Table of Contents
SERIES 24 | FINANCIAL REGULATION COURSES
FINRA Rule 9291 establishes the content, scope, and form requirements for permanent cease and desist orders imposed in FINRA disciplinary proceedings, and the delivery obligation for member firms that receive a permanent cease and desist order.
The rule requires that every PCDO issued through a Hearing Panel decision under FINRA Rule 9268, a default decision under FINRA Rule 9269, or an accepted settlement under FINRA Rule 9270 must satisfy three specific content requirements — ordering the respondent to cease and desist permanently from violating a specific rule or statutory provision, setting forth the violation, and describing in reasonable detail the acts the respondent shall take or refrain from taking. Where the respondent is a member firm, the PCDO must extend to any successor of the firm. Where the respondent is a member firm, the rule also imposes a one-business-day delivery obligation — requiring the firm to provide a copy of the PCDO to all its associated persons within one business day of receiving it.
Together these provisions ensure that every FINRA permanent cease and desist order is precisely targeted at the specific misconduct found, legally sufficient to support enforcement, and effectively disseminated within the firm whose supervisory structure must incorporate its requirements.
FINRA Rule 9291 sits at the boundary of the 9200 Disciplinary Proceedings series and the 9300 Review series — positioned after FINRA Rule 9290's expedited proceedings provision and before the 9300 series begins.
It was adopted by SR-FINRA-2015-019 effective November 2, 2015 as announced in Regulatory Notice 15-35 — the same filing that amended the Rule 9800 series to strengthen FINRA's temporary and permanent cease and desist authority, lowered the TCDO evidentiary standard, and added the PCDO content requirement cross-reference to FINRA Rule 9268(b)(7). FINRA Rule 9291 is therefore a recent addition to the Code — adopted approximately eighteen years after the Code's original 1997 adoption — reflecting FINRA's evolution of its cease and desist authority from the 2003 pilot program through the 2009 permanent adoption and the 2015 expansion and clarification.
Understanding FINRA Rule 9291 requires understanding the institutional history of FINRA's cease and desist authority. FINRA does not possess the direct injunctive authority of a federal court — it cannot issue an order with the legal force of a federal court injunction. What FINRA can do is impose sanctions in disciplinary proceedings, and the permanent cease and desist order is FINRA's most powerful non-expulsion sanction — a formal directive that the respondent must permanently stop violating a specific rule or statutory provision.
FINRA first obtained explicit cease and desist authority through the pilot program established by SR-NASD-98-80 effective June 23, 2003 — announced in Notice to Members 03-35. That pilot authorized both temporary cease and desist orders and permanent cease and desist orders as remedies in disciplinary cases. The pilot was extended multiple times and made permanent in 2009 through the adoption described in the Federal Register release of June 9, 2009. The 2015 amendments through SR-FINRA-2015-019 — which Regulatory Notice 15-35 described as strengthening FINRA's ability to use its TCDO and PCDO authority to better protect investors — added several specific provisions to the Rule 9800 series and created FINRA Rule 9291 as a standalone provision establishing the content, scope, and form requirements that every PCDO must satisfy.
Before FINRA Rule 9291 was adopted, the content requirements for PCDOs were embedded within the Rule 9800 series provisions governing the issuance of cease and desist orders, without a dedicated standalone rule establishing what a PCDO in a disciplinary decision must contain. The creation of FINRA Rule 9291 as a standalone provision — cross-referenced in FINRA Rule 9268(b)(7) as a required content element of any disciplinary decision imposing a PCDO — consolidated and clarified these requirements in a single authoritative provision applicable across all three decision types through which PCDOs may be imposed.
The first content requirement — that a PCDO order the respondent to cease and desist permanently from violating a specific rule or statutory provision — establishes the targeting precision that makes a PCDO enforceable. The word specific is operationally critical. A PCDO that orders a respondent to cease and desist from all violations of all FINRA rules — a blanket order — does not satisfy FINRA Rule 9291(a)(1)'s specificity requirement. The PCDO must identify the particular rule or statutory provision that was violated and that the respondent must refrain from violating in the future.
This specificity requirement serves two functions. First, it ensures that the respondent knows precisely what conduct they are permanently prohibited from, enabling them to organize their future business activities to avoid the specific violation rather than attempting to infer from a generic prohibition what specific conduct is barred. Second, it provides the basis for enforcement — when FINRA alleges that a respondent has violated a PCDO through expedited proceedings under FINRA Rule 9556, the specific rule or statutory provision identified in the order defines the scope of the alleged violation. A PCDO that is insufficiently specific cannot be effectively enforced because the boundary of the prohibited conduct is unclear.
The successor extension — and any successor of a Respondent, where the Respondent is a member firm — ensures that a firm cannot escape a PCDO by reorganizing itself as a new legal entity. A successor member firm that acquires the business of a PCDO-subject firm steps into the PCDO's scope, preventing the use of corporate reorganization or asset sales to circumvent permanently imposed compliance requirements. This successor coverage reflects the regulatory reality that the clients, registered persons, and business operations that generated the misconduct giving rise to the PCDO may continue in successor entities, and that the PCDO's investor protection purpose requires those successors to be bound by the same compliance obligations.
The second content requirement — that the PCDO set forth the violation — requires a factual description of the specific misconduct that the PCDO addresses. This violation description serves a different function from the rule identification in FINRA Rule 9291(a)(1) — while paragraph (a)(1) identifies what rule must not be violated, paragraph (a)(2) describes what specific conduct constituted the violation that gave rise to the PCDO. The violation description contextualizes the rule prohibition in terms of the specific facts that the disciplinary proceeding established, enabling both the respondent and any enforcement proceeding to assess whether future conduct resembles the established violation.
The violation description in a PCDO connects to the findings of fact in the FINRA Rule 9268(b)(3) decision — the same factual findings that established the violation in the disciplinary proceeding are the factual foundation of the violation description in the PCDO. A PCDO whose violation description is inconsistent with the disciplinary decision's findings of fact would create ambiguity about what specific conduct the PCDO prohibits and may not satisfy FINRA Rule 9291(a)(2)'s requirement.
The third content requirement — that the PCDO describe in reasonable detail the act or acts the respondent shall take or refrain from taking — is the most operationally demanding content requirement. It requires not merely a citation to the violated rule and a description of the past violation, but a specific forward-looking description of what the respondent must do or stop doing. This reasonable detail requirement is the PCDO's operative compliance directive — it translates the abstract prohibition of FINRA Rule 9291(a)(1) and the historical violation description of FINRA Rule 9291(a)(2) into concrete, actionable compliance requirements.
The reasonable detail standard acknowledges that excessive specificity may actually impair compliance — a PCDO that enumerates every specific transaction type or document format that is prohibited may create compliance uncertainty about analogous transactions or formats not specifically listed. Reasonable detail means sufficient specificity to enable the respondent and FINRA to assess compliance without requiring exhaustive enumeration of every conceivable manifestation of the prohibited conduct.
The acts the respondent shall take or refrain from taking formulation encompasses both affirmative obligations and prohibitions. A PCDO may require the respondent to do specific things — implement specific supervisory procedures, retain specific records, provide specific disclosures to customers — as well as prohibiting specific conduct. This affirmative obligation component distinguishes PCDOs from mere prohibitory orders and reflects FINRA's understanding that preventing recurrence of certain violations requires not just stopping the violative conduct but affirmatively building compliance infrastructure to prevent its return.
The successor extension in FINRA Rule 9291(a)(3) — applying the acts to take or refrain from taking to any successor of a member firm respondent — ensures that the affirmative compliance obligations as well as the prohibitions bind successors. A successor firm cannot inherit the PCDO-subject firm's business while disclaiming the affirmative compliance requirements that the PCDO imposes.
FINRA Rule 9291(b) imposes a mandatory firm-wide notification obligation when a member firm respondent receives a PCDO: the firm must deliver a copy of the permanent cease and desist order to all its associated persons within one business day of receiving it. This delivery obligation serves a critical internal compliance function — a PCDO imposed on a member firm typically addresses systemic compliance failures or violative business practices that may have involved multiple associated persons beyond the specifically named respondent. Ensuring that all associated persons are immediately aware of the PCDO enables them to assess whether their own activities are consistent with the order's requirements and to adjust any activities that might constitute violations.
The one-business-day urgency reflects the investor protection purpose of the PCDO itself. If the PCDO addresses ongoing misconduct that associated persons are actively engaged in, delayed internal notification allows that misconduct to continue while the firm processes the order internally. Immediate firm-wide notification is the first step in operationalizing the PCDO's compliance requirements across the firm's entire workforce.
The delivery obligation applies to the firm as a whole — not merely to the registered persons in the specific business unit or office where the violative conduct occurred. A PCDO imposed on a firm based on supervisory failures in one branch requires firm-wide notification because the supervisory policies and procedures identified as deficient in the PCDO may be applicable across the firm's entire operations. The complete firm-wide notification ensures that the remediation required by the PCDO is understood by all persons who may be involved in implementing it.
A permanent cease and desist order that is violated after becoming final is not a mere administrative finding of non-compliance — it is a trigger for immediate expedited enforcement under FINRA Rule 9556. FINRA Rule 9556's expedited proceeding authority was expanded by the 2015 amendments to encompass failures to comply with PCDOs alongside failures to comply with TCDOs, creating a rapid enforcement mechanism that reinforces the PCDO's compliance force. FINRA Rule 9840(a)(2) confirms that a PCDO remains effective and enforceable unless modified, set aside, limited, or suspended pursuant to FINRA Rule 9850 — making the PCDO a permanent compliance obligation that survives beyond the conclusion of the disciplinary proceeding.
The FINRA Rule 9311 automatic appellate stay does not apply to PCDOs — FINRA Rule 9311(b) expressly provides that an appeal to the NAC will not stay a decision or part of a decision that imposes a PCDO. This non-stayed status means that a PCDO becomes operative immediately upon issuance even while the disciplinary decision is under appellate review, unlike other sanctions that are stayed pending appeal. The FINRA Rule 9291(b) one-business-day delivery obligation therefore becomes operative immediately upon issuance regardless of whether the firm has appealed the underlying disciplinary decision.
FINRA Rule 9291 connects to FINRA Rule 9268(b)(7) — which requires every disciplinary decision imposing a PCDO to include a statement consistent with FINRA Rule 9291(a)'s requirements, cross-referencing FINRA Rule 9291 as the content standard. It connects to FINRA Rule 9269(b)'s requirement that default decisions conform to FINRA Rule 9268(b)'s content requirements including the PCDO statement. It connects to FINRA Rule 9270's settlement procedure — an order of acceptance issued under FINRA Rule 9270 may also impose a PCDO subject to FINRA Rule 9291(a)'s requirements. It connects to FINRA Rule 9290's expedited disciplinary proceedings — PCDOs are among the most significant outcomes of the expedited proceedings that FINRA Rule 9290 governs. It connects to FINRA Rule 9311's appellate stay exception for PCDOs. And it connects to the entire Rule 9800 series — particularly FINRA Rule 9840's PCDO durational and enforceability provisions — as the discipline side counterpart to the Rule 9800 series' PCDO procedural framework.
FINRA Rule 9291 is tested on the Series 24 General Securities Principal examination in the context of FINRA's cease and desist authority, the content requirements for permanent cease and desist orders, and the enforcement obligations that flow from their issuance.
The key points to retain are these: FINRA Rule 9291 was adopted by SR-FINRA-2015-019 effective November 2, 2015 as announced in Regulatory Notice 15-35 — it is a relatively recent addition to the Code establishing standalone content, scope, and form requirements for PCDOs; every PCDO imposed through a FINRA Rule 9268 decision, FINRA Rule 9269 default decision, or FINRA Rule 9270 accepted settlement must satisfy three content requirements — ordering permanent cessation from violating a specific rule or statutory provision, setting forth the violation, and describing in reasonable detail the acts to be taken or refrained from; where the respondent is a member firm the PCDO extends to any successor of the firm for both the prohibition and the affirmative compliance obligations; FINRA Rule 9291(b) requires member firm respondents to deliver a copy of the PCDO to all associated persons within one business day of receiving it; the PCDO is not stayed by a FINRA Rule 9311 appeal to the NAC — FINRA Rule 9311(b) expressly exempts PCDOs from the automatic appellate stay; a PCDO remains effective and enforceable until modified, set aside, limited, or suspended pursuant to FINRA Rule 9850; violations of PCDOs are subject to expedited enforcement proceedings under FINRA Rule 9556; and the three content requirements of FINRA Rule 9291(a) are cross-referenced in FINRA Rule 9268(b)(7) as a mandatory decision content element whenever a PCDO is imposed.
