RIA Compliance Program Rules
Rule 206(4)-7 under the Advisers Act requires every SEC-registered adviser to adopt written policies and procedures reasonably designed to prevent violations, to review them at least annually for adequacy and effectiveness, and to designate a chief compliance officer to administer them.
The rule does not list the policies a firm must have. It expects them to fit the firm's business, and examiners test whether the firm actually follows what it wrote. The most common finding is a manual that describes a different firm, or a review that was never documented.
The documents below are the rule itself, the SEC's statements of what examiners will focus on, and the Division of Examinations' observations from reviews of annual compliance programs.
Guides
Policy templates
9 documents on compliance program, ordered by legal weight
- Current · binding law
Antifraud provision
Advisers Act Section 206 · 15 U.S.C. 80b-6
- Current · binding law
Books and Records Rule
Rule 204-2 · 17 CFR 275.204-2
- Current · binding law
Compliance Rule
Rule 206(4)-7 · 17 CFR 275.206(4)-7
- Current, conditional · binding law
Identity Theft Red Flags Rule
Regulation S-ID, Rule 201 · 17 CFR 248.201
- Current · binding law
Safeguards and Disposal Rule
Regulation S-P, Rule 30 · 17 CFR 248.30
- Current · Commission position
Reg S-P 2024 amendments
Release Nos. 34-100155; IA-6604; IC-35193 · 89 FR 47688
- Current · observations, not law
FY2026 examination priorities
Examination Priorities FY2026
- Current · observations, not law
Annual compliance review observations
Risk Alert
- Current · observations, not law
SEC Exam Handbook
SEC Form 2389 (09-26)