Insights: Alert SEC Sanctions Firm for Policies that (Theoretically Could Have) Curtailed Whistleblowers

On June 23, 2021, the U.S. Securities and Exchange Commission (the “Commission”) entered an administrative order1 (the “Order”) that, among other things, fined a broker-dealer (“BD”) $208,912 for alleged violations of Rule 21F-17(a), which relates to individuals reporting possible securities laws violations to the Commission (a.k.a., whistleblowers).

**KTS Practice Tip: While the Order was entered against a broker-dealer, Rule 21F-17(a) applies to all entities subject to the Commission’s jurisdiction (e.g., public companies, broker-dealers, and investment managers). Indeed, the Commission has previously sanctioned public companies and investment advisers for violations of Rule 21F-17(a).2 This alert includes both a summary of the Order’s findings, and take-aways for legal and compliance practitioners who support firms that are subject to the Commission’s jurisdiction.

Summary of Order’s Relevant Facts

The Commission found that between April 2016 and July 2020, BD’s compliance manual contained a section entitled Communications with Regulators that stated in relevant part:

“Employees are also strictly prohibited from initiating contact with any Regulator without prior approval from the Legal or Compliance Department. This prohibition applies to any subject matter that might be discussed with a Regulator, including an individual’s registration status with FINRA. Any employee that violates this policy may be subject to disciplinary action by the Firm.”

Similar language was included in annual compliance training provided to BD’s employees in 2018 and 2019.3

 The Code of Conduct for BD’s parent company, to which BD’s employees were required to confirm compliance, stated that its section entitled Public Statements “should not be interpreted to restrict or interfere with any employee’s rights, free speech, or any whistleblower protections under applicable laws, regulations and requirements.”4

In July 2016, BD’s parent company conducted an internal review of applicable whistleblower and confidentiality provisions across its enterprise and added to its Code of Conduct a section entitled Prompt and Confidential Reporting of Illegal or Unethical Conduct that read:

“Nothing in this policy or any other Company policy or agreement is intended to prohibit you (with or without prior notice to the Company) from reporting to or participating in an investigation with a government agency or authority about a possible violation of law, or from making other disclosures protected by applicable whistleblower statutes.”5

Nonetheless, the Commission found that this language did not cure the offending Communications with Regulators section of the compliance manual because the introductory section of that compliance manual stated:

“There may be circumstances in which [the broker-dealer’s] policy or procedure may be more (or less) restrictive than [the parent company’s] policy or procedure. In all such circumstances, [broker-dealer] personnel should follow the more restrictive of the policies or procedures, absent explicit direction to the contrary.”6

On this basis, the Commission concluded that BD violated Rule 21F-17(a), even though the Commission acknowledged that it is “unaware of any specific instance in which” an employee of BD was “prevented from communicating with the Commission staff about potential securities laws violations” or any instance where BD disciplined or otherwise took action to enforce the restrictive provision or otherwise prevent communications with regulators.7

In reaching its determination, the Commission cited to the adopting release for Rule 21F-17(a),8 and explained that BD’s compliance manual was antithetical to the purpose of the rule, which is to: “encourage[e] individuals to report to the Commission.” Accordingly, the Commission concluded that BD had “willfully violated Rule 21F-17 of the Exchange Act, which prohibits any person from taking any action to impede an individual from communicating directly with the Commission staff about a possible securities law violation.”9

Prior to the entry of the Order, upon being notified of Commission staff’s concerns, BD removed the offending paragraph from its manual, added the two passages quoted below to the manual, and issued a compliance alert to its employees highlighting the changes to the manual.

“…nothing in [the manual] prohibits or restricts any person in any way from reporting possible violations of law or regulation to any governmental agency or entity, or otherwise prevent anyone from participating, assisting, or testifying in any proceeding or investigation by any such agency or entity or from making other disclosures that are protected and/or permitted under law or regulation.”

“Nothing in this Manual, any agreement between GS and its employees, or any GS policy or program requires a person to obtain prior authorization from GS to make any such reports or disclosures to any governmental agency or entity or to notify GS that an individual intends to make or has made such reports or disclosures.”10

The Take-Aways

Since the effective date of Rule 21F-17 on August 12, 2011, prudent legal and compliance practitioners handling internal investigations and responses to regulatory examinations and investigations have been careful to modify so-called “Upjohn warnings” relating to the importance of maintaining the confidentiality of employee’s conversations with the firm’s counsel (so as to preserve the attorney-client privilege) to ensure nothing in the warning could be interpreted as a directive that the employee not communicate with the firm’s regulators if he or she felt personally compelled to do so.

The Order highlights the importance of continuing to be sensitive to whistleblower concerns in Upjohn warnings. It also illuminates additional areas of attention for legal and compliance practitioners seeking to balance a Commission-regulated firm’s need to ensure clear and coordinated responses to regulatory inquiries and its interest in avoiding inadvertent waiver of the firm’s attorney-client and work-product privilege protections, whilst also complying with both the letter and spirit (as articulated in the adopting release) of Rule 21F-17.

The Commission has consistently articulated the importance of its whistleblower program11 to fulfilling the Commission’s mandates to protect investors, and maintain fair, orderly, and efficient markets.

In 2016, the Division of Examination (then-known-as the Office of Compliance Inspections and Examinations) issued a risk alert stating it would examine registered broker-dealers and investment advisers’ compliance manuals, codes of ethics, employment agreements, and severance agreements to determine whether provisions in those documents may raise concerns under Rule 21F-17.12 While it has been nearly five years since the alert was published, the Order shows that firms must remain diligent in scrutinizing policies, procedures, contracts, and agreements to ensure compliance with the Commission’s whistleblower protections.

Registrants with the Commodity Futures Trading Commission (“CFTC”) and those regulated by state securities regulators should also take notice as the CFTC has a program similar to the Commission’s whistleblower program, and late last year NASAA13 released a model act that closely tracks the Commission’s and the CFTC’s whistleblowers’ protection rule.14 Prior to the NASAA model rule, two states’ securities regulators15 already had provisions to protect whistleblowers. Additional states are expected to adopt a version of the model rule.

If you have any questions about compliance with the Commission’s, CFTC’s, or states’ rules on whistleblower incentives or protections, or about any other regulatory or enforcement matters relating to investment advisers or broker-dealers, please don’t hesitate to contact us.



1In re Guggenheim Securities, LLC, SEC Release No. 92237 (June 23, 2021).  Herein, Guggenheim Securities, LLC is referenced as “BD” and its parent company, Guggenheim Capital, LLC is referred to generically as the parent company of BD.
2See e.g., In re KBR, Inc., SEC Release No. 34-74619 (Apr. 1, 2015) (involving language in the KBR’s form confidentiality used when conducting internal investigations); In re Anheuser-Busch InBev SA/NV, SEC Release No. 34-78957 (Sept. 28. 2016) (involving non-disclosure language in an employee separation agreement); In re BlackRock, Inc., SEC Release No. 34-79804 (Jan. 17, 2017) (involving a provision in separation agreements where employees agreed to waive recovery of whistleblower awards).
3According to the Order, the relevant training language read: “Employees are prohibited from initiating contact with any regulator without prior approval from Legal or Compliance, including conversation[s] regarding an individual’s registration status with FINRA.” Id. at 3.
7Id at 4.
8SEC, Final Rule, Implementation of the Whistleblower Provisions of Section 21F of the Securities Exchange Act of 1934, page 201, available at
11See, e.g., SEC, Press Release, SEC Awards More than $28 Million to Whistleblower who Aided SEC and Other Agency Actions, available at (“‘The SEC has awarded more than $900 million over the life of the program, including almost $85 million to nine individuals in this month alone, which reflects the vitality and continued success of the SEC’s whistleblower program,’ said Emily Pasquinelli, Acting Chief of the SEC’s Office of the Whistleblower”). See also SEC, Press Release, SEC Adds Clarity, Efficiency and Transparency to Its Successful Whistleblower Award Program, available at
12SEC, Office of Compliance Inspections and Examinations, Examining Whistleblower Rule Compliance, October 2016, available at
13The North American Securities Administrators Association (“NASAA”) enables the States (i.e., its members) to coordinate on investor protection initiatives by: promulgating model rules, lobbying Congress and federal administrative agencies (e.g.,  the Commission), offering investor and industry education, and by detecting, deterring, and punishing fraud and abuse.
14See NASAA, Model Act to Award and Protect Whistleblowers, available at
15See Utah S.B. 100 (2011); Indiana H.B. 1294 (2012).


If you would like to receive related insights and information from Kilpatrick Townsend, please provide your contact details by filling out the form and clicking “Agree.” If you would like to access the PDF only, please click “Download Only.”