Proper record keeping is the foundation of FFL compliance. Whether you are a standard firearms dealer or an SOT handling NFA transfers, understanding what records to keep and for how long can mean the difference between a clean ATF inspection and serious violations. This guide covers everything FFLs need to know about record keeping, with special attention to fingerprint documentation.
In This Guide
Required FFL Records
Every FFL must maintain specific records as mandated by 18 U.S.C. 923(g) and 27 CFR Part 478. The core records include:
Acquisition and Disposition Records
- A&D Book: Bound book or approved electronic format documenting every firearm acquired and disposed
- Manufacturer/Importer: Make, model, serial number, type, caliber/gauge
- Acquisition: Date, name, address of person or business from whom acquired
- Disposition: Date, name, address of transferee, Form 4473 number
Transaction Records
- ATF Form 4473: Firearms Transaction Record for each transfer
- NICS Records: Background check transaction numbers
- Multiple Sales Forms: ATF Form 3310.4 for multiple handgun sales
- Theft/Loss Reports: ATF Form 3310.11 within 48 hours
SOT-Specific Records
Class III dealers handling NFA items have additional requirements:
- NFA Special (Occupational) Registry documentation
- Form 3 transfer records (dealer-to-dealer)
- Form 4 transfer records (to individuals/trusts)
- Customer fingerprint and photo documentation
- Trust documents and responsible person lists
Customer Fingerprint Retention
If your FFL provides fingerprinting services for NFA customers, you should implement a fingerprint record retention policy.
What to Keep
- EFT File Records: Log of EFT files generated for customers
- FD-258 Copies: Scans or copies of cards processed
- Customer Authorization: Signed consent for fingerprint collection
- Service Records: Date, customer name, NFA item being transferred
Retention Period
While ATF does not mandate a specific retention period for dealer-provided fingerprinting services, best practices suggest:
- Minimum 5 years: Aligns with statute of limitations for most federal firearms offenses
- Match NFA retention: Keep as long as you retain related Form 4 records
- Customer requests: May need to provide copies for additional transfers
Best Practice: Maintain a separate log linking customer fingerprint records to specific Form 4 submissions. This demonstrates due diligence during ATF inspections.
Privacy Considerations
Fingerprints are sensitive biometric data. Implement appropriate safeguards:
- Secure storage (encrypted if electronic)
- Limited access to authorized personnel
- Clear destruction policy when retention period expires
- Customer notification of retention practices
A&D Book Requirements
The Acquisition and Disposition book is the backbone of FFL record keeping. Every firearm must be logged.
Required Information
- Acquisition: Date, manufacturer, importer, model, serial number, type, caliber/gauge, source name and address
- Disposition: Date, transferee name and address, Form 4473 reference number
- NFA Items: Additional notation of NFA classification and form numbers
Timing Requirements
- Log acquisitions by close of next business day
- Log dispositions within 7 days of transfer
- Commercial shipments: Log within 15 days of receipt
Correction Procedures
Errors happen. The correct way to fix them:
- Draw single line through error (must remain legible)
- Write correction nearby with date and initials
- Never use white-out or make entries illegible
- Electronic systems must maintain audit trail
Form 4473 Retention
ATF Form 4473 has specific retention requirements that every FFL must follow.
Retention Period
- Completed Transfers: 20 years minimum from date of sale
- Denied Transfers: 5 years from date of denial
- Business Discontinuation: All records sent to ATF Out-of-Business Records Center
Storage Requirements
- Secure location accessible only to authorized personnel
- Protected from fire, water, and environmental damage
- Organized for quick retrieval during inspection
- Chronological or numerical order recommended
Warning: Lost or destroyed Form 4473 records can result in license revocation. Implement backup procedures, especially for electronic records.
Electronic vs Paper Records
ATF allows electronic record keeping, but specific requirements must be met.
Electronic Record Requirements
- Data Integrity: System must prevent unauthorized alterations
- Audit Trail: All changes logged with timestamps
- Accessibility: Records viewable during business hours
- Hard Copy Capability: Must produce paper copies on demand
- Backup Systems: Regular backups stored securely off-site
Approved Electronic Systems
Several commercial systems meet ATF requirements:
- FastBound
- Orchid Advisors eBound
- AcuSport AIM
- Custom systems meeting 27 CFR 478.125 requirements
Hybrid Approach
Many FFLs use both electronic and paper:
- Electronic A&D book for daily operations
- Paper Form 4473 (original signatures required)
- Scanned backups of all paper documents
- Electronic fingerprint records (EFT files)
ATF Inspection Readiness
Being prepared for ATF compliance inspections protects your license and demonstrates professionalism.
What Inspectors Review
- A&D book accuracy and completeness
- Form 4473 completion and retention
- Physical inventory reconciliation
- NFA registry compliance (for SOTs)
- Multiple sale reports
- Theft/loss reporting
Preparation Checklist
- Monthly: Reconcile A&D book with physical inventory
- Quarterly: Review Form 4473 files for completeness
- Annually: Complete inventory audit
- Ongoing: Correct errors promptly and properly
During the Inspection
- Provide a private workspace for the inspector
- Have all records organized and accessible
- Answer questions honestly and directly
- Take notes on any findings or recommendations
- Request copies of any violation notices
Pro Tip: Conduct internal audits using the same checklist ATF uses. The ATF Industry Operations Inspector (IOI) Training Manual outlines exactly what they look for.
Record Keeping Best Practices
For Standard FFLs
- Enter transactions same day when possible
- Use consistent formatting throughout records
- Train all employees on proper procedures
- Implement daily closing procedures to verify entries
For SOT Dealers
- Maintain separate NFA transaction log
- Keep copies of all eForms submissions
- Document customer fingerprint services provided
- Track Form 3 and Form 4 approval dates
- Organize trust documents by customer
Offering Fingerprinting Services to Customers?
SlapEFT provides fast, affordable FD-258 to EFT conversion for your NFA customers. Partner with us for streamlined compliance.
Learn More About SlapEFT