RIA vs Broker-Dealer Compliance: Where They Overlap and Where They Diverge
If you're an RIA, a broker-dealer, or both, you need to know which rulebook applies to what. This post maps where RIA and broker-dealer compliance overlap and where they diverge—so you can prioritize and avoid gaps.

High-level comparison
| Area | RIA (Advisers Act) | Broker-dealer (Exchange Act / FINRA) |
|---|---|---|
| Primary regulator | SEC (or state); SEC exams | SEC + FINRA; FINRA exams common |
| Record-keeping | Advisers Act rules; retention periods | Rule 17a-4; WORM; detailed retention |
| Communications | Advertising/marketing rules; books and records | 17a-4; supervision of correspondence |
| Personal trading | Code of ethics; access person reporting | FINRA 3050; reporting and pre-approval |
| Custody | Custody Rule; surprise exams under certain conditions | Customer protection rule; reserve requirements |
| Filings | Form ADV; other filings | BD forms; FINRA filings |
Overlap: where both care
- Communications — Both regimes care about preserving and supervising business communications. RIAs and BDs need to capture, retain, and produce.
- Conflicts of interest — Personal trading, outside business, and compensation must be disclosed and managed under both.
- Policies and procedures — Written policies, annual (or more frequent) review, and evidence of implementation matter for both.
- Examinations — SEC and FINRA can ask for records, policies, and proof of supervision. Being organized helps regardless of structure.
Where they diverge
Broker-dealers (and FINRA)
- 17a-4 — Specific WORM and retention requirements for certain records; “readily accessible” expectation.
- FINRA rules — Supervision of correspondence, marketing, and reps; specific filing and reporting obligations.
- SRO exams — FINRA examines BDs; different exam focus and frequency than SEC-only RIA exams.
RIAs (Advisers Act)
- Advertising rule — SEC’s current advertising and marketing standards; no FINRA layer.
- Custody Rule — Special obligations when you have custody of client assets; surprise exam requirements in some cases.
- Code of ethics — Access persons, reporting, and pre-approval; structure differs from FINRA 3050.
Dually registered / hybrid
- You have both sets of obligations for the activities that fall under each hat. Same person or same communication can be subject to both RIA and BD rules depending on the capacity in which they’re acting. Compliance programs need to cover both and avoid gaps at the seams.
Edge cases
| Situation | Consideration |
|---|---|
| RIA with a BD affiliate | Clear allocation of which entity does what; shared services (e.g. archiving) may need to satisfy both. |
| State vs SEC-registered RIA | State rules can add requirements; know your state and your size/eligibility for SEC registration. |
| Switching from BD to RIA only | Retention and archive obligations may still apply to historical BD period; don’t discard records prematurely. |
FAQ
We’re only an RIA. Do we need to worry about 17a-4?
17a-4 is a broker-dealer rule. RIAs have their own record-keeping rules. If you’re dually registered or have a BD affiliate, 17a-4 applies to the BD side.
Who examines us?
SEC-registered RIAs: SEC. Broker-dealers: FINRA (and SEC). State-registered RIAs: state securities regulator. Dually registered: both SEC/FINRA and possibly state.
Can one compliance manual cover both?
You can have one manual with distinct sections (or cross-references) for RIA vs BD obligations so nothing falls between the cracks.
Bottom line
RIA and broker-dealer compliance overlap on communications, conflicts, and policies—but diverge on specific rules (17a-4, custody, FINRA supervision). Map your structure, know which regime applies to which activity, and build one coherent program that satisfies both where you’re both.
See how Cudara supports both RIA and broker-dealer compliance — one platform for archiving, employee compliance, and filings.