Reg BI Compliance Program Requirements Explained

A Reg BI program is tested where recommendations are made, documented, supervised, and corrected - not where a written policy says the firm intends to comply. For broker-dealers, the practical question behind Reg BI compliance program requirements is whether the firm can show, transaction by transaction, that its controls reasonably achieve compliance with Regulation Best Interest.

That requires more than adopting a policy modeled on the rule. A workable program connects the retail recommendation process to disclosures, conflict controls, supervisory review, books and records, training, and escalation. It also has to reflect the firm’s actual business: account types, products, compensation arrangements, representatives, distribution channels, and customer base.

What Regulation Best Interest Requires

SEC Rule 15l-1 applies when a broker-dealer or associated person makes a recommendation to a retail customer of a securities transaction, an investment strategy involving securities, or an account recommendation. Account recommendations include opening a brokerage account, rolling assets from a retirement account, transferring assets, and choosing among account types.

Reg BI contains four interrelated obligations: Disclosure, Care, Conflict of Interest, and Compliance. The first three govern recommendation conduct. The Compliance Obligation requires written policies and procedures reasonably designed to achieve compliance with Reg BI as a whole.

A firm should avoid treating the Compliance Obligation as a separate manual that sits apart from sales supervision. The written supervisory procedures, compliance manual, product governance process, compensation approvals, exception reports, and branch or representative reviews should work together. If they do not, the firm may have policies on paper but no defensible operating program.

Start with the firm’s recommendation inventory

The first control is identifying where the rule applies. Many firms focus on trade recommendations and overlook recommendations about account type, rollovers, hold recommendations, strategy changes, or security concentration. The analysis depends on the facts, including communications, representative involvement, and the customer relationship.

Map each recommendation type to the personnel who may make it, the information they must gather, the approvals required, the disclosures provided, and the records retained. A retail brokerage firm with commissions, alternative investments, and IRA rollovers needs a different control framework than a limited-purpose broker-dealer placing private offerings. The standard is not one-size-fits-all, but the procedures must match the firm’s risk profile.

Build Controls Around the Four Reg BI Obligations

Disclosure Obligation

Before or at the time of a recommendation, the broker-dealer must provide, in writing, full and fair disclosure of material facts about the scope and terms of its relationship with the retail customer. This includes material fees and costs, the type and scope of services, limitations on offerings, and conflicts associated with the recommendation.

Form CRS is part of the retail disclosure framework, but it is not a substitute for recommendation-specific disclosures. Firms should determine which disclosures are delivered through Form CRS, account documents, product materials, rollover comparisons, point-of-sale notices, or other communications. Delivery controls matter. A disclosure that cannot be tied to a customer, date, and applicable recommendation may be difficult to defend in an examination or customer dispute.

Care Obligation

The Care Obligation is the operational center of Reg BI. Before making a recommendation, the firm and representative must exercise reasonable diligence, care, and skill to understand potential risks, rewards, and costs; consider reasonably available alternatives; and have a reasonable basis to believe the recommendation is in the retail customer’s best interest and does not place the firm’s or representative’s interest ahead of the customer’s interest.

This does not require a firm to recommend the least expensive option in every instance. Cost is a required consideration, but it is not the only one. Service needs, investment features, liquidity, tax considerations, customer objectives, investment horizon, and risk tolerance may support a higher-cost choice. The file must show why.

For complex or higher-risk recommendations, a standardized questionnaire alone is rarely enough. The firm should require a clear rationale, identify alternatives considered, document relevant customer information, and escalate defined cases for principal review. Rollover recommendations, proprietary products, illiquid securities, margin, options, leveraged or inverse products, and repeated trading patterns often warrant enhanced controls.

Conflict of Interest Obligation

Reg BI does not require the elimination of every conflict. It requires firms to identify conflicts, disclose them, and establish written policies and procedures reasonably designed to address them. Certain conflicts must be eliminated, including sales contests, sales quotas, bonuses, and non-cash compensation based on the sale of specific securities or specific types of securities within a limited period.

The firm’s conflict inventory should be specific. Generic references to commissions or revenue sharing do not replace an analysis of actual incentives. Consider differential compensation, proprietary products, third-party payments, principal trading, account-type incentives, referral arrangements, issuer-paid due diligence, forgivable loans, and supervision tied to production.

For each conflict, document the mitigation or elimination control. A mitigation measure might involve compensation neutralization, heightened supervision, customer disclosures, pre-approval, restricted product access, surveillance, or periodic management review. The appropriate response depends on the conflict’s nature and magnitude. A significant economic incentive may require more than a disclosure and an annual attestation.

Compliance Obligation

The Compliance Obligation is where the firm demonstrates that its Reg BI framework functions in practice. Policies should assign responsibility, establish supervisory steps, define escalation paths, and require periodic review of the program’s effectiveness. They should also address how the firm identifies changes in products, compensation, services, or regulatory interpretations that require a control update.

FINRA Rule 3110 supervision remains relevant. Firms should integrate Reg BI review into their supervisory system rather than create an isolated approval process that operations cannot sustain. Designated principals need clear review responsibilities, meaningful exception reports, and evidence that exceptions were investigated and resolved.

Records Are the Proof of the Program

Reg BI compliance is closely tied to SEC books-and-records requirements under Rules 17a-3 and 17a-4. A firm must preserve records of all information collected from or provided to a retail customer under Reg BI, as well as records of each recommendation, the identity of the associated person making it, and the basis for believing it was in the customer’s best interest.

In practice, the record set may include customer profile information, account-opening documents, disclosures, cost and alternative comparisons, product due diligence, recommendation rationale, approvals, correspondence, trade blotters, surveillance results, and supervisory sign-offs. The exact record will vary by recommendation type, but the evidence must be retrievable and consistent.

This is also where compliance and financial operations intersect. Compensation data, commission grids, revenue-sharing reports, expense allocations, and product-payment arrangements may be necessary to identify conflicts and test whether mitigation controls are working. A compliance program that does not have reliable access to this data will struggle to assess the firm’s actual incentives.

Test the Program Before an Examiner Does

A periodic test should examine the quality of records and the effectiveness of controls, not merely confirm that forms were completed. Sample across representatives, offices, products, account types, and risk categories. Compare the recommendation file against customer information, fees, available alternatives, compensation, disclosures, and supervisory evidence.

Useful testing questions include whether rollover analyses explain why the transaction was in the customer’s best interest; whether representatives consistently document alternatives; whether exception reports identify patterns rather than isolated events; and whether principals close the loop on deficiencies. Testing should also consider complaints, arbitration claims, trade corrections, customer attrition, concentration reports, and compensation outliers.

When a weakness is found, document the root cause, corrective action, owner, and completion date. Remediation may involve customer outreach, revised disclosures, revised procedures, representative training, system changes, supervisory follow-up, or compensation adjustments. Repeating the same exception without a documented response is often more damaging than identifying the exception in the first place.

Make Ownership and Training Specific

Reg BI responsibilities should not be assigned broadly to “Compliance” without operational ownership. Senior management should own the business decisions that create conflicts. Compliance should establish and monitor the framework. Supervisors should review recommendations and exceptions. Operations should maintain delivery and record-retention controls. Finance and payroll personnel should provide accurate compensation and payment data.

Training should be role-based. Representatives need practical instruction on customer information, alternatives, costs, disclosures, and documenting rationale. Principals need training on what constitutes a meaningful review and how to escalate patterns. Operations and finance teams need to understand why compensation changes, new vendor payments, or a new product arrangement may trigger a conflict review.

A disciplined Reg BI program is not measured by the length of its manual. It is measured by whether the firm can explain a recommendation, produce its evidence, identify its conflicts, and show that responsible people acted when the controls revealed a problem.

Related service: Compliance and CCO support