The Conventional Wisdom
For over fifty years, settling an SEC enforcement action has meant one thing: pay the fine, sign the consent decree, and move on without admitting wrongdoing. Since 1972, the SEC's "neither admit nor deny" policy has allowed companies and executives to resolve allegations while maintaining their innocence in public. Your general counsel likely sees this as essential in any settlement negotiation.
The logic seems sound. Why settle if you have to admit guilt? An admission invites litigation risk, shareholder suits, and class actions. The policy exists, the SEC has said, to "avoid creating, or permitting to be created, an impression that a decree is being entered or a sanction imposed, when the conduct alleged did not, in fact, occur."
Board members and audit committees have operated under this framework for decades. Settlement equals resolution. Pay the fine, implement the remediation plan, and protect the company from further legal exposure.
Why This View Is Incomplete
This conventional view treats settlements as purely transactional risk management. It overlooks the cost of non-admissions: credibility, deterrence, and public trust in regulatory enforcement.
The SEC's review of the "Rescission of Policy Regarding Denials in Settlements of Enforcement Actions" signals a shift. The Commission isn't just tweaking settlement mechanics; it's questioning whether allowing defendants to settle without accountability serves the public interest.
Here's what the conventional wisdom misses: when your company settles for millions while publicly maintaining it did nothing wrong, you're asking investors, employees, and regulators to accept a contradiction. Either the conduct happened and warrants sanction, or it didn't and the SEC overreached. The current framework lets both parties ignore this inconsistency.
More critically, the policy creates information gaps that harm your governance processes. When enforcement actions resolve without factual admissions, audit committees lack a clear record of what occurred. You can't fix root causes you're not allowed to acknowledge. You can't learn from mistakes you didn't officially make.
The Evidence
The judicial record shows this tension. In 2025, the U.S. Court of Appeals for the Ninth Circuit rejected a First Amendment challenge to the SEC's practice of requiring defendants not to deny allegations as a condition of settlement. The court upheld the policy, but the challenge itself reveals the strain: defendants want to settle and deny. The SEC wants money and silence. Neither outcome serves transparency.
After a typical neither-admit-nor-deny settlement, the SEC announces an enforcement action. The company issues a statement about "cooperating fully" and "strengthening controls." Analysts parse the consent decree for clues about what actually happened. Investors get a settlement amount but no verified facts. Your compliance team gets a remediation mandate without a clear understanding of the underlying conduct.
This information vacuum doesn't protect companies. It protects executives and board members from accountability while leaving the organization vulnerable. When you can't publicly acknowledge what went wrong, you can't credibly explain what you've fixed.
The policy also undermines deterrence. If settlements carry no reputational cost beyond the dollar amount, they become a cost of doing business. Your competitors see companies settle for large sums while maintaining innocence, and the lesson is clear: aggressive practices carry financial risk, not professional or reputational consequences.
What to Do Instead
If the SEC rescinds the neither-admit-nor-deny policy, your board and audit committee should treat it as an opportunity, not a crisis.
First, recalibrate your settlement strategy. When admission becomes part of the cost, weigh the full reputational and litigation exposure against the cost of contesting the allegations. This forces earlier, more honest risk assessment. Your legal team should model both scenarios: settlement with admission versus litigation. Include downstream securities litigation costs, D&O insurance implications, and reputational impact in both models.
Second, strengthen your front-end controls to avoid settling in the first place. If admissions carry real consequences, prevention becomes more valuable than remediation. Invest in control testing automation, not just control documentation. Ensure your internal audit function has the resources to find issues before regulators do. Board members should ask: "What would we have to admit if the SEC investigated this program today?"
Third, build a disclosure framework that assumes transparency. If the SEC requires admissions, your investor relations and legal teams need protocols for communicating the facts, the remediation, and the accountability measures. Draft these templates now, while you're not under enforcement pressure. Companies that manage mandatory admissions well will be those who've already practiced transparent disclosure voluntarily.
Fourth, revisit your D&O insurance and indemnification agreements. Admissions of wrongdoing may trigger coverage exclusions or complicate indemnification obligations. Your risk management team should review these policies with carriers before you're negotiating a settlement under time pressure.
When the Conventional Wisdom Is Right
The neither-admit-nor-deny framework does serve one legitimate purpose: it lets companies resolve borderline cases without the binary choice of full admission or protracted litigation.
Consider situations where the law is genuinely unclear. New regulations, novel theories of liability, or untested disclosure requirements create gray areas. In these cases, neither party has perfect information about what a court would decide. A settlement without admission lets both sides avoid the cost and uncertainty of litigation without forcing the defendant to confess to conduct that might not actually violate the law.
The policy also protects companies when the SEC's allegations rest on judgment calls rather than clear violations. If your disclosure timing or risk assessment methodology falls within a reasonable range of practice, but the SEC disagrees, you shouldn't have to admit wrongdoing to avoid the cost of defending that judgment in court.
But here's the distinction: these scenarios are the exception, not the rule. If the SEC is alleging fraudulent accounting, material omissions, or control failures that any competent compliance program should have caught, the neither-admit-nor-deny framework doesn't protect good-faith actors. It protects companies that got caught.
Your board should welcome a world where settlements mean something. If you're confident in your controls and your disclosure practices, mandatory admissions are a problem for your competitors, not for you.
