What the Supreme Court’s Whistleblower Decision Means for Companies

In Digital Realty Trust, Inc. v. Somers, the Supreme Court of the United States defined the class of individuals protected by the anti-retaliation provision contained in the 2010 Dodd-Frank Wall Street Reform and Consumer Protection Act (Dodd-Frank). The Court held that to constitute a protected “whistleblower” under Dodd-Frank, a person must first “provid[e] … information relating to a violation of the securities laws” to the Securities and Exchange Commission (SEC, or the Commission). Any company that retaliates against such a whistleblower is potentially subject to damages and injunctive relief.

By incentivizing putative whistleblowers to report alleged misconduct directly to the SEC, the Court’s decision may result in more SEC investigations that occur before companies have had an opportunity to investigate internally. Because of the importance that the SEC places on its whistleblower program, companies should expect the SEC to continue to focus on investigations involving claims of retaliation, as well as continuing to focus on possible violations of Exchange Act Rule 21F-17. (The rule prohibits “any action to impede an individual from communicating directly with the Commission staff about a possible securities law violation, including enforcing, or threatening to enforce, a confidentiality agreement […] with respect to such communications.)

Statutory Whistleblower Protections

Both the Sarbanes-Oxley Act of 2002 (Sarbanes-Oxley) and Dodd-Frank protect putative whistleblowers from retaliation. Sarbanes-Oxley protects all “employees” who report misconduct to a federal regulatory or law enforcement agency from retaliation, including the SEC, Congress, or any “person with supervisory authority over the employee.” By contrast, Dodd-Frank defines whistleblower as “any individual who provides … information relating to a violation of the securities laws to the Commission, in a manner established, by rule or regulation, by the Commission.”

Notwithstanding the statutory definition of whistleblower in Dodd-Frank, SEC regulations implementing Dodd-Frank’s whistleblower anti-retaliation provisions do not require reporting to the SEC. The SEC regulations define whistleblower for purposes of Dodd-Frank’s anti-retaliation protections to include persons who report internally, as long as they report to a supervisor or to a person working for the employer who has authority to investigate, discover, or terminate misconduct.

The differences between the whistleblower protections in Sarbanes-Oxley and Dodd-Frank are significant because the statutes offer different paths to whistleblowers seeking redress for retaliation. Under Sarbanes-Oxley, whistleblowers cannot bring an action in federal district court unless they first exhaust their administrative remedies. Specifically, Sarbanes-Oxley requires an employee to file a complaint with the Department of Labor (DOL) within 180 days of the retaliation or learning of the retaliation. Only if the DOL fails to issue a final decision within 180 days after the whistleblower filed the administrative complaint may the whistleblower then file an action in federal district court alleging retaliation under Sarbanes-Oxley. On the other hand, Dodd-Frank permits whistleblowers to file complaints in federal court without first pursuing an administrative action. Dodd-Frank also extends the statute of limitations from Sarbanes-Oxley’s 180 days to a default limitation period of six years.

Sarbanes-Oxley and Dodd-Frank also authorize different awards to prevailing whistleblowers. Under Sarbanes-Oxley, prevailing whistleblowers are entitled to reinstatement, back pay, and litigation fees and costs, as well as other special damages. Under Dodd-Frank, prevailing whistleblowers can obtain not only reinstatement and litigation fees and costs, but also double back pay. (Dodd-Frank does not provide for special damages beyond litigation costs, expert witness fees, and reasonable attorney fees.)

The Somers Action

Paul Somers, a former vice president for Digital Realty Investment Trust, Inc. (Digital Realty), filed suit in federal district court, asserting a claim of whistleblower retaliation under Dodd-Frank. Somers alleged that Digital Realty terminated his employment shortly after he reported suspected violations of securities laws to senior management. Somers did not report his suspicions about violations to the SEC, nor did he file an administrative complaint within 180 days of his termination.

Digital Realty moved to dismiss Somers’ claim, arguing that Dodd-Frank’s whistleblower protections were not available to Somers because he had only reported internally, and had not provided any information to the SEC. The district court denied Digital Realty’s motion, finding the statutory scheme ambiguous and according deference to the SEC’s broad regulatory definition of whistleblower. A divided panel of the Court of Appeals for the Ninth Circuit affirmed the district court’s decision on interlocutory appeal. In doing so, the Ninth Circuit sided with the Second Circuit (which had likewise upheld the SEC’s regulatory definition) and disagreed with the Fifth Circuit (which had held that Dodd-Frank only protects employees who first report to the SEC).

Digital Realty sought review of the Ninth Circuit’s decision in the Supreme Court, which granted certiorari to decide whether Dodd-Frank’s anti-retaliation provisions extend to individuals who have not reported a violation of the federal securities laws to the SEC.

The Supreme Court’s Decision

In a unanimous opinion with two concurrences, the Supreme Court agreed with Digital Realty and held that to sue under Dodd-Frank’s whistleblower anti-retaliation provisions, a person must first “provide information relating to a violation of the securities laws” to the SEC. The Justices agreed that Dodd- Frank’s statutory definition of whistleblower is unambiguous, and that the SEC’s regulatory definition had impermissibly broadened the statute. The Court explained that Dodd-Frank’s statutory definition describes “who is eligible for protection” and advances Dodd-Frank’s overarching purpose of encouraging employees to report suspected securities violations to the SEC.


By restricting who can qualify as a whistleblower to persons who first provide information relating to a violation of the securities laws to the SEC, the Supreme Court’s decision in Digital Realty may incentivize employees to report suspected violations of securities laws directly to the SEC instead of internally.

Companies should not interfere with employees’ efforts to report information to the Commission. However, companies frequently design and implement their internal reporting mechanisms, policies, and training to encourage internal reporting of compliance matters, including potential violations of federal securities laws. Such internal reporting mechanisms generally enable companies faced with internal allegations of compliance failures to investigate, respond, and remediate—and to assess whether self- reporting to the SEC is appropriate—without a simultaneous SEC investigation.

When the Commission interpreted Dodd-Frank’s whistleblower anti-retaliation provisions not to require reporting to the SEC, it noted that “reporting through internal compliance procedures can complement or otherwise appreciably enhance [the Commission’s] enforcement efforts … .” The SEC argued that its interpretation of Dodd-Frank’s whistleblower anti-retaliation provisions to cover those who only report internally would help companies, by discouraging employees from bypassing internal mechanisms and taking their reports directly to the Commission in the first instance. Digital Realty may change those employees’ calculus. Now, those same employees may lean toward reporting to the SEC directly—so as to take advantage of Dodd-Frank’s retaliation protections—instead of relying on a patchwork of state laws or the more cumbersome Sarbanes-Oxley procedures for recovery for retaliation.

Such a response would continue the trend of increased reporting to the SEC. The SEC has stated that “[t]he whistleblower program has had a transformative impact on enforcement,” and the program continues to grow, with ever-increasing reports and awards. In 2017, for example, the SEC received 4,400 tips, an increase of nearly 50% since FY 2012, and the SEC ordered awards totaling nearly $50 million dollars to 12 individuals.

Digital Realty may result in the SEC receiving even more reports about possible violations from whistleblowers, and potentially reports of lesser quality. A purported whistleblower needs only a “reasonable belief” that the information he or she is providing to the Commission relates to a “possible” violation of the federal securities laws in order to qualify for Dodd-Frank’s anti-retaliation provisions. Before Digital Realty, whistleblowers who believed they had information about a possible violation of federal securities laws, but were not fully confident in their belief, may have been inclined to report internally. Now those persons may forego reporting internally in favor of reporting to the Commission in the first instance.

Digital Realty may also prompt the Commission to attempt to expand the ways employees can provide information to the SEC and therefore qualify as whistleblowers under Dodd-Frank. Dodd-Frank expressly authorizes the SEC to establish the “manner” in which a whistleblower may provide information to the Commission. In response to concerns voiced by the Solicitor General that employees who, for example, give testimony to the SEC may not qualify as whistleblowers under Dodd-Frank’s statutory definition, the Supreme Court expressly noted that “[n]othing in today’s opinion prevents the agency from enumerating additional means of SEC reporting.” Accordingly, the Commission may articulate expansive means through which an employee can provide information to the SEC for the purposes of Dodd-Frank, which could have the effect of further incentivizing employees to report externally.

Connect with a global network of over 30,000 business law professionals


Login or Registration Required

You need to be logged in to complete that action.