FINRA Rule 3290 Explained for SIE and Series 7 Candidates

Illustration of a compliance review checklist for securities representatives

Free FINRA prep

Turn this guide into a study plan

Take a free diagnostic and let Lurne AI adapt the next practice set to the concepts you miss.

Start a free practice test Browse exam courses

As of June 22, 2026, FINRA Rule 3290 is still a proposal, not an effective rule. FINRA filed the proposal with the SEC in January 2026, the SEC instituted proceedings on May 1, 2026 to determine whether to approve or disapprove it, and FINRA submitted another response to commenters on June 11, 2026. That timeline matters because exam candidates should separate what is proposed from what is currently testable and enforceable.

That is exactly why this filing matters for Lurne AI's audience. If you are studying for the SIE, Series 7, Series 63, Series 65, or Series 66, you already run into questions about outside business activities, private securities transactions, supervision, customer confusion, and "selling away." If you are a new representative, you also run into the real-world version fast: side gigs, insurance work, investment-adviser affiliations, real-estate ventures, private placements, and friends asking whether you can help them invest outside your firm.

FINRA's proposed Rule 3290 is an attempt to rewrite that area into one cleaner framework. The headline is simple: FINRA wants to replace current Rules 3270 and 3280 with a single rule focused on higher-risk outside investment-related activity. But the practical answer is more nuanced. Some activities would become easier to categorize. Some notice burdens would shrink. High-risk securities activity for compensation would still trigger serious firm review, supervision, and recordkeeping. And until the SEC approves anything and FINRA sets an effective date, the current rules still govern.

What Rule 3290 Would Replace

Today, firms and registered persons generally think about this area in two buckets. FINRA Rule 3270 covers outside business activities of registered persons. FINRA Rule 3280 covers private securities transactions of an associated person, the classic "selling away" rule. The proposed Rule 3290 would combine that structure into one outside-activities framework while keeping different obligations depending on what kind of activity is involved.

FINRA's stated reason is risk-based supervision. In the original Federal Register notice, FINRA said the current framework creates too much noise by sweeping in lower-risk activities that may not tell firms much about investor-protection risk. The proposal would instead focus on outside investment-related activity, which FINRA defines broadly to include activity pertaining to financial assets such as securities, crypto assets, commodities, derivatives, currency, banking, real estate, and insurance.

That definition is broader than many candidates might expect. In other words, the proposal is not just about stocks and bonds. FINRA is saying that customer confusion can arise whenever a rep offers investment-like products or financial services away from the firm, even if the product is not itself a traditional security.

What Would Change Under the Proposal

The biggest proposed shift is that not every side job would remain a FINRA-reportable event under the rule. FINRA said the proposal is intended to eliminate the reporting and assessment of lower-risk non-investment-related activities. The agency's own examples included things like refereeing sports games, bartending on weekends, or driving for a car service. Those examples are useful because they show the policy direction clearly: the proposal is trying to move firm attention away from ordinary side hustles and toward activities that could confuse customers, create conflicts, or hide unapproved securities sales.

But notice what does not disappear. If the outside activity is investment-related, a registered person would still have to provide prior written notice to the member firm. The member, in turn, would have to assess whether the activity is properly characterized, whether it involves the person's customers, whether it would interfere with the person's duties to the firm or its customers, and whether the public would view the activity as part of the member's business.

That public-perception point is a classic exam concept. A rep may think a side venture is "personal," but if a customer sees the same rep marketing it, discussing it, or using the credibility of the brokerage role to support it, the risk of confusion rises quickly. FINRA's proposal keeps that concern front and center.

Outside Securities Transactions Still Get the Hardest Review

Rule 3290 would keep a stricter track for outside securities transactions. If an associated person wants to participate in an outside securities transaction, the person would need to give prior written notice describing the transaction, the person's role, and whether the person will receive selling compensation. If the transaction involves selling compensation, prior written approval from the member would still be required.

That distinction matters because it preserves the core investor-protection idea behind current Rule 3280. When compensation is tied to the purchase, sale, or exchange of a security, the compliance risk goes up. Under the proposal, if the firm approves an outside securities transaction for selling compensation, the firm would have to record it on its books and records and supervise the person's participation as if the transaction were executed on behalf of the member.

For transactions without selling compensation, the proposal is lighter but not casual. The firm would still need to give prompt written acknowledgement of the notice, and it could still impose conditions or limitations. This is a useful real-world reminder for junior reps: "I am not getting paid" is not the same as "my firm does not need to know."

Important Exclusions and Grey Areas

One of the most closely watched parts of the proposal is how it handles activities at unaffiliated registered investment advisers. Under current interpretations, that area can create major operational headaches because broker-dealers may need visibility into activity occurring outside their own systems. Proposed Supplementary Material .03 would treat activity at an SEC-registered or state-registered investment adviser as an outside activity, not an outside securities transaction. That means written notice and upfront firm assessment would still matter, but the proposal would not automatically require the same supervision and recordkeeping model that applies to an approved securities transaction for selling compensation.

FINRA also proposed several exclusions. Activities on behalf of a member or its affiliate would be excluded. Securities transactions among immediate family members without selling compensation would be excluded. Personal securities activity already covered by Rule 3210 or delineated there would remain outside the rule. Personal investments in non-securities would be excluded, and the proposal would create a specific exclusion for the purchase, sale, rental, or lease of a main home and up to two secondary homes if ownership conditions are met.

Even here, candidates should resist oversimplifying. An exclusion from proposed Rule 3290 does not mean a firm cannot impose stricter internal rules. In its June 11, 2026 response to commenters, FINRA explicitly said members retain discretion to apply broader notification requirements if that fits their risk profile and business model. So the test answer may be one thing, while the firm's policy manual may be stricter in practice.

Why This Matters for Exam Prep Right Now

Exam note: unless a question expressly says "under proposed Rule 3290," do not assume the proposal has replaced the current rules. For exams today, the safer baseline is still current FINRA Rule 3270 for outside business activities and Rule 3280 for private securities transactions.

Still, Rule 3290 is worth knowing because it sharpens the logic behind the current rules. FINRA's own 2026 Annual Regulatory Oversight Report continues to emphasize outside business activities and private securities transactions as a live supervision problem. The report highlights effective practices such as reviewing public websites and social media, checking for red flags in fund movements and lifestyle changes, training employees on notice requirements, and taking disciplinary action when persons fail to disclose OBAs or PSTs. That tells candidates what regulators care about: not paperwork for its own sake, but detection of undisclosed risk.

The proposal also lines up with how early-career compliance issues usually appear in the field. The problem is rarely an abstract rule citation. It is more often a rep saying, "I only introduced the deal," "I wasn't paid yet," "it was through my advisory side," or "I thought real estate didn't count." Rule 3290's structure shows why those answers are incomplete. Firms are expected to classify the activity correctly, evaluate customer overlap and public perception, and decide whether conditions, limitations, approval, supervision, or outright prohibition are needed.

Another current reminder came from FINRA Regulatory Notice 26-12, published on June 9, 2026. That notice focused on compensation arrangements involving private securities entities, but it also reiterated that registered persons' other business activities can implicate current Rules 3270 and 3280 and pointed to proposed Rule 3290 as the possible replacement. In other words, this is not an academic rewrite. FINRA is already discussing adjacent business models through the same supervisory lens.

Practical Takeaways for New Reps

If an activity touches investments, insurance, banking, real estate, crypto, or customer money, do not assume it is "outside FINRA" just because it happens away from your firm's platform.
If a security is involved and compensation may be tied to the sale, think "selling away" risk first and get compliance involved before doing anything else.
Written notice is not a technicality. It is the starting point for the firm's classification, supervision, and investor-protection analysis.
Customer overlap matters. A side business involving firm customers is usually riskier than the same activity involving unrelated parties.
Firm policy may be stricter than the regulatory minimum. Passing the exam requires knowing the rule; keeping your job requires following the firm's procedures.

Bottom Line

FINRA Rule 3290 is one of the more practical 2026 proposals for people entering the securities industry because it sits at the intersection of licensing concepts and real first-job mistakes. The proposal would simplify the framework and reduce noise around non-investment side gigs, but it would keep tight controls where investor harm is most likely: outside securities transactions, customer-facing activity, compensation-driven selling, and anything that looks like the member firm's business in the eyes of the public.

For now, treat Rule 3290 as a developing rulemaking, not current law. But if you understand why FINRA wants the change, you will also understand the core exam lesson that is unlikely to change: disclose early, classify carefully, and never treat outside compensation tied to securities as an informal side project.