FINRA Rule 3270: outside business activity notice for referral income

FINRA Rule 3270 requires a registered person to give their member firm prior written notice before an outside business activity for compensation, which can include a paid referral role. The SEC has approved Rule 3290 to replace it, but until FINRA announces the effective date, Rules 3270 and 3280 apply. Ask your compliance team first.

Do registered reps need to notify their firm about referral income?

Generally yes. FINRA Rule 3270 requires a registered person to give the member firm prior written notice before engaging in an outside business activity, and a referral partner role that pays compensation is the kind of activity firms review. The rule is changing: the SEC approved new FINRA Rule 3290 (Outside Activities), which replaces Rules 3270 and 3280, and until FINRA announces the effective date, Rules 3270 and 3280 continue to apply.

This matters most to boutique investment bankers and M&A advisors who are registered through a broker-dealer. If you are not registered with a FINRA member, none of this applies to you, but your own engagement letters and partners' policies might.

This is general information, not legal, tax or financial advice. Confirm with your own counsel, tax adviser or professional body before acting.

What changed with Rule 3290

FINRA reported that the SEC approved Rule 3290 on September 15, 2026, with an effective date to be announced in a Regulatory Notice. According to FINRA's weekly archive, the new rule folds outside business activities and private securities transactions into one rule and eliminates reporting of non-investment-related activities.

Two practical points follow.

  • Until the effective date is announced, treat 3270 (outside business activities) and 3280 (private securities transactions) as the operative rules.
  • After the effective date, the notice question may turn on whether the activity is investment-related. Your firm's compliance team decides how it applies the new text.

Why a referral partner role can be an outside activity

An outside business activity is work done outside the relationship with your firm for compensation or in expectation of compensation. A reward from SourceX is compensation. Whether the role relates to securities is a separate question: SourceX introductions concern licensing operational records, not offering securities, but your firm may still want to see it.

Three adjacent issues come up in conversation with compliance.

IssueWhy compliance asksWhat to bring
Outside activity noticeThe firm must be able to supervise activities of registered personsA one-page description of the role and how rewards are paid
Private securities transactionsRule 3280 concerns participation in securities transactions away from the firmA statement that the role involves no securities
Payments to unregistered personsFINRA Rule 2040 bars members from paying compensation to an unregistered person who would need to register as a broker-dealer to receive itNot your issue as a recipient, but it explains why firms are careful

The statutory exemption for some M&A brokers does not remove FINRA obligations for people who keep registrations. Industry commentary from Finalis makes this point: individuals who stay registered remain subject to FINRA rules and their firm's policies on outside activities. Our page on the M&A broker exemption explains what that exemption does and does not cover.

Notice checklist before you register as a partner

  • Confirm whether you are an associated person of a FINRA member, including a dual registrant or a firm affiliate
  • Read your firm's written supervisory procedures on outside activities and private securities transactions
  • Write a plain description: role, who pays, how the reward is calculated and when it is paid
  • State what you will not do: handle client records, negotiate terms, or sell or offer any security
  • Submit the notice through your firm's channel and wait for written acknowledgment or approval
  • Ask whether the firm wants the activity disclosed to clients you advise
  • Ask how the firm will handle the change from 3270 to 3290
  • Keep the approval with your records and refresh it if the arrangement changes

When to raise it

MomentWhyAction
Before sharing a referral link with any clientNotice comes before the activityFile the notice first
Before a sell-side mandate startsA client may be a candidate for a license as well as a saleTell compliance how you separate the two
When Rule 3290 takes effectFirm procedures will be rewrittenRe-confirm your approval
When a new employer or affiliation startsApprovals do not travelFile again

What to say to your compliance officer

How rewards work

Partners earn 25% of the eligible platform fees SourceX actually collects from the referred company's licensing deals, capped at $100,000 per referred company. The reward is paid only after the buyer pays and SourceX receives its fee; an introduction, meeting or signed agreement alone does not trigger payment, and no reward is guaranteed. The reward is a share of SourceX's fee and is never deducted from what the company receives. Read the program terms so your description to compliance matches the signed agreement, and use the company fit checker to keep introductions to companies that fit.

When not to proceed

  • Your firm declines the notice or tells you to stop.
  • The introduction would involve a client you advise on a securities transaction and compliance has not cleared the overlap.
  • You cannot describe the role without referring to securities.

State CPA rules can apply too if you hold a license; see the New York and Washington pages for examples of how they differ.

Questions to ask compliance

  • Does the firm treat a data-licensing referral role as an outside business activity, a private securities transaction, or neither?
  • Does the firm want the activity disclosed to clients I advise on a sale or financing?
  • Are there categories of company, such as clients in an active sell-side mandate, where the firm will not allow introductions?
  • How long does review normally take, and who gives the written acknowledgment?
  • Will the firm update its procedures when Rule 3290 takes effect, and how will I be told?

Common mistakes

MistakeWhy it hurtsFix
Treating a verbal nod from a supervisor as approvalThere is no record if the firm later disagreesGet the acknowledgment in writing
Describing the role as "just a favor"The notice is about compensation, and the reward is compensationState how rewards are paid
Assuming the M&A broker exemption removes the need to askIt concerns SEC registration, not FINRA rules or firm policyAsk compliance anyway
Forgetting to refresh the notice after a firm changeApprovals are tied to the firm and the factsFile again with the new firm

Next step

Send your compliance team the description above, and once you hold written acknowledgment, register as a partner. M&A advisors can read the wider referral overview for M&A advisors before they do.

  1. Step 1Share your linkSend your personal link to a company you know.
  2. Step 2Company appliesThe company applies itself at /apply.
  3. Step 3Buyer selects and paysThe buyer selects and pays for the data and SourceX receives its fee.
  4. Step 4You get your rewardYour share of SourceX fees becomes payable.

Common questions

Does Rule 3270 apply if I am only an independent M&A advisor?

Only if you are an associated person of a FINRA member. Independent advisors with no FINRA registration are outside FINRA's rules, though state law, engagement letters and professional standards may still matter. If you hold a registration through any firm, including a dual-registrant affiliate, assume the rule reaches you and ask compliance.

What is the difference between Rule 3270 and Rule 3280?

Rule 3270 deals with outside business activities, meaning work or roles outside your firm. Rule 3280 deals with private securities transactions, meaning participation in securities deals away from the firm. A data-licensing referral role is not a securities transaction, but the firm decides how to classify it, so describe the role carefully.

Can I start sharing my referral link while the notice is pending?

The safer course is to wait for written acknowledgment or approval from your firm. Notice is meant to come before the activity, and a firm can restrict or refuse it. Sharing a link, even without payment, starts the relationship that the notice is designed to review.

Will Rule 3290 remove the need to tell my firm?

Possibly for activities unrelated to investments, since FINRA reported that the new rule eliminates reporting of non-investment-related activities. FINRA said it will announce the effective date in a Regulatory Notice, and firms will write their own procedures. Until then, follow the current rules and your firm's written instruction.

Does the M&A broker exemption take me out of FINRA's rules?

No. The statutory exemption concerns SEC broker registration for certain small-company transfers. People who keep FINRA registrations remain subject to FINRA rules and their firm's policies. The exemption also does not address data-licensing introductions, so do not rely on it for this role.

Free resources

By SourceX Partnerships Team · Published 2026-10-09 · Updated 2026-10-09

Know a US company with valuable proprietary data?

Become a referral partner from anywhere we support, get your link and introduce an owner or authorized decision-maker.

Refer a company →

I own a business

Explore licensing your company's data to AI developers worldwide. Start a short assessment; no uploads needed.

Start an assessment