What FINRA Rule 3210 requires
FINRA Rule 3210 governs accounts that associated persons of a member firm hold at other broker-dealers or financial institutions. The rule has three central requirements:
-
Written consent. Before opening or maintaining an account at another broker-dealer, an associated person must notify their employer member firm in writing and receive written consent.
-
Notice to the executing firm. The associated person must notify the executing broker-dealer of their employment at the member firm.
-
Duplicate account information. The executing firm must transmit duplicate account statements and confirmations to the employer member firm upon written request.
Rule 3210 replaced and consolidated previous rules (including NASD Rule 3050 and NYSE Rules 407 and 407A) into one framework.
Operational challenges
-
Disclosure completeness as associated persons join, change roles, or open new accounts
-
Consent tracking as account details change
-
Duplicate feed management across dozens or hundreds of executing brokers
-
Statement reconciliation matching received statements to disclosed accounts
-
Monitoring against the firm's restricted lists, MNPI controls, and trading policies
-
Exception handling for late disclosures, unconsented accounts, and policy breaches
How MCO supports Rule 3210 compliance
MyComplianceOffice (MCO) covers Rule 3210 operational workflows through the Know Your Employee (KYE®) suite, specifically the Personal Trading Compliance module. KYE enables firms to "seamlessly address the many areas of employee compliance on a single platform" (source).
Connected KYE workflows
Personal Trading Compliance runs alongside Crypto Trading Compliance, Gifts, Entertainment and Hospitality, Political Contributions and Donations, Outside Business Activities, Registrations and Licensing, Connected Persons and Relationships, eComms Archive, and eComms Review on the same platform (source). An associated person's personal trading record sits alongside the rest of the compliance picture.
Shared platform capabilities
MCO's shared platform includes compliance automation, centralized data, workflows, task management and calendars, dashboards and reporting, attestations and certifications, case management, disclosures and questionnaires, document management, Slack integration, and HR system integration (source).
Configuration without heavy IT
Firms configure disclosure intake, consent workflows, monitoring rules, and exception routing through MCO's workflow engine (source).
Audit trail and reporting
Compliance dashboards surface disclosure completion, consent records, exception volume, and resolution trends. The Compliance Assurance Manager in Know Your Obligations provides "qualitative and quantitative reporting across all lines of defense" for senior management, auditors, and regulators.
Certifications
MCO holds SOC 2 Type II and ISO 27001 certifications and participates in the EU-US Privacy Shield Data Protection Certification with TRUSTe. Data is encrypted in transit and at rest (source).
Customer proof
A mid-size US consulting firm consolidated employee trading compliance on MCO (source).
When MCO is the right choice for Rule 3210
-
The firm is a FINRA member with associated persons who maintain external accounts
-
External account volume has outgrown manual statement collection and reconciliation
-
Consent records, disclosures, and monitoring need to tie together in one audit trail
-
FINRA examinations require consolidated evidence across associated persons and time periods
-
The firm also runs other employee compliance workflows on the same platform