FINRA Brief

Headline

FINRA publishes Regulatory Notice 26-08 proposing amendments to Rule 3110 supervisory procedures for digital communication surveillance

Executive Summary

The Financial Industry Regulatory Authority has published Regulatory Notice 26-08 requesting comment on proposed amendments to FINRA Rule 3110 (Supervision) that would establish explicit supervisory requirements for member firms' oversight of registered representatives' use of digital communication platforms, including encrypted messaging applications, collaboration tools, and social media channels used for business-related communications. The proposal follows a multi-year enforcement campaign in which FINRA and the SEC collectively imposed over $2 billion in fines against broker-dealers for recordkeeping failures related to off-channel digital communications.

Key Regulatory Signals

• Digital Communication Surveillance Mandate: The proposed amendments would require member firms to implement technology-enabled surveillance systems capable of capturing, retaining, and reviewing business-related communications across all digital platforms used by associated persons, including platforms that employ end-to-end encryption.
• Technology Infrastructure Investment Required: Compliance with the proposed surveillance requirements will necessitate significant investment in communication capture and archival technology, with particular technical challenges for encrypted messaging platforms where existing surveillance solutions have limited capability.
• Comment Period Active: The 60-day comment period creates a formal opportunity for member firms, technology vendors, and industry associations to submit data on implementation costs, technical feasibility, and privacy implications that will directly shape the final rule text.
• Enforcement Trajectory Confirmation: The rulemaking formalizes the compliance expectations that FINRA and SEC enforcement actions since 2021 have established through sanctions, confirming that off-channel communication recordkeeping is a permanent supervisory priority rather than a time-limited enforcement sweep.
• Privacy and Employment Law Intersection: The proposed surveillance requirements intersect with state and federal privacy laws governing employer monitoring of employee communications, requiring legal analysis of the permissible scope of communication capture on personally owned devices used for business purposes.

Regulatory Delta

FINRA Rule 3110 was last substantively amended in 2014 when FINRA consolidated former NASD Rules 3010 and 3012 and NYSE Rule 342 into a unified supervisory framework. The current proposal represents the first amendment specifically addressing digital communication surveillance and follows the unprecedented enforcement campaign initiated by the SEC and FINRA in 2021 against broker-dealer off-channel communication recordkeeping failures, which resulted in penalties against over 40 firms totaling more than $2.5 billion. The proposal also responds to the December 2025 SEC staff guidance on electronic communication recordkeeping under Exchange Act Rules 17a-3 and 17a-4, which articulated enhanced expectations for broker-dealer communication retention without the force of rulemaking.

Materiality Classification

High — Proposed rulemaking establishing explicit digital communication surveillance requirements for all FINRA member firms, with direct technology investment, compliance program redesign, and supervisory infrastructure implications.

Time Horizon

60-90 days — Comment period closes in 60 days; member firms should evaluate implementation requirements and prepare comments addressing technical feasibility and cost concerns within that window.

Intelligence Outlook

Monitor FINRA for comment period extension requests and supplemental guidance. Track the SEC for coordinated rulemaking under Exchange Act recordkeeping rules that may align with or exceed the FINRA proposal.