Records, Messaging and Digital Communications

Regulators increasingly expect firms to capture and preserve business communications wherever they happen, which means using unapproved messaging channels for business purposes isn't just a convenience shortcut — it creates a genuine, sometimes serious, recordkeeping gap.

Understanding what counts as a business record

A business record generally includes any communication relevant to the firm's business, regardless of the specific channel or format used, which means a quick message on a personal app can carry the same recordkeeping obligation as a formal email.

Using only approved communication channels

Firms typically specify which channels are approved for business communications precisely because those channels have the recording and retention capability needed to meet recordkeeping obligations — unapproved channels usually don't.

Meeting retention and searchability requirements

Records need to be retained for the required period and remain genuinely searchable and retrievable, not simply stored somewhere in a form that would be impractical to actually access if needed.

Supervision and handling breaches

Ongoing supervision of communication practices helps catch drift toward unapproved channels before it becomes routine, and any identified breach needs prompt escalation and remediation rather than being quietly overlooked.

Worked Example

Worked example: A relationship manager finds it more convenient to discuss a client matter over a personal messaging app rather than the firm's approved system, since the client already uses that app regularly. Even though the conversation is business-relevant, it now exists outside the firm's recordkeeping system entirely. The correct approach is to conduct all business-relevant communication through approved channels only, regardless of a client's own channel preference, and to explain this requirement to the client if needed.

Key Takeaways

• Business records obligations apply based on content and relevance, not just the channel used.
• Approved channels exist because they have the recording and retention capability unapproved channels lack.
• Records need to remain genuinely searchable and retrievable, not just stored somewhere.
• Ongoing supervision catches channel drift early, and breaches need prompt escalation, not quiet handling.

Common Pitfalls to Avoid

A common pitfall is assuming a message is exempt from recordkeeping simply because it feels informal or was sent quickly. Another is failing to escalate a known instance of unapproved channel use because it seems minor or one-off.

Building This Into Team Practice

A single training session rarely changes behaviour on its own. For all regulated staff, "Records, Messaging and Digital Communications" works best when it's reinforced through short, regular refreshers rather than treated as a one-off module — especially since the underlying subject matter (business records, approved channels, retention, supervision, and breaches) tends to evolve as new typologies, products and regulatory expectations emerge. Teams that set aside time to discuss real, anonymised cases from their own environment alongside the course content consistently retain the material better than those who complete it in isolation. Managers can reinforce this further by referencing the course's own scenarios in team meetings and by making it clear that raising a genuine concern is treated as good practice, not an inconvenience.

Why This Belongs in a Structured CPD Programme

Financial crime and conduct rules don't stand still, and neither should training. Embedding this course within a wider, structured CPD programme — rather than delivering it as an isolated annual requirement — gives all regulated staff the chance to build genuine capability over time: to be able to use approved channels and preserve complete, searchable business records, and to keep that capability current as the environment around them changes. Learnsignal designs its compliance library so that individual courses like this one connect naturally into a broader learning pathway, letting firms track completion, refresh knowledge on a sensible cycle, and evidence a genuinely proportionate training programme rather than a box-ticking exercise.

How This Fits Into a Broader Compliance Programme

This course closes the loop on the data and records lifecycle covered across this cluster — even the best data protection and classification practices are undermined if business-relevant conversations happen entirely outside the systems designed to capture them.

Frequently Asked Questions

Does this apply even to a quick, informal message about a client matter?

Yes — relevance to the firm's business, not formality or length, is generally what determines whether a communication is a business record.

What should I do if a client insists on using an unapproved channel?

Explain that business communications need to happen through approved channels and redirect the conversation there, escalating if the client continues to insist.

Why does searchability matter as much as simply retaining records?

Because a record that exists but can't practically be found or retrieved when needed doesn't actually satisfy the underlying purpose of recordkeeping obligations.

How long does the "Records, Messaging and Digital Communications" course take to complete?

This is an interactive foundational course designed for a minimum of 30 minutes, with the exact length depending on the pace of the individual learner and how much of the practice and assessment content they engage with — some learners will comfortably spend longer working through the scenarios in detail.

This connects to data classification, retention and secure disposal and information security and cyber hygiene. Learnsignal's CPD-accredited compliance courses cover digital communications conduct in full.