SEC: Companies Cannot Stifle Whistleblowers in Confidentiality Agreements
The SEC charged KBR Inc. with violating Rule 21F-17 by using confidentiality agreements that required employee approval before reporting securities violations to the SEC, resulting in a $130,000 penalty and mandatory policy changes to protect whistleblowers.
The SEC charged Houston-based KBR Inc. with violating Rule 21F-17 of the Dodd-Frank Act by requiring employees and former employees to obtain legal department approval before discussing internal investigations with outside parties, threatening discipline or termination for noncompliance. Although no employee was actually prevented from reporting to the SEC, the SEC found the language had a chilling effect on whistleblowing, constituting a violation. KBR agreed to pay a $130,000 penalty, cease and desist from future violations, and voluntarily amend its agreements to explicitly permit reporting to the SEC without fear of retaliation or prior approval.
The SEC brought its first enforcement action against KBR Inc., a Houston-based global technology and engineering firm, for violating Rule 21F-17 of the Dodd-Frank Act by embedding overly restrictive language in confidentiality agreements used during internal investigations. These agreements warned employees that they could face discipline or termination if they discussed the matters with outside parties without prior approval from KBR’s legal department, even when those matters involved potential securities law violations. While the SEC found no evidence that KBR had actually blocked a whistleblower from reporting, it determined the policy created a chilling effect that deterred employees from coming forward, which is sufficient to violate the rule. KBR agreed to pay a $130,000 penalty without admitting or denying the charges and committed to ceasing any future violations. The company voluntarily revised its confidentiality statements to explicitly state that employees are free to report possible securities violations to the SEC and other federal agencies without seeking company approval or fearing retaliation. The SEC’s Division of Enforcement and Office of the Whistleblower emphasized that such clauses in confidentiality, employment, or severance agreements are strictly prohibited and vowed to enforce them vigorously. SEC officials urged all other employers to review and update their agreements to ensure they do not impede whistleblower protections in word or effect.
Exhibits & Attached Documents (1)
Extracted insights
- $130K $130,000 $100K–$1M
- person andrew j. ceresney
- company its first enforcement action against a company
- company kbr inc.
- agency Securities and Exchange Commission
- Securities and Exchange Commission announced its first enforcement action against a company
- Securities and Exchange Commission charged KBR Inc.
- KBR Inc. agreed to pay $130,000 penalty
- KBR Inc. amended its confidentiality statement to allow employees to report possible violations to the SEC
- Andrew J. Ceresney said KBR potentially discouraged employees from reporting securities violations to the SEC
- Securities and Exchange Commission will enforce the provision prohibiting employers from impeding whistleblowers
- KBR Inc. changed its agreements to make clear that employees will not have to fear termination before contacting the SEC
- KBR Inc. agreed to cease and desist from committing or causing any future violations of Rule 21F-17
The Securities and Exchange Commission today announced its first enforcement action against a company for using improperly restrictive language in confidentiality agreements with the potential to stifle the whistleblowing process. The SEC charged Houston-based global technology and engineering firm KBR Inc. with violating whistleblower protection Rule 21F-17 enacted under the Dodd-Frank Act. KBR required witnesses in certain internal investigations interviews to sign confidentiality statements with language warning that they could face discipline and even be fired if they discussed the matters with outside parties without the prior approval of KBR’s legal department. Since these investigations included allegations of possible securities law violations, the SEC found that these terms violated Rule 21F-17, which prohibits companies from taking any action to impede whistleblowers from reporting possible securities violations to the SEC. KBR agreed to pay a $130,000 penalty to settle the SEC’s charges and the company voluntarily amended its confidentiality statement by adding language making clear that employees are free to report possible violations to the SEC and other federal agencies without KBR approval or fear of retaliation. “By requiring its employees and former employees to sign confidentiality agreements imposing pre-notification requirements before contacting the SEC, KBR potentially discouraged employees from reporting securities violations to us,” said Andrew J. Ceresney, Director of the SEC’s Division of Enforcement. “SEC rules prohibit employers from taking measures through confidentiality, employment, severance, or other type of agreements that may silence potential whistleblowers before they can reach out to the SEC. We will vigorously enforce this provision.” According to the SEC’s order instituting a settled administrative proceeding, there are no apparent instances in which KBR specifically prevented employees from communicating with the SEC about specific securities law violations. However, any company’s blanket prohibition against witnesses discussing the substance of the interview has a potential chilling effect on whistleblowers’ willingness to report illegal conduct to the SEC. “KBR changed its agreements to make clear that its current and former employees will not have to fear termination or retribution or seek approval from company lawyers before contacting us.” said Sean McKessy, Chief of the SEC’s Office of the Whistleblower. “Other employers should similarly review and amend existing and historical agreements that in word or effect stop their employees from reporting potential violations to the SEC.” Without admitting or denying the charges, KBR agreed to cease and desist from committing or causing any future violations of Rule 21F-17. The SEC’s investigation was conducted by Jim Etri and Rebecca Fike and supervised by David L. Peavler of the Fort Worth Regional Office.
The Securities and Exchange Commission today announced its first enforcement action against a company for using improperly restrictive language in confidentiality agreements with the potential to stifle the whistleblowing process. The SEC charged Houston-based global technology and engineering firm KBR Inc. with violating whistleblower protection Rule 21F-17 enacted under the Dodd-Frank Act. KBR required witnesses in certain internal investigations interviews to sign confidentiality statements with language warning that they could face discipline and even be fired if they discussed the matters with outside parties without the prior approval of KBR’s legal department. Since these investigations included allegations of possible securities law violations, the SEC found that these terms violated Rule 21F-17, which prohibits companies from taking any action to impede whistleblowers from reporting possible securities violations to the SEC. KBR agreed to pay a $130,000 penalty to settle the SEC’s charges and the company voluntarily amended its confidentiality statement by adding language making clear that employees are free to report possible violations to the SEC and other federal agencies without KBR approval or fear of retaliation. “By requiring its employees and former employees to sign confidentiality agreements imposing pre-notification requirements before contacting the SEC, KBR potentially discouraged employees from reporting securities violations to us,” said Andrew J. Ceresney, Director of the SEC’s Division of Enforcement. “SEC rules prohibit employers from taking measures through confidentiality, employment, severance, or other type of agreements that may silence potential whistleblowers before they can reach out to the SEC. We will vigorously enforce this provision.” According to the SEC’s order instituting a settled administrative proceeding, there are no apparent instances in which KBR specifically prevented employees from communicating with the SEC about specific securities law violations. However, any company’s blanket prohibition against witnesses discussing the substance of the interview has a potential chilling effect on whistleblowers’ willingness to report illegal conduct to the SEC. “KBR changed its agreements to make clear that its current and former employees will not have to fear termination or retribution or seek approval from company lawyers before contacting us.” said Sean McKessy, Chief of the SEC’s Office of the Whistleblower. “Other employers should similarly review and amend existing and historical agreements that in word or effect stop their employees from reporting potential violations to the SEC.” Without admitting or denying the charges, KBR agreed to cease and desist from committing or causing any future violations of Rule 21F-17. The SEC’s investigation was conducted by Jim Etri and Rebecca Fike and supervised by David L. Peavler of the Fort Worth Regional Office.