Photo, Fingerprint, and CLEO Requirements: The 41F Checklist

Every NFA application for a new item — whether submitted by an individual, a trust, or a legal entity — now requires three specific compliance items: fingerprints, a recent photograph, and notification to the applicant's chief law enforcement officer (CLEO). These requirements were imposed by ATF Rule 41F in July 2016, and they apply identically whether the applicant is a single person or a multi-trustee trust. For trusts, the implications are particularly significant because each responsible person in the trust must satisfy these requirements for every NFA application the trust submits.

The requirements are administrative rather than substantive — submitting the fingerprints, photos, and CLEO notifications doesn't trigger additional background investigation or involve the CLEO's approval authority — but they create real friction in the application process, and errors or omissions can delay approvals by months. Trusts with multiple trustees, in particular, face compounding friction because the same set of requirements must be satisfied by each responsible person.

Understanding the 41F checklist clearly, and running it systematically for every application, makes the difference between a clean submission that moves through the ATF queue predictably and a deficient submission that gets kicked back for remediation. This piece walks through each component of the checklist and the practical considerations that affect how to satisfy it efficiently.

Who Counts as a Responsible Person

Before the checklist itself, the threshold question is identifying who must submit materials. For an individual applicant, this is simple: one person, one set of requirements. For a trust, the question is more complex.

Under 41F, a "responsible person" in a trust is any trustee or settlor who "has the power or authority directed under the trust documents to receive, possess, ship, transport, deliver, transfer, or otherwise dispose of NFA items on behalf of the trust." In practice, this typically means every named trustee in the trust is a responsible person. Beneficiaries are generally not responsible persons (since they do not have authority over NFA items until a triggering event); nor are settlors who retain no operational authority.

The trust document itself should clearly identify the responsible persons, either by listing them explicitly or by defining the role functionally. Ambiguity here creates ATF compliance problems; some trusts have been kicked back because ATF examiners could not determine from the trust document which individuals qualified as responsible persons. Collectors drafting or amending trusts should confirm with their attorney that the responsible person identification is unambiguous.

Every responsible person in the trust must submit the three components of the 41F checklist — fingerprints, photo, and CLEO notification — for every NFA application the trust files. A trust with three trustees submitting a Form 4 for a new suppressor will file three sets of fingerprints, three photos, and three CLEO notifications as part of that single application.

The Fingerprint Requirement

The fingerprint component requires submission of two completed FBI Form FD-258 fingerprint cards for each responsible person. The cards must be originals (not copies), must be taken by a qualified technician, and must be clear enough for FBI identification processing.

Where to Get Fingerprints Taken

Several options exist. Local law enforcement agencies (police departments, sheriff's offices) often provide fingerprinting services, sometimes for free or for a modest fee. Private fingerprinting services, including some UPS stores and specialized firms, offer the service for $20 to $60 per session. Some FFLs that handle NFA work provide fingerprinting as a value-added service for their customers, bundling it with their transfer fees.

The quality of the fingerprints matters. Cards that are smudged, incomplete, or insufficiently clear will be rejected by the FBI during processing, which delays the entire application while replacement cards are requested and submitted. The technician's experience is the variable that drives quality; an experienced technician gets clean prints consistently, while a less experienced one may need multiple attempts.

Collectors should request extra cards at each session. A trust with three trustees, each needing two cards per application, faces 6 cards per application. Having extras on hand means the next application doesn't require another fingerprinting trip. Most technicians will happily produce extras for the same fee.

Freshness and Submission Timing

Fingerprint cards do not technically expire, but practical freshness matters. The ATF generally accepts cards taken within the past year or two; cards significantly older may prompt questions. The more significant issue is that cards must match the person — if a responsible person's circumstances have materially changed (new residence, new legal name), older cards tied to a prior identity may be rejected.

Submission is by mail with the application. The cards must be physically included in the Form 4 submission (or equivalent); scanned copies are not accepted. For electronic application submissions via eForms, some elements may be electronic but the fingerprint cards remain physical submissions.

The Photograph Requirement

The photograph component requires a recent 2-inch-by-2-inch passport-style photograph of each responsible person, taken within the year preceding the application.

Photo Specifications

The photograph must be a true color photo, frontal view, taken against a plain white or off-white background. The subject should have a neutral expression, eyes open and facing forward, with no head covering other than for religious reasons. Glasses are acceptable if normally worn, though photos without glasses are often preferred because they avoid issues with glare or lens effects.

The photograph should measure 2 inches by 2 inches (approximately 51mm x 51mm) with the head sized between 1 inch and 1⅜ inches (approximately 25mm to 35mm) from the bottom of the chin to the top of the head. These specifications match the U.S. passport photo requirements, so any service that produces passport photos will produce compliant NFA photos.

Sources for Compliant Photos

Drugstore photo counters (CVS, Walgreens) produce passport-format photos inexpensively, typically $10 to $15 per session. UPS stores and some FFLs offer the same service. Some smartphone apps claim to produce compliant photos printed at home; these can work but create risk of non-compliant output if the specifications aren't met precisely. For something as formal as an NFA application, the small additional cost of a professional service is usually warranted.

One Photo per Responsible Person per Application

The requirement is a photo for each responsible person for each application. A trust with three trustees submitting a Form 4 includes three photos. If the trust submits multiple applications simultaneously (say, a Form 4 for a suppressor and a Form 1 for an SBR), each application needs its own set of photos. Collectors who plan multiple applications can batch photo sessions — taking photos that will cover several upcoming applications — to reduce the per-application effort.

Photos must be recent relative to the application submission date. A photo older than a year may be questioned. The practical approach is to take fresh photos for each application or, for batched applications in a short window, take photos that will cover all of them.

The CLEO Notification Requirement

Prior to 41F, CLEO involvement in NFA applications was a sign-off requirement — the CLEO had to affirmatively sign off on individual applications for the application to proceed. The CLEO sign-off requirement was eliminated by 41F and replaced with a notification requirement: the applicant must send the CLEO a copy of the application, but the CLEO's approval is no longer needed.

Identifying the Correct CLEO

The CLEO for a given applicant is the chief law enforcement officer of the applicant's local jurisdiction. For most people, this is the local police chief (if the applicant lives in a city) or the county sheriff (if the applicant lives in an unincorporated area). For some jurisdictions, it may be a state law enforcement official or a specific designated officer.

Identifying the correct CLEO is occasionally tricky. Applicants living in smaller municipalities served by a county sheriff rather than a local police department may have ambiguity about who the local CLEO is. Most collectors resolve this by sending the notification to both the relevant city police chief and the county sheriff, ensuring that whichever is the actual CLEO receives it. This is a low-cost way to handle the ambiguity.

What to Send the CLEO

The CLEO notification consists of a copy of the full application (including all fingerprints and photos), not just a summary notification. The purpose is to inform the CLEO of what is being applied for, by whom, and for what item. The CLEO has no approval authority over the application under 41F, but they have a right to be informed.

The notification should be sent by a method that provides proof of mailing and delivery. Certified mail with return receipt is the standard approach. This costs a few dollars per notification but provides documentation that the notification was sent, when it was sent, and when it was received. If an ATF examiner questions whether CLEO notification was completed, the documentation answers the question unambiguously.

Multiple CLEOs for Multi-State Trusts

For trusts with trustees in multiple states or jurisdictions, each trustee's local CLEO must be notified for every application the trust submits. A trust with trustees in Utah, Arizona, and Texas submitting a single Form 4 will send notifications to three different CLEOs — one for each trustee's local jurisdiction. This multiplies the administrative effort and the mailing costs but is required under the rule.

Trusts whose trustees move between jurisdictions need to track where each trustee currently resides for CLEO notification purposes. A trustee who moves triggers a change in which CLEO will be notified for future applications. The trust's operational records should reflect current trustee residences specifically to support accurate CLEO notification.

The Full Submission Package

A complete NFA application submission for a trust with three trustees, under 41F requirements, includes:

The Form 4 (or relevant form) itself, signed and completed. Six fingerprint cards (two per trustee). Three recent photographs (one per trustee). Three CLEO notification packages, each containing a complete copy of the application. The tax stamp payment ($200 for most NFA items). The trust documents, including all amendments. Certification of trustee signatures where required. Any supplemental documentation specific to the item being transferred.

Preparing this package is time-consuming. A well-organized trust will have a standard checklist that walks through each component, confirms completeness, and produces a submission that moves through ATF processing without remediation requests. A disorganized trust that assembles packages reactively risks omissions that trigger deficiency letters and multi-month delays.

Common Errors and How to Avoid Them

The most common 41F compliance errors involve fingerprint quality, outdated photographs, and missing or misdirected CLEO notifications. Each has a straightforward remedy.

Fingerprint quality errors are prevented by using experienced technicians and inspecting cards for clarity before submission. If a card looks smudged or incomplete, it is better to have it redone before submission than to have the entire application delayed for replacement cards.

Photograph errors typically involve using photos that are too old (more than a year) or that fail to meet passport specifications. Using a professional photo service close to the application submission date prevents both.

CLEO notification errors typically involve sending notifications to the wrong officer, sending them without proof of mailing, or forgetting to send them entirely. The remedy is a simple process: for each application, before submission, confirm the correct CLEO is identified, send the notification by certified mail, retain the mailing receipt, and document the notification in the trust's application file. A well-maintained trust documentation system will have a standard place for storing CLEO notification receipts tied to each application.

Planning Around the 41F Burden

The 41F requirements are not going away. Collectors building NFA trusts should plan around them by creating systems that make compliance efficient rather than painful.

Maintaining a reserve of fingerprint cards and recent photographs for each trustee reduces the per-application effort. Creating a standing CLEO contact list with current addresses for each trustee's jurisdiction streamlines the notification process. Establishing a template submission checklist and following it for every application prevents omissions. These operational investments pay for themselves quickly for trusts that submit multiple applications over time.

Trusts that only occasionally submit applications can instead rely on their attorney or an FFL with NFA services to handle the 41F compliance on their behalf. This adds cost per application but eliminates the need for the trust to maintain the internal operational infrastructure. The right approach depends on application frequency and the trust's comfort with administrative work.

Organize Your Trust's 41F Compliance Infrastructure