Social Media and Digital Communications

The platform does not decide the legal treatment

An investment adviser does not avoid advertising rules by moving a sales message from a brochure to a social platform. A website, professional networking profile, short-form video, podcast, webinar, email newsletter, or direct message may communicate about the adviser’s services. The applicable rule turns on the content, audience, speaker, and use, not on whether the communication feels informal or disappears after a day.

For SEC-registered or required-to-register advisers, the marketing rule governs covered advertisements, including requirements for misleading statements, testimonials, endorsements, ratings, and performance. The Advisers Act recordkeeping rule also requires retention of specified communications. State advisers must consider state law and applicable model rules adopted in their jurisdiction. Confirm the firm's registration and applicable law before applying a technical standard.

Digital formats can compress nuance. A 15-second video may make a broad promise while leaving no room to explain assumptions. A post may display a chart without its source or time period. A direct message may give an individualized recommendation. A firm should choose a format that can convey the necessary context and should not treat character limits as permission to omit material facts.

Separate public advertising from individual advice

A public post promoting the firm's services can be an advertisement. A private message responding to one client's account details may be individualized advice, with duties that go beyond advertising. A group webinar can combine general marketing and client-specific questions. The firm should classify each communication based on its substance and route it through the right review and supervision process.

Suppose an adviser posts a general article about cash management, then replies to a follower who shares an account balance and asks whether to sell a specific fund. The first post may be educational marketing. The reply may be a personalized recommendation. The adviser should consider whether the person is a client, whether the communication is appropriate for the audience, what information is missing, and how the firm will retain and supervise the exchange.

A disclaimer that a post is ‘for education only’ does not control if the content actually recommends a security to a specific person. Labels are relevant, but conduct and context matter. Similarly, a firm's general advertisement can contain a testimonial or performance claim that remains subject to the marketing rule even if the post includes ‘not investment advice.’

Claims, links, and images

Every digital claim needs support. A chart should identify the data source, period, calculation, benchmark, and fee treatment when relevant. A photo of a luxury home beside a portfolio return can imply that clients achieved the pictured lifestyle. An image of a government building or regulator seal can imply official approval. Review visual choices and captions as part of the communication.

Links do not automatically solve disclosure problems. The audience may not click through, and the linked page may be changed later. If a claim needs an essential qualification, place it close enough to the claim that a reader sees both. Keep a record of the destination page and version. A link to Form ADV does not substantiate a performance statistic that appears in a headline.

A repost or retweet can adopt someone else's words. If an adviser shares a client’s praise, a third-party rating, or a news article as a promotional item, the firm should review the content and the context it adds. An employee may think the action is only personal commentary, but the firm logo, title, and sales purpose can make the communication part of advisory marketing.

Testimonials, comments, and ratings

A public review can become a testimonial when an adviser solicits, adopts, or republishes it. A paid influencer can make an endorsement. A badge or ranking may fall under the third-party rating provisions. Each category brings different requirements for disclosures, oversight, agreements, and substantiation. The firm should not treat every comment as the same kind of content.

Consider an adviser that pins a five-star review to the top of its page. The review says the client doubled savings in a year. The firm should determine whether the statement is a testimonial, disclose the relationship and any compensation as required, and assess the performance claim. Pinning the post gives it added prominence and can imply that the result is representative. A disclaimer elsewhere may not correct that impression.

If a platform permits comments, the firm needs a policy for monitoring, responding, and retaining relevant communications. Deleting a critical comment while leaving praise can distort the page. The rules do not mean every adviser must host all user comments, but moderation practices should be consistent and should not make the firm's own advertising misleading. Preserve business communications under applicable records requirements.

Private messages and client information

Direct messages can create privacy and recordkeeping concerns. A client may send account numbers, tax information, or a health-related detail through an unsecured platform. The adviser should direct sensitive conversations to approved channels and follow the firm's privacy and cybersecurity procedures. If the message contains investment instructions or advice, it may also need to be retained and supervised.

A casual ‘buy more of the fund today’ message may be a trade instruction or recommendation. The firm should retain it, verify authority, and ensure it is consistent with the client’s objectives and account restrictions. Staff should avoid promising that messages will be private or invisible when the platform may store or expose them. A client’s convenience does not erase the adviser’s compliance responsibilities.

Firm policy should specify approved devices and accounts, how employees identify themselves, what types of client business may be discussed, and how messages are archived. Supervisors need access to records and a method for reviewing activity. Employees should know how to handle accidental messages sent from a personal account and how to transfer the communication into the firm's record system.

Recordkeeping and supervision

The Advisers Act recordkeeping rule covers specific communications relating to recommendations, advice, receipt or disbursement of funds or securities, and orders. An adviser should determine which electronic records fall within those categories and preserve them in an accessible manner. The firm may need archiving technology, retention periods, search functions, and procedures for preserving edits and attachments.

A screenshot alone may not preserve the full context, metadata, linked material, or changes to a post. A sound archive captures the content, author, date, platform, attachments, approvals, and relevant linked pages. The records process should match the business's actual channels, including employee devices and third-party tools used for client communication.

Supervision should cover both preapproval and ongoing activity. Some materials, such as performance advertising, may need legal or compliance review before release. Routine educational posts may use approved templates and periodic review. Employees should receive training on testimonials, guarantees, private advice, and referrals. Supervisors should follow up when posts depart from approved language.

Worked digital cases

Case one: a portfolio manager posts a chart showing a strategy's 18% return. The post does not say whether the figure is gross or net, what period it covers, or whether it is an actual account. The adviser should assess the claim under the marketing rule, provide required context, substantiate the data, and preserve the final material. A chart's accuracy cannot be judged without its calculation and audience context.

Case two: an employee shares a paid influencer's video that calls the adviser ‘the safest firm in the market.’ The firm should treat its repost as promotional use, disclose the paid relationship as required, and assess the unsupported comparative claim. The influencer’s own channel and wording do not remove the adviser's oversight obligations when the adviser adopts the message.

Case three: a client messages a portfolio manager, ‘I need $30,000 for a house; sell whatever you think.’ The message gives a liquidity need and potentially grants authority, but the manager should clarify the scope, timing, tax consequences, and account restrictions. The communication and resulting decision should be retained. A thumbs-up emoji may not document sufficiently clear authorization for a major portfolio change.

Case four: a firm uses a public social profile to answer a prospect's detailed question about an individual stock. The adviser should consider whether the response has become individualized advice and whether public disclosure of the prospect's account facts is appropriate. A safer process may move the discussion to an approved private channel after confirming the person's relationship and collecting relevant information.

Case five: a firm offers a downloadable retirement checklist and asks for an email address. The landing page should describe how contact information will be used and follow privacy commitments. If the checklist includes performance claims or client endorsements, the marketing standards still apply. Lead generation is promotional even when the item is free and educational.

Create a workable digital policy

Inventory platforms first. List official accounts, employee accounts used for business, chat tools, video services, podcasts, email systems, and third-party lead sources. For each channel, identify content owners, approval levels, archive method, retention period, and escalation route. An unknown channel cannot be supervised consistently, so employees should disclose business use of new tools before adopting them.

Write practical examples into the policy. Show how to respond when a client requests a trade over social media, when an employee receives a testimonial, or when an influencer adds a guarantee to approved content. Explain when to move a conversation, how to retain it, and whom to notify. Staff are more likely to follow a rule they can apply in the moment.

Review the policy when the firm changes platforms, services, or marketing practices. A new platform may alter whether posts disappear, comments are enabled, or messages can be archived. A change in the marketing rule or state law may alter approval requirements. Compliance should document the review and test whether the archive actually captures content in a searchable way.

For Series 65, focus on the principle: digital channels carry the same underlying duties. Classify the communication, identify whether it is an advertisement or advice, review claims and disclosures, consider compensation, and preserve required records. A post's brevity, audience size, personal profile, or ephemeral setting does not by itself remove regulatory concerns.

Digital communication can improve access when it explains a service clearly and allows clients to ask questions. The compliance goal is not to make every post sound like a legal document. It is to ensure that the audience can understand the claim, that the adviser has evidence for it, and that the firm can later show what was communicated and how it was supervised.

A practical moderation rule should distinguish a complaint from a solicitation. A client who writes that an account is down may be raising a service issue that deserves a prompt, private response. A prospect who asks for a guaranteed strategy may be seeking personalized advice. Staff should know not to discuss account details publicly, how to acknowledge a concern without making promises, and how to route it to the right person.

Firms should be careful when using analytics or automated chat tools. A chatbot that answers general questions may move into personalized recommendations if it asks for account details and proposes investments. The adviser should understand what information the system collects, how answers are generated, whether a human reviews escalations, and whether records are retained. Automation does not change the underlying duty to communicate accurately and supervise advisory activity.