Series 65 • Laws, Regulations, and Guidelines

Identify Regulatory Enforcement Actions — Identify state Administrator authority, enforcement actions, and penalties.

Understanding how state securities Administrators wield regulatory power to protect investors through enforcement actions and penalties.

Series 65 illustration with an investment chart, fiduciary scales, and dollar symbol
Inside this lesson 10 sections 5 questions 4 figures

SECTION 1

Historical Context & Motivation

Securities regulation in the United States did not emerge from a single sweeping federal mandate but rather grew organically from the states themselves. Before the Securities Act of 1933 and the Securities Exchange Act of 1934 established the federal regulatory framework, individual states had already enacted their own securities laws, commonly called Blue Sky Laws. These laws were so named because unscrupulous promoters would sell investments backed by nothing more than the 'blue sky' overhead. The state-level Administrator—the official or agency charged with enforcing state securities laws—became the frontline defender of investor interests at the local level. Understanding the Administrator's authority, the enforcement actions available, and the penalties that can be imposed is essential for anyone sitting for the Series 65 examination and, more broadly, for any professional operating in the investment advisory space.

1911 • Kansas Blue Sky Law

Kansas enacted the first state securities statute, establishing the concept of state-level oversight of securities transactions and creating the prototype for the state Administrator role.

1933–1934 • Federal Securities Acts

The Securities Act of 1933 and the Securities Exchange Act of 1934 created federal oversight via the SEC, but states retained concurrent jurisdiction over securities activity within their borders.

1956 • Uniform Securities Act (USA)

The National Conference of Commissioners on Uniform State Laws drafted the original USA to harmonize state securities regulation, defining the Administrator's powers, enforcement actions, and penalties in a model framework.

1996 • NSMIA Preemption

The National Securities Markets Improvement Act preempted certain state registration requirements for covered securities and federal covered advisers, but preserved the Administrator's anti-fraud enforcement authority.

2002 • Revised Uniform Securities Act

The USA was substantially revised, updating the Administrator's enforcement toolkit and clarifying the relationship between state and federal regulation in the post-Enron era.

The persistent question throughout this regulatory evolution has been: How much power should a state official have to investigate, discipline, and punish violations of securities law? The Uniform Securities Act answers this question by granting the Administrator a broad but carefully delineated set of tools—ranging from administrative orders to criminal referrals—that collectively form the enforcement apparatus you must understand for the Series 65 exam.

SECTION 2

Core Principles & Definitions

The regulatory framework governing the state Administrator's authority rests on several foundational principles that balance investor protection with fair treatment of regulated persons. The Uniform Securities Act (USA) serves as the model legislation adopted (in whole or with modifications) by most states. Under the USA, the Administrator possesses broad regulatory, investigative, and enforcement powers, but these powers are bounded by procedural safeguards, including the right to a hearing, judicial review, and constitutional due process protections.

1

The Administrator

The person or agency designated by each state to administer its securities laws. Titles vary—Secretary of State, Commissioner, Director—but the function is the same: registration of persons and securities, rulemaking, investigation, and enforcement.
2

Jurisdiction

The Administrator has authority over any securities-related activity that originates in, is directed into, or is accepted in the state. An offer made from another state that is received in the Administrator's state confers jurisdiction.
3

Enforcement Actions

The Administrator may issue denial, suspension, revocation, or cancellation orders; seek injunctions; impose cease-and-desist orders; and refer criminal matters to the appropriate prosecutor.
4

Due Process Protections

Before issuing most orders, the Administrator must provide prior notice, opportunity for a hearing, and written findings of fact. Summary (ex parte) action is permitted only when a delay would cause irreparable harm.
5

Penalties

Criminal violations can carry fines up to $5,000 and/or imprisonment up to 3 years per violation. Civil liabilities include rescission rights for defrauded investors and potential treble damages in certain states.
✦

KEY TAKEAWAY

Think of the state Administrator as a building inspector for the securities industry. Just as a building inspector can issue a stop-work order when construction violates the code, the Administrator can halt securities activity that violates state law. The inspector doesn't design buildings—likewise, the Administrator doesn't judge the merits of an investment. The inspector enforces compliance with the code, and the Administrator enforces compliance with securities regulations. And just as a builder can appeal a stop-work order to a court, a regulated person can seek judicial review of the Administrator's enforcement actions.

SECTION 3

Visual Explanation — Administrator Authority Framework

STATE ADMINISTRATORRulemakingInvestigationEnforcement• Issue rules/orders/forms• Define terms• Set exam requirements• Subpoena witnesses/records• Administer oaths• Conduct investigations• Issue cease-and-desist orders• Deny registration• Suspend registration• Revoke registration• Cancel registration• Withdraw registrationCriminal PenaltiesUp to $5,000 fine / 3 years prisonCivil LiabilitiesRescission, damages, attorney feesDue Process: Prior notice + hearing required (except summary orders)All enforcement actions subject to judicial review in state courts
This diagram illustrates the three pillars of Administrator authority: rulemaking, investigation, and enforcement. Notice how all enforcement actions flow downward into penalties but are constrained by due process protections at the bottom.

The visual framework above captures the hierarchical nature of the Administrator's authority. At the top sits the Administrator as the central regulatory figure. The three principal functions—rulemaking, investigation, and enforcement—branch outward and downward, reflecting the fact that rulemaking provides the standards, investigation uncovers violations, and enforcement imposes consequences. Critically, the due process requirement runs beneath all enforcement actions as an anchor, reminding us that the Administrator's power, while substantial, is not unchecked. Any person subject to an enforcement action retains the right to a hearing, and any final order may be appealed to the courts for judicial review.

SECTION 4

How the Enforcement Process Works

Administrator Authority: Scope and Limits

The Administrator's authority extends to three categories of regulated persons and activities: broker-dealers and their agents, investment advisers and their representatives, and securities themselves. For each of these categories, the Administrator can take registration-related actions (deny, suspend, revoke, cancel, or withdraw) and can initiate investigations leading to civil or criminal proceedings. However, several important limitations apply. The Administrator cannot impose a jail sentence—only a court can do that. The Administrator cannot issue an injunction—the Administrator can only seek an injunction by petitioning a court. And the Administrator cannot make rules that conflict with the USA or with the state's own securities statute.

Types of Enforcement Actions

  • Denial — Refusing an initial application for registration. Requires prior notice and opportunity for hearing.
  • Suspension — Temporarily halting an existing registration. Requires prior notice and opportunity for hearing. Maximum duration is typically 1 year unless renewed.
  • Revocation — Permanently terminating a registration. Requires prior notice and opportunity for hearing. The most severe administrative sanction.
  • Cancellation — A non-punitive action for situations where the registrant is deceased, mentally incompetent, cannot be located, or no longer exists. No hearing required because it is not a penalty.
  • Withdrawal — Initiated by the registrant (not the Administrator). Becomes effective 30 days after filing unless the Administrator institutes a revocation or suspension proceeding.
  • Cease-and-Desist Order — Directs a person to stop engaging in a particular activity. Can be issued summarily (without prior hearing) when delay would be detrimental.
  • Summary Suspension (Stop Order) — An emergency action to suspend a registration or halt a securities offering immediately, without prior notice. The Administrator must promptly schedule a hearing afterward.

Grounds for Enforcement Action

The Uniform Securities Act enumerates specific grounds upon which the Administrator may deny, suspend, or revoke a registration. These grounds include: filing an application containing a material misstatement or omission; having been convicted of any securities-related misdemeanor or any felony within the past 10 years; being subject to a currently effective order of another state, the SEC, or a self-regulatory organization (SRO) such as FINRA; being enjoined by a court from engaging in securities-related activity; engaging in dishonest or unethical business practices; being insolvent (for broker-dealers, not for investment advisers); failing to meet qualification requirements such as examinations or minimum financial standards; and failure to reasonably supervise agents or investment adviser representatives. It is essential to note that the Administrator may not base a denial, suspension, or revocation solely on the basis that the applicant lacks experience—lack of experience alone is never a sufficient ground.

⚠

EXAM TIP

A favorite Series 65 test question: 'Can the Administrator deny a registration based solely on lack of experience?' The answer is always no. The Administrator may, however, condition registration upon the applicant passing an exam or meeting other qualification requirements. Distinguish between outright denial (not permitted for lack of experience) and conditional registration (permitted).

SECTION 5

Penalties & Liabilities — A Detailed Breakdown

Violations of state securities laws can result in three categories of consequences: administrative sanctions (imposed by the Administrator), criminal penalties (imposed by a court upon prosecution), and civil liabilities (recoverable through private lawsuits by injured investors or by the state). Understanding the distinctions among these categories—including who can impose them, what the maximum penalties are, and what the statute of limitations is—forms the crux of this topic for the Series 65 exam.

THREE CATEGORIES OF CONSEQUENCESADMINISTRATIVEImposed by:AdministratorActions include:• Deny registration• Suspend registration• Revoke registration• Cancel registration• Cease-and-desist order• Summary (stop) ordersHearing required?Yes (prior notice) exceptfor summary ordersJudicial review?Yes — appeal to courtwithin 60 days of orderCRIMINALImposed by:Court (after prosecution)Penalties:• Fine up to $5,000• Prison up to 3 years• Or bothStatute of limitations:5 years from violationWho can prosecute?State attorney general orcounty prosecutor (notthe Administrator directly)Defense:No knowledge of rule/orderCIVILImposed by:Court (via private lawsuit)Remedies:• Rescission (return of purchase price + interest)• Damages• Attorney fees• Court costsStatute of limitations:Earlier of 3 years fromsale or 2 years fromdiscovery of violationWho can sue?Injured investor (buyer)or the Administrator
Side-by-side comparison of the three categories of consequences under the USA. Note the differing bodies that impose each type and the distinct statutes of limitations: administrative actions have no fixed statute; criminal penalties have a 5-year limit; and civil liabilities follow a 3-year/2-year rule.

Civil Liability Details

Under the USA, a buyer of securities sold in violation of registration requirements or through fraud has the right to rescission—the right to return the security and recover the purchase price plus interest from the date of purchase, minus any income received on the security. If the buyer no longer owns the security, the buyer can recover damages equal to what would have been recovered through rescission. The seller may raise an affirmative defense by demonstrating that the seller did not know, and in the exercise of reasonable care could not have known, of the untruth or omission. The statute of limitations for civil liability actions is the earlier of 3 years after the sale or 2 years after discovery of the violation—whichever comes first.

SECTION 6

Worked Example — Enforcement Action Analysis

Scenario: Fraudulent Investment Adviser Representative

  1. 1

    Step 1 — Identify the Facts

    Marcus, a registered investment adviser representative (IAR) in State X, sold securities to several clients using a fabricated track record. He claimed his model portfolio had returned 25% annually for the past five years, when in fact no such portfolio existed. An investor, Sarah, purchased $50,000 worth of securities based on Marcus's misrepresentation. Six months later, the securities are worth $35,000, and Sarah discovers the fraud.
  2. 2

    Step 2 — Determine Administrator Authority

    The Administrator of State X has jurisdiction because Marcus is registered in State X and conducted the fraudulent activity within the state. The Administrator can investigate Marcus's conduct by issuing subpoenas for Marcus's records and testimony. The Administrator can also take administrative action against Marcus's registration.
    Administrator has full jurisdiction over Marcus.
  3. 3

    Step 3 — Identify Available Enforcement Actions

    The Administrator may: (1) issue a summary suspension of Marcus's registration if delay would cause harm to additional investors; (2) after notice and hearing, revoke Marcus's registration; (3) issue a cease-and-desist order directing Marcus to stop soliciting clients; and (4) refer Marcus to the state attorney general for criminal prosecution. The Administrator may also seek a court injunction to prevent Marcus from dissipating assets.
    Multiple administrative actions available; criminal referral appropriate.
  4. 4

    Step 4 — Determine Criminal Penalties

    If the state attorney general prosecutes and a court finds Marcus guilty, he faces a maximum fine of $5,000 per violation and/or imprisonment of up to 3 years. Because he defrauded multiple clients, each transaction could constitute a separate violation, resulting in cumulative penalties. The statute of limitations for criminal prosecution is 5 years from the date of each violation.
    Criminal: Up to $5,000 fine and/or 3 years per violation.
  5. 5

    Step 5 — Determine Sarah's Civil Remedies

    Sarah may sue Marcus (and potentially his employing investment adviser firm under a failure-to-supervise theory) for rescission. She is entitled to recover her $50,000 purchase price plus interest from the date of purchase, minus any income she received from the securities. Because she still holds the securities, she would tender them back in exchange for the purchase price plus interest. She must file her civil action within the earlier of 3 years from the sale or 2 years from discovery of the fraud. Since she discovered the fraud 6 months after the sale, she has 2 years from discovery to file.
    Civil: Sarah recovers $50,000 + interest − income received. Deadline: 2 years from discovery.

SECTION 7

Comparing Administrative, Criminal, and Civil Actions

FeatureAdministrativeCriminalCivil
Who initiates?AdministratorState prosecutor (AG or county)Injured investor or Administrator
ForumAdministrative hearingCriminal courtCivil court
Burden of proofPreponderance of evidenceBeyond a reasonable doubtPreponderance of evidence
Possible outcomesDeny/suspend/revoke/cancel; cease-and-desistFine up to $5,000; prison up to 3 yearsRescission; damages; interest; attorney fees
Statute of limitationsNone specified (ongoing authority)5 years from violationEarlier of 3 yrs from sale or 2 yrs from discovery
Hearing required?Yes (except summary orders)Yes (trial)Yes (trial)
Can Administrator impose directly?YesNo — must refer to prosecutorNo — must petition court

Comparison of the three enforcement tracks under the Uniform Securities Act

✦

KEY TAKEAWAY

The Administrator's direct enforcement power is analogous to a corporate manager's authority to discipline employees—the manager can issue warnings, place someone on suspension, or terminate them, but the manager cannot send them to jail. Only the legal system (courts) can impose incarceration or order monetary damages. Similarly, the Administrator can deny, suspend, or revoke registrations and issue cease-and-desist orders, but criminal prosecution and civil damages require court involvement. This distinction between administrative authority and judicial authority is a recurring theme on the Series 65 exam.

SECTION 8

Connection to Federal Regulation and Advanced Concepts

State Administrator authority operates within a larger ecosystem that includes federal regulation by the SEC and self-regulatory organization (SRO) oversight by FINRA. The relationship between these regulatory layers is critical for Series 65 candidates to understand, particularly because the National Securities Markets Improvement Act of 1996 (NSMIA) significantly reshaped the division of authority. NSMIA preempted state registration requirements for 'covered securities' (those listed on national exchanges or issued by registered investment companies) and for 'federal covered advisers' (those with $100 million or more in assets under management who must register with the SEC). However, a critical nuance that frequently appears on the exam is that NSMIA did not preempt the state Administrator's anti-fraud enforcement authority. This means the Administrator retains the power to investigate and prosecute fraud involving covered securities and federal covered advisers, even though those entities are exempt from state registration.

ConceptState AdministratorSEC (Federal)
Registration of IAsState-registered IAs (< $100M AUM)Federal covered IAs (≥ $100M AUM)
Anti-fraud authorityRetained over ALL persons (including federal covered)Full authority over all registered entities
Filing requirementsMay require notice filings and fees from federal covered advisersFull registration via Form ADV
ExaminationsMay examine state-registered IAs; limited authority over federal covered IAsFull examination authority
Criminal penalties$5,000 fine / 3 years per violationUp to $5M fine / 20 years (securities fraud under federal law)

State Administrator vs. SEC: Division of regulatory authority

As you advance in your study of securities regulation, you will encounter more complex scenarios involving coordination between state and federal regulators, particularly in multi-state fraud cases and in the regulation of dual-registered adviser-broker-dealer firms. The foundational concepts covered here—the scope of Administrator authority, the distinction between administrative and judicial sanctions, and the preservation of state anti-fraud power post-NSMIA—serve as essential building blocks for understanding those advanced topics.

SECTION 9

Practice Problems

Question 1: CONCEPTUAL

An investment adviser representative in State Y has been registered for only 4 months and has no prior industry experience. The state Administrator is concerned about the representative's lack of qualifications. Can the Administrator revoke the representative's registration solely on the basis of lack of experience? Explain your reasoning.
Show answer
No, the Administrator cannot deny, suspend, or revoke a registration solely on the basis of lack of experience. Under the Uniform Securities Act, lack of experience is explicitly excluded as a standalone ground for these actions. However, the Administrator may impose conditions on the registration, such as requiring the representative to pass additional examinations, work under closer supervision, or limit the types of advisory services provided. The key distinction is between using lack of experience as the sole basis for punitive action (not permitted) versus using it as a reason to condition registration (permitted). This principle exists to prevent the Administrator from creating unreasonable barriers to entry while still preserving the ability to ensure minimum competency.

Question 2: BASIC CALCULATION

An investor purchased $80,000 of securities from an unregistered broker-dealer on January 1. The investor received $2,000 in dividends during the holding period. On July 1 (6 months later), the investor discovers the violation and seeks rescission. Assuming a statutory interest rate of 6% per annum, what is the maximum amount the investor can recover through a civil action?
Show answer
Under the rescission remedy, the investor is entitled to recover the purchase price ($80,000) plus interest from the date of purchase, minus any income received. Interest for 6 months at 6% per annum on $80,000 equals $80,000 × 0.06 × (6/12) = $2,400. The investor received $2,000 in dividends. Therefore, the maximum recovery is $80,000 + $2,400 − $2,000 = $80,400. The investor would return (tender) the securities to the seller and receive $80,400 in return. This calculation illustrates the USA's intent to restore the investor to the economic position they would have occupied had the transaction never occurred, adjusted for the time value of money.

Question 3: INTERMEDIATE

The state Administrator of State Z receives a complaint alleging that a registered investment adviser is commingling client funds with the firm's own operating funds and may be on the verge of insolvency. Several clients have large account balances at risk. What enforcement actions are available to the Administrator, and which can be taken without prior notice to the adviser? What are the procedural requirements?
Show answer
The Administrator has several options. First, the Administrator can issue a summary (stop) order immediately suspending the adviser's registration without prior notice or hearing, because the alleged commingling of funds and potential insolvency create an imminent risk of irreparable harm to clients. Second, the Administrator can issue a cease-and-desist order directing the adviser to stop commingling funds. Third, the Administrator can subpoena the adviser's financial records and the testimony of firm principals as part of a formal investigation. Fourth, the Administrator can refer the matter to the state attorney general for criminal prosecution if the commingling constitutes fraud or theft. The summary suspension can be imposed immediately, but the Administrator must then promptly provide notice and schedule a hearing—the adviser has a right to a post-order hearing. If after the hearing the Administrator determines the violations occurred, the Administrator may issue a final order of revocation. Throughout this process, the adviser retains the right to judicial review of any final order by filing an appeal in court within 60 days.

Question 4: APPLIED

A federal covered investment adviser (registered with the SEC) sends its investment adviser representatives into State A to solicit clients. One IAR makes material misrepresentations about the firm's performance to several State A residents. The Administrator of State A wants to take action. What authority does the Administrator have over the federal covered adviser and its IAR, given the NSMIA preemption? What limitations exist?
Show answer
Despite NSMIA's preemption of state registration requirements for federal covered advisers, the Administrator of State A retains full anti-fraud enforcement authority. The Administrator can investigate the fraudulent conduct, subpoena records and testimony, issue cease-and-desist orders to the IAR, and refer the matter for criminal prosecution. With respect to the IAR specifically, IARs are typically subject to state registration even when their employing adviser is federal covered, so the Administrator may take registration-related actions (deny, suspend, or revoke) against the IAR's state registration. However, the Administrator cannot require the federal covered adviser firm itself to register with the state, cannot impose additional state-level record-keeping requirements beyond what NSMIA permits, and cannot revoke the firm's registration because the firm is registered with the SEC, not the state. The Administrator may, however, require a notice filing and consent to service of process from the federal covered adviser. This scenario illustrates the critical post-NSMIA principle: preemption eliminates redundant registration but preserves the state's power to combat fraud.

Question 5: CRITICAL THINKING

Consider a situation where a broker-dealer's agent in State B is convicted of a securities-related misdemeanor in State C. The conviction is now 8 years old, and the agent has had no subsequent violations. The Administrator of State B is reviewing the agent's application for renewal of registration. Analyze whether the Administrator can deny the renewal based on this conviction. What factors must the Administrator consider, and what procedural steps must be followed? Could the outcome differ if the conviction had occurred 12 years ago?
Show answer
Under the Uniform Securities Act, the Administrator may deny, suspend, or revoke a registration if the applicant has been convicted of any securities-related misdemeanor within the past 10 years (or any felony, regardless of when it occurred). Since the securities-related misdemeanor conviction is 8 years old, it falls within the 10-year lookback window, and the Administrator may use it as a ground for denial of the renewal. However, the Administrator must still follow due process: the agent must receive prior notice of the proposed denial, the specific grounds (the conviction), and the opportunity for a hearing. At the hearing, the Administrator should consider mitigating factors such as the age of the conviction, the agent's conduct since then, the severity of the original offense, and any remedial steps taken. The Administrator's decision must be based on written findings of fact and conclusions of law, and the agent has the right to appeal to a court within 60 days. If the conviction had occurred 12 years ago, the analysis changes significantly: a 12-year-old misdemeanor falls outside the 10-year lookback period, and the Administrator could not use it as a basis for denial unless the conviction was for a felony (for which there is no time limit). This distinction between misdemeanors (10-year lookback) and felonies (no lookback limit) is a frequently tested concept on the Series 65 exam.

SUMMARY

Summary — State Administrator Authority, Enforcement Actions, and Penalties

Summary

The state Administrator is the cornerstone of state-level securities regulation, possessing rulemaking, investigative, and enforcement authority under the Uniform Securities Act. The Administrator can deny, suspend, revoke, or cancel the registration of broker-dealers, agents, investment advisers, investment adviser representatives, and securities. Cancellation is non-punitive (for missing persons or defunct entities), while denial, suspension, and revocation require prior notice and opportunity for hearing. Summary (stop) orders are the exception, available when delay would cause irreparable harm, but a post-order hearing must follow promptly.

Violations of state securities laws can lead to three tracks of consequences: administrative sanctions imposed directly by the Administrator, criminal penalties of up to $5,000 and/or 3 years imprisonment per violation (imposed by courts, with a 5-year statute of limitations), and civil liabilities including rescission, damages, interest, and attorney fees (statute of limitations: earlier of 3 years from sale or 2 years from discovery). The Administrator cannot impose jail sentences or grant injunctions directly—these require court action. Remember that lack of experience alone is never grounds for denial or revocation, and that NSMIA preserved state anti-fraud enforcement authority even over federal covered advisers and covered securities.

Varsity Tutors • Series 65 • Identify Regulatory Enforcement Actions — Identify state Administrator authority, enforcement actions, and penalties.