New rules under Dodd-Frank Act
Early decision under Dodd-Frank Act permits plaintiff to proceed with retaliation claim
Protected activity under Sarbanes-Oxley
Disclosure of fraud evidence to media is not protected under Sarbanes-Oxley
Advice to employers


Section 806 of the Sarbanes-Oxley Act 2002 protects employees of public companies who 'blow the whistle' by reporting conduct that they reasonably believe constitutes a violation of federal law relating to financial, securities or shareholder fraud. Section 922 of the Dodd-Frank Wall Street Reform and Consumer Protection Act, which was enacted in 2010, requires the Securities and Exchange Commission (SEC) to establish a new whistleblower programme that will pay awards to whistleblowers who provide the SEC with information about violations of securities laws that lead to a successful enforcement action resulting in monetary sanctions exceeding $1 million. Section 922 of the Dodd-Frank Act also provides protection to whistleblowers by prohibiting retaliation by employers against individuals who provide the SEC with information regarding potential securities violations. The anti-retaliation protections authorise civil causes of action to address adverse employment actions taken against a whistleblower employee because of that employee's report to the SEC.

In May 2011 the SEC adopted final rules implementing the Dodd-Frank Act. Most notably, the final rules do not require a whistleblower to report violations through a company's internal compliance programme before providing award-eligible tips to the SEC. This update sets out a summary of the key provisions of the final rules. In addition, it addresses recent decisions concerning the Dodd-Frank Act and Sarbanes-Oxley . In the first decision to address the Dodd-Frank Act anti-retaliation provisions, a federal district court in New York took a broad view of the category of individuals protected by the Dodd-Frank Act. With regard to Sarbanes-Oxley, recent decisions have addressed the requirement that a claimant have a "reasonable belief" that the reported conduct constitutes a violation of an enumerated law and Sarbanes-Oxley's application to disclosures of fraud to the news media.

New rules under Dodd-Frank Act

On May 25 2011 the SEC adopted rules implementing the whistleblower provisions of the Dodd-Frank Act. The new rules took effect on Augist 12 2011 and provide that the SEC may pay an award to an eligible whistleblower when the whistleblower voluntarily provides original information to the SEC that leads to a successful enforcement action brought by the SEC resulting in monetary sanctions in excess of $1 million. Key provisions of the rules include the following:

  • The new rules narrowly define a 'whistleblower' as an individual who provides the SEC with information that relates to potential violations of federal securities law. Thus, information relating to violations of state or foreign securities laws will not result in an award. A company is not eligible to be a whistleblower.
  • In order for information to be deemed voluntary, a whistleblower must submit the information to the SEC before the government or a securities regulatory authority requests such information from the whistleblower.
  • The final rules define 'original information' as information that is derived from the individual's "independent knowledge" or "independent analysis" and not otherwise known to the SEC or derived from publicly available information.
  • The new rules also protect from retaliation individuals who possess a reasonable belief that the information that they are providing relates to a possible securities law violation that has occurred, is ongoing or is about to occur and who provide information relating to the possible violation. The final rules expressly provide that the SEC has the ability to enforce the anti-retaliation regulations.
  • The final rules limit the eligibility of certain persons from being considered a whistleblower based on their relationship with or role played within a company. Excluded persons include:
    • individuals who have a pre-existing legal or contractual duty to report information to the SEC;
    • attorneys (including in-house counsel) who attempt to use information obtained from client engagements to make whistleblower claims for themselves;
    • individuals who obtain the information in a manner that violates federal or state criminal law; and
    • compliance or internal audit personnel.
  • The SEC included certain provisions in the new rules intended to encourage continued use of internal compliance programmes when appropriate. For example, the new rules provide that participation by a whistleblower in his or her company's internal compliance programme will be considered a factor that may result in a larger award, and interference with internal procedures may be a factor that can decrease an award. In addition, the rules provide that whistleblower information initially reported internally, but subsequently reported to the SEC within 120 days will be deemed to have been reported to the SEC on the date of the initial internal report, thus preserving the initial date and "place in line" for a possible award from the SEC.

Early decision under Dodd-Frank Act permits plaintiff to proceed with retaliation claim

In the first decision to address the anti-retaliation provisions of the Dodd-Frank Act, Judge Leonard Sand of the Southern District of New York interpreted the anti-retaliation provisions of the act broadly to cover not only whistleblowers who "provide information" to the SEC, but also individuals whose disclosures are "required or protected" under Sarbanes-Oxley, the Securities Exchange Act, 18 USC § 1513(e) or any other law, rule or regulation subject to the SEC's jurisdiction.(1)

The plaintiff, a former employee of private company TradingScreen, Inc, alleged that after he reported to his employer that the company's chief executive officer had been diverting corporate assets to another company, the company engaged outside counsel to conduct an internal investigation, which ultimately confirmed the plaintiff's allegations. Before the independent board members could force the chief executive officer to resign, he gained control of the board and fired the plaintiff.

The Dodd-Frank Act defines a 'whistleblower' as:

"any individual who provides, or two or more individuals acting jointly who provide, information relating to a violation of the securities laws to the Commission, in a manner established, by rule or regulation, by the Commission."(2)

Because the plaintiff made his reports to TradingScreen, and not to the SEC, the defendant argued he was not afforded protection under the Dodd-Frank Act.

The court noted that in addition to protecting lawful acts done by the whistleblower to provide information or testimony to the SEC, the act also protects whistleblower disclosures that are required or protected under Sarbanes-Oxley, the Securities Exchange Act, 18 USC § 1513(e) and any other law, rule or regulation within the jurisdiction of the SEC.(3)

The court determined that this presented a contradiction in the statute, as a literal reading of the definition of 'whistleblower' requiring reporting to the SEC would effectively invalidate the protection of whistleblower disclosures that do not require reporting to the SEC.

Thus, the court broadly interpreted the anti-retaliation provision to conclude that the plaintiff had "adequately alleged that he acted jointly with the Latham & Watkins attorneys, in an effort to provide information to the SEC regarding [the chief executive officer's] alleged misconduct." Because the plaintiff had not adequately alleged that Latham & Watkins had actually reported the chief executive officer's alleged misconduct to the SEC, the court permitted the plaintiff to amend his complaint to include such factual allegations.

Protected activity under Sarbanes-Oxley

Section 806 of SOX prohibits retaliation against an employee who reports any conduct the employee "reasonably believes constitutes a violation" of:

  • federal criminal law provisions prohibiting mail, wire or bank fraud;
  • any rule or regulation of the SEC; or
  • any provision of federal law relating to fraud against shareholders.(4)

To qualify as having engaged in "protected activity" under Sarbanes-Oxley, a whistleblower must establish by a preponderance of the evidence that he or she had a reasonable belief that the acts complained of violated the laws specified in Sarbanes-Oxley. Several recent decisions exemplify the tendency of the Arbitration Review Board of the Department of Labour to interpret liberally the requirement that the complainant engage in protected activity. For example, in Funke v Federal Express Corp(5) the board reversed the dismissal of a Federal Express employee's Sarbanes-Oxley claim based on her claim that she was suspended for alerting colleagues, her manager and local law enforcement that a third party was using Federal Express for mail fraud. The board held that the language of Sarbanes-Oxley contains no express requirement that the reported misconduct actually be committed by the complainant's employer; rather, Section 1514A of Sarbanes-Oxley "protects an employee who provides information 'regarding any conduct which the employee reasonably believes constitutes a violation'".

Further, in Sylvester v Parexel Int'l LLC(6) the board reversed the dismissal of claims filed by two individuals who alleged that a pharmaceutical research company had fired them for reporting fraud. The board held that complainants have to express only a "reasonable belief" of a violation of law to engage in Sarbanes-Oxley-protected activity – the protected activity does not have to describe an actual violation of the law. The board also rejected the "definitive and specific" evidentiary standard announced in its 2006 decision in Platone v FLYI Inc,(7) which had held that protected conduct had to describe definitively and specifically a violation of one or more of the laws listed in Sarbanes-Oxley. Thus, Sarbanes-Oxley protection is available as long as the employee provides information that he or she reasonably believes relates to a violation of one of the laws identified in Section 806 of Sarbanes-Oxley.(8)

The board upheld a Sarbanes-Oxley damages award in Brown v Lockheed Martin Corp,(9) a case involving a complaint by an employee of Lockheed Martin Corp that a vice president with the company misused employer funds and fraudulently charged expenses to the US government to purchase various items and pay for trips for her paramours. The board found that the complainant engaged in Sarbanes-Oxley-protected activity because she reasonably believed that her colleague committed wire and/or mail fraud by misusing company funds for sexual liaisons that would be billed to the government.

Disclosure of fraud evidence to media is not protected under Sarbanes-Oxley

Recently, the Ninth Circuit Court of Appeals decided that the whistleblower provisions of SOX do not protect employees who leak information to the news media.(10) Sarbanes-Oxley prohibits retaliation by public companies against employees who disclose evidence of fraud to:

  • federal or law enforcement agencies;
  • members of Congress; or
  • supervisors.

The plaintiffs, ex-employees of Boeing Co, said they repeatedly complained about what they saw as auditing deficiencies and pressure from management to rate Boeing's internal controls favourably. They eventually spoke to a reporter from the Seattle Post-Intelligencer, which ran a report about Boeing's computer systems security. Several months later, the employees were fired for violating a company policy prohibiting employees from releasing information to the media without approval from the company's communications department. The court specifically rejected their Sarbanes-Oxley retaliation claim, holding that if Congress wanted to cover media leaks, it could have referenced the press specifically in the law.

Advice to employers

The possibility of large rewards may cause whistleblowers to forgo reporting mechanisms provided by internal compliance programmes and instead disclose possible violations of law directly to the SEC. Nonetheless, companies should:

  • review their compliance programmes;
  • ensure that their employees are sufficiently informed about internal reporting programmes; and
  • educate employees regarding the importance of timely reporting.

Promoting a corporate culture that emphasises a commitment to legal compliance and ethical conduct should mitigate against the risk that employees will favour reporting to the SEC over utilising a firm's internal compliance programme.

For further information on this topic please contact Kevin B Leblang or Robert N Holtzman at Kramer Levin Naftalis & Frankel LLP by telephone (+1 212 715 9100), fax (+1 212 715 8000) or email ([email protected] or [email protected]).


(1) Egan v TradingScreen, Inc, 2011 WL 1672066 (SDNY May 4 2011).

(2) 15 USC § 78u-6.

(3) 15 USC § 78u-6(h)(1)(A)(iii).

(4) 18 USC § 1514A(a)(1).

(5) DOL ARB No 09-004 (July 8 2011).

(6) DOL ARB No 07-123 (May 25 2011).

(7) DOL ARB No 04-154 (2006).

(8) See also Inman v Fannie Mae, DOL ARB No 08-060 (June 28 2011), rejecting the requirement that an employee's disclosure relate "definitively and specifically" to one or more of the laws listed in Section 806 of the act.

(9) DOL ARB No 10-050 (February 28 2011).

(10) Tides v The Boeing Co, 644 F 3d 809 (9th Cir May 3 2011); petition for cert filed, No 11-309 (September 7 2011).