It is March 2026 renewal season. An E&O carrier returns the firm's policy application with eleven new questions tucked between the prior-year boilerplate and the pricing page: list every AI tool the firm uses; identify whether any AI tool takes action without human review (agentic AI); list every AI-related incident in the prior 24 months including hallucinations affecting recommendations, data leaks, prompt-injection attacks, and output compromise events; describe the firm's WSPs for AI use; describe the firm's IRP under Reg S-P; certify the firm has not had a Marketing Rule citation or FINRA AWC related to AI. The CCO opens her drawer for the substantiation file. The form U4 disclosure questions sitting on the firm's registered persons next year will look similar. The CFP Board's Code and Standards already do. The Investment Advisers Act fiduciary duty has not changed but the operational evidence of compliance has. This lesson maps the layers of personal accountability a registered, licensed, CFP-certificant advisor using AI in 2026 carries — Form U4, Form ADV Part 2A, CFP Code, Advisers Act fiduciary duty, FINRA Rule 4530, NAIC Model #275 for the annuity-licensed, plus the E&O carrier renewal questions every firm is seeing in 2026.

Form U4 Disclosure Questions and the AI Context

Form U4 (Uniform Application for Securities Industry Registration or Transfer) is the registration document for every individual registered with FINRA, the MSRB, an SRO, a jurisdiction, or otherwise applying to associate with a member firm. The Form U4 disclosure questions span criminal, regulatory, civil, customer complaints, financial, termination, and investigation disclosures. The Form is updated as material events occur — within 30 days of the event for most reportable items under FINRA Rule 1010 and related rules — and the registered person carries the obligation to provide and update truthful information.

The AI context surfaces in several U4 disclosure categories. Question 14E (regulatory disclosure) covers any pending investigation, charge, or proceeding by a regulator — including any AI-related SEC or FINRA inquiry. Question 14I (customer complaints, arbitrations, or civil litigation) covers any sales-practice-related allegation involving compensatory damages of $5,000 or more — including allegations of harm from AI-driven recommendations. Question 14J (termination disclosures) covers terminations after allegations of (or while under internal review for) violations of investment-related statutes, regulations, rules, or industry standards — including any termination linked to an AI-related supervisory failure or unauthorized AI use. Question 14H (compromise with creditor / bankruptcy) and Question 14L (judgment or lien) are not AI-specific but the financial impact of an AI-driven incident can create downstream financial reporting events.

The L5 Ch7 lesson on Form U4 DRP narrative drafting (AI-assisted) develops the 30-day-filing-deadline workflow, the factually-accurate / non-prejudicial / plain-English drafting standards, and the principal review and outside counsel coordination. The L1 Ch4 L3 lesson on FINRA Rule 4530 establishes the parallel firm-level reporting obligation. This lesson establishes the personal-disclosure dimension.

Form ADV Part 2A Disclosure on the Use of AI

Form ADV Part 2A (the "brochure") is the disclosure document SEC-registered (and state-registered) investment advisers must deliver to clients. By May 2026, the SEC Division of Examinations and state-level examiners increasingly probe whether Part 2A adequately discloses the firm's use of AI in advisory services. The disclosure is not formulaic — the SEC has not issued a prescriptive AI-disclosure rule — but the substantive principles flow from the existing items.

Item 4 — Advisory Business

The adviser describes its advisory business, including the types of advisory services offered. If AI tools materially shape how those services are delivered — meeting AI capturing notes, planning AI extracting tax-return data, CRM AI surfacing planning candidates, agentic AI processing RMDs — the description should reflect the actual operation. The 2024-2025 AI-washing enforcement principle applies: descriptions must be substantiable; overstating or understating AI's role is exposure.

Item 8 — Methods of Analysis, Investment Strategies, and Risk of Loss

The adviser describes the methods of analysis used to formulate investment advice. AI-driven analysis (factor models, optimization engines, ESG screening, planning candidate surfacing) is part of the method. The description should be accurate; the risks of AI use — hallucination, bias, data leakage, vendor dependency — should be appropriately disclosed proportionate to materiality.

Item 10 — Other Financial Industry Activities and Affiliations

If the firm has affiliations with AI vendors (joint ventures, equity stakes, revenue-share arrangements), those affiliations are disclosed; conflicts of interest arising from the affiliations are addressed.

Item 11 — Code of Ethics, Participation, or Interest in Client Transactions

The firm's Code of Ethics covers the firm's standards of business conduct, including AI use where material to ethics standards (NPI handling, client-confidentiality, fairness in recommendations).

Item 14 — Client Referrals and Other Compensation

If AI-driven referral relationships (Catchlight, SmartAsset, similar) involve compensation arrangements, those are disclosed.

Off-Cycle Amendment Triggers

Form ADV Part 2A is updated annually and materially-changed items trigger off-cycle (prompt) amendments. Material AI-related changes that may trigger off-cycle amendment include: introduction of a new AI tool that materially affects data handling or advisory services delivery; vendor change with materially different data-handling characteristics; a Marketing Rule citation or material AI-related enforcement action; ownership or control change at an AI vendor with material implications; addition of agentic AI capabilities that take action on client accounts. The L5 Ch7 lesson on the ADV Part 2A annual amendment workflow operationalizes the year-over-year diffing and off-cycle filing triggers.

The CFP Board's Code and Standards Applied to AI Use

The CFP Board's Code of Ethics and Standards of Conduct (effective October 2019, with subsequent updates) articulates the duties a CFP-certificant advisor owes. The framework comprises six duties (Code of Ethics) and a series of standards. The AI-relevant duties:

Duty of Care (Standard A.2)

The CFP-certificant must "act with the care, skill, prudence, and diligence that a prudent professional would exercise." Care includes the diligence to detect and correct AI bias, verify AI output before delivery, and avoid foreseeable harm from AI failures. The earlier lessons in L1 Ch5 (bias detection) and the Cardinal Rule (L1 Ch2.3) operationalize the diligence the duty requires.

Duty of Competence (Standard A.4)

The CFP-certificant must provide professional services "competently and to maintain the necessary knowledge and skill to continue to do so in those areas in which the CFP professional is engaged." AI competence — understanding what the tools do, what they cannot do, how to detect failures, and how to operate the supervisory architecture — is an evolving competence area the CFP Board explicitly references in its 2024-2025 CE guidance.

Duty of Confidentiality and Privacy (Standard A.9)

The CFP-certificant must keep client information confidential and use it only to provide professional services. The Reg S-P / GLBA / NY DFS / state framework operationalizes this; AI use that exposes NPI to unauthorized third parties breaches the duty as a CFP matter independent of the Reg S-P breach.

Other Relevant Duties (Standards on Diligence, Loyalty, Sound Professional Judgment, Disclosing Material Conflicts)

The duty of loyalty (Standard A.5), the duty to comply with the law (Standard A.6), the duty to exercise sound and objective professional judgment, and the obligation to disclose material conflicts of interest all apply through the AI lens. The CFP-certificant who uses AI must do so consistent with the Code; CFP Board's Disciplinary and Ethics Commission (DEC) processes apply when alleged violations occur.

Fiduciary Liability Under the Investment Advisers Act

The Investment Advisers Act of 1940 imposes a fiduciary duty on a registered investment adviser, articulated in the SEC's 2019 Interpretation Regarding Standard of Conduct for Investment Advisers. The duty has two components — duty of care and duty of loyalty. The duty of care requires advice in the best interest of the client based on the client's objectives, best execution, and ongoing monitoring. The duty of loyalty requires elimination or full and fair disclosure of conflicts.

Fiduciary liability under the Advisers Act flows from breach of either duty. AI use that fails to detect bias, fails to verify output, exposes NPI, surfaces conflicted recommendations, or otherwise undermines client interests is potential fiduciary breach. The SEC's enforcement framework includes the Marketing Rule, Reg S-P, the books-and-records rules, the compliance rule (206(4)-7), and the antifraud provisions of the Advisers Act (§206) — multiple regimes that can attach to a single AI incident. The SEC's 2019 Interpretation explicitly stated that the fiduciary duty cannot be waived; vendor arrangements, agentic AI, and other technology choices do not transfer the obligation.

E&O Carrier Renewal Questions on AI in 2026

Errors and Omissions insurance (the professional liability policy that covers RIAs, BDs, and individual registered persons) has materially changed its underwriting questions in 2026. The questions reflect the carrier's underwriting view that AI use is a risk factor requiring inventory, controls, and incident history. The eleven questions every CCO is seeing in 2026 renewals fall into five categories.

AI Tool Inventory Questions

List every AI tool the firm uses by name, vendor, category (meeting AI, planning AI, CRM AI, etc.), data categories processed, executed data-handling agreement status, and SOC 2 Type II report status. List every AI tool added or removed in the prior 12 months.

Agentic AI Questions

Identify whether any AI tool takes action without human review (agentic AI). If yes: list the actions, the supervisory architecture (pre-action gating, post-action review, kill-switch, supervisory log), the WSPs, and the incident history. Carriers in 2026 are introducing AI-related exclusions for agentic action without human review, mirroring the FINRA 2026 Oversight Report's heightened supervisory bar.

Incident History Questions

List every AI-related incident in the prior 24 months: hallucinations affecting recommendations, data leaks / NPI exposures, prompt-injection attacks, output compromise events, advisor unauthorized AI use, vendor-side breaches. Identify the remediation taken in each case. Identify any client complaints linked to AI use.

WSP and Controls Questions

Describe the firm's WSPs for AI use. Describe the firm's IRP under Reg S-P. Describe the firm's shadow AI detection program. Describe the training program for registered persons using AI. Provide a copy of the AI acceptable-use policy.

Regulatory History Questions

Certify the firm has not had a Marketing Rule citation or FINRA AWC related to AI in the prior 36 months. Disclose any pending SEC, FINRA, state DOI, or other regulator inquiry related to AI.

Emerging Exclusions

2026 E&O policies are introducing exclusions for: (a) intentional misuse of AI (advisor deliberately overriding controls); (b) agentic action without documented human review; (c) hallucination-driven recommendation that the firm's verification protocol should have caught; (d) Marketing Rule violations involving AI-related capability claims. The CCO should read the policy language carefully and negotiate exclusions before renewal.

The Personal Accountability Decision the Registered Person Makes Each Day

The integrated personal-accountability posture for a 2026 registered, licensed CFP-certificant advisor using AI is the following set of working principles, applied every day at every AI interaction.

First, the AI does not own the recommendation. The registered person does. The Reg BI Care Obligation, the Advisers Act fiduciary duty, the CFP Code Standard A.2, and the NAIC Model #275 (for the annuity-licensed) all attach at the moment of recommendation to the registered person — not to the tool. Second, every AI-touched workflow has a regulatory regime that applies, and the registered person operates with awareness of which regime governs the moment. The Marketing Rule applies to client-facing content; Reg BI applies to securities recommendations to retail customers; Reg S-P applies to NPI handling; the FINRA Rules 2210/3110/4511 apply to communications/supervision/recordkeeping for BD activity; the CFP Code applies to professional conduct; the Advisers Act fiduciary duty applies to all RIA activity. Third, the firm's WSPs, the data-classification matrix, the AI tool inventory, and the IRP exist to make the compliant choice the easy choice at the moment of action; the registered person uses them. Fourth, when a bias is detected, an NPI risk is identified, a recommendation is questioned, or an incident occurs, the registered person escalates rather than suppresses; the supervisory architecture is designed to absorb escalations and the personal-accountability posture depends on the registered person operating it.

Fifth, and most consequentially, the registered person carries the records. Form U4 disclosures, ADV Part 2A representations, CFP Board attestations, Form 4530 customer complaints (firm-level but advisor-implicated), E&O carrier renewal certifications. Each one is a place where the personal accountability is documented. The substantiation file, the production-chain retention, the supervisory log, the IRP exercise records, and the WSPs are the operational evidence — and the registered person's name is in each one.

The L1 Capstone Deliverable Restated

The L1 capstone is a one-page personal AI Use Policy. By the end of L1, the registered person can name (a) which AI tools they will use, (b) which client data categories may touch each tool, (c) the verification protocol for AI output, (d) the regulatory rules each tool implicates, and (e) the client disclosure paragraph ready to add to ADV Part 2A and the engagement letter. This lesson — and the chapter as a whole — establishes the personal accountability frame within which the policy lives. The L2-L5 sequence develops the practitioner capability that operates inside the frame. The frame is non-negotiable; the capability is the lever.

Key Takeaways

• Form U4 disclosure questions reach AI-related events: Question 14E (regulatory inquiry / investigation, including AI-related), 14I (customer complaints involving sales-practice allegations from AI-driven recommendations), 14J (termination after allegations or internal review for AI-related supervisory failure or unauthorized AI use). The 30-day filing deadline under FINRA Rule 1010 applies; L5 Ch7 develops the AI-assisted DRP narrative drafting workflow.
• Form ADV Part 2A disclosure on AI use attaches to Item 4 (advisory business), Item 8 (methods of analysis), Item 10 (affiliations), Item 11 (code of ethics), Item 14 (referrals). Material AI changes trigger off-cycle prompt amendments; L5 Ch7 develops the ADV diffing and off-cycle filing workflow.
• The CFP Board's Code and Standards applies through Duty of Care (Standard A.2), Duty of Competence (Standard A.4), Duty of Confidentiality and Privacy (Standard A.9), Duty of Loyalty (A.5), Duty to Comply with the Law (A.6), and the duties to exercise sound professional judgment and disclose material conflicts. AI competence is an evolving area the CFP Board has referenced in 2024-2025 CE guidance; DEC processes apply when violations occur.
• Fiduciary liability under the Investment Advisers Act of 1940 flows from the SEC's 2019 Interpretation — duty of care + duty of loyalty — and cannot be waived. AI vendor arrangements, agentic AI, and technology choices do not transfer the obligation. SEC enforcement may attach under the Marketing Rule, Reg S-P, books-and-records, Rule 206(4)-7, and §206 antifraud.
• E&O carrier 2026 renewal questions on AI span: tool inventory (name, vendor, category, data, agreements, SOC 2), agentic AI (actions, supervision, incidents), incident history (hallucination, leak, prompt injection, output compromise, advisor unauthorized use, vendor breaches, complaints), WSP / IRP / shadow AI / training / acceptable-use policy, and regulatory history (Marketing Rule citations, AWCs, pending inquiries). Emerging exclusions: intentional misuse, agentic without human review, hallucination the protocol should have caught, AI Marketing Rule violations.
• For the annuity-licensed advisor, NAIC Model #275 best-interest documentation and NAIC AI Model Bulletin governance expectations layer on top of Reg BI and the Advisers Act fiduciary duty, with state DOI implementation variation.
• The integrated personal-accountability posture: AI does not own the recommendation — the registered person does; every workflow has a regulatory regime; the firm's WSPs / matrix / IRP exist to make compliance easy; escalate rather than suppress; the registered person carries the records.
• The L1 capstone is the one-page personal AI Use Policy: tools, data categories, verification protocol, regulatory rules, client disclosure paragraph for ADV Part 2A and engagement letter. The L2-L5 sequence develops the practitioner capability inside this frame.