Which of the following responses best describes how member firms are required to retain electronic correspondence and internal communications of associated persons?

Under regulations set forth by the Securities and Exchange Commission (SEC), specifically Rule 17a-4, which FINRA member firms must adhere to, all electronic records, including correspondence and internal communications, must be preserved in a non-rewriteable, non-erasable format. This is commonly known as WORM (Write Once, Read Many) compliance. The primary purpose of this requirement is to ensure the integrity and immutability of the records, preventing them from being altered or destroyed after they have been stored. The specific location of the storage, such as a firm's server or a cloud service, is secondary to the requirement that the storage format itself be unchangeable.

A. Firms are permitted to use electronic storage and are not required to convert electronic communications to hard copy for retention purposes.
B. While a firm's server is a possible storage location, it is not the requirement; the key rule concerns the storage format, not the physical location.
C. Cloud storage is a permissible location for record retention, but it must comply with the non-rewriteable and non-erasable format mandated by regulations.

1. U.S. Securities and Exchange Commission (SEC). Rule 17a-4 - Records to be preserved by certain exchange members, brokers and dealers. 17 C.F.R. § 240.17a-4(f)(2)(ii)(A). This section explicitly states that electronic storage media must "Preserve the records exclusively in a non-rewriteable, non-erasable format."

2. Financial Industry Regulatory Authority (FINRA). FINRA Rule 4511 - General Requirements. This rule requires member firms to make and preserve books and records as required under the Exchange Act and its applicable rules, thereby incorporating SEC Rule 17a-4 by reference.

3. Financial Industry Regulatory Authority (FINRA). Regulatory Notice 03-33: Electronic Storage Media. Page 2. The notice discusses amendments to SEC Rule 17a-4 and reminds firms that the rule "requires that records be preserved exclusively in a non-rewriteable and non-erasable format."