The Securities and Exchange Commission (the SEC or Commission) made clear in 2023 that it intends to aggressively enforce its whistleblower protection laws, namely Rule 21F-17, which prohibits employers from taking any action that impedes an individual from communicating potential securities violations to the Commission.
In 2023, the SEC filed its greatest number of enforcement actions relating to whistleblower protection issues since 2016. In September 2023 alone, the SEC announced settlements and sanctions against three companies in the amounts of $225,000, $375,000 and $10 million for violations of Rule 21F-17(a). Each of the September violations related to conditional language included in the companies’ employment and/or separation agreements.
Whistleblower Protection Under Rule 21F-17(a)
The SEC has emphasized the importance of whistleblowing in its enforcement program and has adopted strong policies providing both prophylactic and reactive protection for whistleblowers. Section 21F of the Security Exchange Act of 1934 sets out provisions governing the rights and obligations of SEC whistleblowers as well as the procedures for determining and administering whistleblower awards.
Rule 21F-17(a) (the Rule) states that “[n]o person may take any action to impede an individual from communicating directly with the Commission staff about a possible securities law violation, including enforcing, or threatening to enforce, a confidentiality agreement . . . with respect to such communications.” Under this Rule, the SEC has consistently found violations where a contract clause may have any potential chilling effect on whistleblowing activity.
The language of the Rule is intentionally broad. Thus, violations of the Rule are not limited to language contained in employment agreements, separation agreements or confidentiality agreements. Impermissibly restrictive language in a company’s internal policies, procedures and guidelines, including employee handbooks, codes of conduct, training manuals or other documents may also violate the Rule. Further, violations are not limited to the employee-employer context. The SEC has brought Rule 21F-17(a) actions against individuals and companies in connection with agreements presented to customers and investors.
The Rule’s broad language also means that violations are not limited to only publicly-traded companies. Any individual or company, public or private, utilizing language that potentially impedes individuals’ ability to communicate possible violations with the Commission is subject to the Rule and SEC enforcement.
Notable SEC Enforcement Actions in 2023
SEC Whistleblower Enforcement Trend
The SEC’s aggressive enforcement of its whistleblower protections in 2023 puts companies on notice of the Commission’s approach going forward. First, the SEC has made clear that it will pursue enforcement actions against privately held companies. Second, the SEC does not need evidence of specific instances of employees actually being prevented from communicating with the Commission for an agreement to violate Rule 21F-17(a). Finally, and most importantly, the SEC has made clear that disclaimers in agreements, such as “nothing in this agreement is intended to limit in any way your right or ability to file a charge or claim with any federal, state, or local agency,” are likely insufficient mechanisms to save an agreement that the Commission maintains otherwise impedes an individual’s ability to communicate securities violations to the Commission.
Being Prepared in 2024
Heading into 2024, there is little indication that the SEC intends to slow down its enforcement efforts. With that in mind, companies subject to the Security Exchange Act should be sure to review their employment agreements, employee handbooks, separation agreements, and other confidentiality provisions to ensure compliance with Rule 21F-17(a).
If you have any questions about the information contained in this memo, please contact Colin Leonard, any attorney in Bond’s labor and employment practice or the Bond attorney with whom you are in regular contact.