Milnor Law PLLC

Insights· Compliance

Since Digital Realty, the law quietly rewards going to the SEC. Most compliance programs still assume otherwise.

Companies still build their programs around getting employees to raise concerns internally first. But since Digital Realty Trust v. Somers, Dodd-Frank's anti-retaliation protections reach only whistleblowers who report to the SEC, which quietly rewards going external. The report may already sit with a regulator before the company hears a word. The question for compliance leaders is no longer whether an issue goes outside, but how fast they can respond once it surfaces inside.

1 min readBy Christina Milnor
← All insights

Many companies invest heavily in compliance infrastructure and encourage employees to raise concerns internally first.

At the same time, the law gives some whistleblowers strong reason to take their concerns to the SEC rather than rely on internal reporting alone. In Digital Realty Trust v. Somers, the Supreme Court held that Dodd-Frank's anti-retaliation protections reach only those who report to the Commission.

That creates an interesting tension. Organizations may assume they have time to investigate, assess, and respond internally. The reality is that a report may already be sitting with a regulator by the time the company learns about it.

For compliance leaders, that's an important shift in mindset. The question is no longer whether an issue will be reported externally. It is how quickly the organization can respond once concerns are raised internally.

Request a Consultation← All insights

Continue reading

Related insights

  • Why culture remains the most underestimated source of regulatory risk.

    Compliance failures rarely begin with a missing policy. They show up in the leadership huddle where a concern is brushed aside, the closed-door conversation that never makes the record, the quiet decision not to speak up because the personal risk feels higher than the organizational one.

    Read more →Why culture remains the most underestimated source of regulatory risk.

  • Nine justices, one answer: the SEC can recover unlawful profits without proving investor loss.

    A unanimous Supreme Court decision in Sripetch v. SEC affirms the SEC's ability to seek disgorgement without proving identifiable investor losses. Sometimes the hardest thing to measure is harm. That doesn't mean the harm isn't real.

    Read more →Nine justices, one answer: the SEC can recover unlawful profits without proving investor loss.

  • Binance fired the staff who flagged $1 billion to sanctioned Iranian groups.

    Internal investigators reported it through proper channels, exactly what every speak-up policy tells employees to do, and were fired for it. The pattern is painfully familiar, and it's exactly why I do what I do.

    Read more →Binance fired the staff who flagged $1 billion to sanctioned Iranian groups.