SEC Exam Priorities 2026: AI-Washing, AI Trading Systems, and Broker-Dealer Obligations
Target Audience: Compliance Officers (Financial), General Counsel, CISOs (Financial)
Category: Regulatory / Financial Services
Evidence Tier: Secondary Verified (SEC public statements, exam priorities)SEC
Confidence Level: High (official SEC guidance)
Executive Summary
The SEC’s 2026 examination priorities place artificial intelligence at center stage—specifically “AI-washing” (misleading claims about AI capabilities), AI-driven trading systems, and broker-dealer obligations for AI use. Registered investment advisers (RIAs), broker-dealers, and market participants face heightened scrutiny.
This article provides: Analysis of SEC’s AI-related exam priorities | Definitions of AI-washing and enforcement risk | Compliance obligations for AI trading systems | Documentation requirements for examinations
The 2026 Exam Priorities: AI at the Forefront
The SEC Division of Examinations (formerly OCIE) released its 2026 priorities in October 2025. For the first time, AI appears as a standalone priority category.
| Priority Area | What SEC Is Examining |
|---|---|
| AI-Washing | Misleading claims about AI capabilities, use, or integration |
| AI Trading Systems | Algorithmic trading, best execution, risk controls |
| Broker-Dealer AI Use | Supervision, recordkeeping, conflict disclosure |
| RIAs Using AI | Fiduciary duties, disclosure, compliance programs |
AI-Washing: The New Greenwashing
What Is AI-Washing?
Definition: Exaggerated, misleading, or unsubstantiated claims about a firm’s use, capabilities, or integration of artificial intelligence.
Examples:
- Claiming an investment strategy is “AI-powered” when simple rules-based automation is used
- Marketing an “AI trading bot” without disclosing significant human oversight
- Stating an AI model “optimizes returns” without performance data or limitations
SEC’s Stated Concerns
From public statements by SEC leadership (including Chair Gary Gensler and Division Director Richard Best):
| Concern | Regulatory Basis |
|---|---|
| Investors cannot evaluate unsubstantiated AI claims | Securities Act anti-fraud provisions (Rule 10b-5) |
| AI capabilities are often overstated | Marketing rule (Rule 206(4)-1) for RIAs |
| Conflicts of interest are not disclosed | Advisers Act fiduciary duty |
Enforcement Risk
| Violation | Potential Penalty |
|---|---|
| Material misrepresentation of AI capabilities | Civil penalties, disgorgement, injunctions |
| Omission of AI-related conflicts | Suspension, bar, fines |
| Inadequate AI risk disclosures | Examination findings, remediation orders |
The SEC is treating AI-washing with the same enforcement lens as greenwashing. Firms with unsubstantiated AI claims will be pursued.
AI Trading Systems: Broker-Dealer Obligations
What the SEC Is Examining
| Examination Focus | What SEC Staff Will Request |
|---|---|
| Algorithm design and testing | Development documentation, test results, change logs |
| Risk controls | Pre-trade checks, kill switches, position limits |
| Best execution | Comparative analysis of AI vs. non-AI execution |
| Supervision | Supervisory procedures, review frequency, exception reports |
Key Compliance Requirements
For Broker-Dealers Using AI Trading Systems:
| Requirement | Citation | Implementation |
|---|---|---|
| Best execution | SEC Rule 15c3-5 (Market Access Rule) | Document AI trading algorithm’s execution quality compared to alternatives |
| Supervisory controls | FINRA Rule 3110 | Designated supervisor with authority to disable AI trading |
| Recordkeeping | SEC Rule 17a-3 and 17a-4 | Retain algorithm versions, parameters, trade decisions |
| Risk management | FINRA Rule 3110.09 | Regular testing of risk controls, kill switches |
For RIAs Using AI for Investment Advice:
| Requirement | Citation | Implementation |
|---|---|---|
| Fiduciary duty | Advisers Act Section 206 | Disclose AI limitations, conflicts, and oversight |
| Compliance program | Rule 206(4)-7 | Include AI-specific policies and procedures |
| Books and records | Rule 204-2 | Retain AI recommendations, inputs, outputs |
Documentation Required for SEC Examination
For AI-Washing Reviews
| Document | Purpose |
|---|---|
| Marketing materials with AI claims | Verify substantiation |
| Technical documentation of AI capabilities | Match claims to actual functionality |
| Performance data for AI-driven strategies | Validate “AI-powered” claims |
| Limitations and risk disclosures | Ensure adequate disclosure of AI failures |
For AI Trading Systems
| Document | Purpose |
|---|---|
| Algorithm development and testing records | Demonstrate due diligence |
| Risk control testing results | Validate kill switches and limits |
| Best execution analysis | Compare AI to non-AI execution |
| Supervisory review logs | Show ongoing oversight |
| Exception reports | Identify and investigate anomalies |
For RIAs Using AI
| Document | Purpose |
|---|---|
| Form ADV disclosures (including AI use) | Client notification |
| Compliance manual (AI policies) | Internal governance |
| AI model inventory | Know what AI is used |
| Vendor due diligence for third-party AI | Supply chain risk management |
Enforcement Trends (2025-2026)
| Action | Date | Relevance |
|---|---|---|
| SEC charges investment adviser for false AI claims | September 2025 | First AI-washing enforcement action |
| FINRA fines broker-dealer for inadequate AI trading supervision | January 2026 | Supervision failures around algorithmic trading |
| SEC releases Risk Alert: “AI Compliance for RIAs” | February 2026 | Guidance on examination expectations |
| OCIE (now Division of Examinations) adds AI priority | October 2025 | Formalizes AI as exam focus |
📌 Notably Absent
The SEC has not yet issued formal rulemaking specifically for AI (unlike the EU AI Act). Current enforcement relies on existing securities laws applied to AI contexts. This may change in 2026-2027.
No AI-washing enforcement actions have resulted in criminal charges (all civil as of April 2026). However, referrals to DOJ remain possible for egregious fraud.
Actionable Compliance Checklist
Immediate (Next 30 Days)
| Action | Owner |
|---|---|
| Review all marketing materials for unsubstantiated AI claims | CMO + Legal |
| Document technical capabilities for every AI claim | AI/ML Team |
| Inventory all AI systems used in trading or advice | Compliance |
| Update Form ADV (if RIA) to disclose AI use | CCO |
Medium-Term (60-90 Days)
| Action | Owner |
|---|---|
| Implement AI trading supervision procedures | Trading Compliance |
| Test AI trading risk controls (kill switches, limits) | Risk Management |
| Establish AI-washing substantiation process | Legal + Marketing |
| Conduct AI compliance training for supervised persons | CCO |
Long-Term (6+ Months)
| Action | Owner |
|---|---|
| Develop AI model risk management framework (SR 11-7 alignment) | Risk |
| Prepare for potential SEC AI rulemaking | Legal + Advocacy |
| Integrate AI compliance into annual review | CCO |
The Bottom Line for Financial CISOs and CCOs
The SEC is examining AI with intensity previously reserved for cybersecurity and crypto.
Three non-negotiable actions:
- Substantiate every AI claim – Marketing, client communications, and regulatory filings
- Document AI trading controls – Testing, supervision, and best execution analysis
- Disclose AI use and limitations – Form ADV, client agreements, and risk disclosures
If you cannot substantiate an AI claim today, remove it before the SEC exam request arrives.
Discover more from ODA3 Institute | AI Security Institute
Subscribe to get the latest posts sent to your email.