The Securities and Exchange Commission has finalized new rules significantly expanding protections for corporate whistleblowers who report securities law violations. The updated regulations broaden the definition of protected activity to include internal reports to corporate compliance departments, not just formal filings with the SEC, addressing a gap that courts had identified in the existing framework.

Under the new rules, companies are prohibited from retaliating against employees who report potential violations through any channel, including internal hotlines, supervisor complaints, or external regulatory filings. The SEC has also increased the maximum whistleblower award from 30% to 35% of monetary sanctions exceeding $1 million, aiming to further incentivize reporting of corporate fraud and misconduct.

Corporate defense attorneys have criticized the expanded scope, arguing that it could encourage frivolous claims and create uncertainty for employers conducting legitimate personnel actions. The U.S. Chamber of Commerce has indicated it may challenge the rules in court, contending that the SEC has exceeded its statutory authority under Dodd-Frank. Meanwhile, whistleblower advocacy organizations have praised the changes as long-overdue reforms that will help uncover corporate wrongdoing that harms investors and markets.