Should I Self-Report to the SEC??

Last Updated on: 4th August 2026, 01:33 am

There is no SEC rule that provides a general enforcement safe harbor if an individual or a company voluntarily comes forward. The concept of receiving cooperation credit is subject to the SEC’s broad discretion. When the SEC awards cooperation credit, there is no fixed formula for calculating the reduction in liability or fine. In addition, the same underlying misconduct can trigger parallel SEC and criminal investigations.

How Else Could the SEC Find Out About the Misconduct?

The SEC can (and may) find out through various other means. Not only can FINRA, state securities regulators, and other government agencies refer matters to the SEC, but the SEC can (and may) open an inquiry based on news reports, blog posts, online social media discussion, and whistleblower complaints. With this in mind, you need to ask yourself two crucial questions:

1. Do I have to report this? (For example, if the misstatement is material, do I have a duty to file a Form 8-K?)

2. What is the risk of the government finding out about the misconduct through some means other than self-reporting?

These are complex questions that require an informed decision. We can guide you through the process of assessing what to do next.

What Else Does the SEC Prosecute?

Along with insider trading and IPO-related violations, the SEC is pursuing fraud and enforcement matters in the areas of accounting practices, investment adviser and broker-dealer misconduct, cybersecurity, Foreign Corrupt Practices Act (FCPA) violations, and other forms of misconduct.

How Can I Demonstrate My Cooperation?

Beyond self-reporting, there are many ways that individuals and companies can demonstrate affirmative cooperation. For companies, this includes encouraging employees to assist investigators with the SEC. For individuals, providing key translations or documents that are outside the scope of the SEC’s request are examples of affirmative cooperation.

When should I investigate before reporting to the SEC?

When Do I Need to Investigate Before I Report Misconduct?

The 2001 Seaboard Report remains the SEC’s principal framework for evaluating corporate-cooperation. According to Seaboard, there are four criteria for determining the extent of cooperation: (i) the entity’s self-policing practices; (ii) the entity’s self-reporting practices; (iii) the extent of its assistance to the SEC in its investigation; and, (iv) the adequacy of its remediation efforts. The first two criteria are focused on what the entity did before the SEC’s investigation. The second two are focused on what the entity did after the SEC contacted the entity.

• A key aspect of the self-policing criterion is “the entity’s efforts to identify potential misconduct before it is brought to the entity’s attention from the outside.” As a result, an investigation undertaken before self-reporting could help demonstrate affirmative cooperation and the entity’s (and its executives’) willingness to do the right thing.
• Similarly, the third criterion is focused on “the entity’s effort to assist the SEC in its investigation.” This includes “the entity’s effort to promptly expose the misconduct to the SEC, to identify the individuals involved, and to assist in efforts to collect information about the underlying conduct and the participants.”

In other words, precisely identifying the misconduct, identifying the supporting documentation, and identifying the witnesses that have knowledge of the misconduct are key to making informed, strategic decisions regarding what to disclose to the SEC. Furthermore, expedited access to documentation and witnesses can support a finding of affirmative cooperation.

• Finally, the fourth criterion is remediation. The SEC will assess the entity’s efforts to remedy the alleged violations and implement measures to prevent further violations. The entity’s recognition of wrongdoing and its implementation of remediation can also influence how the SEC views the entity’s self-policing efforts under the first Seaboard criterion.

From these considerations alone, it is clear that conducting an investigation before self-reporting offers significant advantages. It allows for strategic decisions regarding disclosure, helps accelerate the SEC’s enforcement decision, and allows for a determination about whether the entity’s self-policing efforts should be credited in deciding whether sanctions are appropriate.

Does It Make Sense to Preserve Documents Before I Self-Report to the SEC?

Yes. In fact, an entity’s duty to preserve may arise even if the entity does not disclose potential misconduct. An entity has an affirmative duty to preserve evidence when an investigation becomes reasonably foreseeable. With this in mind, one of the earliest steps for any entity that discovers potential misconduct is to preserve relevant evidence.

If an individual or company has determined that it needs to preserve evidence, it must also plan to protect that evidence by making informed decisions about when to seek or assert privilege. With this in mind, companies and individuals should determine what they need to do before they self-report (and, if necessary, self-report).

Can I Be Charged with Obstruction of Justice If I Get Wrong Information to the SEC?

Yes. In a civil enforcement case, if you get wrong information to the SEC and then the SEC pursues charges, the SEC may open an inquiry to determine if there are criminal charges that are warranted. Criminal charges under 18 U.S.C. § 1001 include knowingly and willfully making false or misleading statements in relation to any matter within the jurisdiction of the executive, legislative, or judicial branch of the United States government.

What Is the Difference Between “Self-Reporting” and “Cooperation”?

Self-reporting simply means that you are disclosing potential misconduct to the SEC. Cooperation, on the other hand, refers to the steps that you take in response to an SEC investigation. This is a key distinction, but it is one that is nonetheless essential to keep in mind.

Are Issuers’ Obligations to Self-Report Voluntary?

Whether issuers have obligations to disclose or self-report potential misconduct to the SEC depends on the facts at hand. But it is important to note that an issuer’s reporting obligation may exist independently of its decision (or lack of decision) regarding whether to voluntarily self-report. Therefore, voluntary self-reporting does not eliminate any separate filing obligations an issuer may have, and voluntary self-reporting will not discharge an individual’s reporting duty if it is an agent of a regulated entity.

Do I Need to Self-Report to FINRA?

Yes, if it is required under FINRA Rule 4530. This rule requires FINRA member firms to report specified events listed in Rule 4530(a) within 30 calendar days after the member knows or should have known of the event. The specific events for which a self-reporting is required under FINRA Rule 4530 are listed in Rule 4530(a). The list is very extensive, and as a result, firms and individuals need to consult with experienced SEC defense counsel for advice on their self-reporting obligations under FINRA Rule 4530.

What Is the Deadline for a Company to Voluntarily Self-Report to the SEC?

There is no SEC rule that establishes a deadline for a company to voluntarily self-report. This is because, in contrast to an issuer’s obligation to file accurate financial statements and reports with the SEC, voluntary self-reporting is a strategic decision (i.e., it is made in consideration of the potential for enforcement action).

Where Do I Self-Report?

The SEC provides an online channel for tips, complaints, and referrals (or “TCRs”). This is the method that the SEC recommends for the submission of self-reporting, and SEC Form TCR is available online. This is the most efficient method for submitting disclosures. However, companies that are already working with SEC Enforcement staff on a voluntary disclosure will need to work with their enforcement team about their self-reporting as well. As a result, companies that need to voluntarily self-report must determine which disclosure methods they need to use.

How can I protect privilege during an internal investigation?

How Can I Demonstrate Cooperation in an SEC Investigation?

If an individual or a company has determined that it will voluntarily self-report a potential violation to the SEC, and if it is going to conduct an internal investigation, providing the results of its internal review and supporting documentation can be an important step. Voluntarily producing information that was not requested can also strengthen an entity’s claim of affirmative cooperation.

When Should I be Concerned About Asserting Privilege?

Asserting privilege is the right thing to do. However, assertions of privilege that are not well-supported can provoke unnecessary federal subpoena-enforcement proceedings. While U.S. courts generally defer to a corporation’s privilege claims, making an assertion of privilege that is questioned by the government is a strategic error that can lead to avoidable risks. As a result, companies and individuals must carefully evaluate their privilege claims before asserting them.

When Should I be Concerned About Waiving Privilege?

Voluntarily providing unrequested information, such as privileged materials prepared during an internal investigation, can undermine a company’s or individual’s claim of affirmative cooperation. Furthermore, voluntarily providing privileged information to the SEC can result in the loss of the individual’s or company’s privilege against third parties. As a result, companies and individuals should not provide privileged information to the SEC unless it is reasonably clear that they have not unintentionally waived their privilege.

Does the SEC Expect Me to Waive Privilege?

Some commentators have discussed the issue of selective waiver in the context of voluntary disclosures to the SEC. These commentators suggest that the SEC expects companies and individuals to voluntarily waive privilege when they seek affirmative cooperation credit. However, as a matter of federal substantive law, a selective waiver is only available in limited circumstances. As a result, federal courts do not uniformly recognize selective waiver in cases involving voluntary disclosures to the federal government.

For this reason, the SEC Enforcement Manual explicitly addresses the issue. The manual states that “voluntary disclosure and cooperation is not conditioned on a company or individual’s waiver of privilege,” and it instructs SEC enforcement lawyers to assume “that the information provided is not protected by the attorney-client privilege or work product doctrine.”

How Should an Issuer’s Counsel Address Internal Misconduct?

Section 307 of the Sarbanes-Oxley Act of 2002, codified in 17 C.F.R. Part 205, requires that attorneys representing issuers report evidence of a material violation up the corporate ladder within the company. Similar to the provision in the Sarbanes-Oxley Act, ABA Model Rule 1.13(b) also requires that organizational lawyers who learn of serious misconduct “up-the-ladder” report that misconduct to an appropriate supervisory authority in the organization.

The reporting obligations of organizational counsel under ABA Model Rule 1.13(b) are optional for companies and individuals, but they are required for attorneys. Attorneys must be careful to make good decisions.

We can help companies that are making strategic decisions about voluntary self-reporting. We can also help entities that have already made an informed decision about self-reporting.

What Are the Parallel Risks of Self-Reporting?

If an individual or a company has determined to self-report to the SEC, then it is important to consider what parallel risks may arise. The SEC will share information gathered during its investigation with other regulators, such as the CFTC or FINRA, and it may also share information with law-enforcement agencies. If the SEC pursues charges, any other agency that has jurisdiction may also pursue charges.

The SEC pursues civil and administrative cases; prosecutors independently decide what criminal charges to pursue. Criminal prosecution of an individual for a Securities Exchange Act violation requires a showing that the individual acted “willfully.” With this in mind, you need to be very careful when communicating with federal prosecutors to ensure that your disclosures to the SEC do not trigger criminal charges.

What Are the Risks of Company Counsel Representing Individuals?

When an individual who is an employee, officer, or director of a company is involved in SEC-related matters, generally the company’s counsel will not represent the individual. As in other contexts, a company’s counsel can represent an individual only if it expressly establishes a representation relationship.

If company counsel represents an individual, then concurrent representation may raise conflict issues. ABA Model Rule 1.7 provides the basic framework for assessing these conflicts. Generally, ABA Model Rule 1.7 requires an analysis to determine whether the representations are compatible, and if not, whether any waiver is possible. With this in mind, a conflict may be waivable in some cases, while others may require a conflict waiver that is confirmed in writing by the clients.

In cases involving potential SEC enforcement actions, the individual may have different interests than the company’s interests, but those interests may not be adverse. ABA Model Rule 1.13(f) requires that in these cases company counsel promptly clarify the role it is playing to the individual. While ABA Model Rule 1.13(f) does not generally impose the requirement for independent counsel, it does require company counsel to affirmatively notify individuals that it is representing the entity.

What Are the Employee Risks of Self-Reporting?

Companies must make informed decisions when they self-report to the SEC. Along with deciding what to disclose, companies must also consider potential employment-related risks.

Specifically, when considering self-reporting, companies need to address:

• Exchange Act Rule 21F-17: This rule prohibits entities from imposing restrictions that prevent employees (or other individuals) from communicating with the SEC’s staff about “possible violations of federal securities laws.” Exchange Act Rule 21F-17 has particular implications for employment contracts.
• Exchange Act §21F(h): As a result of implementing new whistleblower protections, this provision prohibits employers from retaliating against any person who provides information to the SEC.

ABA Model Rule 1.13 and a host of other rules also apply. If companies have questions about these rules, they need to determine what is appropriate with the help of their outside counsel. At Spodek Law Group, we handle matters advising companies and directors on their obligations under SEC enforcement and whistleblower laws, and we handle matters handling SEC enforcement matters for our individual and corporate clients.

What Happens if the SEC Opens an Investigation?

If a company or individual’s actions trigger an SEC investigation, then they must promptly and carefully assess what needs to be done. The SEC Division of Enforcement investigates potential federal securities-law violations. The SEC opens investigations based on investor complaints, whistleblower tips, self-disclosure, and referrals from other government agencies. This means that companies and individuals may not know their information is being scrutinized.

Generally, the SEC begins with an informal inquiry that may trigger a formal investigation if the SEC staff finds supporting documentation or testimony. When the SEC issues a formal investigation order, this grants the SEC’s staff the authority to subpoena documents and testimony from individuals and companies, and it allows the SEC’s staff to compel individuals to testify under oath.

Complex SEC investigations can take several years to complete. While this is true of any internal or government investigation, SEC investigations can take longer than other types of investigations because they can involve complex issues of securities-related misconduct and because they can be extremely expansive in scope. An informal inquiry by the SEC can take anywhere from several months to several years to resolve.

Formal SEC investigations are longer, because the SEC’s staff will likely have to subpoena a large volume of documents. For example, if the SEC conducts a formal investigation that last’s about two years, then investigators will typically receive thousands of documents.

While it is impossible to tell exactly how long it takes to conclude SEC investigations and enforcement proceedings, some data is available. The SEC publishes summaries of enforcement actions that were brought each fiscal year. The SEC’s website contains enforcement action summaries from fiscal year 2010 through fiscal year 2020. According to these summaries, the SEC brought its first formal administrative proceeding against issuers and executives in fiscal year 2010, and then it continued to bring civil actions in federal court each subsequent year. In fiscal year 2020, the SEC filed its first Wells Notice in March 2020 and its first formal administrative proceeding in September 2020. If these dates are typical for most SEC investigations, then the SEC typically takes about six months to a year to conduct its investigations. However, a sampling of 11 years is not necessarily representative of the SEC’s current enforcement practices.

What Violations Does the SEC Investigate and Prosecute? The SEC’s Enforcement Manual notes that “the SEC has civil enforcement authority over violations of the federal securities laws.” As a result, the SEC investigates and prosecutes alleged violations including, but not limited to, insider trading and insider tipping, manipulation and fraud, disclosure violations, fraud involving unregistered offerings, issuer misconduct, and violations by advisors, brokers, and other securities industry professionals. While the SEC Enforcement Manual lists various violations, it does not rank these violations according to the frequency of SEC investigations and enforcement.

Talk to Spodek Law Group

Every case turns on its own facts, and general information is no substitute for advice about yours. Todd Spodek, managing partner of Spodek Law Group, and the firm's attorneys defend federal criminal and white collar matters nationwide. Reach the firm at 212-300-5196.