whether registered persons there engage in regular
customer contact, whether a substantial number of registered persons work from or are
supervised from the location, its geographic distance from other OSJs, the geographic
dispersion of the firm's registered population, and the diversity or complexity of the securities
activities conducted there.

Rule 3110(a)(4) requires the designation of one or more appropriately registered principals in
each OSJ, and Supplementary Material .03 sharpens this requirement considerably byestablishing a general presumption that a single on-site principal should not be assigned to
supervise more than one OSJ. The designated on-site principal must maintain a physical
presence, on a regular and routine basis, at each OSJ for which they hold supervisory
responsibility. 

Where a firm determines that assigning one principal to multiple OSJs is
nonetheless necessary, it must weigh factors including the principal's qualifications and capacity,
whether the principal is also a producing representative, the geographic proximity of the
locations, and the nature, complexity, and disciplinary history associated with each location,
documenting the reasoning in its written supervisory and inspection procedures.

The branch office definition in Rule 3110(f)(2) is broader than many practitioners assume,
capturing any location where one or more associated persons regularly conducts securities
business or is held out as doing so. The rule carves out several specific exclusions, most
notably for an associated person's primary residence, provided a detailed list of conditions is
satisfied: only one person or immediate family members work from the residence, the location is
not held out publicly as an office and no customer meetings occur there, no customer funds or
securities are handled on-site, the person remains formally assigned to a designated branch
office reflected on all public-facing materials, correspondence is supervised under the firm's
procedures, electronic communications route through the firm's systems, orders are entered
through the designated branch or a reviewable electronic system, written supervisory
procedures for residential supervision exist, and the firm maintains a list of residence locations.
A location used for securities business fewer than thirty business days per calendar year, an
office of convenience used only by appointment, and a location used primarily for non-securities
activities generating no more than twenty-five securities transactions annually are also
excluded, subject to conditions.

Supervision of Investment Banking and Securities Business and Transaction Review

Rule 3110(b)(2) requires the supervisory procedures to include review by a registered principal,
evidenced in writing, of all transactions relating to the firm's investment banking or securities
business. Supplementary Material .05 clarifies that a firm is not required to conduct a detailed
review of every single transaction if it instead employs a reasonably designed risk-based review
system that provides sufficient information to focus attention on the areas presenting the
greatest number and severity of potential violations. This risk-based flexibility reflects the
practical reality that a firm processing thousands of daily transactions cannot review each one
with equal intensity, and FINRA's supervisory framework instead demands that the review
system be intelligently calibrated to risk rather than uniformly diluted across all activity.

Rule 3110(d) adds a distinct and more targeted obligation: a process for reviewing securities
transactions reasonably designed to identify trades that may violate insider trading or
manipulative and deceptive device prohibitions under the Exchange Act, its rules, or FINRA
rules. This transaction surveillance obligation applies specifically to accounts of the member,
accounts introduced or carried by the member in which an associated person has a beneficial
interest or investment authority, accounts of associated persons disclosed under Rule 3210, and
so-called covered accounts, which include accounts held by an associated person's spouse,financially dependent children living in the same household, and other related individuals over
whose account the associated person exercises control or provides material financial support.

Where such review identifies a potentially problematic trade, Rule 3110(d)(2) requires the firm to
conduct promptly an internal investigation to determine whether a violation has occurred. Firms
engaged in investment banking services carry an additional quarterly reporting obligation under
Rule 3110(d)(3): within ten business days of each calendar quarter's end, a senior officer must
file a written report describing each internal investigation initiated during the quarter, including its
status and resolution, and within five business days of completing an investigation that confirms
a violation, the firm must file a further report detailing the results, any internal disciplinary action,
and any referral to FINRA or another regulator. This reporting regime gives FINRA continuous
visibility into how firms with investment banking operations are policing the trading activity most
susceptible to insider trading risk.

Review of Correspondence and Internal Communications

Rule 3110(b)(4) requires supervisory procedures for the review of incoming and outgoing written
correspondence, including electronic correspondence, and internal communications relating to
the firm's investment banking or securities business. These procedures must be appropriate for
the firm's business, size, structure, and customer base, and must require review of
correspondence to properly identify and handle customer complaints, instructions, funds and
securities matters, and any subject matter requiring review under FINRA rules or federal
securities laws, as well as review of internal communications to identify similarly reportable
subject matter. The review itself must be conducted by a registered principal and evidenced in
writing, whether electronically or on paper.

Supplementary Material .06 permits firms to apply risk-based principles in deciding how much
additional review is warranted for correspondence and internal communications falling outside
the specific subject matters enumerated in Rule 3110(b)(4). Where a firm's procedures do not
call for review of all correspondence before use or distribution, they must instead provide for the
education and training of associated persons on the firm's correspondence procedures,
documentation of that training, and ongoing surveillance and follow-up to confirm the
procedures are actually being followed. This risk-based sampling approach allows firms with
large volumes of routine, low-risk correspondence to concentrate principal review time on the
communications most likely to raise compliance concerns.

Supplementary Material .07 sets a meaningful evidentiary bar for what counts as review: it must
be chronicled electronically or on paper and must clearly identify the reviewer, the specific
communication reviewed, the date of review, and the actions taken in response to any
significant regulatory issues identified. Merely opening a communication is explicitly stated not
to be sufficient review, a standard FINRA has invoked repeatedly in enforcement actions against
firms whose email surveillance amounted to little more than passive log entries. Supplementary
Material .08 permits a supervisor or principal to delegate certain correspondence review
functions to unregistered personnel, but the delegating principal remains ultimately responsible
for ensuring the delegated functions are properly executed and must be able to evidenceadequate oversight of the delegation itself. Supplementary Material .09 requires retention of
correspondence and internal communications for the period specified in SEA Rule 17a-4(b),
with the names of both the preparer and the reviewer ascertainable from the retained records.

Review of Customer Complaints

Rule 3110(b)(5) requires supervisory procedures to capture, acknowledge, and respond to all
written customer complaints, including electronic complaints. Customer complaints must be
reviewed by a qualified principal, not merely logged and filed, to determine whether a complaint
reveals a compliance issue requiring immediate supervisory attention, whether it triggers
reporting obligations to FINRA or another regulator, and whether the firm's response is
appropriate and timely. The principal reviewing complaints must have the authority and
information access necessary to take appropriate supervisory action in response to the
concerns raised.

Patterns of customer complaints, such as multiple complaints involving the same registered
person, the same product type, or the same sales practice, are among the most important early
warning signals a supervisory system must be capable of detecting. A firm whose complaint
handling treats every complaint as an isolated incident, without aggregating and analysing
patterns across its entire complaint inventory, is not meeting the risk-detection purpose behind
Rule 3110(b)(5). FINRA enforcement actions involving high-risk brokers frequently reveal a
pattern of individually resolved complaints that, viewed together, should have triggered
heightened supervisory scrutiny far earlier than it actually occurred.

Internal Inspections

Rule 3110(c) requires member firms to conduct periodic inspections of every office and location
at which the firm conducts business, testing the adequacy and actual operation of the firm's
supervisory system at each location. The inspection frequency is tiered by the type of location
involved. OSJs and any branch office that supervises one or more non-branch locations must be
inspected at least annually, on a calendar-year basis. Branch offices that do not supervise other
locations must be inspected at least every three years, with the firm required to consider
whether the nature and complexity of the location's business, its volume, and its headcount
warrant more frequent inspection, and to document that reasoning in its written supervisory and
inspection procedures. Non-branch locations must be inspected on a regular periodic schedule
that the firm establishes and justifies in writing, and Supplementary Material .13 establishes a
general presumption that even a non-branch location should be inspected at least every three
years absent any red flags, requiring documentation if a firm adopts a longer cycle.

Rule 3110(c)(2) specifies what a written inspection report must cover where applicable to the
location being inspected, including the testing and verification of policies governing
safeguarding of customer funds and securities, maintenance of books and records, supervision
of supervisory personnel, transmittals of funds or securities to third parties or to addresses other
than a customer's primary residence, and changes to customer account information such as
address or investment objective changes. For fund and securities transmittals and accountinformation changes, the firm's procedures must include a documented method of customer
confirmation, notification, or follow-up, using reasonable risk-based criteria to assess the
authenticity of the instructions received. Where a firm does not engage in one of these
enumerated activities at a given location, it must document that fact and confirm that
supervisory procedures for the activity would be in place before the firm engages in it there.

Rule 3110(c)(3) requires firms to guard the integrity of the inspection process itself against the
same category of conflicts of interest addressed elsewhere in the rule. The person conducting
an inspection must not be an associated person assigned to the location being inspected, and
must not be directly or indirectly supervised by, or otherwise reporting to, an associated person
assigned to that location. Supplementary Material .14 identifies the limited circumstances in
which strict compliance is genuinely impossible, such as single-office firms or business models
where small offices report to a manager who is also the branch office manager, requiring the
firm to document both the factors behind that determination and how the inspection otherwise
satisfies Rule 3110(c)(1).

FINRA has periodically granted temporary relief adapting the inspection framework to changing
conditions. Supplementary Material .16 and .17 extended inspection deadlines and permitted
remote inspections for the 2020 and 2021 calendar years in response to pandemic-related
operational disruption, while requiring firms using remote inspections to document their
methodology and maintain a centralised record of which locations were inspected remotely and
which received additional supervisory procedures as a result. Regulatory Notice 24-02
subsequently adopted a more durable framework through new Supplementary Material .18,
establishing a Remote Inspections Pilot Program, and Supplementary Material .19, creating a
Residential Supervisory Location designation that allows certain qualifying private residences to
be treated differently from traditional branch offices for inspection purposes. Firms relying on
either provision must satisfy the specific eligibility and documentation conditions FINRA has
attached to each.

Investigation of Applicants for Registration

Rule 3110(e) imposes a pre-registration supervisory obligation that is easy to overlook but
heavily tested: each member must investigate the good character, business reputation,
qualifications, and experience of an applicant before applying to register that person with
FINRA. Where the applicant has previously been registered with FINRA or another
self-regulatory organisation, the firm must review the applicant's most recent Form U5, including
amendments, within sixty days of filing the registration application, or demonstrate that it made
reasonable efforts to do so. Where the applicant was recently employed by a Futures
Commission Merchant or a notice-registered Introducing Broker, the firm must similarly review
the applicant's most recent CFTC Form 8-T within the same sixty-day window.

Rule 3110(e) also requires firms to establish written procedures reasonably designed to verify
the accuracy and completeness of information on an applicant's initial or transfer Form U4 no
later than thirty calendar days after the form is filed, and those procedures must, at minimum,
provide for a search of reasonably available public records conducted by the firm or a third-partyservice provider. This background-verification obligation directly addresses a recurring failure
pattern in enforcement history, where firms hired representatives with undisclosed disciplinary
histories that a basic public-records search would have surfaced.

Heightened Supervision for High-Risk Individuals

FINRA guidance issued under Regulatory Notice 18-15 addresses the specific supervisory
obligations applicable to associated persons with a significant history of past misconduct,
recognising that prior regulatory violations, customer complaints, and disciplinary history are
meaningful predictors of future misconduct risk that require enhanced supervisory attention
beyond the standard WSP framework. Member firms that employ or seek to employ such
individuals must implement heightened supervisory procedures specifically designed to address
the elevated risk that history presents, going beyond standard supervision to provide more
intensive oversight, which can include enhanced transaction monitoring, more frequent or more
targeted correspondence review, and closer principal oversight of customer interactions.

The failure to implement required heightened supervision, or the failure to maintain it once
implemented, is a Rule 3110 violation that FINRA has pursued consistently through enforcement
action, and it has been a particular focus of FINRA's broader initiative targeting high-risk
brokers. Firms that place high-risk individuals in branch offices or remote locations where the
practical ability to provide heightened supervision is limited have not satisfied the requirement,
because the supervisory intensity applied must match the risk profile of the individual being
supervised regardless of geographic convenience.

Annual Compliance Meeting

Rule 3110(a)(7) requires member firms to conduct an annual compliance meeting, or in lieu of a
group meeting, annual compliance interviews, with each registered person. The meeting is an
opportunity for the firm to remind registered persons of applicable regulatory requirements,
update them on regulatory developments affecting their activities, address the firm's compliance
priorities for the coming year, and confirm that each registered person understands their
obligations.

Supplementary Material .04 clarifies that the meeting does not need to be conducted in person.
A firm may satisfy the requirement through an on-demand webcast, video conference,
interactive classroom setting, telephone conference, or other electronic means, provided each
registered person is confirmed to have attended the entire session, for example through a
unique login and tracked completion time with click-as-you-go confirmation, and provided each
participant is able to ask questions about the presentation and receive a timely answer, whether
through direct interaction, a dedicated email address, or a hotline with published responses.

The Relationship Between Rule 3110, Rule 3120, and Rule 3130

Rule 3110's written supervisory procedures requirement operates in close coordination with two
companion rules that together form the complete supervisory governance framework for FINRA
member firms. Rule 3110 requires firms to establish and maintain written supervisoryprocedures, documenting what the supervisory system is designed to do. Rule 3120 requires
firms to establish supervisory control policies and procedures that test and verify whether the
Rule 3110 system is actually working as designed, providing the testing function that
demonstrates the system operates effectively in practice rather than existing only on paper.

Rule 3130 requires the firm's chief executive officer to certify annually that the processes
required by Rules 3110 and 3120 are in place and functioning, providing senior management
accountability for the firm's supervisory infrastructure at the highest level. Together the three
rules create a layered governance structure: establish the system through Rule 3110, test it
through Rule 3120, and certify its adequacy through Rule 3130, with each layer designed to
catch failures the layer beneath it might otherwise allow to persist undetected.

Examination Relevance and Key Takeaways

FINRA Rule 3110 is tested on the Series 7, Series 24, and Series 65 examinations as the
foundational supervisory requirement that makes all other FINRA conduct rules operational.
Series 7 candidates should focus on the core supervisory system components under Rule
3110(a), the WSP requirements under Rule 3110(b), and the inspection frequency tiers under
Rule 3110(c), since these form the backbone of most exam questions on the topic. Series 24
candidates, given the principal-level focus of that examination, should pay closer attention to the
OSJ designation criteria, the multiple-OSJ presumption in Supplementary Material .03, the
self-supervision and compensation conflict prohibitions in Rule 3110(b)(6), and the inspection
conflict-of-interest requirements in Rule 3110(c)(3).

The key points to retain are these. FINRA Rule 3110 requires every member firm to establish
and maintain a system for supervising each associated person's activities that is reasonably
designed to achieve compliance with applicable securities laws, regulations, and FINRA rules,
with final responsibility resting with the firm itself. The foundational requirement is written
supervisory procedures that document specifically who supervises what, how supervision is
conducted, how frequently reviews occur, and how reviews are documented, and WSPs must
be current, specific, and actually implemented rather than nominal documents created for
regulatory appearances.

Designated supervisors must be registered principals with clear authority and responsibility for
each supervisory function, each registered person must have an identified supervisor, and
supervisory personnel generally may not supervise their own activities or report to someone
they supervise. OSJs must be inspected at least annually on a calendar-year basis,
non-supervisory branch offices at least every three years, and non-branch locations on a regular
periodic schedule presumptively no longer than three years absent documented justification.
Correspondence and internal communications must be reviewed by a registered principal with
documented evidence of the review, transaction review must be capable of detecting insider
trading and other trading-related misconduct, and customer complaints must be reviewed by a
qualified principal with patterns aggregated and analysed for systemic concerns.

Firms must investigate an applicant's background and verify Form U4 accuracy before
registration, and associated persons with a significant history of past misconduct require
heightened supervision calibrated to their actual risk profile. Rule 3110 works in coordination
with Rule 3120, which tests and verifies that the supervisory system is functioning, and Rule
3130, which requires annual CEO certification of supervisory system adequacy. Failure to
supervise remains one of the most frequently charged and most heavily sanctioned violations in
FINRA's disciplinary programme, because FINRA treats supervision failures as evidence of
systemic weakness that allowed individual misconduct to harm investors without detection or
prevention.