Comply with Regulated Record Keeping Requirements

This task pairs closely with Task 4's "record of advice" concept, but it's broader — it covers the full range of documentation an FSP is required to keep, not just the paperwork behind a single piece of advice. Candidates who've never actually worked in a compliance-heavy environment tend to underestimate how much of this exists purely for future accountability, not day-to-day convenience.

Why Record Keeping Exists as Its Own Task

Every other task in this exam eventually needs to be provable after the fact. A representative can genuinely give suitable advice, disclose everything required, and still fail an FSCA inspection or a client complaint investigation if the paper trail proving all of that doesn't exist or can't be produced. Record keeping is the evidentiary backbone underneath everything else the Act requires.

What Actually Needs to Be Kept

Broadly, an FSP's record-keeping obligations extend across several categories:

• Records of advice — the needs analysis and reasoning behind each recommendation, as covered under Task 4
• Client information — identification, contact details, and the information gathered during the advice process
• Financial records — the FSP's own financial statements and records supporting ongoing solvency and financial soundness
• Complaints records — every complaint received, how it was handled, and its outcome
• Compliance records — the compliance monitoring plan, irregularity register, and Annual Compliance Reports referenced in Task 1's QC4
• Representative and Key Individual records — appointment dates, training records, competency evidence, and supervision history

Retention Periods

This is where candidates lose easy marks — assuming a single retention period applies universally, when different categories of record have different minimum periods. Records generally need to be kept for a minimum number of years after the relevant service ends or the record is created, and the exam tests whether you know that this isn't a flat "keep everything forever" rule, nor a uniformly short one — it varies by record type, and the FSP needs a system that tracks this correctly rather than guessing.

Real scenario: An FSP wants to destroy old client files to save on storage costs, reasoning that the clients in question haven't been active for over a year. Is this permissible? Not necessarily — the retention clock for many records runs from when the relevant relationship or service actually ended, not from the last time the client happened to interact with the FSP, and the required minimum period needs to have genuinely elapsed before destruction is appropriate. Destroying records prematurely, even with good intentions around storage costs, is itself a compliance failure if a required retention period hasn't run its course.

Format and Accessibility

Records don't have to be kept on paper — electronic record keeping is standard practice and fully acceptable, provided the records remain accessible, readable, and can be produced when the FSCA, a client, or a Compliance Officer legitimately requires them. The requirement is about genuine accessibility and integrity of the record, not the specific medium it's stored in.

Real scenario: An FSP stores all client records in a cloud-based system, but during an FSCA inspection, several records can't be retrieved because of a lapsed software licence and an expired data export. Does storing records electronically satisfy the requirement here? Not on its own — the FSP has failed to maintain genuine accessibility, which is the actual substance of the requirement, regardless of the fact that the records technically still exist somewhere in an unreachable system.

Who's Responsible

Record keeping obligations sit primarily with the FSP as a business, but Key Individuals and Compliance Officers carry direct oversight responsibility for ensuring systems are actually in place and working — and individual representatives are responsible for properly completing the records specific to their own client interactions, like the record of advice for each recommendation they personally make.

Quick Recap

• Record keeping spans advice records, client information, financial records, complaints, compliance documentation, and representative/KI records — not just one category
• Retention periods vary by record type and generally run from when the relevant service or relationship ends — not from the last client contact
• Electronic records are fully acceptable, but only if genuinely accessible and legible for the required period — existence alone isn't enough
• Responsibility spans the FSP, Key Individuals, Compliance Officers, and individual representatives, each for their own piece of it