Client Records

Understand what client records must show, how they support suitability and supervision, and why secure retention matters.

Client records matter because they turn client-service activity into evidence. Without a reliable record, the firm may not be able to show what it knew about the client, what instructions were received, what disclosures were provided, or why a recommendation was suitable. That is a serious problem in supervision, complaint handling, and regulatory review.

For CPH purposes, the strongest answer usually connects four ideas:

  1. what information belongs in the client record
  2. why the record matters for suitability and supervision
  3. how records should be updated and controlled
  4. why security and retention matter

Client Records Support the Entire Relationship

Client records are not only opening forms stored for historical purposes. They support the continuing relationship by showing:

  • who the client is
  • what authority exists on the account
  • what the client’s financial situation and objectives are
  • what communications and instructions occurred
  • what transactions were executed
  • what disclosures and confirmations were delivered

The strongest exam answer usually treats records as a living control file rather than a static folder.

Core Components of a Client Record

At a high level, a useful client record can include:

  • identity and account-opening documents
  • contact details and authority information
  • KYC information
  • records of changes to objectives, circumstances, or risk tolerance
  • communication notes and relevant correspondence
  • transaction history and related confirmations
  • complaint, transfer, or escalation records where relevant

The exact document set will vary by account type and product use, but the core principle is completeness with a clear audit trail.

Authority and Account Control Must Be Clear

One of the most important functions of the client record is showing who can actually give instructions or receive information on the account. That means the file should make it clear:

  • who the account holder is
  • whether there are joint owners, trustees, corporate signing authorities, or powers of attorney
  • whether a trusted contact or other authorized contact exists for limited purposes
  • whether the firm can rely on a third party for instructions, transfers, or disclosure

This matters because many later problems are not really “communication” problems. They are authority problems hidden inside poor records.

Records and Suitability Are Closely Linked

Client records matter because suitability is difficult to defend without them. If the firm cannot show:

  • the client’s objectives
  • the client’s time horizon and liquidity needs
  • the client’s risk tolerance and capacity
  • the basis on which the recommendation was made

then later claims that the recommendation was appropriate become weaker.

This is why stale KYC data is a recordkeeping problem and not only a suitability problem. Weak records make later suitability review weaker too.

Records Must Be Retrievable, Not Merely Stored

Good recordkeeping is not satisfied by saying that documents exist somewhere in the system. The firm should be able to retrieve the relevant record within a reasonable time when:

  • a complaint arises
  • a transfer is disputed
  • supervision asks for support
  • a regulator or internal reviewer requests the file

This is an important exam point. A file that is fragmented across unofficial email chains, personal notes, and unapproved messaging channels is weak even if pieces of the truth exist in different places.

    flowchart TD
	    A[Open account and gather client information] --> B[Record KYC, authority, and disclosures]
	    B --> C[Document instructions and recommendations]
	    C --> D[Update for changes in client circumstances]
	    D --> E[Retain secure audit trail for supervision and review]

The sequence matters because the file should show the history of the relationship, not just its opening state.

Updating the Record Is Part of the Duty

The file should not remain frozen once the account is opened. Updates may be needed when:

  • the client’s income, assets, or liabilities change materially
  • risk tolerance or investment objectives change
  • address, contact, or authority information changes
  • the client raises a complaint or dispute
  • a major life event changes account purpose or liquidity needs

The exam often rewards the student who notices that a later recommendation may be weak because the underlying client record was not updated when circumstances changed.

Good Records Need Controlled Amendments

Recordkeeping is not only about volume. It is also about control. Good practice usually includes:

  • clear identification of who made the update
  • a record of when the update occurred
  • support for the basis of the change
  • protection against improper alteration or quiet cleanup after a dispute arises

This is why an audit trail matters. A file should not look as if it was rewritten after the fact to justify a recommendation.

Security and Confidentiality Matter

Client records contain sensitive information. That means recordkeeping is also a privacy and cybersecurity issue. Good controls generally include:

  • restricted access
  • approved systems and channels
  • secure retention and backup processes
  • protection against unauthorized alteration, loss, or disclosure

The strongest exam answer usually identifies both parts of the problem. For example, sharing client information through an unapproved channel is not only a privacy problem. It is also a records and supervision problem if the firm cannot capture and review the communication properly.

Off-Channel Communication Weakens the Client File

When important instructions or client-profile changes happen through unapproved channels, the problem is not only cybersecurity. It also means:

  • the file may be incomplete
  • supervision may not be able to reconstruct what happened
  • the branch may be relying on memory rather than evidence
  • later disputes become harder to resolve

That is why a representative should not treat off-channel convenience as harmless. If the communication belongs in the client file, it should be captured through an approved method.

Retention Matters Because Questions Often Arise Later

Client records are often tested indirectly through later events:

  • a complaint about suitability
  • a dispute about whether the client gave instructions
  • an account transfer question
  • a compliance examination
  • a branch review or internal investigation

That is why organized retention matters. The file should still allow the firm to reconstruct the relationship when the question arises, not only when the event is fresh.

A Strong File Supports More Than One Function

Students should think of the client record as serving several parallel purposes at once:

  • relationship management
  • suitability support
  • complaint and error reconstruction
  • supervisory review
  • privacy and access control

The strongest answer therefore avoids reducing records to a single function such as account opening only. The file is the operating memory of the relationship.

Common Pitfalls

  • Treating recordkeeping as an after-the-fact filing exercise.
  • Failing to update the file after material client changes.
  • Allowing undocumented instructions or informal changes to drive trading activity.
  • Weak control over who can amend the file and how.
  • Using insecure or unapproved systems that undermine confidentiality and audit trail quality.

Key Takeaways

  • Client records support KYC, suitability, communication, supervision, and later dispute resolution.
  • A strong record should show identity, authority, client profile, instructions, disclosures, and transaction history.
  • Records should be updated when the client’s circumstances change materially.
  • Controlled amendments and audit trail quality matter as much as document volume.
  • Secure retention is part of proper recordkeeping, not a separate optional issue.

Sample Exam Question

A representative recommends a higher-risk strategy to a long-standing client. When the client later complains, the branch discovers that the client’s file still shows an old growth objective from several years earlier, even though the client had recently retired and discussed the need for lower volatility and more liquidity. The representative says the discussion happened verbally and was not entered into the firm’s system yet.

What is the strongest assessment?

  • A. The file is acceptable because long-standing client relationships do not require frequent updates.
  • B. The file is weak because the client record was not updated to reflect a material change before the new strategy was recommended.
  • C. The file is acceptable if the representative remembers the conversation clearly.
  • D. The file is acceptable because only executed trades need to be documented.

Answer: B. A material change in client circumstances should be reflected in the record before relying on the profile for suitability analysis.

### What is the strongest reason client records matter? - [x] They provide evidence of the client relationship, instructions, disclosures, and suitability basis - [ ] They replace the need for supervision - [ ] They matter only when the client is institutional - [ ] They are used only for marketing purposes > **Explanation:** Client records are the documentary foundation for supervision and later review. ### Which item most clearly belongs in a client record? - [ ] The representative's personal investment watchlist - [ ] Office lunch receipts - [x] Notes showing a material change in the client's objectives or circumstances - [ ] General market commentary unrelated to the account > **Explanation:** Material client changes should be documented because they affect later suitability and supervision. ### Why is stale KYC data also a recordkeeping problem? - [ ] Because outdated records improve client privacy - [x] Because the file no longer supports current suitability analysis or defensible supervision - [ ] Because old information automatically becomes confidential - [ ] Because regulators prefer verbal explanations instead of updated files > **Explanation:** A stale file weakens the evidentiary basis for later recommendations. ### What is the strongest reason to control how records are amended? - [ ] To make files harder for staff to use - [ ] To reduce the total number of documents kept - [x] To preserve an audit trail showing what changed, when it changed, and on what basis - [ ] To avoid all future complaints > **Explanation:** Controlled amendments help prevent improper after-the-fact rewriting of the record. ### Why is use of an unapproved messaging app a records problem? - [ ] Because clients are never allowed to use phones - [ ] Because all digital communication is prohibited - [x] Because the firm may be unable to retain, supervise, and reconstruct the communication properly - [ ] Because it guarantees the message content is false > **Explanation:** Off-channel communication weakens both confidentiality and records control. ### When should a client record usually be updated? - [ ] Only at account closing - [ ] Only when a regulator asks for it - [ ] Only after the next annual statement is mailed - [x] When a material change in the client's circumstances, authority, objectives, or other key profile information occurs > **Explanation:** Material changes should be reflected promptly so the file remains current and useful.
Revised on Friday, April 24, 2026