By: Chris Gadoury and Stephanie Gutheinz
The SEC’s whistleblower program was implemented under Section 922 of the Dodd-Frank Act and is primarily intended to reward individuals who provide original information to the SEC that leads to a successful enforcement action. Dodd-Frank also prohibits retaliation by employers against individuals who provide the SEC with information about possible securities violations.
In passing the Dodd-Frank Act, Congress substantially expanded the agency’s authority to compensate individuals who provide the SEC with information about violations of the federal securities laws. Prior to the Act, the agency’s bounty program was limited to insider trading cases and the amount of an award was capped at 10 percent of the penalties collected in the action. Under Dodd-Frank, awards can now be up to 30 percent of the monetary sanctions or recovery obtained by the SEC.
In order to be considered for an award under the SEC whistleblower program, a whistleblower must: (1) voluntarily provide the SEC, (2) with original information that (3) leads to the successful enforcement by the SEC of a federal court or administrative action, (4) in which the SEC obtains monetary sanctions totaling more than $1 million.
Certain people generally will not be considered for whistleblower awards under the final rules, including:
- People who have a pre-existing legal or contractual duty to report their information to the Commission;
- Attorneys (including in-house counsel) who attempt to use information obtained from client engagements to make whistleblower claims for themselves (unless disclosure of the information is permitted under SEC rules or state bar rules);
- People who obtain the information by means or in a manner that is determined by a U.S. court to violate federal or state criminal law;
- Foreign government officials;
- Officers, directors, trustees or partners of an entity who are informed by another person (such as by an employee) of allegations of misconduct, or who learn the information in connection with the entity’s processes for identifying, reporting and addressing possible violations of law (such as through the company hotline).
- Compliance and internal audit personnel; and
- Public accountants working on SEC engagements, if the information relates to violations by the engagement client.
Other individuals, such as employees of certain agencies and people who are criminally convicted in connection with the conduct, are already excluded by Dodd-Frank.
Under certain circumstances, however, compliance and internal audit personnel, as well as public accountants, can become whistleblowers when:
- the whistleblower believes disclosure may prevent substantial injury to the financial interest or property of the entity or investors;
- the whistleblower believes that the entity is engaging in conduct that will impede an investigation; or
- at least 120 days have elapsed since the whistleblower reported the information to his or her supervisor or the entity’s audit committee, chief legal officer, chief compliance officer—or at least 120 days have elapsed since the whistleblower received the information, if the whistleblower received it under circumstances indicating that these people are already aware of the information.
Regarding the increased anti-retaliation provisions, a whistleblower who provides information to the SEC is protected from employment retaliation if the whistleblower possesses a reasonable belief that the information he or she is providing relates to a possible securities law violation that has occurred, is ongoing, or is about to occur. In addition, the rules make it unlawful for anyone to interfere with a whistleblower’s efforts to communicate with the Commission, including threatening to enforce a confidentiality agreement.
Although the rules do not require that employee whistleblowers report violations internally in order to qualify for an award, the rules strengthen incentives that had been proposed and add certain additional incentives intended to encourage employees to use their own company’s internal compliance programs when appropriate to do so. For example, the rules make a whistleblower eligible for an award if the whistleblower reports internally and the company informs the SEC about the violations. In addition, an employee is considered a whistleblower under the SEC program as of the date that the employee reports the information internally — as long as the employee provides the same information to the SEC within 120 days. Through this provision, employees are able to report their information internally first while preserving their “place in line” for a possible award from the SEC. More importantly, the rules provide that a whistleblower’s voluntary participation in a company’s internal compliance program is a factor that can increase the amount of an award, and that a whistleblower’s interference with internal compliance and reporting is a factor that can decrease the amount of an award.