Should Your Company Self-Report to the SEC??

Last Updated on: 4th August 2026, 01:33 am

Companies facing voluntary self-disclosure must first distinguish between mandatory and voluntary disclosure. Voluntary self-disclosure differs from disclosures that are mandated by statutes, rules, or orders. When facing voluntary self-disclosure, companies must assess several key factors. In the Seaboard Report, the SEC outlines four components companies must consider: self-policing, self-reporting, remediation, and cooperation.

Companies seeking cooperation credit should have comprehensive self-policing policies and procedures designed to detect potential securities law violations. Additionally, they should consider promptly self-reporting discovered misconduct and implementing remedial action. While self-reporting may be helpful, companies will also be assessed based on their level of cooperation. The SEC’s cooperation guidelines provide companies with the opportunity to earn “cooperation credit” that may mitigate a company’s liability if the SEC pursues enforcement action, but companies’ decisions to voluntarily self-report must also be weighed against several additional factors.

For example, companies must assess investor harm. When considering voluntary self-reporting, companies should consider whether their potential securities law violation could result in material harm to investors. Companies must also determine whether the SEC will detect potential securities law violations. If detection is imminent, companies may not receive a positive Seaboard analysis or receive cooperation credit. Additionally, companies should weigh their decision to self-report against their desire to preserve attorney-client privilege. Along with these factors, companies must also evaluate any collateral exposure resulting from voluntary self-reporting.

Ultimately, voluntary self-reporting is a matter of risk assessment and may present more risk than the benefits obtained by receiving cooperation credit. While self-reporting may decrease the likelihood of an enforcement action, receiving cooperation credit is discretionary, and self-reporting will not automatically prevent charges or monetary penalties. The SEC’s Division of Enforcement investigates potential federal securities law violations and recommends to the Commission whether to bring an enforcement action and what relief to seek. This allows for substantial leeway, even when companies’ self-reporting decisions are backed by favorable Seaboard analysis.

When is Reporting to the SEC Legally Required?

While the examples discussed in the previous section represent the kinds of scenarios where voluntary self-reporting may make sense, companies also need to be aware of situations that trigger reporting requirements under SEC rules. A non-exhaustive list of SEC reporting requirements includes:

Part 205 of the Commission’s Rules of Practice (In-House Disclosure)

Under Part 205 of the Commission’s Standards of Professional Conduct for Attorneys, attorneys appearing and practicing before the Commission have a duty to report “evidence of a material violation” to the issuer’s chief legal officer or chief executive officer. If the superior does not provide “appropriate remedial measures” in response, they must move up the corporate ladder. The SEC provides examples of what qualifies as material evidence of violations of federal securities laws or breach of fiduciary duty. An example of material evidence of a violation of the federal securities laws includes evidence “that the person in question knowingly participates in, or authorizes, fraudulent activity.”

The rules also give examples of appropriate remedial measures. An example of an appropriate remedial measure is “implementing policies and procedures intended to prevent recurrence.” Remedial measures are not necessarily limited to measures intended to remedy the matter at hand. Examples are not limiting, and, “the factual circumstances of each case will dictate what, if any, remedial action would be appropriate in that case.”

Item 4.02 of Form 8-K (Non-Reliance)

Item 4.02 requires an issuer to report to the SEC on Form 8-K when it concludes that its financial statements “should no longer be relied upon.” Examples of when issuers may need to report on Form 8-K under Item 4.02 include:

• The issuer determines that “previously issued financial statements can no longer be relied upon;”
• An independent auditor informs the issuer that “previously issued financial statements can no longer be relied upon;”
• The issuer, upon the recommendation of its auditor or another party, determines that its previously issued financial statements “should be corrected or supplemented to reflect information that becomes available after the date of the reports;” and
• An independent auditor informs the issuer that “the auditor’s reports should be amended, corrected, or supplemented.”

An Item 4.02 Form 8-K report is generally due within four business days of the disclosure trigger.

Item 1.05 of Form 8-K (Cybersecurity Incident)

Material cybersecurity incidents generally require a Form 8-K disclosure under Item 1.05. While Item 1.05 contains various safe harbors and exceptions, most companies are required to disclose material cybersecurity incidents within four business days. Materiality determinations are company-specific, and as the SEC explains, “Companies can and should consider all aspects of cybersecurity, both qualitatively and quantitatively, in determining whether a cybersecurity incident is material.” Companies must make the materiality determination “without unreasonable delay.”

Rule 10b-5 of the Exchange Act

Rule 10b-5 of the Exchange Act prohibits “untrue statement of a material fact” or an omission of “a material fact necessary in order to make the statements made… not misleading.” However, Rule 10b-5 does not impose a universal duty to disclose SEC violations. The SEC requires companies to report potential Rule 10b-5 violations only under particular circumstances and when other SEC reporting obligations apply.

Form ADV Amendments for Investment Advisers

Investment advisers are required to amend Form ADV promptly when certain responses are no longer accurate. Examples include changes to “Item 11 - Disclosure Information” in Part 1A or material inaccuracies in “Item 10 - Other Financial Industry Activities and Affiliations” in Part 2A.

Exchange Act Rule 17a-11 (Broker-Dealer Reporting Obligations)

Exchange Act Rule 17a-11 requires broker-dealers to report specified financial and operational conditions to the SEC. Examples of reporting obligations for broker-dealers include reporting:

• Violations of the net capital rule (17 C.F.R. 240.15c3-1) that are “substantial” or “imminent;”
• “Delinquencies in paying customers or clearing organizations;”
• “The closing of a branch office”; and
• “The loss of possession or control over customer funds or securities.”

How Should the Company Decide Whether to Self-Report?

When companies identify potential securities law violations, they should promptly take all steps necessary to make informed decisions regarding voluntary self-reporting. While there are specific considerations for each potential securities law violation, several of the following factors should be key when companies determine whether to self-report to the SEC.

Investor Complaints and Whistleblower Tips

One way companies may discover the SEC is getting ready to, or already, pursue an investigation is if investors complain or whistleblowers have tips for the agency. These complaints can trigger enforcement action under any of the agency’s statutory authorities and, in some cases, will be supported by whistleblower reward money. When whistleblowers are involved, companies should consider taking additional steps as well.

Market Surveillance

As discussed below, the SEC also uses surveillance tools to spot suspicious activity in the markets. For example, insider trading is commonly charged under Section 10(b) of the Exchange Act and is highly susceptible to detection through the use of market surveillance techniques.

SEC Examination Authority

In addition to monitoring market activity and accepting investor complaints and whistleblower tips, the SEC has examination authority to investigate companies’ records. Upon discovering a potential problem, it can then refer the matter to Enforcement for further investigation.

Prior to Likely Detection

From a broad standpoint, companies that come forward prior to when they are likely to be detected will be in a better position to argue that they deserve cooperation credit. When companies have a factual basis to be concerned about the likelihood of detection, they should also seek to promptly disclose and rectify the issues at hand.

Ongoing Investor Harm

When investor harm is ongoing, companies must also weigh their decision to self-report against the urgency of mitigating harm. Companies must, as discussed below, prioritize remediating any issues resulting from a potential securities law violation in order to both avoid liability and mitigate harm.

Unlikely to Be Discovered

Companies should also consider whether the potential securities law violations they need to address would be uncovered absent voluntary self-reporting. In some circumstances, self-reporting can expose misconduct that the SEC would not otherwise be likely to discover.

Whistleblower Activity

When whistleblower activity is known, it increases the likelihood that the SEC will independently discover the misconduct, making voluntary self-reporting potentially less valuable.

Nature of the Alleged Violation

As noted above, the nature of the alleged violation also plays a role in determining whether a company needs to self-report. Insider trading is more likely to be detected by the SEC through market surveillance, and companies should take this into account when weighing their decision to self-report.

How Should We Investigate Before Making a Self-Report?

Companies need to make well-informed decisions about voluntary self-reporting, and conducting a thorough internal investigation is a critical step in this process. However, when considering whether to conduct an internal investigation, companies need to be aware of several key considerations, including:

• Does a company’s internal investigation of a potential securities law violation automatically receive attorney-client privilege? Not necessarily. However, companies can take steps to establish attorney-client privilege during their internal investigations and interviews, and as a result, companies should generally avoid conducting internal investigations without outside counsel.
• If a company chooses to voluntarily self-report to the SEC and discloses materials created in the course of an internal investigation, does this automatically result in a waiver of attorney-client privilege? Not automatically. However, if a company voluntarily discloses materials that it would otherwise be entitled to withhold under the attorney-client privilege, this may raise questions about whether it waived its right to assert the privilege. The likelihood of obtaining a waiver depends on a number of factors, and companies that make the decision to voluntary self-report need to be prepared to avoid waiver disputes if the SEC seeks to use investigation materials in future enforcement proceedings.
• Does a company’s voluntary self-report to the SEC necessarily involve disclosing its internal communications? Not necessarily. In most cases, companies can limit their self-reporting to disclosing underlying facts and events without producing any of its internal communications.
• Does a company’s determination of a likely SEC investigation trigger a duty to preserve all relevant evidence? Yes. When a company knows, or reasonably anticipates, that an investigation is likely, its duty to preserve potentially relevant evidence will be triggered. This means that companies need to take steps to preserve evidence that it is under a duty to preserve before conducting its internal investigation.
• Does company counsel also represent employees individually? This is a key concern during internal investigations and interviews. Company counsel generally only represents employees in their individual capacities when there is an actual attorney-client relationship between counsel and the employee.
• When does a company’s decision to conduct an internal investigation impact its ability to receive cooperation credit? To receive cooperation credit under the Seaboard Report, companies must also answer to two additional questions. These are:

- Who conducted the company’s internal review?

- How do the individuals who conducted the review relate to senior management within the company?

• When does joint representation create conflict when employees’ interests become adverse to their companies’ interests? If company counsel jointly represents the company and any of its employees, counsel cannot continue representing either party without which it must withdraw from representation when interests become adverse.
• Does unusual trading alone establish insider trading or manipulation under the federal securities laws? Not alone. While insider trading often involves unusual trading, there are other types of unusual trading too.

Todd Spodek and the attorneys at Spodek Law Group handle federal cases of this kind from New York, Brooklyn, Queens and Los Angeles.

What Can SEC Cooperation Credit Actually Do for Us?

The 2001 Seaboard Report remains the SEC’s principal corporate-cooperation framework. Under Seaboard, companies that make the right decisions regarding voluntary self-reporting can seek cooperation credit that, as discussed, mitigates any liability that results from the SEC pursuing enforcement action. This credit can also diminish a company’s risk of receiving an injunction and can help companies avoid being singled out as targets for enforcement action. Companies should also consider the role of remediation in the Seaboard Report. Remediation can include:

• Discontinuing the misconduct in question;
• Disciplining and/or suspending employees who participated in the alleged misconduct;
• Replacing and supplementing deficient internal controls or compliance programs; and
• Retaining outside counsel to evaluate any additional issues.

It is also important to remember that remediation must also be the company’s decision. When the SEC intervenes after receiving a whistleblower report, the company has effectively lost control over the remediation process. This is true for all types of corrective measures, and it’s important for companies to keep this in mind as well.

If companies want to secure cooperation credit under Seaboard, they should be prepared to demonstrate a clear and consistent commitment to transparency throughout the investigation. This means companies must be prepared to do more than just comply with the SEC’s demands as stated. Companies should make efforts to:

• Expedite access to documents, witnesses, and records; and
• Proactively identify and produce documents and information that the staff have not specifically requested, but that are likely to be significant to a fully informed investigative inquiry.

The Seaboard Report outlines the importance of transparency by stating that such attempts “show that companies take self-policing and reporting seriously.”

The Seaboard Report also outlines the importance of preserving staff credibility. Staff members that are tasked with assessing a company’s cooperativeness are more likely to view the company as cooperative when companies:

• Give the staff unhindered access to information; and
• Do not take unnecessary steps that impede the government’s ability to obtain information and evidence.

Conversely, when companies obstruct the government’s efforts to collect information and evidence, fail to meet deadlines, engage in frivolous privilege claims, engage in gamesmanship, or make attempts to sway the government’s investigative efforts, they may see its chances of securing cooperation credit go down.

Closing letters and no-action letters are two different forms of relief that can be sought by companies after an SEC investigation. A closing letter simply ends the investigation, while a no-action letter means the SEC has determined that “taking enforcement action is not warranted.” Importantly, self-reporting does not entitle companies to receive either of these forms of relief. While the SEC can issue closing letters and no-action letters without pursuing enforcement action, if it finds that a company engaged in securities law violations, it can seek civil penalties, disgorgement, an injunction, industry bars, and other remedies as well.

What Collateral Risks Can an SEC Self-Report Create?

The SEC is a civil enforcement agency, while criminal prosecutions under federal securities laws are conducted by the U.S. Department of Justice (“DOJ”). If potential criminal conduct is involved in a potential SEC enforcement matter, companies should consider whether the possibility of parallel SEC and DOJ proceedings needs to be addressed. A self-report to the SEC may expose the company to multiple risks, and company counsel needs to develop an informed response for both the SEC and the DOJ that takes a holistic perspective.

One of the most significant risks of voluntary self-reporting is the risk of a parallel criminal prosecution by the DOJ. Also, if an SEC self-report leads to a deferred prosecution agreement or other settlement agreement, this may also make the self-disclosed facts discoverable in subsequent private litigation. This can, in turn, increase the risk of monetary liability.

A second risk is that self-reporting to the SEC provides no immunity against criminal charges brought by the DOJ. While self-reporting can prevent enforcement action by the SEC, it cannot prevent prosecution for criminal conduct that requires investigation and prosecution by the DOJ. When facing potential criminal conduct, companies should not necessarily feel that self-reporting to the SEC offers substantial protection, as any subsequent DOJ prosecution is independent of the agency’s enforcement proceedings.

When considering whether to voluntarily self-report a potential securities law violation, companies should also consider their D&O policy. The language in the company’s D&O policy will determine whether it covers costs for the SEC investigation and the costs of defense. It will also determine if any potential penalties imposed by the SEC fall within the coverage afforded under the policy.

Certain SEC orders trigger statutory disqualification under Section 3(a)(39) of the Exchange Act. This includes automatic disqualification for entities and individuals subject to orders entered under Sections 15(b)(2), 20(e)(1), or 21(d)(2). Statutory disqualifications generally disqualify broker-dealers and associated persons from serving in member capacities, and they may lead to other forms of disqualification in other roles as well.

While a company’s SEC investigation may remain nonpublic at first, companies may still have independent disclosure duties under Item 1.05 and Item 4.02 of Form 8-K and other SEC rules. Voluntary self-reporting is subject to the same rules and limitations as mandatory reporting, and it does not exempt companies from their reporting obligations under any of these rules or other applicable federal laws.

Finally, self-reporting to the SEC does not trigger FINRA’s investigatory authority, as FINRA’s investigations are conducted independently under its own rules and not as a result of an SEC investigation. FINRA has its own enforcement authority to investigate broker-dealers and associated persons, and FINRA can seek penalties and sanctions in its own proceedings.

What Happens After a Company Reports Itself to the SEC?

Voluntary self-reporting to the SEC is an informed decision. However, companies need to keep in mind that SEC proceedings are unique. In most cases, companies will start with an informal inquiry, but they may eventually face a formal investigation. In both scenarios, there are several important considerations that companies need to keep in mind.

Informal Inquiries

The SEC’s Enforcement staff can initiate informal inquiries, but a voluntary self-report will also prompt an informal inquiry as well. Informal inquiries generally depend on voluntary cooperation, and they do not permit the issuance of subpoenas. This means that companies’ responding to informal inquiries is voluntary. However, companies may be requested to provide information, documents, witnesses, and representations that are material to the investigation.

Formal Investigations

If the informal inquiry fails to generate a convincing case, or if an informal inquiry is deemed insufficient, the SEC may open a formal investigation. A formal investigation permits the issuance of subpoenas for documents, books, records, and sworn testimony. As this is the case, a company’s decision to voluntarily self-report may lead to an obligation to testify, document preservation requirements, and potentially an SEC enforcement proceeding.

The SEC’s scope of investigations is broad. While investigations may focus on the conduct that generated the lead, companies should be prepared to address additional issues that the SEC staff finds relevant. The SEC Enforcement staff’s ability to investigate violations of federal securities laws is limited by the Commission’s orders, and any requests for information outside the Commission’s orders should not have any effect on the company’s liability.

Recommendation to the Commission

After completing its investigation, the SEC staff may recommend charges. However, the Enforcement staff may decide that taking enforcement action is not warranted. If this is the case, the staff may issue a closing letter or provide the Commission with other information to notify it of the closure of its investigation.

If the Enforcement staff recommends charges, the Commission may authorize federal-court litigation, administrative proceedings, or a combination thereof. When the Commission authorizes civil enforcement action, the SEC has the authority to seek civil penalties and other remedies as well.

Wells Notice

When a company receives a Wells notice, this is an indication that the Enforcement staff believes that an enforcement proceeding is warranted. A Wells notice will usually identify the charges that the staff may recommend the Commission authorize. With a Wells notice, the recipient will typically be given a period of time to respond. The recipient will also have the opportunity to submit arguments and mitigating evidence that it may be relevant to the Commission’s decision.

Importantly, a Wells notice does not conclusively establish that the SEC’s investigative work has ended. Even if the company settles its investigation, companies must keep in mind that additional issues may be uncovered, and this may bring more inquiries in the future.

Get Advice on Your Situation

If you want someone to look at the specifics of your case, Spodek Law Group handles federal criminal defense nationwide from New York and Los Angeles. The firm has been practicing since 1976 and its motto is simple: we owe loyalty to only you. Call 212-300-5196.