United States: So You Want To Be A Whistleblower---Navigating The New SEC Whistleblower Law

Unable to land many of those big international contracts, your company has just been acquired by a more successful multi-national competitor. Luckily, you are considered a rising star and have been named assistant manager in a major foreign branch. During your first week at the new firm you notice substantial "consulting fees" being paid to a mysterious middleman who seems to know every government official in the capital city where the big contract decisions are made. You make inquiries, are introduced to the guy (who never really explains what he does for those hundreds of thousands in fees) and start asking around within the company. Soon, you are called into the division manager's office and told to stop asking questions. Then, an acquaintance in the accounting department tells you "in confidence" that this relationship has been going on for years, is done in other branches around the world as well, and that the consultant is little more than a cash conduit and most of the money ends up with local government officials influential in the award of contracts to the company. You review his invoices and see they have elaborate, but apparently false, explanations of the consulting services. You are not a lawyer, but you have reviewed company ethics bulletins and are convinced these payments are probably violations of the Foreign Corrupt Practices Act (FCPA).

Your dilemma is clear. You can ignore it and do your job (which fortunately does not involve making or accounting for the payments yourself). You can go above the local manager to the compliance office back in the U.S. with the real risk of losing your job if the information turns out to be false (or, you fear, even if it's true). You can call the anonymous tip line but fear you may be identified as the tipster. Being a genuinely honest person, you are alternately disgusted and terrified. Should you become a whistleblower? You have read about the usual fate of whistleblowers, loss of job, reputation and career. But can you live with yourself if you stay silent?


Buried within the thousands of pages of the new Dodd-Frank financial regulatory reform act is a marvelous little section 922, "Whistleblower Protection." But it is more than just protection, which is clearly needed, but in fact an opportunity to profit handsomely from being honest (and how often does that happen in real life). Whistleblowers who provide "original information" leading to successful SEC enforcement actions can be awarded from 10 to 30 per cent of the "monetary sanctions exceeding $1,000,000."

What this means, as a practical matter, is that a whistleblower who threads his way through the law's technical hurdles can be on track to become wealthy, without many of the obstacles facing whistleblowers in current law and with far stronger protections against retaliation. It almost makes it worth it to be honest and do the right thing. I say "almost" because historically whistleblowing has never been an easy path to riches and unless one follows the law very carefully the old adage that "no good deed goes unpunished" may still hold true for most of the new class of wannabe whistleblowers.


Some would say that deciding to blow the whistle should not be about money or fame, but about basic honesty and doing the right thing. Many former whistleblowers end up saying they were mainly motivated by that admirable goal. In reality, however, one is making a cold career choice in deciding to break ranks and expose fellow employees, including superiors, and the organization itself, to potential criminal prosecution. This is serious business, and no one should assume others will be similarly motivated to do the "right thing." What is far more likely is that you will be met by resistance at every level. Regardless of what they may say for the record, you will be viewed by many as a weasel who is looking for little more that to profit for yourself. The new law creates significant redress for proven retaliation, but you still have to go to court to prove it, and you will still suffer the inevitable stigma that forever follows a whistleblower in many quarters. So, as they say, if you set out to bring down the king you have to kill him.


Whistleblowers are often motivated by some personal grievance that probably does not have much to do with fraud or the securities laws. Maybe the boss has told you to cover up a safety issue, or changed a report you wrote, or accepted free lunches from vendors, or some such clearly improper behavior. Maybe you have complained to others and have been demoted or otherwise suffered retaliation. These are often legitimate issues, but are not the grist for the kind of high stakes whistleblowing the SEC law is designed to reward. To meet the $1 million threshold you have to be on to what will amount to a significant case. To be sure, those cases are out there. Recent SEC cases under the FCPA, for example, have brought in enormous sanctions. The recent Bonny Island Nigerian cases, involving a joint venture of international companies to bribe officials through agents to get contracts to build natural gas facilities in that county, have resulted in almost $1.3 billion in penalties so far. Cases netting over $1 million are becoming routine, but not all enforcement actions bring that much, especially if they target only individuals, not the company. A gripe against your boss for covering up some minor infraction will not qualify. Check out the press releases on the SEC's website to get a feel for the kinds of cases the agency brings and the amount of recoveries involved. In more than a few instances, 10 to 30 percent of the cut is serious money. But for that money, you have to pick the right horse.


Under the new law, the most crucial decision you may make will come at the beginning: who do you talk to. Contrary to what you may have been instructed by the compliance department, or the method set forth in your corporate Code of Ethics, you should not call the hotline or the compliance or legal department. On its face, the law appears to provide rewards only to those whistleblowers "who voluntarily provided original information to the [SEC]." Even if your information causes the company to make some disclosure to the SEC, you may not get the credit, even if you are clearly identified as the source (which of course carries its own set of risks). Nor should you discuss the matter with your best friend in the next office, or post something on line. The best way to assess the "value" of the case is to go to someone outside the company who is legally obligated to keep the information confidential, and who is qualified to evaluate your evidence and assess the potential monetary sanctions that might be imposed. In my view, self-serving as it may be, the best guarantee of keeping it confidential is to consult a lawyer knowledgeable in the securities laws and enforcement actions who will keep your information confidential. She can evaluate with dispassion whether you are sitting on a case that may generate large penalties. In general, any case involving FCPA violations, accounting fraud, or material misrepresentations in SEC filings, particularly in a large public company, is a potential winner.

Another substantial benefit of getting a lawyer involved early is the fact that the new law explicitly protects the identity of whistleblowers who come to the SEC through counsel. Whistleblowers who act through counsel are entitled under the law to submit information anonymously. In effect, the lawyer becomes the liaison between his unnamed client and the government, and can advocate for his client and take actions designed to enhance the chances of a reward without exposing the client's identity. Having counsel also sends a message to the company that any acts of retaliation may be met with legal action.


The new law requires you to provide "original information" to the SEC to get an award. This means you have to be able to prove you were the first in the door with the information that led to the case. If the SEC already knows about it from any other source, you probably lose. My prediction is the SEC will resist making awards in any case in which the agency was already investigating your company for the activity, even if they had not yet found the information you bring them. The key issue in close cases will become whether your specific information "led to the successful enforcement...action." You also must be able to prove the information "is derived from [your] independent knowledge or analysis." Water cooler hearsay will not get you the prize. Nor, in my opinion, will information that consists solely of what someone else told you, even if it is true, be deemed "original information." With potentially millions on the line in a big case, the SEC may well look for any loophole to deny or reduce an award, particularly if there are others claiming an award as well. If the information comes from a news report or government investigation, you will have to prove your information was not "exclusively" derived from such report, or that you were in fact an original source of the information in the report. None of this will be easy, and do not blithely assume the SEC will give you the benefit of the doubt.

Again, if you play by company "rules" and go first to the compliance officer or general counsel with your information, they may report the allegations to the SEC almost immediately, and will be prompted by SEC staff to give them your name as a potential witness. You will be fully debriefed by company or outside counsel. At that point, you have effectively lost control of your information. Sooner or later, you may also get an SEC subpoena or, in a serious case of on-going fraud, an after-dinner cold call at home from two FBI agents. At that point, it's a little late to start talking about a cash award for yourself. One thing is certain: if there is a successful enforcement case and millions are recovered, you have better already nailed down a clear case for your being the original source. In short, the best strategy is to consult counsel and no one else, have your lawyer go directly to the SEC, play it close to the vest, and get the staff to verify in writing if at all possible that his client X (you) has given them "original information" which meets the criteria set forth in the law.


In most contested legal matters, the best evidence is usually found in authentic documents. Witnesses can forget, get cold feet, lie or be contradicted. Nowadays, emails are the document of choice for enforcement lawyers. They are usually spontaneous, candid, presumed truthful, and once sent or received can never be hidden, destroyed, denied or erased. There is hardly a big case anymore that does not feature some smoking gun emails. Thus, if you can come to your lawyer with some emails supporting your information you are already at first base. Likewise spreadsheets, accounting documents, secret contracts or side-letters, minutes of meetings, "cya" memos of one kind or another or similar documents can be important. Gather them as quietly as you can before going to the lawyer. Don't get the lawyer involved in any effort to sprit anything out of the company. Don't try to play Sherlock Holmes and conduct your own investigation within the company; you will probably mess it up and expose your identify as the likely tipster when the company ultimately is contacted by the SEC. Let your lawyer figure out how to assemble the information for the SEC. Once they have it, they have the weapons to quickly launch an investigation, and to require the company to provide specific documents and/or testimony. Your counsel can identify potential documents and witnesess for them, while making sure you are getting credit for the leads.

In our case above, the phony invoices submitted by the consultant, and payments made, would be the kind of documents the SEC would focus on, for falsifying books and records alone is an FCPA violation. If some of the documents, including the emails, are ones you sent or received yourself, these should also be given to counsel to help him evaluate whether you have some exposure yourself in the matter, which can change the strategy considerably (see below).

There is always some risk in providing presumably confidential company documents to an outsider, even your own lawyer. The company may consider this a breach of your employment agreement, if you have one, or a violation of some company policy you agreed to uphold. However, once your information comes to the SEC the company would be risking a retaliation claim if it tried to take adverse action against you for providing the documents in confidence to the government. Of course, if you put them on the internet or leak them to a journalist you have no such protections, and may blow your chance later to claim them as part of your "original information" as well.


As with most things involving the government, the process of receiving an award will undoubtedly be frustrating and protracted. The SEC must write regulations to enforce the law, and hopefully they will facilitate, not complicate, the chances of receiving an award within a reasonable time within a few months. The case itself may take months or even years to investigate, and a settlement or successful lawsuit could take even more time. Then the SEC Commissioners have to decide the significance of the information to the success of the enforcement action, the degree of assistance provided by you and your counsel, the "programmatic interest of the [SEC]" (whatever that means) in making such awards (which should be obvious but may provide a loophole to reduce an award), and just about anything else they decide is relevant. Here is where the lawyer will be essential to overcome the traditional bureaucratic resistance to giving large cash awards to real people who have done the right thing, as opposed to keeping the funds for Uncle Sam or for distribution to shareholders in the company.

Getting an award will be particularly difficult if the government suspects you have had any role in the illegal activity. If so, and there is a chance you could be convicted of a crime for your actions, the SEC has a basis to deny an award, at least until it is clear you will not be prosecuted for your actions. In our example, if you knowingly approved some of the commission payments, or falsified any company documents, you have potential civil and criminal exposure and the government will have an entirely different attitude about your effort to become a late-blooming whistleblower. Again, having a lawyer who can argue for some form of immunity or cooperation agreement that will spare you any criminal conviction will be essential to qualify for an award. The SEC has recently established formal procedures for seeking cooperation deals which may involve immunity from criminal prosecution. Even with exposure, it may still be possible to cut a deal early on if the information is good enough and you hold the key to cracking a big case. Of course, having potential exposure is a good reason to consult a lawyer anyway.


Retaliation, being part of our base human nature, will always be with us. Even if your identity as whistleblower remains officially anonymous, chances are someone at the company will figure out the source. You must assume going in that somehow, in some form, there will be retaliation. Whether it is just some residual stigma that follows your career, or something more serious, remains to be seen. The new law contains strong retaliation provisions, including a long statute of limitations for bringing claims, immediate access to federal court without plodding through an administrative morass at OSHA, and a new double-back pay remedy. But one must accept the fact that once the whistleblower has crossed the Rubicon and gone to the SEC, his career, and his life, will probably never be the same. If fear of retaliation is your overriding concern, you should just call the company hotline, or the SEC's hotline, give them the information, do not leave your name, and see what happens. If you chose to call the company line and it becomes clear later that the company has taken no action, you can then consider going (through counsel) directly to the SEC.


There is no easy answer here. In truth, most of us would probably look the other way, or quietly ask for a transfer, or maybe resign, in the case we described above, rather than become a whistleblower. I suggest reading a May 13, 2010 article from a most unlikely source, the New England Journal of Medicine, for a fascinating article that tracked the experiences of individuals who had blown the whistle on health care frauds. Their stories reflect the reality of living as a whistleblower, and their tales are not at all reassuring. As noted, even though the new law provides much better protection from retaliation than under existing law, the path of the whistleblower must trod is still a lonely one. Doing it for the money alone is probably not enough to justify the risks. If however, one chooses to do the right thing, doing it in such a way as to mess up the chance for the money is unforgivable. Thus, if you are inclined to reach for that whistle, do it right, do it with honor, and do it so as to maximize your chances for a big payday, courtesy of the U.S. Government.

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.

Daniel J. Hurson is former Assistant Chief Litigation Counsel at the SEC and a former federal prosecutor. He practices securities enforcement and white collar defense law in his own firm in Washington D.C. His email is dan@hursonlaw.com. His website is http://www.hursonlaw.com

To print this article, all you need is to be registered on Mondaq.com.

Click to Login as an existing user or Register so you can print this article.

In association with
Related Topics
Related Articles
Related Video
Up-coming Events Search
Font Size:
Mondaq on Twitter
Register for Access and our Free Biweekly Alert for
This service is completely free. Access 250,000 archived articles from 100+ countries and get a personalised email twice a week covering developments (and yes, our lawyers like to think you’ve read our Disclaimer).
Email Address
Company Name
Confirm Password
Mondaq Topics -- Select your Interests
 Law Performance
 Law Practice
 Media & IT
 Real Estate
 Wealth Mgt
Asia Pacific
European Union
Latin America
Middle East
United States
Worldwide Updates
Registration (you must scroll down to set your data preferences)

Mondaq Ltd requires you to register and provide information that personally identifies you, including your content preferences, for three primary purposes (full details of Mondaq’s use of your personal data can be found in our Privacy and Cookies Notice):

  • To allow you to personalize the Mondaq websites you are visiting to show content ("Content") relevant to your interests.
  • To enable features such as password reminder, news alerts, email a colleague, and linking from Mondaq (and its affiliate sites) to your website.
  • To produce demographic feedback for our content providers ("Contributors") who contribute Content for free for your use.

Mondaq hopes that our registered users will support us in maintaining our free to view business model by consenting to our use of your personal data as described below.

Mondaq has a "free to view" business model. Our services are paid for by Contributors in exchange for Mondaq providing them with access to information about who accesses their content. Once personal data is transferred to our Contributors they become a data controller of this personal data. They use it to measure the response that their articles are receiving, as a form of market research. They may also use it to provide Mondaq users with information about their products and services.

Details of each Contributor to which your personal data will be transferred is clearly stated within the Content that you access. For full details of how this Contributor will use your personal data, you should review the Contributor’s own Privacy Notice.

Please indicate your preference below:

Yes, I am happy to support Mondaq in maintaining its free to view business model by agreeing to allow Mondaq to share my personal data with Contributors whose Content I access
No, I do not want Mondaq to share my personal data with Contributors

Also please let us know whether you are happy to receive communications promoting products and services offered by Mondaq:

Yes, I am happy to received promotional communications from Mondaq
No, please do not send me promotional communications from Mondaq
Terms & Conditions

Mondaq.com (the Website) is owned and managed by Mondaq Ltd (Mondaq). Mondaq grants you a non-exclusive, revocable licence to access the Website and associated services, such as the Mondaq News Alerts (Services), subject to and in consideration of your compliance with the following terms and conditions of use (Terms). Your use of the Website and/or Services constitutes your agreement to the Terms. Mondaq may terminate your use of the Website and Services if you are in breach of these Terms or if Mondaq decides to terminate the licence granted hereunder for any reason whatsoever.

Use of www.mondaq.com

To Use Mondaq.com you must be: eighteen (18) years old or over; legally capable of entering into binding contracts; and not in any way prohibited by the applicable law to enter into these Terms in the jurisdiction which you are currently located.

You may use the Website as an unregistered user, however, you are required to register as a user if you wish to read the full text of the Content or to receive the Services.

You may not modify, publish, transmit, transfer or sell, reproduce, create derivative works from, distribute, perform, link, display, or in any way exploit any of the Content, in whole or in part, except as expressly permitted in these Terms or with the prior written consent of Mondaq. You may not use electronic or other means to extract details or information from the Content. Nor shall you extract information about users or Contributors in order to offer them any services or products.

In your use of the Website and/or Services you shall: comply with all applicable laws, regulations, directives and legislations which apply to your Use of the Website and/or Services in whatever country you are physically located including without limitation any and all consumer law, export control laws and regulations; provide to us true, correct and accurate information and promptly inform us in the event that any information that you have provided to us changes or becomes inaccurate; notify Mondaq immediately of any circumstances where you have reason to believe that any Intellectual Property Rights or any other rights of any third party may have been infringed; co-operate with reasonable security or other checks or requests for information made by Mondaq from time to time; and at all times be fully liable for the breach of any of these Terms by a third party using your login details to access the Website and/or Services

however, you shall not: do anything likely to impair, interfere with or damage or cause harm or distress to any persons, or the network; do anything that will infringe any Intellectual Property Rights or other rights of Mondaq or any third party; or use the Website, Services and/or Content otherwise than in accordance with these Terms; use any trade marks or service marks of Mondaq or the Contributors, or do anything which may be seen to take unfair advantage of the reputation and goodwill of Mondaq or the Contributors, or the Website, Services and/or Content.

Mondaq reserves the right, in its sole discretion, to take any action that it deems necessary and appropriate in the event it considers that there is a breach or threatened breach of the Terms.

Mondaq’s Rights and Obligations

Unless otherwise expressly set out to the contrary, nothing in these Terms shall serve to transfer from Mondaq to you, any Intellectual Property Rights owned by and/or licensed to Mondaq and all rights, title and interest in and to such Intellectual Property Rights will remain exclusively with Mondaq and/or its licensors.

Mondaq shall use its reasonable endeavours to make the Website and Services available to you at all times, but we cannot guarantee an uninterrupted and fault free service.

Mondaq reserves the right to make changes to the services and/or the Website or part thereof, from time to time, and we may add, remove, modify and/or vary any elements of features and functionalities of the Website or the services.

Mondaq also reserves the right from time to time to monitor your Use of the Website and/or services.


The Content is general information only. It is not intended to constitute legal advice or seek to be the complete and comprehensive statement of the law, nor is it intended to address your specific requirements or provide advice on which reliance should be placed. Mondaq and/or its Contributors and other suppliers make no representations about the suitability of the information contained in the Content for any purpose. All Content provided "as is" without warranty of any kind. Mondaq and/or its Contributors and other suppliers hereby exclude and disclaim all representations, warranties or guarantees with regard to the Content, including all implied warranties and conditions of merchantability, fitness for a particular purpose, title and non-infringement. To the maximum extent permitted by law, Mondaq expressly excludes all representations, warranties, obligations, and liabilities arising out of or in connection with all Content. In no event shall Mondaq and/or its respective suppliers be liable for any special, indirect or consequential damages or any damages whatsoever resulting from loss of use, data or profits, whether in an action of contract, negligence or other tortious action, arising out of or in connection with the use of the Content or performance of Mondaq’s Services.


Mondaq may alter or amend these Terms by amending them on the Website. By continuing to Use the Services and/or the Website after such amendment, you will be deemed to have accepted any amendment to these Terms.

These Terms shall be governed by and construed in accordance with the laws of England and Wales and you irrevocably submit to the exclusive jurisdiction of the courts of England and Wales to settle any dispute which may arise out of or in connection with these Terms. If you live outside the United Kingdom, English law shall apply only to the extent that English law shall not deprive you of any legal protection accorded in accordance with the law of the place where you are habitually resident ("Local Law"). In the event English law deprives you of any legal protection which is accorded to you under Local Law, then these terms shall be governed by Local Law and any dispute or claim arising out of or in connection with these Terms shall be subject to the non-exclusive jurisdiction of the courts where you are habitually resident.

You may print and keep a copy of these Terms, which form the entire agreement between you and Mondaq and supersede any other communications or advertising in respect of the Service and/or the Website.

No delay in exercising or non-exercise by you and/or Mondaq of any of its rights under or in connection with these Terms shall operate as a waiver or release of each of your or Mondaq’s right. Rather, any such waiver or release must be specifically granted in writing signed by the party granting it.

If any part of these Terms is held unenforceable, that part shall be enforced to the maximum extent permissible so as to give effect to the intent of the parties, and the Terms shall continue in full force and effect.

Mondaq shall not incur any liability to you on account of any loss or damage resulting from any delay or failure to perform all or any part of these Terms if such delay or failure is caused, in whole or in part, by events, occurrences, or causes beyond the control of Mondaq. Such events, occurrences or causes will include, without limitation, acts of God, strikes, lockouts, server and network failure, riots, acts of war, earthquakes, fire and explosions.

By clicking Register you state you have read and agree to our Terms and Conditions