State Securities Laws and DLT Operators: Navigating the Blue Sky Patchwork

Federal securities law is hard enough. Every US state also has its own securities law — and offering tokens to residents of those states may trigger state registration or notice filing requirements.

Most token issuer compliance discussions focus on SEC registration or Regulation D exemptions at the federal level. Far fewer address the parallel compliance requirements imposed by state securities laws — often called "Blue Sky laws" after the 1911 Kansas statute that inspired them.

Offering tokens to investors in any US state may trigger that state's securities registration or notice filing requirements — even when a federal exemption applies. Understanding the state-level layer is not optional for token issuers with US investors.

How State Securities Laws Work

Each US state has its own securities statute and a state securities regulator (typically the Office of the Secretary of State or a dedicated securities division). State laws generally mirror federal securities definitions but with state-specific exemptions and procedures.

Before 1996, issuers using federal exemptions still needed to separately comply with securities laws in each state where they offered securities. The National Securities Markets Improvement Act (NSMIA) of 1996 preempted state registration requirements for offerings using certain federal exemptions — importantly including Regulation D Rule 506(b) and 506(c) offerings. These are "covered securities" under federal law, and states cannot impose registration requirements on covered securities offerings.

What States Can Still Require

Even for covered securities, states retain authority to require notice filings. Most states require issuers relying on Rule 506 to file: a copy of the Form D filed with the SEC, a state-specific cover page or submission form, and the applicable state filing fee. These filings are typically due within 15 days of first sale in that state and must be renewed annually if the offering continues.

Filing fees vary significantly by state: Delaware charges $200, California charges $300, New York requires $300 plus a consent to service of process. Some states require additional documents. Tracking and filing in 50 states is administratively burdensome but manageable with compliance software or outside counsel.

States That Have Created DLT-Specific Frameworks

Several states have enacted legislation specifically addressing digital assets and token offerings:

• Wyoming: The most comprehensive state digital asset framework in the US. Wyoming's Special Purpose Depository Institution (SPDI) charter, DAO LLC statute, and digital asset exemptions create a favorable environment for DLT operators. Many DLT companies are Wyoming-chartered.
• Texas: The Texas Virtual Currency Bill (HB 4474) established regulatory clarity for virtual currency businesses. Texas also created a Digital Assets Working Group that has produced practical guidance for token issuers.
• New York: The BitLicense — the most demanding state-level digital asset licensing regime in the US. Any entity engaged in "virtual currency business activity" with New York residents must hold a BitLicense or a limited purpose trust company charter. The application process takes 12-24 months and costs significant legal fees. Many token issuers choose to geofence New York residents entirely rather than pursue BitLicense compliance.

Practical State Compliance Strategy

For a Reg D 506(c) offering accepting US investors, a reasonable state compliance strategy involves: filing Form D with the SEC promptly, filing notice filings in states where you have investors (some issuers file all 50 states preemptively), and maintaining a compliance calendar for annual renewal filings where required.

State securities compliance is administrative work, not legal analysis. The framework is clearer than federal securities law. But it is unglamorous and easy to overlook — which is why enforcement actions for notice filing failures are among the most common securities violations for token issuers.