Why Brokers Ask for Personal Information: Rules Behind the Requests
A plain breakdown of the SEC and SRO rules that make broker-dealers collect tax IDs, employment status, and suitability data, including when the obligation is excused.
Broker-dealers ask new and long-standing customers for personal information because U.S. government laws, self-regulatory organization (SRO) rules, and a customer identification rule jointly issued by the SEC and the Department of the Treasury require it. The requests are not discretionary curiosity. They map to specific recordkeeping, suitability, and anti-money-laundering obligations.
Two questions matter most for investors comparing brokers: which data the firm is actually required to collect, and what happens when a customer declines to supply it. The source material addresses both, and it distinguishes the mandatory recordkeeping rule from the suitability standard that governs recommendations.
Suitability: information that supports a recommendation
Under SRO rules, when a broker recommends that a customer buy or sell a particular security, the broker must have a reasonable basis for believing the recommendation is suitable for that customer. To make that assessment, the broker must consider the customer's risk tolerance, other security holdings, financial situation (income and net worth), financial needs, and investment objectives.
That list explains why onboarding forms ask about income, net worth, existing holdings, and goals. Each item feeds the suitability judgment rather than a marketing profile. The source notes that information on FINRA's suitability rule, along with links to related materials, can be found in the FINRA Rules.
For an investor holding several asset types, the "other security holdings" element is the practically relevant one. A broker cannot assess concentration or risk tolerance without knowing what else sits in the portfolio. This is also where information quality matters: stale or rounded figures weaken the basis on which recommendations rest.
The recordkeeping rule and its specific fields
SEC Rule 17a-3(17) requires brokerage firms to create a record for each account with an individual customer. The source lists the following items the record must include:
- The customer's tax identification number (for example, a Social Security number)
- Whether the customer is employed by a brokerage firm
Brokers must make a good faith effort to obtain this information. The rule, however, contains an explicit carve-out: if the customer neglects or refuses to provide the information, or is unable to provide it, then the rule excuses the broker from obtaining it. That excuse is a statement about the broker's recordkeeping obligation, not a promise that an account can be opened without the data. The source does not describe what a firm may do commercially when the information is withheld.
The same SEC rule requires the brokerage firm to periodically send this information to its customers to verify whether it is accurate. The tax identification number and date of birth are excluded from what is sent. Firms have some flexibility in how they deliver it and may incorporate it into a customer's account statement.
In practical terms, that periodic verification notice is the document to read carefully. If income, net worth, or objectives on file no longer describe the account, the notice is the moment the firm is checking the very inputs that suitability depends on.
Why the recordkeeping rule exists
The source states that these recordkeeping requirements also help ensure brokerage firms have an up-to-date understanding of their customers' financial situation and investment objectives. The stated purpose links the file back to the suitability analysis: the record is the firm's working picture of the customer, and the periodic refresh keeps that picture current.
Anti-money laundering and customer identification
Separately, brokers must comply with a customer identification rule the SEC issued jointly with the Department of the Treasury to implement a provision of the USA Patriot Act of 2001. That rule requires brokers to put procedures in place to:
- Verify the identity of any person seeking to open an account
- Maintain records of the information used to verify the person's identity
- Determine whether the person appears on any lists of known or suspected terrorists or terrorist organizations provided to broker-dealers by any government agency
This is a different obligation from suitability. Identity verification and list screening apply to account opening regardless of what the customer intends to trade, whereas suitability obligations attach when a broker makes a recommendation. The source presents these as distinct reasons brokers gather information, and readers should treat a request for identification documents and a request for income figures as serving different rules.
Applying this to a multi-asset account
The source identifies three drivers for personal information requests: suitability assessment tied to recommendations, the SEC recordkeeping rule with its named fields and periodic verification, and the customer identification rule under the USA Patriot Act of 2001. Long-standing customers are asked as well as new ones, since the verification step is periodic rather than one-time.
A practical reading for an investor with holdings across asset classes is to keep the account file accurate rather than minimal. Where the source says the broker must consider other security holdings and financial situation, supplying current, complete information supports the suitability basis for any recommendation received. Where a figure is left blank by refusal, the source describes the broker's obligation as excused but does not describe any consequence for the customer.
What the source does not say
The source does not state what a firm must do if a customer refuses to provide information beyond excusing the broker from obtaining it, nor does it describe account-opening outcomes in that case. It does not specify how often the periodic verification is sent, or the required format of any notice. It does not set out penalties for non-compliance, describe state-level requirements, or address non-U.S. jurisdictions.
It also does not explain how firms should weigh conflicting information, how suitability applies to self-directed orders where no recommendation is made, or the specific contents of the government watchlists referenced. Any figures about costs, fines, or timelines would require facts not present in this material, so none are offered here.
Sources
Informational only. Not financial, legal or investment advice. Check the primary sources listed above before you act on anything here.