Before the federal securities laws existed, the states regulated securities. They still do. Every U.S. state has its own securities statute, its own administrator, and its own procedures — a layer that sits underneath federal law and that sponsors routinely underestimate because federal preemption is widely misunderstood as meaning “the states don’t matter.”
They matter. They just matter differently than they used to.
What preemption actually did
The National Securities Markets Improvement Act created a category of covered securities under Section 18 of the Securities Act. For securities in that category, states are preempted from imposing registration or merits review requirements.
Rule 506 securities are covered securities. That is a significant benefit: without it, an offering sold in thirty states would face thirty separate qualification processes, each with its own substantive standards and its own reviewer with authority to object to the offering’s terms.
What preemption did not remove:
- Notice filing requirements. States may require issuers to file a notice — typically a copy of the federal Form D — along with a consent to service of process.
- Fees. States may charge for those filings, and they do.
- Antifraud authority. State administrators retain full authority over fraud in connection with securities sold in their state, regardless of preemption.
- Authority over non-covered offerings. Offerings relying on exemptions other than Rule 506 — including Rule 504 — remain subject to state qualification in full.
So the model is: federal preemption removed the substantive state review for Rule 506 offerings and left an administrative filing obligation in its place. The administrative obligation is not optional and is enforced.
The mechanics
The trigger is state-specific. Filing obligations generally arise where a sale is made to a resident of that state. This means the obligation appears progressively as the investor base spreads rather than all at once at launch — a structural feature that makes it easy to miss. An offering that filed correctly in five states at first close acquires new obligations with each investor from a new state.
Deadlines are typically short and vary. Many states key their deadline to the first sale in that state, commonly within a window comparable to the federal fifteen days, though states differ. Because the trigger is per-state, a single compliance calendar entry is insufficient; the tracking has to be at the state level.
NASAA’s Electronic Filing Depository consolidates much of the submission and payment process for Regulation D notice filings into one interface. It is a genuine improvement over filing with each administrator separately, with the caveat that participation and specific requirements vary, so it simplifies rather than eliminates the state-by-state character of the work.
Renewals recur. For continuing offerings, many states require periodic renewal with additional fees on schedules that do not necessarily align with the federal Form D amendment anniversary. Perpetually offered products therefore carry a rolling calendar of state renewals with different dates.
Fees add up. Individually modest, they become a real budget line for an offering selling broadly, and they are frequently omitted from initial cost estimates.
Where the state layer still has teeth
Two situations where states do substantially more than collect a filing.
Non-covered offerings. An offering relying on Rule 504 or another non-preempted exemption faces state qualification in full — substantive review of the offering’s terms against each state’s standards. This is a large part of why Rule 504 sees limited use despite its simplicity, and it is the single most important practical consequence of the covered-security distinction.
Merit review for registered non-traded products. Non-traded REITs and similar registered products sold to retail investors are subject to state merit standards, including NASAA statements of policy that set substantive requirements around suitability standards, fees, and — notably — concentration limits capping how much of an investor’s net worth may be placed in a particular program. These are real constraints on product design and distribution, and they explain why a non-traded product’s suitability standards vary between states in ways that seem arbitrary from the outside. They apply because these offerings are registered rather than exempt, not because preemption failed. NASAA amended its REIT guidelines with effect from January 1, 2026, so confirm the current version rather than relying on older summaries.
This part of the landscape may change. In May 2026 the SEC proposed, as part of a broader registered offering reform, to define “qualified purchaser” under Section 18 so that securities sold in any SEC-registered offering, listed or not, would be covered securities. If adopted, that would remove state registration and merit review for registered non-traded REITs and BDCs, though states would keep their antifraud authority and, depending on the final rule, some notice-filing and fee requirements. State regulators, through NASAA, have opposed the change. Until the SEC acts, state merit review applies as described above.
The common failures
Filing only where the sponsor is located. The obligation follows the investor, not the issuer.
Missing the incremental state. A new investor from a state the offering has not previously sold into creates a new obligation, on a short deadline, that nobody is watching for. This is the single most common failure and it is a tracking problem, not a knowledge problem.
Missing renewals. Federal Form D amendments get calendared; state renewals with different dates often do not.
Assuming preemption is complete. The belief that a Rule 506 offering has no state obligations at all, which surfaces when a state administrator makes contact.
Sales compensation mismatch. The Form D discloses the states in which solicitation occurs. That disclosure should be consistent with where filings have actually been made.
Building the process
The obligation is administrative, which makes it entirely solvable with process:
- Track investor state of residence at onboarding, as a required field, and connect it to the filing obligation.
- Maintain a state matrix — filing made, date, fee paid, renewal due — updated as investors are admitted.
- Assign an owner with authority and a calendar, not an inbox.
- Trigger review on each new state. Admitting an investor from a new state should generate a task automatically rather than depending on someone noticing.
- Budget for fees and renewals at the outset.
- Confirm requirements per state with counsel or a filing service rather than assuming uniformity, since requirements change.
Many sponsors outsource this to counsel or a specialist filing service. That is reasonable, with one caveat: the sponsor retains the obligation, so the arrangement should include a reporting loop confirming what has actually been filed rather than an assumption that it was handled.
Why this unremarkable work matters
Blue sky compliance produces no strategic advantage and no investor benefit anyone will notice. Its entire value is negative — avoiding a state administrator’s inquiry, an enforcement action, or a rescission demand that arrives years later when the offering has long closed.
That is precisely why it gets neglected, and precisely why it is worth building into process rather than leaving to attention.
This guide is educational and general; it is not legal advice. State requirements vary, change frequently, and are fact-specific; confirm obligations for each relevant state with qualified securities counsel.
Frequently Asked Questions
What are blue sky laws?
State securities laws governing the offer and sale of securities within each state, operating alongside federal law. They predate federal securities regulation and every state has its own statute, its own administrator, and its own procedures—which is why compliance is a state-by-state exercise rather than a single filing.
If Rule 506 preempts state law, why file with states at all?
Preemption under Section 18 of the Securities Act covers state registration and merits review of covered securities. It does not remove the states’ authority to require notice filings and fees, or their authority over fraud. So the substantive qualification burden disappears while the filing and fee obligation remains.
What is NASAA’s EFD?
The Electronic Filing Depository, a system operated under the North American Securities Administrators Association that allows issuers to submit state notice filings and pay fees for Regulation D offerings through one interface. Participation and requirements vary by state, so it simplifies the process without fully unifying it.
When are state notice filings due?
Deadlines are set state by state and commonly key to the first sale in that state, frequently within 15 days, though states differ. Because the trigger is the first sale in the particular state, the obligation arises as the investor base spreads rather than all at once at launch.
Do state filings need to be renewed?
For continuing offerings, many states require periodic renewal with additional fees, on schedules that do not necessarily align with the federal Form D amendment date. Tracking renewal dates per state is a recurring compliance obligation for perpetually offered products.
Sources
- Securities Act of 1933, Section 18 (exemption from state regulation of securities offerings)
- Securities Act of 1933, Regulation D, Rules 503, 504 and 506
- North American Securities Administrators Association (NASAA) Electronic Filing Depository
- NASAA Statement of Policy regarding Real Estate Investment Trusts (state merit standards applicable to non-covered offerings)
- SEC, Registered Offering Reform, proposed rule, Release No. 33-11418 (May 19, 2026), including the proposed definition of qualified purchaser under Securities Act Section 18(b)(3)
