California’s blue sky laws, codified in the Corporate Securities Law of 1968, require every offer or sale of securities in the state to be qualified with the Department of Financial Protection and Innovation (DFPI) unless the security or transaction fits a specific exemption or is preempted by federal law.1California Department of Financial Protection and Innovation. About the Corporate Securities Law of 1968 The law goes further than federal securities rules by letting the DFPI block an offering it considers unfair to investors, not just one with inadequate disclosure, and it backs that authority with civil penalties, criminal fines up to $10 million, and a private right of action for defrauded buyers.
Why California Reviews Securities Offerings on the Merits
The federal Securities Act of 1933 runs on a disclosure philosophy. Tell investors enough about the risks, and the SEC generally stays out of whether the deal is actually a good one. California is different. The DFPI can deny or suspend a qualification if it finds the offering is “not fair, just, or equitable,” the issuer doesn’t intend to conduct business honestly, or the securities would work a fraud on buyers.2California Legislative Information. California Corporations Code 25140 This is sometimes called merit review. In practice it means the DFPI can reject an offering even when the disclosure documents are technically complete.
The anti-fraud rule mirrors federal law in one key respect. It bans any offer or sale of a security made through a communication that contains a material misstatement or omits a material fact, whether that communication is written or oral.3California Legislative Information. California Code CORP 25401 So an issuer raising capital in California answers to the SEC on disclosure and to the DFPI on the overall fairness of the deal.
When Federal Law Lets You Skip California Qualification
Not every security sold in California actually needs to go through the state qualification process. The National Securities Markets Improvement Act of 1996 (NSMIA) bars states from imposing their own registration or qualification requirements on “covered securities.”4Office of the Law Revision Counsel. 15 U.S. Code 77r – Exemption From State Regulation of Securities If your offering is a covered security, you avoid the merit review, though the DFPI still has authority to investigate and prosecute fraud.
The common categories of covered securities include:
- Stocks listed or authorized for listing on the New York Stock Exchange, the Nasdaq Global Select Market, or other exchanges with comparable standards designated by the SEC.
- Shares issued by mutual funds and other investment companies registered under the federal Investment Company Act of 1940.
- Securities sold under Rule 506 of Regulation D, the most widely used federal private placement exemption. States cannot require qualification for these offerings, though they can require a notice filing and collect a fee.
- Offerings limited to buyers who meet qualified-purchaser criteria established by the SEC.
Even when a security is covered, California can still demand a notice filing and the associated fee. What you lose if you’re covered is the DFPI’s power to reject the deal on fairness grounds, not every state-level paperwork obligation.
The Three Ways to Qualify Securities With the DFPI
When a security isn’t exempt and isn’t preempted, the issuer has to qualify it with the DFPI before any offer or sale in the state.5California Department of Financial Protection and Innovation. California Corporations Code Section 25110 – Issuer Transactions There are three routes, each designed for a different situation.
Qualification by Coordination
If the issuer has already filed a registration statement with the SEC under the Securities Act of 1933, it can qualify the California offering by coordination. The issuer files a copy of the federal registration statement with the DFPI no later than five business days after the SEC filing. Qualification automatically takes effect the moment the federal registration statement becomes effective, provided no DFPI stop order is pending and the application has been on file for at least 10 days.6California Legislative Information. California Corporations Code 25111 This is the fastest path for issuers already going through federal registration.
Qualification by Notification
Notification is open to issuers that already have a class of securities registered under the Securities Exchange Act of 1934 or that are investment companies registered under the federal Investment Company Act. These issuers file an application containing information required by the DFPI’s rules, and qualification automatically becomes effective at noon on the 10th business day after filing, unless the DFPI intervenes first.7California Legislative Information. California Corporations Code 25112
Qualification by Permit
Any security can be qualified by permit, regardless of whether coordination or notification would also work. This is the broadest and most involved method. The issuer submits a detailed application, and the DFPI reviews it under the merit standard. The agency will refuse a permit unless it finds the business plan and the proposed issuance fair and equitable and the securities not likely to defraud purchasers. Small companies meeting certain criteria can file a streamlined application, but the offering has to stay within $1 million in a rolling 12-month period for the simplified path.8California Legislative Information. California Code CORP 25113
State Exemptions From Qualification
California exempts a range of securities and transactions from qualification. Government-issued securities, including U.S. Treasury and municipal bonds, are exempt because they’re backed by the issuing government. Securities issued by banks, savings and loan associations, credit unions, and insurance companies regulated under state or federal law are also outside the qualification requirement.
Nonprofits get their own carve-out under Corporations Code Section 25100(j). It covers securities issued by organizations formed exclusively for educational, charitable, religious, fraternal, or similar purposes, so long as no part of the organization’s net earnings benefits any private individual. The exemption disappears if any promoter expects to profit from a business associated with the nonprofit’s operations.9California Legislative Information. California Corporations Code 25100
The 25102(f) Private Placement Exemption
Section 25102(f) is the exemption most startups and early-stage companies rely on. It allows sales without qualification if they go to no more than 35 people total, including buyers outside California.10California Department of Financial Protection and Innovation. California Corporations Code Section 25102(f) Every buyer must either have a pre-existing personal or business relationship with the issuer or its officers, or have enough financial sophistication to evaluate the investment independently.
Two things trip people up. The 35-person cap counts all purchasers, not just those in California. And the issuer has to file a Limited Offering Exemption Notice (LOEN) with the DFPI within 15 calendar days after the first sale of a security in California.11California Department of Financial Protection and Innovation. Securities – Frequently Asked Questions and Answers Missing the filing deadline doesn’t void the exemption, but the DFPI can demand the notice and charge a fee equal to what full qualification would have cost.
Broker-Dealer and Investment Adviser Registration
Compliance with California’s blue sky laws isn’t only an issuer issue. Broker-dealers must register with both the SEC and the DFPI, passing background checks and financial competency requirements, and their individual agents have to pass FINRA qualification exams before conducting transactions in California.
Investment advisers register at either the state or federal level depending on assets under management. Firms managing less than $100 million in AUM generally register with the DFPI. At $100 million, a firm becomes eligible for SEC registration, and above $110 million SEC registration becomes mandatory.12California Department of Financial Protection and Innovation. State Licensed Investment Adviser A federally registered adviser whose AUM drops below $90 million has 180 days to de-register from the SEC and move to state registration.
Enforcement, Civil Penalties, and Stop Orders
The DFPI has broad enforcement tools. On finding a violation, it can go to superior court for an injunction, appoint a receiver over the violator’s assets, and obtain restitution or disgorgement for injured investors. In serious cases, the agency works with the California Attorney General and local prosecutors.
Civil penalties run up to $25,000 per violation through an action brought in the name of the people of California.13California Legislative Information. California Code CORP 25535 The DFPI can also issue a stop order halting a pending qualification, which effectively kills the offering before it reaches investors.
Criminal Penalties for Willful Violations
Criminal liability under Corporations Code Section 25540 requires a willful violation. Penalties split into tiers based on what was violated:
- Willfully violating any provision of the Corporate Securities Law or any DFPI rule or order carries fines up to $1 million, imprisonment for up to one year in county jail (or state prison under Penal Code Section 1170(h)), or both.14California Legislative Information. California Corporations Code 25540
- Willfully violating Sections 25400, 25401, or 25402 (fraud, market manipulation, or insider trading) jumps to fines up to $10 million and imprisonment for two, three, or five years.
- An issuer as defined in the Sarbanes-Oxley Act that willfully commits fraud faces fines up to $25 million and imprisonment for two, three, or five years.
The gap between the general tier and the fraud tier is deliberate. California treats securities fraud as fundamentally more serious than a procedural registration violation, even when both are willful.
What Defrauded Investors Can Recover
Investors don’t need to wait for the DFPI. Section 25501 creates a private right of action against anyone who violates the anti-fraud provision. The investor chooses between two remedies: rescission or damages.15California Legislative Information. California Corporations Code 25501
Rescission unwinds the transaction. The investor returns the security and recovers the purchase price plus interest at the legal rate, minus any income received on the security while holding it. Damages, available when the investor has already sold, equal the difference between the purchase price plus interest and the value of the security when the investor disposed of it, again accounting for income received.
The seller has two defenses: proving the buyer actually knew about the misstatement or omission, or proving the seller exercised reasonable care and didn’t know (and wouldn’t have known with reasonable care) about the problem. Liability can extend beyond the issuer itself to broker-dealers, corporate officers, and others involved in the transaction.
How Long Investors Have to Sue
Claims under Section 25501 run on a short clock. The investor must file suit within five years of the act constituting the violation or within two years of discovering the violation, whichever expires first.16California Legislative Information. California Corporations Code 25506 The five-year cap is absolute. An investor who doesn’t discover a fraud until six years after the sale has no remedy under Section 25501, no matter when the fraud came to light.