Introduction
In recent years, the U.S. Securities and Exchange Commission (SEC) has faced a series of legal challenges and criticism from commentators across the political spectrum over its enforcement practices. At issue is how the SEC wields its enforcement powers—powers that have expanded meaningfully since Congress created the SEC to police the capital markets in 1934. Over the course of the SEC’s history, Congress and the courts have authorized the agency to impose more penalties, on more types of market participants, in more ways. Some critics argue that the SEC wields these powers too strongly, in ways unfair to the agency’s targets, and that the SEC’s enforcement discretion should be constrained. Conversely, other commentators express frustration that the SEC does not wield these powers forcefully enough.
The purpose of this Article is to introduce a more precise foundation from which to evaluate SEC enforcement staff decisions, including those decisions subjected to intense criticism in recent years. We propose to clarify two terms—“case” and “action”—that are frequently used, often interchangeably, in the literature and commentary on SEC enforcement. To do this, we publish data (FY 2010–FY 2021) from the Securities Enforcement Empirical Database (SEED), a collaboration between the NYU Pollack Center for Law & Business and Cornerstone Research. Our primary contribution is new data that tracks one characteristic of SEC enforcement that has not received sufficient attention in the literature: the relationships between or among enforcement actions that shed light on SEC enforcement staff choices.
A single SEC investigation can, and often does, generate charges against multiple parties, and SEC enforcement staff need not bring these charges in the same legal proceeding or even at the same time. After investigating a firm for possible violations of federal securities laws, the SEC can initiate legal proceedings against the firm in question, the firm’s executives, and/or other firms or individuals connected to the alleged misconduct. For example, in 2006, the SEC filed charges against an executive of American International Group, Inc. (AIG), and one week later, the SEC filed a second civil action, this time against AIG itself. Then in 2009, the SEC instituted a civil action against two more AIG executives, as well as a separate civil action against AIG’s outside accountant. Finally in 2010, nearly four years after the first action, the SEC instituted a civil action against another financial firm for its participation in the same scheme at issue in the original actions from 2006. As the foregoing example shows, the SEC can prosecute a case in a single enforcement action or, alternatively, across several related enforcement actions. A “case,” as the term is used throughout this Article, refers to one or more enforcement actions against one or more defendants that arise from the same underlying violation. Thus, an SEC case can entail a single enforcement action against one or more defendants or a cluster of related enforcement actions.
No study to date has focused on the web of related SEC enforcement actions; as a result, this phenomenon is rarely noted in the securities enforcement literature, let alone understood. The SEC does not denote which actions arise from the same underlying matter in its enforcement reports, and, to our knowledge, only three studies of SEC enforcement have even acknowledged the fact that the SEC frequently initiates multiple enforcement actions in connection with a single matter. One such study observes, in passing, that the largest SEC investigations each generated over a dozen related legal proceedings; another suggests that, at least in financial fraud cases involving multiple parties, the SEC initiated multiple, separate actions against different defendants more often than it filed a single action naming all implicated parties. However, no study has described how prevalent these related enforcement actions are, or why the SEC chooses to file multiple actions in some matters while in others it prosecutes all parties in a single, consolidated legal proceeding, or what, if anything, these relationships reveal about SEC enforcement choices.
As a result, nearly all research on securities enforcement measures and analyzes the SEC’s enforcement choices at the action-level. By failing to account for clusters of related actions—i.e., cases—those studies present a fragmented and incomplete picture of securities enforcement activity. We identify and fill these gaps.
We begin in Part I by describing the significance of the SEC’s enforcement data—both for industry observers who rely on the data to change their behaviors and, more importantly, for Congress, which uses this data to make funding decisions. Like most other federal agencies, the SEC is required to report on its performance. Accordingly, in a ritual that increasingly garners academic and popular attention, each year the SEC publishes the number of enforcement actions, aggregate penalty amounts secured, and other qualitative information about its enforcement activity. In the past decade, these reported figures have consistently, with few exceptions, trended up—that is, the SEC reported more penalties or more enforcement actions year over year. One concern that follows from this focus on reporting is that in order to justify its performance to Congress, the SEC may make enforcement choices that boost its enforcement numbers without necessarily deterring wrongdoing.
In recent years, scholars of securities enforcement have scrutinized the SEC’s statistics and sought to empirically measure the quantity and quality of the SEC’s enforcement activities. One notable study by Professor Urska Velikonja, for example, identified certain methods the SEC used to calculate its enforcement statistics which, in short, “double- and triple-count” enforcement actions; as a result, it appears that from 2000 to 2014, the SEC artificially inflated the actual number of enforcement actions it initiated, as well as monetary penalties it imposed. Velikonja’s study focused on so-called “follow-on” actions: legal proceedings based on the outcome of another action against the same alleged wrongdoer involving the same facts. Our study, while informed by observations in Velikonja’s work, covers different ground: we exclude follow-on actions in our analysis and instead focus on the relationships between and among enforcement actions against different defendants, or the related actions that comprise what we call cases.
Other studies have sought to understand the relative quality—based on the types of defendants implicated or other factors—of the SEC’s enforcement efforts over time. In Part I, we describe this growing body of commentary that examines the statistics the SEC has published and quantify the SEC’s enforcement efforts, nearly all of which use enforcement actions as the basic unit of measurement. We show that this focus on discrete enforcement actions—without accounting for the cases—produces a fragmented and incomplete picture of the SEC’s enforcement activity. Crucially, action-level data does not capture the universe of defendants implicated in a matter, nor does it capture the aggregate penalty amounts secured in large cases initiated across multiple enforcement actions.
In Part II, we publish SEED data from FY 2010–2021 at both the case and action level. Our descriptive statistics clarify the significance of the case-action distinction, and, moreover, show that there are different types of cases. Some cases, for example, involve a single defendant. Other cases involve multiple defendants, some of which are prosecuted in a single, consolidated enforcement action, and others that are charged in multiple, related enforcement actions either filed on the same day or over a period of time that can extend up to five years between enforcement actions. We call these clusters of discrete, related enforcement actions that arise from the same underlying violation “Multi-Action Cases.”
Multi-Action Cases, largely overlooked in the securities enforcement literature, represent a significant portion of the SEC’s enforcement output. Over 40 percent of the SEC actions tracked on SEED between FY 2010–FY 2021 are connected to one or more other SEC actions arising from the same underlying alleged misconduct. Using SEED data, we describe Multi-Action Cases and consider whether, as one study of SEC enforcement asks, these cases represent an attempt to opportunistically boost enforcement numbers by “slicing and dicing” cases against multiple defendants into multiple enforcement actions. Finding limited evidence of this kind of numbers-boosting, we instead identify four features of Multi-Action Cases that distinguish them from other SEC case types: (1) the nature of the implicated defendants, (2) settlement patterns, (3) cooperation patterns, and (4) choice of venue.
These four distinctive features of Multi-Action Cases surface aspects of SEC enforcement previously unaddressed in the literature. For example, a significant number of SEC cases are comprised of actions prosecuted in different venues—that is, in some cases, the SEC charged some alleged wrongdoers in civil court and charged others in in-house administrative proceedings. These dual-venue cases make up over 13 percent of cases (26 percent of actions) in our dataset yet have gone virtually unremarked in the literature on SEC enforcement. Another example concerns cooperation across enforcement actions. In a number of SEC matters, a defendant in one enforcement action cooperated in the investigation, and even in the prosecution, of another defendant in a separate but related action. Taken together, these features suggest that aspects of Multi-Action Cases may enable the SEC to strategically prosecute sprawling cases against multiple defendants, particularly when those defendants have divergent priorities. Multi-Action Cases thus illuminate features of SEC enforcement—features relevant to ongoing discussions about the limits of SEC enforcement authority—that are invisible in fragmented action-level data.
In Part III, we show how analyzing related actions as part of a single case has implications for the SEC’s reporting statistics by changing how the SEC’s top-line enforcement figures appear and even reframing the appearance of the SEC’s enforcement priorities. We analyze the three most important data-points the SEC publishes each year: (1) the overall number of actions and (2) aggregate penalty amounts reported by the SEC, as well as (3) the percentage of individuals charged.
This analysis shows that the types of cases initiated by the SEC have shifted over time. In recent years, the SEC has increasingly focused on one-off cases against a single defendant in a single enforcement action. These “Single Defendant, Single Action Cases,” as we call them, constitute the majority of the SEC’s cases since FY 2014 and differ from other case types in important respects. Unlike cases involving multiple defendants, Single Defendant, Single Action Cases rarely involved allegations of serious wrongdoing, were rarely litigated and nearly always settled concurrently with filing, and, finally, usually involved the cooperation of defendants. Many of these cases were initiated as part of “sweeps” in which defendants self-reported violations and settled charges concurrently with the SEC. Unsurprisingly, these cases required far fewer resources to prosecute, compared to other case types. Nevertheless, these cases—which on SEED all involve corporate defendants—continue to generate significant penalty amounts for the SEC. Taken together, our case-level data suggests that the SEC, at least in recent years, has focused on lower-cost cases to generate a higher number of actions and penalties, especially in years where the SEC broke enforcement records.
Finally, our case-level data recontextualizes the “individual accountability” metric reported annually by the SEC: the percentage of individuals charged in enforcement actions. Given that most individuals on SEED were charged in Multi-Action Cases, the SEC’s calculation of this percentage at the action-level, without any corresponding case-level information, renders this statistic, at best, inconsistent, and, at worst, misleading. Based on the subset of cases tracked on SEED, the percentage of cases involving at least one individual appears to be lower than the percentage of actions involving at least one individual reported by the SEC.
The statistics used throughout this article are descriptive, and thus each of the aspects of SEC enforcement highlighted throughout require more study. However, what is clear to us, and what we argue throughout, is that action-level data presents an incomplete, and at times misleading, picture of SEC enforcement activity. For example, the shifting nature of cases cannot be observed in action-level data. Combined with the SEC’s broad powers to determine how it organizes and counts enforcement proceedings that impact the agency’s statistics, action-level data can render the SEC’s reports inconsistent or subjective—and thus limit the value of SEC data to Congress or the public.
While action-level data is helpful in some contexts, and as such has its place in the SEC’s reports and analysis thereof, it should be supplemented with case-level data. We recommend that scholars studying SEC enforcement empirically account for cases, not only actions, in their analyses. The SEC, in addition, could support this work by providing case-level data in its reporting. In doing so, the analysis of SEC enforcement would be made clearer, more consistent, and mitigate manipulation.
I. The Importance (and Limits) of SEC Enforcement Statistics
A. Why SEC Enforcement Statistics Matter
Congress created the SEC in 1934 to make and enforce rules to regulate the U.S. securities markets. The SEC’s powers to enforce federal securities laws and its own rules are articulated in its original enabling statute, the Exchange Act of 1934, and successive federal securities laws.
Federal securities laws grant the SEC a range of investigative and enforcement powers. The SEC is authorized to investigate potential violations of the securities laws, and, if need be, issue subpoenas to compel the production of information. The SEC is also authorized to initiate enforcement proceedings. To do so, the SEC can sue alleged wrongdoers in federal court, or it can also initiate administrative proceedings, whereby a matter is adjudicated internally at the SEC. The SEC does not have criminal enforcement authority, and, accordingly, it cannot bring criminal charges. Instead, the SEC’s enabling statutes limit the SEC to sharing evidence of possible criminal violations of the securities laws with criminal enforcement agencies, such as the U.S. Attorney General.
The SEC’s lack of criminal authority reflects its purpose as a civil enforcement agency: deterrence. The sanctions available to the SEC are remedial in nature, are intended to support the Commission’s mission of preventing securities laws violations, and are distinguishable from criminal penalties, such as incarceration or criminal fines, which serve additional purposes like punishment or rehabilitation. The sanctioning powers available to the SEC include the power to suspend or revoke the license of regulated parties (e.g., investment advisers or broker-dealers); broad powers to halt certain activities, including the trading of stock; the power to bar officers and directors of public companies from serving in those capacities; and even the power to impose civil monetary penalties, which resemble criminal financial penalties.
Much of this enforcement arsenal is relatively new. The menu of sanctions available to the SEC and the SEC’s discretion to impose those sanctions have evolved significantly (for the most part, expanded) since Congress created the SEC in 1934. Professors Choi and Pritchard described the nature of this evolution as follows:
Over its history, the SEC has shown a remarkable facility to translate its failures into broader authority. After scandals, Congress has repeatedly obliged the SEC with additional enforcement tools. Granting the regulator greater authority is a tried-and-true means of showing that legislators were “doing something” to respond to perceived crisis.
As a result of this cyclical process of scandal and ensuing legislation, the SEC’s enforcement powers have grown. Today, they include additional, more potent types of sanctions, authority to impose those sanctions on a larger class of market participants, and more procedural ways to impose those sanctions.
The expansion of the SEC’s enforcement powers has provoked litigation and backlash—often, but not exclusively, by the business lobby. It has also prompted greater scrutiny by courts and scholars, as well as growing interest from the industry regarding how the SEC wields its enforcement discretion. A current annual ritual involves the publication of the SEC’s enforcement statistics. Each year, after its fiscal year concludes in September, the SEC publishes its enforcement data. This data is then analyzed and disseminated by networks of analysts, compliance professionals, and lawyers who provide the industry with information about enforcement trends. The focus on numbers in these reports is evident in excerpts from recent industry memorandums, which include statements like: “record-breaking enforcement in 2022, expect continued aggressive pursuit;” or “the SEC brought 760 enforcement actions (an increase of nine percent over 2021).” As Professor Velikonja noted, this process is “economically significant”—firms adjust their behavior in response to signals sent by the SEC’s enforcement choices.
This focus on numbers is not exclusive to industry. SEC staff also appear to be attuned to their numbers. As one law firm commented on the SEC enforcement report for FY 2022:
The record-setting penalties that the SEC issued in 2022 will be used as precedent by commission lawyers when determining the size of penalties in 2023 and future years. The SEC may well also feel pressure to beat its 2022 results, despite cautioning in its press release that it does not expect to “set new [records] each year” . . . . [T]he SEC received a $210 million boost in its FY 2023 budget that will, among other things, fund new hiring in the enforcement division. It will naturally be pressured to show taxpayers that this was a wise investment.
Why does the SEC care about its numbers? The SEC depends on Congress to fund its operations and pay its employees, and Congress relies on the SEC’s data to evaluate the agency’s budget requests. In a series of articles, Professor Velikonja examined the relationship between the SEC’s enforcement statistics and the Congressional budget process and observed that it puts pressure on the SEC’s enforcement activities:
The most significant source of pressure on the SEC is institutionalized annual reporting to Congress that has been combined with the budget appropriation process. The SEC must report annually to the appropriations committees and the committees overseeing financial market in both houses of Congress. It must prepare and present a strategic plan once every four years, together with annual performance plans and performance reports. If it fails to meet any of the performance goals it has set for itself, it risks losing funds through the budget appropriation process. As a result, the SEC faces intense pressure to at least meet its performance targets, and to exceed them if possible.
According to Velikonja, Congressional scrutiny of how the SEC enforces the law has intensified in the past two decades. In the 1980s and 1990s, Congress passed a series of laws that expanded the SEC’s power to impose financial penalties, thus raising the economic stakes of an SEC enforcement proceeding. In turn, Congress has closely watched how the SEC uses these powers, and, especially since the financial crisis of 2008, Congress has used its budget powers to manage how the SEC enforces the securities laws in ways that often track political lines.
Some securities law scholars warn that the focus on reported metrics distorts the SEC’s enforcement incentives. The concern is that to justify its performance to Congress, the SEC may make enforcement choices that boost its enforcement numbers without necessarily deterring wrongdoing. For example, Velikonja pointed out that the SEC increasingly pursues “strict liability” violations—technical violations that do not require a showing of fraudulent intent or even negligence to prosecute (and thus require less resources to enforce) but nevertheless bolster the total number of matters the SEC enforces in a particular year.
Accordingly, in recent years scholars have studied the SEC’s enforcement program empirically, seeking to better understand the activities of SEC enforcement staff and develop methods to measure the deterrent impact of the SEC’s activities, a notoriously difficult challenge. One issue that emerges from this literature concerns the reliability of the SEC’s statistics. Scholars, commentators, and even a few SEC officials have identified problems with how the SEC’s data is interpreted and even problems with the data itself. Much of these issues relate to the agency’s broad discretion to manage, measure, and then report on its enforcement activities. The SEC, like most other federal agencies, is required by Congress to calculate and report statistics on its performance; however, this reporting requirement is broad and nonprescribed, and the SEC has near-complete authority to determine what and how it calculates the statistics it publishes.
The SEC reports a variety of data-points, most prominent of which is the overall number of enforcement actions initiated each year. This number, for better or worse, is understood to indicate the intensity of SEC enforcement and the pervasiveness of financial wrongdoing in a given period. While some SEC officials have publicly warned against making too much of the overall action count or using it to measure the agency’s effectiveness or impact, SEC leadership continues to tout the overall number of enforcement actions the agency initiates each year. Two recent examples illustrate this point. In 2016, SEC Chair Mary Jo White highlighted that the SEC brought “a record number of enforcement actions” as an achievement of her tenure, and more recently, current SEC Chair Gary Gensler touted the fact that despite a reduced headcount, the enforcement division still managed to increase, year-over-year, the number of enforcement actions.
Researchers have studied these statistics and identified issues with the SEC’s counting methodology. Most notably, a 2016 study by Velikonja analyzed fifteen years of SEC enforcement data and concluded that “the statistics the SEC most commonly uses to assess and report its enforcement performance are flawed.” Velikonja identified certain methods the SEC used to calculate its enforcement statistics that, in short, double- and triple-counted enforcement actions. As a result, the SEC appears to have artificially inflated the actual number of enforcement actions it initiated, as well as the monetary penalties it imposed, from 2000 to 2014.
The central problem Velikonja identified—which illustrates the pliability of the SEC’s numbers—concerns the SEC’s counting of “follow-on actions.” The SEC routinely institutes follow-on actions to impose industry bars or suspensions. For example, in 2009 the SEC filed charges against a hurricane restoration company, Home Solutions Inc., and its executives for inflating its revenues and “issuing a series of materially false press releases boasting robust financial results following Katrina and other weather-related disasters.” In a civil suit, the SEC fined the accountant for Home Solutions for his role in aiding and abetting the fraud. Separately, the SEC initiated an administrative proceeding against the accountant based on the same issues, in which the SEC barred him from practicing as an accountant for three years. Between 2000 and 2014, the SEC reported each follow-on action, as well as the primary action upon which it was based, as separate actions without including any qualifying information to indicate that the actions were related. Following publication of Velikonja’s study, the SEC changed the way it calculates its annual enforcement numbers: the agency now clearly labels which actions are stand-alone actions (not derivative of other actions) or follow-on actions. Additionally, in its annual press releases, the SEC not only reports the overall number of enforcement actions it initiates, but it also now touts the number of new stand-alone actions.
Even after the SEC fixed its reporting on follow-on cases, researchers continue to identify ways that the SEC’s prosecutorial discretion affects the agency’s enforcement numbers. One example that illustrates how the SEC’s enforcement choices can produce irregular or inconsistent counting concerns the seasonality of SEC enforcement. Studies have shown that the SEC initiates far more enforcement actions in September—the final month of its fiscal year—than any other month. This so-called “September Swell” resembles the seasonality of corporate earnings, which often spike immediately before the end of a fiscal year when earnings are reported. Professor Choi theorized that although there may be various reasons for this phenomenon, the SEC “may shift enforcement actions that otherwise would require more time from just after the end of the fiscal year on September 30 to just before the end of the fiscal year enforcement.” Velikonja made a stronger claim that “[t]he SEC often puts pressure on defendants to either settle by September or face a lawsuit.”
Another issue that has emerged regarding securities enforcement concerns the relative significance or quality of each reported enforcement action. SEC Commissioner Hester Peirce described the problem as follows: “[E]ach enforcement case is unique, and its import is not easily reduced to a number. Even the penalty numbers cannot tell us much about a case’s importance. Some relatively low dollar cases have been very meaningful . . . . on the other hand, some high-dollar cases are misleading in their impact.” As Peirce noted, statistics can reduce each enforcement proceeding to a number and flatten characteristics of each matter, which can make it difficult to interpret and assess the relative significance of each action.
This problem—the difficulty of assessing the relative merits of each SEC enforcement matter—relates to an enduring critique of administrative agencies: that they “misallocate their resources by bringing mostly small cases.” That is, agencies too often focus on low-hanging, easy-to-prosecute matters, which boosts statistics but does not further the mission of the agency. Instead, the critique goes, agencies should devote more resources to the most serious, egregious, or challenging matters. An excerpt from a 2009 New York Times column—Chasing Small Fry, S.E.C. Let Madoff Get Away—illustrated this critique as applied to the SEC:
When you talk to lawyers who defend people in trouble with the S.E.C., they tend to make several broad complaints. The first is that the agency spends too much time going after small fry . . . . [E]ven the new S.E.C. enforcement chief, Robert Khuzami, acknowledges that the agency has for too long judged itself primarily on “quantitative metrics” that is, the number of actions it brings and cases it settles. . . . John A. Sten, a former S.E.C. lawyer . . . said, “As an investigator, you are pressured to generate ‘stats.’” Clearly, it is far easier for the S.E.C. to [boost numbers] by going after little guys, who will often agree to a settlement and a fine even when they are innocent. They either run out of money, or lose the will to keep fighting, or both.
To discern which matters are big or small, observers of SEC data often rely on monetary remedies and interpret high-dollar remedies as indicative of serious wrongdoing or vigorous enforcement. While this approach appears reasonable, because SEC officials routinely emphasize the high monetary remedies imposed in enforcement proceedings, it has problems. Namely, large fines do not necessarily have the most deterrent effect because their impact depends on the relative size of the fined party. In addition, higher fines are not necessarily or even often produced by the most resource-intensive cases.
Recognizing these limitations, the SEC and scholars have developed other proxies of, or signals for, meaningful enforcement matters. For example, the SEC now reports how many individuals are charged in a particular action, not just firms. Scholars have also done this, at times supplementing the SEC’s reports with their own data, offering alternative proxies for enforcement quality, including measures of the duration or complexity of enforcement proceedings, or measures that consider whether a defendant opts to settle or litigate. Some have focused on the venue in which the SEC chooses to litigate matters, theorizing that the SEC’s decision to use in-house administrative courts, as opposed to federal civil courts, signals certain qualities of a particular matter.
The growing body of empirical work on securities enforcement clarifies how the SEC’s broad powers to organize and count enforcement proceedings impact the agency’s statistics and can render them irregular, inconsistent, or subjective, thus limiting the value of SEC data to Congress or the public. Scholars and commentators have dedicated time to critiquing these statistics, recognizing that the SEC’s numbers influence (or at least have the potential to influence) the behaviors of SEC enforcement staff and Congressional budget appropriation.
In short, the SEC’s numbers matter, and scholars continue to analyze them and seek better ways to organize and interpret them, the goal being to better understand, as Velikonja put it, “the prevalence of misconduct or the SEC’s ability to detect and prosecute misconduct.” In furtherance of this goal, this Article raises a different issue concerning the SEC’s statistics that bears on both their quality and reliability and concerns their basic unit of measurement.
B. Limitations of Action-Level Data
Enforcement statistics published by the SEC, and nearly all commentary and academic criticism thereof, use enforcement “actions” as the basic unit of measurement. An enforcement action, in the SEC context, simply refers to any discrete enforcement proceeding initiated by the SEC—for example, a single lawsuit filed in civil court. Actions can be acceptable units of measurement for SEC activity, but the term can be misleading.
Consider, for example, the SEC’s enforcement proceedings against Iconix brands, a fashion and footwear conglomerate. After a years-long investigation of Iconix’s accounting practices, the SEC initiated three enforcement actions: it filed a lawsuit in the Southern District of New York against Iconix Brand Group Inc., filed a second lawsuit in the Southern District of New York against Iconix’s CEO and COO, and, finally, it initiated administrative proceedings against Iconix’s CFO. These enforcement actions—which emerged from the same investigation, based on the same underlying misconduct, and were filed on the same day—were counted as three discrete actions in the SEC’s annual reporting statistics. However, if related enforcement actions, like the three Iconix enforcement actions, are instead tabulated and reported as a single case, the SEC’s enforcement numbers would change.
We use the term “case” to refer to one or more enforcement actions against one or more defendants that arise from the same underlying violation. We argue that a case—a term frequently used interchangeably with the term action—is a distinct concept that sheds light on previously obscured dimensions of the SEC’s enforcement statistics.
By failing to identify and account for clusters of related enforcement actions, the SEC’s enforcement statistics present only a fragmentary picture of the enforcement landscape. Action-level data, which does not aggregate related enforcement actions into cases, cannot capture certain important dimensions of an SEC enforcement matter. First, action-level data cannot capture the universe of defendants charged in a particular matter. Second, and relatedly, action-level data cannot account for the total dollar amount of remedies assessed across all actions in a particular case. Finally, analyzing SEC enforcement at the case-level reveals aspects of SEC enforcement that are not apparent when looking at only action-level data. For example, a significant number of SEC cases are comprised of actions prosecuted in different venues—that is, in certain cases, the SEC charges some alleged wrongdoers in civil court, and others in in-house administrative proceedings. Another example concerns cooperation across enforcement actions: in a significant number of SEC matters, a defendant in one enforcement action cooperated in the investigation, and even the prosecution, of another defendant, in a separate, but related action. These aspects of cases—relevant to ongoing discussions about the limits of SEC enforcement authority—are invisible in fragmented action-level data, and we consider their significance below.
Put simply, analyzing SEC enforcement in terms of cases helps clarify the issues of counting and case quality described above. And yet, the SEC does not publish identifiers that track related enforcement actions, nor does it contextualize its enforcement figures by explaining that certain related actions arise from the same matter.
One challenge in tracking these relationships (and perhaps a reason why the SEC and most analyses do not track cases) concerns the structure and timing of SEC enforcement. The SEC’s investigative and enforcement process is a staged process. Typically, a precipitating event—such as a shocking news story or a suspicious filing—alerts the SEC to a possible violation of federal securities law that either has occurred, is occurring, or will occur. Types of such “trigger events” include “self-disclosures of malfeasance, restatements, auditor departures, and unusual trading,” as well as “[i]nvestigations by other federal agencies such as the Department of Defense and Environmental Protection Agency . . . along with delayed SEC filings, management departures, whistleblower charges, and routine reviews by the SEC.” Following a trigger event, the SEC may initiate an investigation. The investigative process begins informally. Staff at an SEC regional office, acting on their own accord or at the direction of the agency’s headquarters in Washington D.C., will inquire into alleged violations. At this informal stage, SEC investigative staff request the voluntary production of documents, and, depending on “the urgency of the matter and the willingness of the witnesses to voluntarily cooperate,” may conduct interviews with witnesses. SEC staff can escalate the inquiry into a formal investigation, in which SEC enforcement staff may subpoena documents and compel testimony from the subjects of the investigation or third parties. SEC staff must receive authorization from SEC headquarters before initiating the formal investigation. At this stage, the SEC can either close the investigation without filing charges or proceed to enforcement.
Like investigations, SEC enforcement proceedings also unfold in stages. In their study of SEC accounting fraud, Professors Karpoff, Lee and Martin noted:
After an investigation, the SEC either drops the case or proceeds by sending the target a “Wells Notice,” indicating its intent to initiate formal proceedings against the firm and/or selected individuals . . . . If the SEC proceeds, it can issue administrative proceedings, file civil litigation charges, and/or refer the case to the DOJ for criminal prosecution. Some enforcement actions are resolved immediately upon the SEC’s initial release of information about the case. But most actions unfold over multiple regulatory events. . . . [A]n average enforcement action involves 1.70 administrative releases, 2.06 filings of civil actions, and 0.56 filings of criminal actions.
Karpoff, Lee, and Martin made two important points. First, SEC investigations often, though not always, produce multiple, discrete enforcement actions. Second, these enforcement actions may be filed over time. In other words, a single SEC investigation can give rise to discrete but related enforcement actions, many of which are filed months or even years after the initial enforcement action. A case, as we use the term, captures the universe of enforcement activity that arises from the same underlying violation. An SEC case, thus, can entail a single enforcement action against one or more defendants, or a cluster of related enforcement actions.
Unfortunately, the SEC does not systematically publish any identifying information about the relationships between or among enforcement actions, which creates limitations for its enforcement reporting. In the next section, we fill this gap.
II. Cases and Actions in SEC Enforcement
A. SEED Case Tracking Methodology
In this Article, we publish new SEED data that is collected on the basis of, and sorted by, the relationships between and among SEC enforcement actions—that is, data that tracks SEC cases. SEED tracks and contains information for every SEC enforcement action filed from FY 2010 through FY 2021 against a public company or subsidiary of a public company. In addition, SEED tracks enforcement actions against individuals and non-public companies that are related to the public company and subsidiary actions tracked on SEED. SEED also tracks the relationships among these enforcement actions. Analysis of this relationship data is the primary contribution of this Article.
As noted above, the SEC does not systematically publish information that identifies which actions are related. Accordingly, to identify relationships among enforcement actions, we reviewed every SEC document published in connection with every enforcement action on SEED. These documents include press releases in which the SEC announced that a particular enforcement matter was initiated or resolved; the initial document in a matter (such as a complaint in a civil enforcement action); and the final document in which the relevant court announced the resolution of the matter and determined the relevant outcome, including monetary remedies if applicable.
In most documents, the SEC expressly indicated that a particular action was related to a separate enforcement action. In press releases, for example, the SEC often indicated that two or more actions were related. In some instances, however, the SEC was not so clear or explicit; often, the SEC’s enforcement documents provided only clues that two actions were related. In most cases, these are strong clues. In some enforcement documents, the SEC included the name of a firm or individual in a way that suggests that the party was the subject of a separate but related action. For example, the SEC may provide the names of defendants charged in separate but related actions in a single enforcement document. The following language was taken from an SEC administrative order:
As a result of the conduct described above, [Corporate Entity] failed reasonably to supervise [Individual] within the meaning of Sections 15(b)(4)(E) and 15(b)(4)(6)(A), respectively, with a view to preventing and detecting [Named Individual’s] violations of Section 10(b) of the Exchange Act and Rule 10b-5 thereunder.”
This provides strong evidence that there was a separate action against a named individual, and that this separate action against the individual was connected to the same case as the action in question. The SEC typically (but not always) describes this kind of involvement in the section of the complaint or administrative order that describes the violations, which can take the form of:
- aiding and abetting or causing the violation in the other action;
- failing to supervise a party responsible for the violation in the other action;
- failing to maintain books and records relating to the violation in the other action; and/or
- failing to maintain policies and procedures to prevent the violation in the other action.
In a small number of cases, the clues that two or more actions are related are less strong. In these cases, which we also track in our data, the SEC’s documents did not expressly name the subject of a related action but nevertheless contained information that suggests another action was part of the same case. We rely on three factors, each of which must be present, to determine that two actions comprise the same case: (1) the same or related underlying violation(s), (2) undertaken in the same or overlapping period of time, and (3) undertaken by related persons, such as individuals that are all employees of the same firm or parties connected by contract. These determinations necessarily contain some element of subjective analysis; however, these types of cases comprise only a small part of our sample.
B. Types of SEC Cases
On SEED, relationships among separate but related enforcement actions are prevalent. SEED tracks 540 actions against public companies and their subsidiaries that were initiated between FY 2010 and FY 2021 (hereinafter “Relevant Time Frame”) and that were not related to other enforcement actions. Additionally, SEED tracks 511 actions related to at least one other enforcement action initiated during that time frame against a public company or a subsidiary of a public company. Therefore, SEED tracks a total of 1,051 actions against a total of 1,640 defendants when considering actions against public companies and their subsidiaries initiated during the Relevant Time Frame plus their related actions. These numbers indicate that relationships among separate but related enforcement actions are very significant. Indeed, of the 1,051 actions, 51 percent were not related to other enforcement actions, but the remaining 49 percent were related to at least one enforcement action initiated during the Relevant Time Frame against public companies and their subsidiaries.
In terms of cases, the 1,051 actions on SEED sort into a total of 729 cases initiated during the Relevant Time Frame against 1,616 defendants. Of the total 729 cases, 540 involved a single-action case. The remaining 189 cases (26 percent) involved Multi-Action Cases.
Multi-Action Cases—while representing only 26 percent of the total number of SEED cases initiated during the Relevant Time Frame—account for an outsized number of defendants charged by the SEC: about half of the defendants in our sample. Nearly half of the defendants on SEED cases during this time frame (801 of a total of 1,616 SEED defendants, or 50 percent) were charged in Multi-Action Cases. On average, Multi-Action Cases on SEED involved four defendants.
Cases involving only a single enforcement action account for the other half of the defendants on SEED cases initiated during the Relevant Time Frame (815 of a total 1,616, or 50 percent). Some of these single action cases involved a single defendant; others involved multiple defendants.
On SEED, Single Defendant, Single Action Cases initiated during the Relevant Time Frame account for 406 of the total 729 cases and a total of 406 defendants. Multi-Defendant, Single Action Cases initiated during the Relevant Time Frame account for 134 of the total 729 cases and named a total of 409 defendants. Most Multi-Defendant, Single Action Cases named two defendants; however, the SEC does infrequently name a large number of defendants in the same action—even twenty, in the largest action tracked in our sample. The average number of defendants charged in Multi-Defendant, Single Action Cases is four defendants.
Summing up, thus, we categorize the cases in our sample into three types: Single Defendant, Single Action Cases, Multi-Defendant, Single Action Cases, and Multi-Action Cases. In Figure 1, we visualize the three case types in our sample at the case and action level. We provide these charts to help clarify the concepts of case and action and to illustrate how each of these three types of cases contributed, relatively, to the SEC’s enforcement output.