Investment Adviser Representative (IAR) Registration: State Requirements, Form U4, and Exemptions

Investment adviser representatives are the people who actually deliver investment advice to clients. Choosing investments, managing portfolios, having conversations about financial goals -- that is IAR work. And unlike the firm itself, which registers with the SEC through Form ADV, each IAR registers at the state level through a separate process.

This distinction catches new RIA principals off guard. You spent months getting your firm registered with the SEC, and then you discover that every person at your firm who touches client accounts needs their own individual state registration. This guide explains who qualifies as an IAR, what the registration process requires, which states are involved, and how IAR registration connects to your Regulation S-P compliance obligations.

What Is an Investment Adviser Representative

The term "investment adviser representative" has a legal definition under NASAA model rules, which most states have adopted. An IAR is a supervised person of a registered investment adviser who does one or more of the following:

• Makes investment recommendations or manages accounts
• Determines what recommendations to make
• Provides investment advice directly to clients
• Solicits, offers, or negotiates for investment advisory services

Partners, officers, directors, and employees who perform these functions must register as IARs. The definition is role-based, not title-based. A "portfolio analyst" who makes recommendations is an IAR. A "relationship manager" who has financial planning conversations with clients is an IAR. A compliance officer who never touches client accounts or provides advice is typically not an IAR.

Clerical and administrative staff are generally excluded, as are people whose functions are entirely back-office. When in doubt, look at whether the person's work involves providing investment advice or supervising someone who does. If yes, they likely need to register.

Firm Registration vs. IAR Registration: Understanding the Split

When an investment advisory firm crosses the SEC registration threshold (generally $110 million in regulatory assets under management), it becomes a "federal covered adviser" under the Investment Advisers Act. Federal covered adviser status means the firm registers with the SEC and is exempt from state investment adviser registration under Section 203A.

That exemption applies to the firm, not to the people who work there.

IARs of SEC-registered firms do not register with the SEC. They register with the states. The firm files Form ADV through the Investment Adviser Registration Depository (IARD). Each IAR files Form U4 through FINRA's Central Registration Depository (CRD). Both systems are accessible through the same IARD infrastructure, but they are legally distinct filings for distinct purposes.

This split means a two-track compliance obligation: keep the firm's Form ADV current with the SEC, and keep each IAR's Form U4 current in every applicable state.

Which States Require IAR Registration

Nearly every state requires IARs of federal covered advisers to register in any state where they have a "place of business." A place of business is any location from which the IAR regularly provides advisory services -- a physical office, a home office used regularly for client work, or any location where the IAR regularly meets clients.

Beyond the place-of-business rule, many states also require IAR registration when the IAR exceeds a client-count threshold in that state, even without a physical presence. The NASAA model rule sets this threshold at 5 clients in a 12-month period. States that have adopted the NASAA model require registration once an IAR has more than 5 clients in that state during the preceding year.

Practical implications for a growing firm:

• An IAR whose only office is in California registers in California.
• If that IAR then takes on 6 clients in Colorado, Colorado registration is typically required.
• If they move to working remotely while traveling between states, the home state registration analysis gets more complex.

There is no automatic reciprocity between states. Each state has its own registration process, fees, and renewal schedule. Multi-state firms with IARs in multiple locations need a tracking system to monitor registration status and renewal dates by state.

Form U4: What the Filing Requires

IARs register through Form U4, filed via the CRD system. The form covers several categories of information:

Personal and professional information. Legal name, residential address, Social Security number, employment history for the preceding 10 years, and business activities outside the firm.

Disclosure items. This is the section that gets most attention. Form U4 requires disclosure of criminal charges and convictions, regulatory sanctions and investigations, civil court actions, customer complaints and arbitration awards, financial disclosure events (bankruptcies, unsatisfied judgments, liens), and terminations for cause. Disclosure items trigger state review and can delay or prevent registration.

Exam and credential information. Passed examinations, professional designations held, and continuing education status.

Firm affiliation. The sponsoring firm's CRD number and the IAR's role within the firm.

Initial Form U4 filings for new IARs typically take a few business days to process if there are no disclosure items. States vary on review timelines for filings with disclosure items -- some resolve them in days, others take weeks.

Once filed, Form U4 must be kept current. Material changes require an amendment within 30 days. Disclosure events (new customer complaints, regulatory inquiries, criminal charges, financial events) require an amendment within 10 days, regardless of the materiality threshold.

Competency Requirements: Series 65 and Series 66

Most states require IARs to demonstrate competency by passing a qualifying examination. The two pathways are:

Series 65 (Uniform Investment Adviser Law Examination). Administered by FINRA on behalf of NASAA, the Series 65 is a 130-question, three-hour exam covering investment vehicles, investment strategies and portfolio construction, economic factors affecting investment markets, legal and regulatory guidelines, and ethical practices for investment advisers. A passing score of 72% is required. The Series 65 has no prerequisite -- it is a standalone qualification.

Series 66 plus Series 7. The Series 66 (Uniform Combined State Law Examination) serves as an IAR qualifier when combined with an active Series 7 (General Securities Representative) license. The Series 7 is a FINRA license for registered representatives of broker-dealers, covering a broader scope of securities topics. This pathway is used by IARs who also hold broker-dealer registration.

Designation exemptions. NASAA and most states exempt holders of certain professional designations from the Series 65 requirement. Recognized designations in most states include: CFA (Chartered Financial Analyst), CFP (Certified Financial Planner), CPA (Certified Public Accountant, with personal financial specialist designation), ChFC (Chartered Financial Consultant), and PFS (Personal Financial Specialist). Firms should verify exemption status with each state where registration is sought, as a handful of states do not accept all designations.

Annual Renewal and Ongoing Obligations

IAR registrations are not permanent. They must be renewed annually through the CRD system as part of the IARD annual renewal program. The renewal window runs from mid-November through December 31 each year. Registration expires on December 31 for any IAR who is not renewed, and an IAR who allows registration to lapse cannot legally provide advisory services until the registration is reinstated.

Annual renewal obligations for the firm:

• Review the IAR roster before the renewal window opens
• Renew registrations in all applicable states for each active IAR
• Terminate the registrations of IARs who have left the firm (Form U5)
• Verify that continuing education requirements are current

Continuing education requirements apply in many states. NASAA introduced an IAR continuing education program that most states have adopted, requiring IARs to complete annual CE through an approved provider.

When an IAR leaves the firm, the firm must file a Form U5 (Uniform Termination Notice) within 30 days of the termination. The U5 must accurately state the reason for termination. A U5 that reports a termination as "permitted to resign" when the IAR was actually fired for cause can itself become a regulatory issue.

How IAR Registration Connects to Your Reg S-P Program

Investment adviser representatives access client personal information constantly: account statements, Social Security numbers, tax data, investment objectives, financial planning records. That access is the core of what an IAR does.

Regulation S-P requires SEC-registered investment advisers to implement a written information security program that includes, among other things, access controls. The access controls component means defining who within the firm can access customer information, under what conditions, and through what systems.

SEC examiners who review a firm's Reg S-P compliance look at whether the written program reflects the firm's actual personnel and access structure. A firm whose written access controls describe a system that does not match who actually has access to client data -- because the IAR roster has grown but the written policy has not been updated -- has a documented gap between its written program and actual practice. That gap is a deficiency.

Practical connection points:

• Your Reg S-P information security program should identify the categories of personnel with client data access, including IARs.
• Onboarding and offboarding procedures should include both IAR registration status (Form U4/U5) and information system access provisioning.
• When an IAR leaves and a Form U5 is filed, the corresponding revocation of system access should be documented in your Reg S-P records.
• Annual reviews of your Reg S-P program under Rule 206(4)-7 should include a review of whether the IAR access list matches the access control documentation.

Firms that treat IAR registration and information security as separate compliance silos miss the connection examiners are drawing in FY2026 examination reviews.

Tracking Multi-State IAR Registration

For firms with IARs in multiple states or clients spread across the country, tracking registration status manually is error-prone. The compliance program should maintain a current roster showing:

• Each IAR's name and CRD number
• States in which they are currently registered
• Registration expiration dates by state
• Client counts by state (to identify registration thresholds approaching)
• Form U4 amendment triggers pending

This roster is itself a compliance record under Rule 204-2, which requires investment advisers to maintain records necessary to demonstrate compliance. It should be reviewed as part of the annual Rule 206(4)-7 compliance review and updated whenever an IAR joins or leaves.

The link between IAR registration, client access controls, and Reg S-P documentation is one area where small firms often have undocumented gaps -- not because they have not done the work, but because they have never written it down. Written documentation is what examiners require.

---

If your firm's Reg S-P information security program does not yet reflect your IAR access controls and personnel structure, RegShield generates the required written documentation in about 15 minutes. Get your firm's compliance documents.

Frequently Asked Questions

Who must register as an investment adviser representative?

Any supervised person of an investment advisory firm who makes investment recommendations, manages client accounts, determines what advice to give, or solicits or negotiates advisory services must register as an IAR. Title does not control the analysis -- the question is whether the person's work involves providing investment advice or supervising someone who does. Clerical, administrative, and back-office staff who do not touch client accounts or provide advice are generally excluded.

Do IARs of a federally registered RIA register with the SEC?

No. IARs of SEC-registered firms register with the states, not with the SEC. The firm's federal covered adviser status exempts the firm from state-level investment adviser registration under Section 203A of the Advisers Act, but that exemption does not extend to the firm's individual representatives. IARs file Form U4 through the CRD system in each state where they have a place of business or exceed the applicable client-count threshold.

What is the de minimis exemption from state IAR registration?

Most states that have adopted the NASAA model rule exempt IARs from registration in a state if the IAR has no place of business in that state and has had no more than 5 clients in that state during the preceding 12 months. This exemption allows IARs to occasionally work with out-of-state clients without triggering state registration requirements. Firms should track client counts by state to identify when IARs are approaching the threshold and registration is required.

How long does IAR registration take?

For a clean Form U4 with no disclosure items, state registration typically processes within a few business days. States that require review of disclosure items (criminal records, regulatory history, financial events) may take several weeks to complete the process. Firms should factor this timeline into their hiring process and not allow new IARs to provide advisory services before their registrations are confirmed as effective.

What happens if an IAR provides advice without active state registration?

Providing investment advisory services without active IAR registration is a violation of state securities law. The firm, not just the individual, may be held responsible for supervising an unregistered representative. Consequences can include state enforcement actions, fines, disgorgement, and reputational harm. During SEC examinations, examiners may also review IAR registration compliance as part of the supervisory procedures assessment. A pattern of permitting unregistered IARs to provide advice is a serious supervisory deficiency.

What must be filed when an IAR leaves the firm?

When an IAR terminates employment, the firm must file a Form U5 (Uniform Termination Notice) through the CRD system within 30 days of the termination date. The U5 must accurately state the reason for departure. The firm must also revoke the departing IAR's access to client information systems as part of its Reg S-P offboarding procedures, and that revocation should be documented in the firm's access control records.