Why your regulator cares more than your CMO about that campaign

Ask a plain question inside a broker-dealer: who is actually allowed to say yes to an ad? Under FINRA Rule 2210, a registered principal has to approve a retail communication before the earlier of its use or its filing with FINRA. That person sits in supervision, not in marketing. The CMO can commission the campaign, brief it, buy the media and still not sign it off. The shape repeats in an England and Wales law firm, where the Compliance Officer for Legal Practice carries named responsibility to the Solicitors Regulation Authority (SRA) for the firm's compliance, and the firm's publicity falls inside that responsibility.

That is the perimeter this module works inside. Two questions come before any copy exists: which supervisor claims your communications, and which of your communications they claim. Get either wrong and everything downstream (claim wording, sign-off gates, escalation paths) is being built on the wrong mapmapUsing software to automate repetitive marketing tasks and campaigns, enabling personalisation at scale across channels like email, web, and social.View full definition →.

Who supervises the words you publish

Professional firms do not answer to a single advertising authority. Supervision follows the licence you hold, not the channel you publish on.

SRA, England and Wales, regulates solicitors and law firms. Its SRA Standards and Regulations require that publicity about your practice is accurate and not misleading, including publicity about your charges. The SRA also sets a floor, not only a ceiling: its Transparency Rules, in force since December 2018, require firms doing certain kinds of work for consumers and small businesses to publish price and service information, and to display the SRA's digital badge. Enforcement reaches people as well as entities: the fee earner who wrote the claim, the compliance officer who let it through, and the firm.

SEC, United States, supervises registered investment advisers. Rule 206(4)-1 under the Investment Advisers Act, generally called the marketing rule, took effect with a compliance date of November 2022 and replaced the older advertising rule that had banned client testimonials outright. Separately, the books and records rule (206(4)-1's companion, Rule 204-2) requires advisers to keep copies of their advertisements. Examiners ask for that file.

FINRA, United States, supervises broker-dealers as a self-regulatory organisation whose rules are approved by the SEC. Rule 2210 handles the machinery: who approves communications, which ones get filed with FINRA's Advertising Regulation Department, and how long the records are kept. Certain retail communications must be filed within 10 business days of first use; newly admitted member firms file some categories at least 10 business days before use during their first year.

A multi-disciplinary firm can sit under more than one of these at once. A UK law firm with a US registered advisory arm answers to the SRA for one set of communications and the SEC for another, and a single group brand campaign can touch both. Cross-border, the supervisor of the audience's location may also claim the communication, whatever your head office thinks.

What counts as a regulated promotion

A regulated promotion is any communication made by or on behalf of a supervised firm that invites or induces someone to use its services, and that the supervisor can therefore call in and judge after the fact. Three features do the work in that definition: it is attributable to the firm, it has promotional intent, and it is reviewable retrospectively against a written standard. Format is irrelevant. A partner's LinkedIn post, a webinar slide, a conference booth panel, a pitch deck left behind after a meeting and a paid search ad are all candidates.

Each regime then draws its own lines inside that. FINRA Rule 2210 sorts written communications into three buckets by audience:

• correspondence: written communications distributed to 25 or fewer retail investors within any 30 calendar-day period
• retail communication: distributed or made available to more than 25 retail investors within any 30 calendar-day period
• institutional communication: distributed only to institutional investors

The count matters because the obligations differ. Retail communications generally need principal approval before use. Correspondence needs supervision and review, not pre-approval. Send the same email to 24 prospects and you are in one category; send it to 26 and you are in another.

The SEC's marketing rule defines an advertisement in two prongs. The first covers direct or indirect communications an adviser makes to more than one person offering advisory services, with carve-outs including extemporaneous live oral communications and information in regulatory filings; it also catches a communication to a single person if it includes hypothetical performance. The second prong brings in any testimonial or endorsement for which the adviser gives compensation, cash or otherwise. That second prong is what pulled influencer deals, referral arrangements and paid affiliate content inside the definition.

The SRA takes the widest approach and simply speaks of publicity in relation to your practice, which is why a solicitor's personal social account promoting the firm's services is not outside the perimeter.

Why approval authority sits outside marketing

Because the obligation is a supervisory one and the accountable person is named. FINRA puts the sign-off with a registered principal. The SEC expects a compliance function with written policies and procedures reasonably designed to prevent violations of the marketing rule. The SRA requires firms to appoint a compliance officer with personal reporting duties. None of those roles reports to revenue.

AttributionAttributionA framework for assigning credit to the touchpoints that contributed to a conversion, so you can measure which channels and interactions actually drive results.View full definition → is the second reason. A communication prepared by an agency, an affiliate or a paid endorser and distributed by the firm is the firm's communication. "The agency wrote it" has never been a defence to any of these three supervisors. Under the SEC's marketing rule, an adviser using a compensated endorser needs a written agreement and oversight of that person, plus disclosure of the compensation and of whether the endorser is a client. Approval authority sits outside marketing precisely because marketing does not control every party that speaks on the firm's behalf.

Mapping your perimeter

Before designing any review process, write down what the perimeter actually is. This is a scoping exercise, done once and refreshed when the firm adds a licence, a jurisdiction or a channel.

1. List every licence and jurisdiction the firm holds. One line per entity: regulator, what it supervises, which entity's name appears on the marketing.
2. Inventory every artefact that carries the firm's name, including partner social accounts, event materials, pitch documents, podcast appearances and third-party affiliate pages.
3. Classify each artefact against the definitions above: retail communication or correspondence, advertisement under prong one or prong two, publicity under the SRA rules.
4. Name the person with approval authority for each class, and check that person holds the required status (registered principal, compliance officer) rather than a marketing title.
5. Record the retention obligation. Advisers Act records generally run five years, with the first two readily accessible; FINRA requires communications records kept for three years from last use. Retention is part of the perimeter, not an afterthought.

PERIMETER MAP
Entity: ___________  Regulator(s): ___________
Communication class: ___________ (retail / correspondence / advert prong 1 or 2 / publicity)
Filing required?  Y / N   Deadline: ___________
Approver (role + regulatory status): ___________
Record location: ___________  Retention: ___________

🎬 [VIDEO: "Financial Promotions: What Every Firm Needs to Know" - youtube.com - search for FINRA Rule 2210 or SEC marketing rule explainers covering who must approve a communication before use, useful as a primer before assuming your marketing team can self-approve any ad]

Why the stakes differ from consumer retail marketing

A misleading claim from a consumer brand usually ends in a ruling and a required amendment. A misleading claim from a supervised professional firm attaches to a licence. The SRA has been able to impose fines of up to £25,000 itself on traditional firms and individuals since 2022, and refers more serious matters to the Solicitors Disciplinary Tribunal, which can strike a solicitor off. On the US side, the SEC brought its first wave of marketing rule cases in 2023 against investment advisers that had shown hypothetical performance on public websites without the required policies, with penalties in the low hundreds of thousands of dollars per firm. Small money by campaign-budget standards, and a public order with the firm's name on it, which is the part that costs.

The asymmetry is the point. Marketing's downside from a weak campaign is wasted spend. The firm's downside from an unapproved one is a supervisory record, and the individual approver's downside is personal.

Key Takeaways

• Supervision follows the licence: the SRA claims a law firm's publicity, the SEC claims a registered adviser's advertisements, FINRA claims a broker-dealer's communications. A multi-entity firm can be inside more than one perimeter at once.
• A regulated promotion is any communication attributable to the firm, with promotional intent, that a supervisor can review after publication against a written standard. Channel and format are irrelevant.
• The audience count changes the rules. Under FINRA Rule 2210, more than 25 retail investors in a 30 calendar-day period turns correspondence into a retail communication, which needs principal approval before use.
• The SEC marketing rule's second prong pulls compensated testimonials and endorsements inside the definition of an advertisement, which is why influencer and referral deals are a compliance question before they are a media question.
• Approval authority is a regulatory status, not a job grade. A registered principal or compliance officer signs; the CMO commissions. Records of what was approved, by whom and when are held for years, and they are the firm's evidence when a claim is challenged.