SEC Subpoena Compliance: A Step-by-Step Guide.

SEC subpoenas can command the production of documents, the provision of testimony, or both. Notably, receiving an SEC subpoena does not establish the recipient’s culpability or guilt.

Regardless of whether a subpoena demands the production of documents or provides for the taking of testimony, recipients should preserve information that may be responsive immediately upon receipt. For a subpoena demanding document production, compliance may be followed by supplemental requests for documents as well as requests for testimony.

Unfortunately, SEC investigations can last for years. They are incredibly protracted and resource-intensive.

The Enforcement Division publishes an Enforcement Manual that describes the Division’s internal policies and procedures in detail. In general, however, the Enforcement Manual provides instructions to Division staff and does not bind the SEC. That said, the 2026 Manual commits the Enforcement Division to updating the Manual annually. Specifically, with respect to providing recipients of Wells Notices an opportunity to submit a response (a “Wells submission”), the 2026 Manual provides that the default period of time for submitting a Wells response should be four weeks, subject to appropriate time extensions.

How do I verify the subpoena and negotiate its scope?

1. Verify the SEC Subpoena

2. Obtain a Copy of the Formal Investigation Order

Recipients can authenticate an SEC subpoena by contacting the SEC using independently verified contact information. In addition to authentication, recipients can request a copy of the formal investigation order authorizing issuance of the subpoena in order to confirm that the subpoena is within the SEC’s investigative authority and that the relevant subject matter, time period, and document categories are all covered by the order.

Although the formal investigation order authorizes issuance of the subpoena and other compulsory processes, the issuance of the order constitutes no evidentiary finding that any of the named subjects of the SEC’s investigation may have violated any federal laws or regulations.

3. Negotiate the Scope of the Subpoena

Recipients can also request to negotiate the scope of the SEC subpoena. This can involve negotiating the subject matter, date ranges, or document categories, as well as requesting an extension of the compliance deadline. SEC staff may be willing to narrow the subject matter, date ranges, and/or document categories to avoid burdensome or irrelevant production. In addition, SEC staff may be willing to grant an extension of the compliance deadline.

However, extensions are not automatic, and the subpoena itself may require only a five- or ten-day response time. Therefore, recipients should initiate negotiations as soon as possible, and extension requests should provide a clear rationale for the requested extension. Ideally, recipients should identify:

• the specific requests in the subpoena to which the requested extension applies;
• the proposed new compliance date;
• the reason for the requested extension; and,
• a proposed timeline for a staged production of relevant responsive materials.

4. Memorialize Any Agreements Regarding Scope or Extensions

In addition to narrowing the scope of the subpoena and/or extending the compliance deadline, recipients should memorialize any agreements with SEC staff in writing. Recipients should send confirmatory emails to SEC staff and ensure that their confirmatory messages provide clear evidence of the terms and conditions of the agreement reached between the SEC and the recipient.

5. Confirm Whether the SEC Is Targeting the Recipient as a Potential Violator

The SEC may also use its subpoena power to gather information regarding violations of federal laws or regulations by parties other than the subpoena recipient. The SEC may subpoena witnesses who are not suspected violators, and it will do so in many cases. To confirm whether the SEC is targeting the recipient as a potential violator, recipients should ask SEC staff to identify the subject matter and the target(s) of the investigation.

7. Preserve All Potentially Responsive SEC Evidence

Recipients of SEC subpoenas must preserve all potentially responsive information. Recipients should issue legal holds immediately, and they should be updated and reinforced as necessary. Preservation obligations may continue throughout lengthy periods of SEC inactivity as well, because an SEC investigation can last for years.

Recipients’ legal holds should also identify all personal devices and accounts that have been used for business communications. According to the 2026 Manual, the list of electronic forms of communication that recipients should consider includes Slack, Signal, WhatsApp, Teams, Discord, and iMessage. While recipients may not be able to prevent employees from using personal devices and accounts for business communications, they should take reasonable steps to ensure that any such devices and accounts used to store, access, or share potentially responsive materials are preserved.

Recipients should also disable auto-deletion for all potentially responsive messages to the extent that it is administratively possible. In addition, recipients should suspend any backup-retention schedules that delete backups containing unique potentially responsive information.

8. Conduct Custodian Interviews

Recipients should also conduct custodian interviews to identify all potentially responsive materials that need to be preserved. Ideally, custodian interviews should be conducted early in the preservation process, and they should target relevant:

• devices, cloud-based, on-premises, or portable storage devices, accounts, networks, networks with access to personal storage devices/cloud storage (e.g. Dropbox), and other sources;
• devices, cloud-based, on-premises, or portable storage devices, accounts, networks, networks with access to personal storage devices/cloud storage (e.g. Dropbox), and other sources;
• applications, software, and other programs;
• terminology and jargon; and,
• date ranges.

9. Preserve All Potentially Responsive Information without Alteration, Deletion, or Destruction

Recipients should also preserve all potentially responsive records without alteration, deletion, or destruction. The 2026 Manual lists “all” electronic data as subject to preservation, including the contents of data dumps, but it does not expressly address generative-AI inputs or outputs.

How do I make the document production defensible?

15. Utilize a Request-by-Request Compliance Tracker

The use of a request-by-request compliance tracker is critical for defensibly managing an SEC subpoena response. At a minimum, a request-by-request compliance tracker should assign:

• a responsible owner for each request;
• a reasonable internal deadline for each request;
• a status update for each request (e.g., not yet started, in progress, review in progress, pending production, produced); and,
• a reasonable escalation threshold for each request.

16. Establish Clear Escalation Thresholds

To ensure that SEC subpoena compliance does not stray off track, it is critical to establish clear escalation thresholds. In addition to missed collection and production deadlines, escalation thresholds should address missed collection benchmarks, unresolved scope disputes with custodians, and privilege-review backlogs.

Ideally, escalation thresholds should also be tailored to specific types of evidence, as well as specific issues that require the special attention of specific team members. As a result of identifying relevant issues and individuals, effective escalation thresholds are both timely and targeted.

17. Establish and Document a Written Production Protocol

Effective SEC subpoena compliance also requires clear communication with the SEC regarding production protocols. While there may be mutual understanding as to certain protocols, any ambiguity can raise questions regarding production reasonableness and defensibility in the event that the SEC or a court later challenges the production. As a result, recipients of SEC subpoenas should adopt and document a written production protocol with the SEC that addresses:

• metadata fields;
• file formats;
• load-file requirements;
• deduplication;
• document families;
• embedded files;
• Bates numbering;
• redacted files;
• password-protected files;
• native-format production, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and, and,

Todd Spodek is the managing partner of Spodek Law Group, a second generation criminal defense firm that has been practicing since 1976.

Can I Object to an SEC Subpoena Without Complying?

There are several common misconceptions about objecting to an SEC subpoena. While there are substantive and procedural grounds for objecting to an SEC subpoena, one key misconception is that recipients can object without also preparing to comply. With this in mind, there are a few significant considerations to keep in mind.

1. Federal Rule of Civil Procedure 45 Does Not Directly Govern SEC Subpoenas

Although Federal Rule of Civil Procedure 45 (“FRCP 45”) provides guidance on subpoena responses (particularly with respect to subpoena objections and time periods for responses), FRCP 45 does not govern subpoenas issued by the SEC in the administrative process, except by analogy. As a result, if you are serving an objection in response to an SEC subpoena, you must ensure that it is both substantively and procedurally defensible.

2. Federal Rule of Civil Procedure 26 Does Not Directly Govern SEC Investigations

Similarly, while Federal Rule of Civil Procedure 26 (“FRCP 26”) addresses the scope of discovery and preservation obligations, FRCP 26 does not directly govern the conduct of SEC investigations. Again, although courts may look to FRCP 26 by analogy, the standard for a defensible SEC subpoena response differs from the standard for a defensible response to discovery requests in federal court litigation.

3. C.F.R. § 202.5 Does Not Prescribe Subpoena Production Deadlines

Finally, although the Federal Administrative Procedure Act provides the authority for the SEC’s administrative process, C.F.R. § 202.5 does not prescribe production deadlines for SEC subpoenas. Instead, production deadlines are prescribed in the subpoenas themselves, and they may be negotiable.

4. Objections Do Not Permit Recipients to Simply Disregard SEC Subpoenas

Although there are substantive and procedural grounds for objecting to SEC subpoenas, this does not mean that recipients can simply disregard SEC subpoenas. In fact, the SEC can ask a federal court to enforce its subpoena. While disobedience of a subpoena alone does not typically constitute contempt, disobedience of an order for enforcement can lead to contempt.

5. Notice to Recipients (SEC v. Jerry T. O’Brien)

In SEC v. Jerry T. O’Brien, the court held that the SEC may issue subpoenas to third parties without providing the recipients with any notice or information about the subject of the investigation.

6. Adjudication of Objections

In federal court litigation, subpoena objections are typically adjudicated prior to production. However, in SEC enforcement proceedings, any objections to an SEC subpoena will be adjudicated during the proceeding itself, after the fact.

22. Protect Privilege and Confidential Information

22.1. Protect Attorney-Client Privilege and Work Product

Attorneys should assess whether any potentially responsive materials are protected under attorney-client privilege or attorney work product protections. If applicable, a privilege log should be prepared that identifies each potentially responsive document that is withheld on the basis of privilege. A privilege log should also identify the pertinent privileged communications and/or parties involved. Importantly, however, it should not disclose the substance of the protected communication or material, as doing so would risk the loss of privilege.

22.2. Preserve Privileges After Inadvertent Disclosure

If relevant responsive records containing potentially privileged materials are inadvertently disclosed during an SEC investigation, this does not necessarily lead to a loss of privilege. Under Federal Rule of Evidence 502(b), a disclosure of privileged or protected information does not constitute a waiver “if: (1) the disclosure is inadvertent; (2) the disclosure was made under circumstances giving rise to a reasonable belief that the privilege or protection would not be lost; (3) the party who made the disclosure took reasonable steps to preserve the privilege or protection; and, (4) the party who received the privileged or protected information promptly took reasonable steps to return, sequester, or destroy the information.”

Recipients of SEC subpoenas should prepare policies and procedures in anticipation of inadvertent disclosure of privileged or protected information. The policies and procedures should address:

• Reasonable steps to prevent inadvertent disclosures;
• Reasonable steps to correct inadvertent disclosures.

22.3. Protect Confidentiality on a Need-to-Know Basis

While the SEC may negotiate a bilateral SEC confidentiality agreement, such agreements generally do not bind private litigants, and they do not establish any obligations with respect to the recipients’ obligations under confidentiality agreements. Accordingly, when dealing with confidential information, recipients of SEC subpoenas should always disclose on a “need-to-know” basis.

22.4. Address Cross-Border Collection and Transfer Restrictions

Cross-border data transfers are subject to various restrictions, and any cross-border collection should identify any transfer restrictions applicable to relevant data before the data leaves its country of origin. Notably, data-localization laws in countries such as China may impose substantial obligations, and they may require (i) in-country review and redaction of all relevant responsive materials prior to transfer out of the country, and/or (ii) governmental authorization prior to transfer out of the country.

22.5. Address Confidentiality for Information Submitted to the SEC (C.F.R. § 200.83)

Information submitted to the SEC is subject to the Freedom of Information Act (FOIA) in the federal administrative process, and any request for confidential treatment must meet the criteria for confidential treatment that are enumerated in C.F.R. § 200.83. Accordingly, confidentiality agreements will not guarantee withholding. While confidential-treatment requests can be included with the substantive SEC subpoena response, these requests must be sent directly to the SEC’s FOIA Office.

23. Prepare for Testimony and Parallel Proceedings

23.1. Prepare for Witness Testimony in the Administrative Process

23.1.1. Work with Counsel During SEC Examinations

C.F.R. § 203.7 expressly permits witnesses in SEC investigations to receive confidential advice from counsel during examinations. While section 203.7 generally prohibits counsel from interrupting an examination with objections or other statements, recipients who are testifying as witnesses are encouraged to use their counsel as an available resource throughout the investigative process.

Additionally, C.F.R. § 203.6 allows for requests for copies of an examination transcript, although the SEC may charge fees, and it also may deny transcript requests for good cause.

23.2. Assess Whether the Act-of-Production Privilege Applies

In the administrative process, a corporate custodian can generally not invoke its personal Fifth Amendment right to withhold records that belong to its company. However, an individual may invoke the act-of-production privilege if the Act of producing a record (rather than the record’s contents) would (i) constitute testimonial evidence, (ii) be compelled by the government, and, (iii) potentially expose the individual to liability for criminal or civil penalties.

23.3. Assess Whether Information Disclosed to the SEC is Relevant to Parallel Criminal Proceedings

If recipients disclose information to the SEC that is relevant to parallel criminal proceedings, they must be prepared for this information to become relevant to the DOJ’s criminal investigation as well. The SEC generally will not share information with third parties unless it receives a request from the third party or the information is otherwise legally disclosable. However, if the SEC believes that a company or individual may have committed criminal conduct, it can refer that matter to the Justice Department.

23.4. Coordinate SEC Subpoena Compliance with Parallel Matters

In addition to the concerns outlined above, parallel matters require a coordinated approach to preservation, factual positions, production decisions, and privilege analysis. In particular, when determining what (and how) information will be produced to the SEC, companies and individuals must ensure that their production responses are defensible and do not inadvertently disclose privileged information, especially if the DOJ may also have authority over those materials in a parallel proceeding.

Companies and individuals in parallel proceedings should also coordinate their factual positions and any arguments regarding substantive or procedural defenses. For example, in parallel criminal and administrative proceedings, the parties’ legal counsel should work together to ensure that the factual record is consistent throughout the proceedings. Finally, coordination between corporate and individual counsel is critical for all companies and individuals that are targeted by parallel proceedings.

Get Advice on Your Situation

If you want someone to look at the specifics of your case, Spodek Law Group handles federal criminal defense nationwide from New York and Los Angeles. The firm has been practicing since 1976 and its motto is simple: we owe loyalty to only you. Call 212-300-5196.