The Social Media Portfolio

There are at least six separate problems here, and they should be separated because they have different remedies.

1. Misleading performance claims. 'Guarantees 8% income for life' is a prohibited guarantee and a materially misleading statement. Performance advertising must be presented net of fees and, for portfolio performance, over the prescribed 1-, 5-, and 10-year periods (or since inception if shorter). A single client's result presented as typical is not representative and must either be made representative or carry clear disclosure of its limitations.
2. Testimonials and endorsements. Under the SEC marketing rule, Rule 206(4)-1 as amended, testimonials are permitted but require clear and prominent disclosure of whether the person is a current client, whether they were compensated, and any material conflicts. The caption is a performance testimonial with none of those disclosures.
3. Confidentiality and data protection. Publishing a client statement with the account number visible breaches the firm's privacy obligations under Regulation S-P and its own policies. Even with client consent, account numbers should never be displayed; without consent it is a reportable data incident, not just a marketing lapse.
4. Misrepresentation of credentials. A $299 online designation from an unaccredited board, presented as a qualification, is misleading. CFP Board's standards prohibit false or misleading claims about designations and competence, and the firm's advertising rules require accurate description of credentials.
5. Paid solicitation without documentation. Paying $150 per booked call to a marketing firm whose staff name him is a compensated solicitation or endorsement. It requires a written agreement, disclosure to the client of the arrangement and the compensation, disqualification checks on the solicitors, and oversight by the adviser. None of that exists.
6. Supervision and recordkeeping failures. Failure to obtain required pre-approval breaches the firm's compliance program under Advisers Act Rule 206(4)-7, and the absence of retained copies breaches the books-and-records rule, which covers communications relating to recommendations, including social media posts and the messages that follow them.

Remediation has to be sequenced, and it has to be documented from the first hour.

Immediate:

1. Stop posting. Preserve everything before deleting - screenshots, analytics, direct messages, call-booking records - because the firm has a records obligation and deletion without preservation is itself a violation.
2. Notify the chief compliance officer in writing, not just the absent supervisor, and describe what was found.
3. Remove or correct the misleading content once preserved, and correct the designation claim.
4. Treat the exposed account number as a privacy incident: notify the affected client, assess whether a breach notification obligation is triggered under Regulation S-P and state law, and confirm whether the account has been accessed or compromised.

Short term: 5. Pull and review all posts and messages for the period of non-review, and reconstruct the firm's books and records for that period. 6. Review every client acquired through the marketing firm to confirm the required disclosures were made; if not, make them now and document it. 7. Put the solicitation arrangement in writing or terminate it, and complete the required disqualification and disclosure steps. 8. Retrain and, where the firm's policies require it, impose supervisory sanctions.

Firm level: 9. The CCO should assess whether the firm's procedures were reasonably designed given that a supervisor was on leave with no coverage - that is a supervisory deficiency, not just an individual one - and whether any regulator or client notification is required.

Marcus's own obligations are to cooperate fully, not to minimize, and not to delete anything. Candor at this stage matters more than the original error.

Neither the testimonial nor the paid marketing is prohibited. Both can be done properly.

The testimonial:

• Obtain the client's written consent to use the statement, and redact the account number and any identifying detail regardless.
• Disclose clearly and prominently that the person is a current client, whether they were compensated for the testimonial, and any material conflict.
• If performance is shown, show it net of fees, over the required time periods, and make clear that it is one client's experience, not a typical result. Better still, use a composite or a representative account rather than a single lucky one.
• Keep a copy of the post, the consent, and the disclosures in the advertising file.

The marketing firm:

• Negotiate a written solicitation or endorsement agreement identifying the firm, describing the compensation, and stating what the solicitors may and may not say - in particular, no guarantees, no performance promises, and no implication that the solicitor is an adviser.
• Screen the solicitors for disqualification events.
• Ensure the required disclosure is delivered to each prospective client at the time of solicitation: that the person is being compensated, by whom, and in what amount or basis.
• Pre-approve the arrangement under the firm's procedures and retain records of the payments and the resulting client relationships.

The credential:

• Either stop using the designation or describe it accurately and without implying accreditation - and remove it entirely if it would mislead a reasonable client about Marcus's qualifications.

The pattern to notice is that each of these is a documentation requirement. Compliance in marketing is largely a matter of being able to show, later, exactly what was said, to whom, and on what authority.