The Representative's Personal LinkedIn Post

The defense fails on its own facts.

Coverage. The test is whether the person is acting in a business capacity and whether the content concerns the firm's products. "DM me to start" is a solicitation of municipal fund securities business, the performance figure is about the plan she sells, and roughly 90 of her followers are clients. That is an advertisement, not a personal musing. MSRB Rule G-21 governs advertising by municipal securities brokers and dealers in municipal fund securities, and the firm's WSPs independently require principal pre-approval before use. Running it on a Friday afternoon without approval is both a G-21 violation and a G-27 supervisory failure.

Substance. Three separate defects:

• "Guaranteed by the state" - materially false. Accounts are not guaranteed; at most a specific stable-value option within a plan may carry a guarantee, and that must be described accurately.
• "Up 9.2% this year" - a selectively favorable, unrepresentative period presented without fees, without a balanced benchmark, and without the past-performance caveat. Cherry-picked performance is misleading under G-21.
• The testimonial - a customer quote must be representative and balanced, and the firm must be able to substantiate it.

The group with 2,000 members compounds the problem: she is answering plan questions in a public forum she administers, which the firm must supervise as firm-related activity.

Serious, and the sequencing matters.

First: preserve, then remove. Take a timestamped capture of the post for the record before the takedown, because destroying the evidence of the communication creates a second problem under MSRB Rule G-8. Then direct removal from both platforms.

Second: treat it as a privacy incident. An account number is nonpublic personal information under Regulation S-P and the firm's GLBA safeguards program; redacting the name does not cure it, and account numbers are treated as personal information under several state breach-notification statutes. Escalate immediately to the privacy officer, not just to the representative's supervisor.

Third: assess notification. Determine whether the client must be notified, whether any state notification trigger is met, and whether the plan manager needs to be informed. Document the determination either way.

Fourth: root cause. The post was possible because a representative had a client statement on a personal device and no training on social media. Both are supervisory findings, and the firm should expect to answer for the second one.

Recordkeeping. MSRB Rule G-8 requires the firm to retain retail communications and advertisements it uses, generally for six years with the most recent two readily accessible. Practically that means:

1. A screenshot and URL log for the LinkedIn, Instagram, and Facebook content in the advertising register.
2. A record of whether principal approval existed - and if not, a documented exception with the remediation taken.
3. Confirmation of whether the piece had to be filed with the MSRB under G-21(f), which requires advertisements and certain retail communications to be filed promptly after first use. Do not assume the firm's FINRA filing process covers this; G-21 is the controlling rule for municipal fund securities.

Follow-up. The 2,000-member Facebook group is the larger exposure and the analyst only stumbled onto it. The firm should inventory all social media used by the representative and her team, determine which accounts are firm-related, review recent posts for performance claims and guarantees, and require pre-approval going forward. Supervisory review of a public forum she administers cannot be done retroactively, so the group should be paused until it can be brought under supervision.

Finally, the Friday-afternoon timing matters: a report to a principal that sits unread until Monday is not supervision, and the escalation path should route time-sensitive advertising issues to a duty principal.