The SEC's Securities Lending Reporting Deadline Is Nine Days Away. Here's What Your Firm Still Needs to Build.

TL;DR

• September 28, 2026 is the compliance deadline for SEC Rule 10c-1a — the securities lending transparency reporting requirement. That is nine days from today.
• Covered persons (broker-dealers, agent lenders, custodian banks) must report securities loan data to FINRA’s SLATE system (Rule 6500 series) by end of day on the day each loan is effected or modified.
• The original January 2, 2026 deadline was extended at FINRA’s request while SLATE infrastructure was built and tested. The extension bought time for the industry — but it expires in nine days.
• FINRA disseminates certain loan data publicly the following morning. Firms that aren’t reporting correctly on September 28 will have reporting failures visible to regulators and, eventually, the market.
• If your firm hasn’t completed SLATE connectivity, tested submissions, or built exception-handling procedures, the time for orderly preparation is largely gone. Here’s what to do with the days you have.

A compliance deadline that gets extended once almost always gets treated as if it might get extended again. SEC Rule 10c-1a has that history: adopted in October 2023 under Dodd-Frank Section 984, original compliance date January 2, 2026, then extended on July 28, 2025, to September 28, 2026.

No further extension has been announced. The SEC’s July 2025 extension order was explicit that it was to allow “effective and orderly implementation” — not to signal ongoing flexibility. That deadline is nine days from today.

If your firm is a covered person under Rule 10c-1a and you haven’t completed your SLATE integration, tested your reporting, and built your exception workflow, that is an escalation item for today, not next week.

What Rule 10c-1a Actually Requires

Rule 10c-1a was adopted under the Dodd-Frank Wall Street Reform and Consumer Protection Act’s Section 984, which directed the SEC to increase transparency in the securities lending market. The securities lending market — in which beneficial owners lend shares, primarily to facilitate short selling and collateral activities — had operated for decades without any standardized public reporting of transaction economics.

The rule closes that gap by requiring transaction-level reporting to FINRA, the sole Registered National Securities Association (RNSA) designated to receive and publish securities lending data.

Who reports: Any “covered person” — broadly, any intermediary, lender, or broker-dealer that directly effects or is a party to a covered securities loan. This includes:

• Broker-dealers that borrow or lend securities on their own account or as intermediaries
• Agent lenders — custodian banks and prime brokers facilitating lending programs on behalf of beneficial owners
• Any party acting as intermediary between a beneficial owner lender and a borrower

Beneficial owners (pension funds, mutual funds, insurance companies) that lend through an agent lender are typically not the reporting party — the agent lender reports. But beneficial owners lending directly, without an agent, may be covered persons themselves.

What gets reported: Each covered securities loan, at the time it is effected or modified. Required data includes:

When it goes in: By end of day on the day the loan is effected or modified. FINRA must publicly disseminate certain specified information the following morning. That next-morning dissemination makes this real-time disclosure, not a periodic report — there is no grace period for catching up.

The FINRA SLATE System

FINRA built the Securities Lending and Transparency Engine (SLATE) under its Rule 6500 series specifically to satisfy Rule 10c-1a’s RNSA obligations. SLATE is FINRA’s reporting gateway for securities lending transactions — the technical infrastructure into which covered persons submit loan data.

FINRA has issued detailed technical specifications for SLATE connectivity, data formats, and submission protocols. FINRA’s SLATE implementation page contains the current technical requirements, and FINRA has published an FAQ addressing common implementation questions.

Connectivity to SLATE requires registration with FINRA, technical integration with FINRA’s API or file-submission interface, and pre-production testing. Firms that have not yet established SLATE connectivity as of this writing have, at most, nine business days to complete what is typically a multi-week process. That is not enough time to do it properly — which means firms in that situation need to make informed decisions about how to escalate and disclose.

Why the Extension Doesn’t Signal Further Flexibility

The July 2025 extension was FINRA’s request — not industry’s. FINRA cited its own infrastructure build timeline and the need for reporting accuracy and consistency in the market. The SEC’s order granting the extension noted that the extension was “necessary in the public interest and consistent with the protection of investors” because it would help facilitate “an effective and orderly implementation.”

That language — orderly implementation — is the SEC saying that FINRA wasn’t ready, not that covered persons hadn’t built their programs yet. The nine-month extension from January to September was for infrastructure build and accuracy testing at FINRA. Covered persons were expected to use that time to complete their own integration work.

SEC’s September 2026 examination priorities flagged books-and-records and reporting compliance as active areas. A firm that didn’t use the extension period to build SLATE integration will have a difficult conversation explaining that to an examiner who expected them to.

What Covered Persons Still Need to Do

With nine days left, the priorities are different depending on where your firm actually is:

If SLATE connectivity is complete and tested

Your remaining work is operational: confirm your reporting workflow covers all transaction types, verify your exception-handling process works, document your compliance program for Rule 10c-1a, and designate an owner for daily reporting monitoring.

On September 28, you need someone watching submissions in real time. Errors surface in SLATE feedback files. Your firm needs a documented process for receiving error feedback, correcting submissions, and escalating reporting failures that can’t be resolved same-day.

If SLATE connectivity is in progress

Stop all non-critical work and complete connectivity. Get your technical team and your FINRA relationship manager on the phone today. FINRA has a dedicated SLATE onboarding process — use it. Every day spent not reporting after September 28 is a potential reporting violation.

Document everything: when you started integration, what obstacles you encountered, and what you’ve done to resolve them. Good-faith effort and documented timeline won’t eliminate enforcement risk, but they matter in how a regulator characterizes the violation.

If you haven’t started

Escalate to senior management and legal counsel today. A firm that has not begun SLATE integration nine days before the deadline needs to make a deliberate decision — not drift past September 28 without a plan. That plan should include:

1. Assessment of whether you qualify as a covered person — get this documented so you have a defensible analysis if questioned
2. Legal advice on disclosure obligations — Rule 10c-1a violations are Exchange Act violations; the firm may have disclosure obligations
3. Preparation for an examiner question — regulators will check who was reporting and who was not

The SEC-CFTC off-channel communications enforcement wave demonstrated that regulators do not treat technology implementation challenges as a defense. The response to missing a deadline is a documented remediation plan, not an explanation of why the infrastructure was hard to build.

What Goes Wrong When Reporting Is Wrong

Rule 10c-1a creates a real-time public record. FINRA publishes certain loan data publicly by the following morning. That means reporting failures are eventually visible — not just to the SEC and FINRA, but to other market participants who can see the aggregate data.

The three reporting failure modes that matter most:

1. Late reporting. Loans not submitted by end of day create gaps in the public record. FINRA’s SLATE rules require timely submission; systematic lateness is a rule violation separate from the underlying Exchange Act obligation.

2. Incomplete or inaccurate reporting. Wrong rate, wrong collateral type, wrong securities identifier. The SEC stated at adoption that accuracy was a primary objective — providing inaccurate data undermines the transparency the rule was designed to create and is independently enforceable.

3. Coverage gaps. Not reporting certain transaction types because of an undocumented assumption that they’re excluded. The compliance analysis — which transaction types are “covered securities loans” for your firm — needs to be documented before September 28, not constructed retroactively when an examiner asks.

The FINRA 2026 regulatory oversight report emphasized documentation of supervisory processes and compliance procedures. A firm that is reporting to SLATE but has no written procedure governing how reporting happens, who reviews exception files, and how errors get corrected has a documentation problem even if the transactions are technically getting submitted.

The Data Dissemination Deadline Is March 2027

The September 28 deadline is for reporting — covered persons submitting loan data to FINRA. The data dissemination deadline, when FINRA publicly disseminates certain aggregated and individual loan information, is March 29, 2027.

That second deadline matters for a different reason. Once loan data starts flowing into SLATE at scale, there will be questions about data quality, completeness, and consistency. Firms that report correctly from September 28 will have six months of reporting history before the public dissemination begins. Firms that haven’t cleaned up their reporting by March 2027 will have reporting quality issues visible to the market.

The practical implication: September 28 is not just a compliance deadline, it’s the start of a six-month data quality window. Treat the period between September 28 and March 2027 as an audit of your own reporting accuracy.

So What?

The securities lending market has operated without standardized reporting transparency for decades. Rule 10c-1a changes that — creating a real-time public record of loan economics that didn’t exist before. The extension to September 28 gave the industry nine months beyond the original January deadline to complete SLATE integration.

That time has now expired.

Covered persons that are not reporting correctly on September 28 face Exchange Act violations, FINRA enforcement, and an examiner question they will have to answer about why they weren’t ready. Nine days isn’t enough time to build what should have been built over the last nine months — but it is enough time to escalate honestly, document what you have, and make a defensible plan.

The firms that handle the compliance risk well are the ones that don’t pretend it isn’t there.

Managing a backlog of compliance obligations, reporting deadlines, and remediation plans in a single tracker? The Issues Management Tracker includes a regulatory exam tracking module, deadline management, and an executive reporting dashboard built for teams managing 10–200 open items.