As the financial industry has moved deeper into the digital age, social media has become a common way for firms and representatives to market products, communicate with clients, and share information. Investors also use message boards and social platforms to discuss markets and trading ideas. Because of this, FINRA has issued specific guidance on how its communication rules apply online.
Most of the regulations from the previous chapter still apply to social media.
No matter the medium (paper, billboard, or Twitter/X), financial professionals:
Social media does have some unique features (speed, sharing, and third-party content), so it’s important to understand the areas FINRA emphasizes:
Social media posts must be retained for 3 years, and records created within the most recent 2 years must be easily accessible. This matches the standard recordkeeping requirement for many other types of communications.
FINRA also highlights a social-media-specific issue:
FINRA’s advertising rules and guidance do not apply to an associated person’s personal use of social media. However, firms must educate their personnel on the difference between personal and business uses of social media. If firm personnel use a personal site for business, then this may result in a situation where the firm is unable to retain records of business-related communications as required.
In other words, a representative’s purely personal social media activity isn’t regulated under the same advertising framework. A firm doesn’t need to retain personal posts that have nothing to do with the business.
The key issue is that a “personal” account can still be used for business. For example, if a representative posts a TikTok discussing the firm’s products or services, that content may be treated as business communication. Because of this, firms must provide ongoing education (often through training modules or videos) so personnel understand where the boundary is. If FINRA determines that a representative’s personal social media crossed into business use, both the representative and the firm could face regulatory consequences.
Firms must have a supervisory system for business-related social media activity. Representatives often communicate with current and prospective clients through web-based platforms, and firms are responsible for supervising those communications for compliance.
Before a representative uses a social media platform for business purposes, the platform must be vetted and reviewed by a registered principal (supervisor). The goal is to confirm that FINRA rules and guidelines can be followed on that platform. Most major platforms (Twitter/X, Facebook, Instagram, TikTok, and YouTube) have already been reviewed by many firms and are either approved or prohibited. If a representative wants to use a new platform, they must get principal approval before using it.
FINRA also groups social media activity into two categories:
Static content
This type of social media content is defined as:
Typically posted for the longer term and lacks the immediacy of a real-time conversation
Examples include blogs and social media profiles. FINRA generally treats static content like retail communications. In most cases, it must be pre-approved by a principal before posting and may need to be filed with FINRA.
Interactive communications
This type of social media content is defined as:
Typically real-time and involve a dialog with third parties
Examples include posts on interactive forums (e.g. Reddit), chat rooms, Tweets, Facebook posts, comments on other social media posts, and direct messages (DMs). FINRA typically treats these communications similarly to correspondence*. In particular, no principal pre-approval or FINRA filing is required, but they are subject to periodic review**.
*To be regulated as correspondence, it may not be viewed by more than 25 retail investors in a 30-day period. If this occurs, the content would be considered retail communication. Direct messages and small chats are likely to be regulated as correspondence, while public posts are generally regulated as retail communication.
**Periodic review can mean one of two things. First, registered principals within the firm should review these communications regularly. Most firms maintain technology to flag communications with certain keywords and have their registered principals review communications selected at random. Second, FINRA can request to view these documents, which would likely occur if they received a complaint from an investor.
Additionally, firms are required to maintain supervisory procedures that:
Firms and representatives often repost third-party content or link to third-party websites (for example, tweeting a link to a Yahoo Finance article about market activity). FINRA has guidance for these situations.
If a firm adopts or entangles itself with third-party content, that content becomes subject to the firm’s recordkeeping requirements (3 years, with the most recent 2 years easily accessible). Here’s how FINRA defines those terms:
Adoption occurs when a firm endorses or approves third-party content
An example of adoption is a firm retweeting a financial blog and adding commentary (e.g. “Check out this interesting piece on the current state of the market”).
Entanglement occurs when the firm involves itself with the preparation of the third-party post
An example of entanglement is a firm sharing a paid review of its products or services on TikTok.
In either case (adoption or entanglement), the shared material must be vetted, reviewed, and treated essentially as if it were the firm’s own content.
Similar expectations apply when a firm links to a third-party website:
Firms may not link to any third-party site that the firm knows or has reason to know contains false or misleading content. A firm should not include a link on its website if there are any red flags that indicate the linked site contains false or misleading content
If a firm or representative recommends a securities-related product or service on social media, FINRA’s suitability-related expectations still apply.
Firms must follow two general guidelines.
First, firms must have an adequate supervisory system to monitor these communications (as with other social media activity). Second, recommendations through social media are generally prohibited unless they meet one of the following criteria:
*An example of a previously approved template would include a pre-approved Facebook post recommending a wealth management service to high net worth individuals. Representatives could simply repost this content in the future without needing to gain pre-approval again.
FINRA applies the same communication standards used for general communications to social media. These requirements should look familiar:
Sign up for free to take 12 quiz questions on this topic