What to Do When the SEC Issues a Subpoena

A subpoena from the SEC Division of Enforcement means the staff wants testimony or documents. It is not a charge, and many investigations end with no enforcement action at all. What you do in the first week decides how the next two years go. The protective sequence is short: engage securities counsel immediately, preserve every relevant document, stop all employee chatter about the matter, and respond only through counsel.

The moves that hurt people are equally short: deleting or editing anything, and picking up the phone to explain things to the staff without a lawyer in the room.

What the Subpoena Actually Is

Most SEC subpoenas in private company matters are administrative subpoenas issued under the Exchange Act, compelling documents or sworn testimony. The cover page tells you the essentials: the matter number, the division and staff attorney behind it, the return date, and the list of document requests, usually organized by custodian and topic.

The custodian list is the most informative page. If the subpoena names your CFO, your transfer agent, and a specific deal, you know what the staff is looking at. If it names a bank, a marketing consultant, and three officers, that tells you something different. Read it as a map of the investigation, because it is one.

A subpoena can also make you a witness rather than a subject. Companies get subpoenaed for records about other people's transactions all the time. That distinction, target versus subject versus witness, is the first thing an enforcement lawyer will try to pin down, and the staff will not simply tell you which one you are.

The First 48 Hours

1. Engage securities counsel before doing anything else, and specifically counsel with enforcement defense experience. This is a different discipline from transactional work.
2. Issue a written litigation hold to every custodian the subpoena touches, plus anyone else plausibly connected. The hold suspends routine document deletion and says so plainly.
3. Turn off auto-delete. Messaging apps are the modern failure point: WhatsApp, Signal, and Slack histories have a way of vanishing on 30-day retention cycles, and a missing history reads as a choice.
4. Inventory what exists that is responsive: email accounts, shared drives, phones, financial records, board materials.
5. Say nothing to employees beyond what counsel approves. A company-wide email about the investigation creates its own problems.
6. Do not respond to the staff yourself, even to be cooperative and fast. Speed is not the metric; accuracy under privilege review is.

How an SEC Investigation Runs

Investigations generally start informally, with voluntary requests. When the staff wants compulsory process, it obtains a formal order of investigation, which unlocks the subpoena power. Document productions go back and forth. Witnesses give sworn testimony behind closed doors, transcribed, with counsel present, and the staff builds its file. For a private company with a single deal at issue, this stage typically runs many months to more than a year.

If the staff believes a violation occurred, the Wells process follows: a notice that an enforcement recommendation is coming, and a chance to argue against it in writing before the decision is made. The earlier you take the investigation seriously, the more of that argument exists by the time you get there.

Testimony

Subpoenaed testimony is under oath, transcribed, and conducted by staff attorneys with the file already assembled. Counsel sits next to the witness, can object, and can call breaks. Witnesses prepare with counsel beforehand, and preparation is not a nicety; it is the difference between answering the question asked and wandering into the next topic the staff had not reached yet.

Employees interviewed by company counsel should understand the ground rules in what courts call an Upjohn warning: the company's lawyer represents the company, not the employee personally, and the privilege belongs to the company. Where an individual's interests could part ways with the company's, that person needs independent counsel, and an honest assessment of whether that is the situation happens early.

Cooperation and Voluntary Production

The SEC has published factors it weighs when deciding whether to credit cooperation: self-reporting before being asked, remediation, and the completeness of production, among others. Cooperation can meaningfully shape the outcome. It can also hand the staff the case. Which of those is true depends on the facts, the exposure, and what the documents actually show, and that calculus is exactly what enforcement counsel is for.

Parallel Proceedings

The SEC is a civil regulator, and its investigations can travel next to others. The staff refers matters to the Department of Justice when the facts look criminal, and state regulators and FINRA run their own versions. A response strategy built only for the civil lane can create problems in the others, which is one more reason the first call is a lawyer who handles enforcement matters across all of them.

The Mistakes That Turn Investigations into Cases

• Talking to the staff to clear things up personally, without counsel, and saying something wrong.
• Producing a partial set of documents and quietly holding back the damaging folder.
• Letting retention cycles delete messages between the subpoena date and the return date.
• Treating a third-party subpoena as a formality, when the custodian list shows you are the subject.
• Waiting for charges before getting serious. The record gets built in month one, not at the Wells stage.