How to Respond to an SEC Subpoena for Documents.

Last Updated on: 4th August 2026, 01:33 am

While receiving an SEC subpoena is no small matter, it is not a definitive indication of trouble. Being the recipient of a subpoena does not necessarily mean you are being accused of wrongdoing or being targeted. It may simply mean that you are a witness or that you have possession of documents relevant to an investigation. In fact, a formal order doesn’t imply that securities laws were violated either.

Even if the subpoena specifically includes the entity or individual you’re working for, it doesn’t necessarily mean that the entity or individual is a target in an investigation. SEC investigators may just be gathering information about the entity or individual as a result of a larger inquiry. So, receiving a subpoena isn’t a clear indication that you or someone associated with you is in trouble.

What happens if I get a subpoena?

An SEC subpoena specifies a date, place, and delivery method for producing records. While these deadlines are firm and compliance is mandatory, they are not unchangeable.

An SEC subpoena doesn’t necessarily imply that it was issued at the direction of a judge or any other government official. The SEC is a government agency and is authorized to issue subpoenas by statute.

While it may be too early to tell what your role in an SEC investigation is based on receiving a subpoena, it is important to start gathering information promptly. However, this gathering process should be conducted with the guidance of counsel.

Similar to any federal investigation, there is no predetermined length for an SEC investigation. Once an investigation gets underway, how long it will take depends on the scope of the investigation and how much evidence the investigators need to gather.

Is an SEC subpoena already a federal court order?

An SEC investigative subpoena is issued as an administrative process. This is different from a federal subpoena, which is issued through a grand jury or in civil litigation. Neither of these is “already” a federal court order. The fact that an SEC investigative subpoena is administrative in nature gives it a very different status and sets different requirements and rights. This makes it vital to work with a defense firm like Spodek Law Group that handle matters in administrative enforcement actions. Under 17 C.F.R. § 203.7, the “individuals, entities, or recordholders” who have been served with subpoenas may “inspect the formal order.” In the SEC’s investigative process, the “formal order” is essentially an internal document, approved by the SEC Commissioners, that specifies the investigation’s scope and the information investigators can seek. When we negotiate with the SEC in administrative enforcement actions, we demand to see the formal order to understand what is being investigated, while working to keep the investigative scope narrow. Although formal orders specify the scope of investigations, they rarely disclose any underlying evidence, or even the underlying grounds for issuing the investigation. Because an SEC subpoena is administrative in nature, it is different from civil federal subpoenas in many other ways as well. For example, Federal Rule 45 provides that recipients of civil subpoenas have 14 days to serve their objections. But the SEC has codified procedures for requesting that a subpoena be quashed or modified. This lack of clarity makes it imperative that any company or individual that receives an SEC subpoena consults with counsel who can provide guidance to avoid missteps. The SEC can seek judicial enforcement of its subpoena under Section 21(c) of the Exchange Act, 15 U.S.C. § 78u(c). But, at the stage of receipt, this doesn’t mean the subpoena itself is a federal court order, and a contempt charge is not yet possible. The SEC must first prove the subpoena’s legitimacy to a federal judge. Specifically, it must show that (i) the subpoena has a lawful purpose; (ii) the subpoena was issued in proper procedure; and (iii) the information sought is “relevant to the investigation.” If the SEC is successful in showing a federal judge all three things, then the recipient faces a heavy burden of proof. If the recipient wants to challenge the subpoena’s validity, it must show the subpoena was not reasonable or was issued in bad faith. If the recipient fails to show this, it could face serious consequences for failing to comply.

How should I preserve and collect responsive documents?

When facing a federal investigation, a company’s first step is to issue a preservation notice to relevant employees. This should identify which employees need to hold on to records, what type of records need to be held on to, and what systems are affected. It should explicitly instruct individuals to stop any routine disposal of records, even if employees believe their copies of certain records are duplicates.

A preservation notice should also be accompanied by instructions to the company’s information technology personnel, who must suspend any automatic deletion or overwriting of emails and data on cloud storage systems.

Depending on the scope of the investigation, preservation could be critical in multiple areas. For example, if the SEC is investigating executives at an investment firm, preservation could involve:

• Emails and text messages stored on servers, cloud storage, and personal devices
• Backups of data on on-site and off-site servers
• Files from personal computers, laptops, and phones, if these are used for business purposes

If the company or individual facing an SEC investigation employs a legal team in-house or has hired outside counsel, it is important to have that team work closely with the information technology team to document the preservation steps taken. At Spodek Law Group, we work closely with each of our clients’ IT and security teams to:

• Identify and document all relevant custodians and data sources
• Maintain a record of individuals and entities that accessed the data or the servers from which the data was retrieved
• Log each custodian’s device and storage systems in relation to potentially responsive materials
• Implement a defensible workflow that prevents data loss while tracking all relevant documents and data sources from their initial identification through a final review and production

Additionally, the process should include an inventory of company equipment, which should include information about the company’s access to hardware used by current and former employees. If an employee leaves the company, the company must preserve their computer and any cloud-based accounts and devices before access is lost.

Why is it important to preserve records?

The most serious risk of receiving a federal subpoena (and subsequently facing an enforcement action from the SEC) is the possibility that it could lead to criminal charges.

18 U.S.C. § 1519 prohibits “knowingly and willfully” destroying, concealing, or altering any record with the “intent to impede, obstruct, or influence” a federal investigation. Section 1519 includes criminal penalties that can carry up to 20 years in prison.

Can counsel negotiate the subpoena deadline and production scope?

The specific documents the SEC requests to receive, the search terms investigators consider relevant, and the manner in which a production is to be handled are all detailed in the subpoena’s attachments. All of these elements are subject to negotiation.

Experienced defense counsel can frequently negotiate the subpoenas’ custodians and date ranges, the methods for searching through company servers for relevant records, and the manner in which a production is to be handled.

Due to the risks involved with SEC investigations, it is important that a company or individual negotiate for an extension of the subpoena deadline and a clearer understanding of its production scope. The SEC’s discretion to grant an extension means that this must be accomplished before the original deadline.

If the SEC denies the request for an extension, then the possibility of a rolling production agreement must be considered. A rolling production allows companies to turn over records in waves, prioritizing those that the SEC considers the most important and are most easily retrieved, while continuing to collect and review the remaining records.

Rolling productions may be subject to conditions, and this may include (i) the manner in which electronically stored information (ESI) is produced, (ii) the sequencing of documents and data for production, (iii) interim deadlines, and, (iv) the final deadline for completion of the production. Companies should not assume that a rolling production does not require strict compliance with the subpoena. With this in mind, any rolling production agreement should include clear and certain terms.

What if the subpoena asks for too much?

If an SEC subpoena asks for documents beyond the scope of the formal order, it may be overbroad. This, in conjunction with arguments about a company’s undue burden to produce the documents, could provide grounds to negotiate the scope of the production or, if the SEC tries to enforce the subpoena in federal court, to successfully oppose the enforcement action.

Although the SEC must make a showing that the documents and information sought are relevant and the production method is reasonable, the burden of proof will lie with the company or individual. The burden to prove a lack of reasonableness or bad faith is significant, and it requires a thoroughly documented case.

Although complying with a subpoena only initial production of documents, it does not preclude the SEC from demanding production of supplemental documents or investigative testimony from the company’s officers, managers, and employees.

How do I prevent privilege waiver during document review?

When performing a document review, it is important to separately assess records for (i) responsiveness, (ii) privilege, (iii) confidentiality, and (iv) legal exposure.

For example, attorney-client privilege protects communications between legal counsel and their clients that are confidential, made for legal purposes, and specifically kept secret. However, not every interaction with a lawyer is privileged. For example:

• Preexisting records do not become privileged merely because they were delivered to counsel for review
• Copying a lawyer on an ordinary business communication does not make that communication privileged

While it is often possible to defend these types of records against an SEC investigation, they will not fall under attorney-client privilege. While privilege is a strong and important defense in any government investigation, it is critical to identify each document and data source that has privileged information.

How are privileged documents handled?

When preparing a privilege log, companies must identify each document and piece of electronic information that they consider to be privileged. This commonly requires that they describe the document and/or piece of electronic information without revealing the substance that makes it privileged, and they must explain the basis for the privilege and to what extent they assert the privilege.

If a company, individual, or entity makes an otherwise valid claim of privilege, carelessly disclosing a document or communication is still possible. This careless disclosure could potentially lead to the waiver of the privilege.

While this is a risk in many types of investigations, with the SEC’s role as a regulatory agency, this risk is amplified. To avoid unintentional waiver, we recommend involving the company’s in-house counsel as early as possible. If the company or individual does not have in-house counsel, then the company’s outside counsel should be engaged as early as possible.

If the company’s in-house or outside counsel is employed to represent a company, individual, or entity, it may be important to clarify the scope of the representation. Specifically, this is especially relevant if the company has hired counsel for the entity’s benefit, but the counsel is also representing one of the entity’s employees.

Any issues that arise from any conflict of interest created by a single counsel representing both the entity and an employee should be addressed as early as possible. To address these issues, the employee should have their own representation, or the entity should seek a separate lawyer to represent the entity.

If a document review process uncovers information that is responsive to an SEC subpoena but not subject to attorney-client privilege, the company or individual facing the investigation should turn over the information. If the information is potentially damaging, it does not prevent the need to turn over the information.

By turning over the information, companies and individuals can demonstrate cooperation to the SEC, and this can lead to the SEC allowing for extensions on the production deadline and allowing the entity’s lawyers to narrow the scope of the production.

Can producing documents create personal or corporate criminal exposure?

The Fifth Amendment protects natural persons against compelled testimonial self-incrimination. However, the content of documents produced in response to an SEC subpoena is generally not protected under the Fifth Amendment, as individuals created the documents voluntarily.

When a subpoena requests the production of documents, it is requesting, in addition to the content of the documents, their identification and delivery. This request is potentially testimonial, and responding can have testimonial implications. For example, responding may be considered testimonial if it concedes (i) their possession or control of the documents, (ii) the existence of the documents, or (iii) the authenticity of the documents.

Corporations and other entities do not have Fifth Amendment privileges against self-incrimination. As a result, custodians of these entities generally cannot withhold records based on the Fifth Amendment privilege.

Companies and other entities that receive an SEC subpoena must be aware that having company counsel represent employees whose records are subject to a production request can create significant conflict-of-interest issues. For example, if an employee’s personal interest in remaining out of the SEC’s sights is incompatible with the company’s duty to produce records, the employee must seek separate counsel. We advise our clients of all potential conflicts as they arise.

Producing records in response to an SEC subpoena can also create risks under 18 U.S.C. § 1001. This federal statute makes it a crime to knowingly and willfully provide any materially false statement to a federal executive, legislative, or judicial department, including the SEC. To mitigate this risk, we thoroughly document our clients’ preservation and review processes. A strong evidentiary record demonstrating a good-faith effort to comply with the subpoena’s requirements can be essential in cases of potential criminal liability.

Any information produced in response to an SEC investigation can be shared by the SEC with federal prosecutors for use in criminal cases. While this is not very common, it is a potential risk. Again, thoroughly documenting your preservation and review process will help mitigate the consequences of such a disclosure.

If the SEC’s investigators find evidence of criminal wrongdoing, they can refer that information to the Department of Justice. Our lawyers assist our clients in all aspects of SEC investigations. We assist with compliance as well as defending against the SEC’s investigations. Our lawyers have assisted clients in SEC cases that resulted in criminal charges and cases that ended in settlements. We advise our clients throughout the process.

How do I verify completeness and protect sensitive information?

Production and Redaction Quality Control

Production quality control requires a detailed check and confirmation that each of the SEC’s document requests has been addressed. This requires cross-referencing the specific delivered files against the subpoena’s requirements. In addition, redaction quality control involves testing the redactions to confirm that the redacted material is not accessible through search or other means. Relying on redaction tools can be risky, as some tools may only hide the text while leaving it accessible in the file’s metadata or search functionality.

Metadata Validation

Metadata validation involves verifying that requested metadata fields are present and correctly mapped. For example, if the SEC requests that a document’s native author and the date it was created be produced, the entity must produce the document in its native format or map the metadata fields to the production file. A file produced from a hard drive or from cloud storage will typically have all of these fields. However, if the file was generated from a printed hard copy, the metadata fields may need to be entered manually by the person performing the review.

Confidentiality Requests

Under 17 C.F.R. § 200.83, companies, individuals, or other entities that have submitted information to the SEC can request confidential treatment of that information. A Rule 83 request does not guarantee that the information produced will remain confidential; the SEC can deny a request if it deems that disclosure of the information is in the public interest. While many requests for confidential treatment are denied, they can help protect the most sensitive information produced during an SEC investigation.

Completeness

Reconciling records that were produced, withheld, unavailable, or nonexistent with the SEC’s requests is a key step before declaring a production complete. A perceived failure to fully respond to the subpoena can lead to enforcement actions in federal court. Companies and individuals must also ensure they have not inadvertently waived their privileges by producing documents that should have been withheld.

Production Correspondence

Production correspondence should identify completed requests, the records and custodians being produced in future productions, and any records and custodians that will need to be produced in future productions. It should also include the names of the new custodians who were identified and the specific date ranges involved in each production. Correspondence should clearly state that the production of records will not preclude the SEC’s right to request additional documents, testimony, or any other information relevant to the investigation.

SEC Follow-up Requests

It is not unusual for the SEC to issue follow-up requests. This may include requests for missing attachments, the production of native files, or additional custodians. Companies and individuals must be prepared to re-execute the preservation, collection, review, and production processes for these requests. This requires continuing to preserve records throughout the review process to ensure no data is lost.

Contact a Federal Criminal Defense Attorney

Nothing here is legal advice, and the details of your case matter. Todd Spodek and Spodek Law Group take federal criminal and white collar cases nationwide, from offices in New York, Brooklyn, Queens and Los Angeles. You can reach the firm at 212-300-5196.