Book a demo
Buy Template
This guide is for financial advisors looking to go independent, existing RIA firms expanding into the state, and compliance officers who need to manage Pennsylvania's specific requirements. What you'll learn here covers the complete registration process, every fee you'll need to pay, and the ongoing RIA compliance requirements that Pennsylvania actually enforces (not just what's written in the rulebook).
In Pennsylvania, RIAs are regulated by the Pennsylvania Department of Banking and Securities (DoBS). The primary divisions handling registration and oversight are the Securities Registration Office and the Bureau of Securities Compliance and Examinations. But what matters more than the org chart is understanding how these regulators actually operate.
The national environment for financial advice is experiencing some pretty significant growth right now. The industry reached record highs in 2024, with total assets under management surging 12.6% to $144.6 trillion, while the number of clients served increased by 6.8% to 68.4 million. Pennsylvania reflects this demand acutely. As of mid-2024, the state's regulator oversees 4,049 investment advisers and notice filers, along with 25,267 individual Investment Adviser Representatives (IARs).
The stakes for getting this right are high, especially when you consider the generational shift happening across the industry. A report from Cerulli Associates notes that 37% of advisors in RIA channels are expected to retire within the next decade, putting 35% of all channel assets in motion. That creates opportunity, but it also means regulators are paying very close attention to new entrants.
Here's what you need to know up front: the PA DoBS has a reputation among compliance professionals for being thorough, hands-on, and quite frankly, demanding. This isn't arbitrary. When you're overseeing nearly 30,000 firms and individuals, you can't just rubber-stamp applications. Unlike some other states, PA examiners actively review filings, issue comment letters, and verify firm documentation. They treat the initial registration kind of like a mini-audit.
The first step is figuring out whether you register with the state (DoBS) or the federal Securities and Exchange Commission (SEC). This determination comes down to three factors: your Assets Under Management (AUM), where your clients are located, and whether you have a physical presence in the state.
The Dodd-Frank Act established the national framework for state versus federal registration, and it's pretty straightforward.
If your firm has under $100 million in AUM, you register with the state (PA DoBS in this case). If you're over $110 million, you register with the SEC. There's a buffer zone between $100 million and $110 million where you can choose to remain state-registered. This buffer exists to prevent firms from having to constantly switch regulators due to normal market fluctuations.
But here's something worth noting: a significant federal regulatory shift might soon force a reverse migration of firms back to state oversight. In April 2025, the SEC signaled that it has directed staff to formally evaluate increasing the AUM threshold for federal registration. The current threshold has been static at $100 million since 2012. Industry analysis anticipates a potential new threshold somewhere between $150 million and $250 million.
If this change gets adopted, any SEC-registered firm that falls below the new minimum would be forced to withdraw its federal registration and re-register with every state in which it does business. This would dramatically increase the registrant load on the PA DoBS, which would probably lead to even more stringent compliance reviews for all state-registered firms.
Pennsylvania provides a de minimis exemption for out-of-state RIAs that don't have a physical place of business in the state. The rule is explicit: an out-of-state adviser isn't required to register with the PA DoBS if it has had 5 or fewer clients residing in Pennsylvania during the preceding 12-month period.
When you acquire a sixth client in the Commonwealth, registration is immediately required. So if you're an out-of-state firm that's starting to get some traction with Pennsylvania clients, you need to be tracking this pretty carefully.
If an RIA maintains any place of business in Pennsylvania, the de minimis rule doesn't apply, and registration is required. This trigger is especially relevant now with remote work being so common.
The Pennsylvania Securities Act of 1972 specifies that an Investment Adviser Representative (IAR) must be registered if they have a "place of business" in the state. The Act defers to the SEC's definition of "place of business" for this purpose.
This creates a common compliance gap that a lot of firms miss. National data shows that the number of offices in private residences continued to rise in recent years. An IAR's home office in a Philadelphia suburb, even if they work for a large SEC-registered firm based in New York, is considered a "place of business" in Pennsylvania. That triggers registration requirements for that IAR.
The registration process in Pennsylvania isn't a simple check-the-box filing. It's an intensive, document-heavy review that basically serves as your firm's first compliance examination. So plan for this.
An RIA can't operate as an individual. You need a formal legal business structure, such as an LLC, S-Corp, or partnership, registered with the Commonwealth of Pennsylvania.
All registrations are processed through the Investment Adviser Registration Depository (IARD), an online system operated by FINRA.
Form ADV Part 1 is the online portion containing facts about your firm, its ownership, business practices, clients, and any disciplinary history. Form ADV Part 2A (often called "The Brochure") is a client-facing PDF document that must be written in plain English. It details your firm's services, fee structures, conflicts of interest, and business practices. Form ADV Part 2B (the "Brochure Supplement") details the education, professional experience, and disciplinary history of the specific individuals (IARs) at your firm who provide advice.
Each individual (including your firm's principals) who will provide investment advice must be registered as an IAR by filing a Form U4.
IAR applicants must meet Pennsylvania's examination requirements by providing proof of passing either the Series 65 (Uniform Investment Adviser Law Examination), or both the Series 7 (General Securities Representative Exam) and the Series 66 (Uniform Combined State Law Examination).
These exam requirements are typically waived for individuals who hold an active professional designation, such as a CFP, CFA, ChFC, PFS, or CIC.
The required fees must be paid through the IARD system. For 2024-2025, the firm registration fee is around $200, and each IAR registration is about $50. Annual renewal fees follow a similar structure. In September 2024, NASAA confirmed that IARD system fees for state-registered firms would continue to be waived through 2025, but the fees for IARs were not waived. This decision reflects a broader regulatory trend of focusing compliance and accountability on the individual professional, which makes sense when you're overseeing over 25,000 IARs.
This is the most critical and time-consuming part of the Pennsylvania application. The DoBS requires a comprehensive set of your firm's internal documents to be submitted with the initial application.
These documents include (but probably aren't limited to):
Financial Statements: A Balance Sheet prepared according to GAAP and dated no more than 45 days prior to the filing date. If your firm will have custody of client assets, this must be an audited Balance Sheet.
Sample Client Advisory Agreements: The specific advisory contracts your firm will use with its PA clients.
Written Supervisory Procedures (WSP) or Compliance Manual: Your firm's complete, customized compliance manual.
Code of Ethics: A formal written document outlining your firm's ethical standards.
Privacy Policy Statement: Your GLBA-compliant privacy policy.
Business Continuity Plan: A detailed plan for maintaining operations during disruptions.
Suitability Documentation: A sample of the client questionnaire or profile that will be used to determine investment suitability.
The DoBS's hands-on approach really shows up here. Examiners will cross-examine these documents against your Form ADV. For example, if the fee schedule listed in Form ADV Part 2A doesn't perfectly match the fee schedule in your sample Client Advisory Agreement, the DoBS will issue a deficiency letter. This action stops the review process, and the statutory 45-day approval clock restarts only when you fix the deficiency. This is why real-world application timelines in Pennsylvania often exceed 90 days.
For firms dealing with marketing compliance at scale, tools like Luthor can help catch these types of inconsistencies before they become regulatory issues. When you're submitting dozens of documents that all need to align perfectly, having an automated review process can save you from those deficiency letter delays.
The fee schedule for RIA and IAR registration in Pennsylvania for 2024-2025 breaks down like this:
Firm Registration Fee: approximately $200
IAR Registration Fee: approximately $50 per individual
Annual Renewal Fees: similar amounts for both firm and IAR renewals, paid at the end of each calendar year
Keep in mind that while IARD system fees for state-registered firms are currently waived through 2025, IAR fees are not waived. So if you're bringing on multiple advisors, those individual registration costs add up pretty quickly.
Getting registered is only the beginning. Pennsylvania-registered RIAs are subject to pretty stringent ongoing compliance obligations from both the state and federal levels.
All RIAs must file an annual updating amendment to their Form ADV. This is mandatory, even if no information has changed.
The deadline for this amendment is within 90 days of your firm's fiscal year-end. For most firms, this means a March 31 deadline.
All firm and IAR registrations must be renewed and paid for at the end of each calendar year through the IARD system.
Firms must maintain, enforce, and update their WSP. This isn't a set-it-and-forget-it document.
There's a legal mandate here. 10 Pa. Code § 305.011 explicitly requires an adviser to "establish, maintain and enforce written supervisory compliance procedures."
The DoBS provides an Investment Adviser Self-Inspection Checklist that basically functions as a roadmap for examinations. It confirms that your WSP must include policies and procedures for:
Code of Ethics, Privacy Policy, Computer Security Procedures (including data back-up and cloud storage), Social Media Use, Review and written approval of all new client accounts, and Prompt review and written approval of the handling of all client complaints.
This is a point of specific and heightened scrutiny right now. "Cybersecurity" is listed as a minimum topic addressed during all compliance examinations by the DoBS Bureau of Securities Compliance and Examinations.
This state-level focus creates a pretty significant dual-compliance burden. On June 3, 2024, the SEC published sweeping new amendments to Regulation S-P (the "Safeguards Rule"). These federal rules mandate a highly detailed "incident response program" and specific "breach notification rules" for all RIAs. Because the PA DoBS has already designated cybersecurity as an examination priority, its auditors will probably be the front-line enforcers, effectively auditing your firm's adherence to these new, complex federal mandates. For firms managing both state and federal requirements, SEC compliance software can help track these overlapping obligations.
When you're managing compliance documentation that needs to satisfy both state examiners and federal requirements, having an AI-powered system to review your policies for consistency can be quite valuable. The complexity here isn't just about having the right policies, it's about making sure those policies actually align with what you're telling clients and what you're filing with regulators.
Pennsylvania's requirements for record-keeping are extensive, as detailed in 10 Pa. Code § 304.012.
Required records include (among many other items) all journals and ledgers, bank statements, a memorandum of every trade order, originals of all client communications (including emails), a copy of all advertisements, and a record of every personal securities transaction by the adviser and its IARs.
These records must be maintained for 5 years (the first 2 years in your principal office) and must be "immediately producible" for examiners. That last part is important. "Immediately producible" doesn't mean you can dig through filing cabinets for an hour.
Pennsylvania requires state-registered firms to maintain a minimum net worth at all times.
Firms with Discretionary Authority need a $10,000 minimum net worth. Firms with Custody need a $35,000 minimum net worth. If you're working with RIA custodians that hold client assets, you'll need to meet that higher threshold.
If you don't meet these minimums, you may be required to post a surety bond for the deficient amount.
This dual-compliance environment isn't theoretical. Recent enforcement actions show a kind of pincer movement of regulatory pressure on Pennsylvania firms. On one side, the DoBS is policing foundational compliance, as seen in its September 18, 2025, Order to Show Cause against Pinnacle Financial Planning, LLC for violations of the PA Securities Act, and its December 20, 2024, Consent Agreement with Edward D. Jones & Co., L.P. over supervisory failures. On the other side, the SEC is actively using PA-based firms to set new precedents. On June 14, 2024, the SEC charged PA-based Twenty Acre Capital LP and levied a $100,000 fine for misleading advertising that violated the new federal Marketing Rule.
So a firm in Pennsylvania is exposed to both state-level audits of its core procedures and federal enforcement of new, complex rules. It's a lot to manage.
The legal answer: The Pennsylvania Securities Act of 1972 states that a registration becomes effective on the 45th day after a complete application is filed, assuming no denial order is active.
The practical answer: You should probably budget for 90 days or more. The 45-day statutory clock often gets reset, sometimes multiple times, by deficiency letters from the DoBS. Because the department's review is so thorough, it's pretty common for them to find minor misalignments (like between your ADV and your client agreement) which require a new filing, starting the clock over.
Yes. An out-of-state RIA with no place of business in Pennsylvania isn't required to register until it serves its sixth client in the Commonwealth. The exemption covers 5 or fewer clients.
An individual must pass either the Series 65 exam or the combination of the Series 7 and Series 66 exams. This requirement is waived for individuals holding certain professional designations like the CFP or CFA.
No. Registration is required if you have a physical office in the state or if you solicit or serve clients in the state and exceed the 5-client de minimis rule.
Pennsylvania is a large and growing market for investment advice, with over 4,000 firms and 25,000 representatives. But it's also a jurisdiction with one of the most thorough and hands-on state regulators in the country. The compliance burden is significant, requiring firms to master what amounts to a dual-threat situation: the detailed, state-specific rules of the PA DoBS (like net worth requirements and WSP mandates) and the complex, evolving framework of federal regulations (like the 2024 SEC Cyber and Marketing Rules).
Recent enforcement actions from both the DoBS and the SEC demonstrate that both agencies are actively monitoring and penalizing firms in the Commonwealth. Getting this right isn't just about avoiding fines. It's about building a firm that can operate efficiently while maintaining the trust of your clients and regulators.
The reality is that compliance documentation in Pennsylvania needs to be precise, consistent, and current across multiple touchpoints. Your Form ADV needs to match your client agreements. Your cybersecurity policy needs to satisfy both state examiners and new SEC rules. Your marketing materials need to comply with the federal Marketing Rule while also passing muster with state reviewers who are known for their thorough approach.
For firms trying to scale in this environment, manually reviewing every document for compliance can become a real bottleneck. That's where technology can make a difference. Luthor is an AI-powered tool that automatically reviews marketing assets and compliance documentation for regulatory issues. It can help you reduce the risk, effort, and time required to manage marketing compliance at scale. Instead of having compliance officers manually check every piece of content against dozens of rules, you can automate that initial review process and focus your human expertise on the genuinely complex judgment calls.
If you're launching or expanding an RIA in Pennsylvania, you need a system that can keep up with the state's demanding standards. Request demo access to see how Luthor can help your firm manage Pennsylvania's compliance requirements more efficiently.