SEC Late Filing Penalties: Section 16 Enforcement in 2026
If your company has an active equity compensation program, Section 16 late filing penalties are no longer a theoretical risk. The SEC's September 2024 enforcement sweep settled charges against 25 respondents, with civil penalties reaching $750,000 for a single issuer. The enforcement pattern is annual, data-driven, and accelerating.
This guide is for CFOs, general counsel, and equity plan administrators at public companies. It covers the actual penalty math, how the SEC finds late filers, the dual liability trap that catches both companies and insiders, and what to do before the next sweep window opens.
Key takeaway: The SEC runs annual Section 16 enforcement sweeps timed to its September 30 fiscal year-end. It uses EDGAR data analytics to flag every Form 4 filed late. A filing two weeks overdue can trigger enforcement. Both the insider and the company can be penalized for the same delinquency.
What Are the Actual SEC Late Filing Penalties for Section 16?
Civil penalties in the SEC's September 2024 sweep ranged from $10,000 to $200,000 per individual respondent and $40,000 to $750,000 per public company issuer. These figures come directly from the SEC's September 25, 2024 press release and the Davis Polk client update analyzing the settled orders.
For context on how these numbers have moved:
| Sweep Year | Total Respondents | Individual Penalty Range | Issuer Penalty Range |
|---|---|---|---|
| 2014 | 34 | Not publicly itemized | Not publicly itemized |
| 2023 | 11 | ~$70,000 to $200,000 | ~$70,000 to $200,000 |
| 2024 | 25 | $10,000 to $200,000 | $40,000 to $750,000 |
The 2024 sweep was the second consecutive year the SEC announced Section 13 and 16 settlements at fiscal year-end, and at 25 respondents it represented roughly a 2.5x increase in scale over 2023. The SEC sanctioned 98 insiders between 2014 and 2018 alone, per the December 2019 issue of Section 16 Updates.
Beyond the civil penalty, every respondent in the 2024 sweep agreed to a cease-and-desist order. That order is permanent public record on SEC.gov, searchable by company and individual name. Institutional investors and proxy advisors increasingly review these records as part of governance assessments.
The statutory ceiling is far higher. Section 32(a) of the Exchange Act provides for criminal penalties of up to $5 million per violation for individuals and $25 million for entities, plus up to 20 years imprisonment. The sweep actions have used civil authority under Section 21(d), not criminal referrals, but the ceiling matters when assessing worst-case exposure.
How Does the SEC Find Late Section 16 Filings?
The SEC does not rely on tips or complaints. It uses EDGAR's own timestamp data. Every Form 4 filed on EDGAR carries a transaction date and a filing date. The SEC's data analytics tools automatically flag any filing where the gap between those two dates exceeds two business days. As Davis Polk noted in its analysis of the 2024 sweep: "The SEC once again highlighted its use of data analytics to identify individuals and entities who filed late reports."
This is the mechanism behind every sweep since 2014. The SEC does not need a whistleblower. It cross-references the transaction date reported on the Form 4 against the EDGAR filing timestamp and builds a list of delinquent filers programmatically. That list then feeds the enforcement pipeline.
Two practical implications:
- There is no hiding a late filing. The moment a Form 4 is submitted, the delay is permanently recorded.
- Patterns are visible at scale. The SEC can sort by number of late filings, length of delay, and issuer, which is exactly how it identifies habitual violators for sweep inclusion.
The 2024 sweep pursued conduct dating back to 2018 and 2019, confirming that the SEC will reach back five or six years when building a sweep case. As Davis Polk observed, this is "a reminder that the SEC is prepared to pursue technical violations involving aged conduct in the context of a broader enforcement sweep." Do not assume aged delinquencies are safe.
The Form 4 Two-Business-Day Rule: When Does the Clock Start?
The Form 4 deadline is two business days from the transaction date, not from the date the company or compliance team is notified. This is the most common operational failure in equity plan administration.
Under Section 16(a) of the Exchange Act, the full deadline schedule is:
| Form | Trigger | Deadline |
|---|---|---|
| Form 3 | Becoming an insider (officer, director, or >10% owner) | 10 calendar days |
| Form 4 | Most equity transactions (purchases, sales, grants, exercises, gifts) | 2 business days from transaction date |
| Form 5 | Previously unreported transactions | 45 days after fiscal year end |
| Schedule 13D | Acquiring >5% beneficial ownership | 5 business days from acquisition |
| Schedule 13D amendment | Any material change | 2 business days |
Note that Form 3 uses calendar days, not business days. A new director appointed on a Friday has until the following Monday plus nine calendar days, not nine business days.
For Form 4, "business days" means days the SEC is open. Federal holidays do not count. If Day 2 falls on a holiday, the deadline moves to the next business day. The clock starts on the transaction date itself, which for equity award grants is typically the grant date, not the date the insider receives the grant documentation.
The 2024 sweep included a proceeding where filings were only two weeks late. The SEC does not require egregious delay to act.
The Dual Liability Trap: How Both the Company and the Insider Get Penalized
Section 16(a) imposes the filing obligation on the individual insider. But the SEC will also charge the company if it agreed to file on behalf of insiders and then filed late. This is not a theoretical risk. The SEC "double-dipped" in at least two cases in the 2024 sweep, charging both the company and the individual insider for the same delinquent Form 4s.
As the NASPP noted: "This is the second time that the SEC has brought charges against companies who have agreed to take on the responsibility for submitting Section 16 filings for their insiders and then failed to do so."
The SEC's own cease-and-desist order language is explicit: "issuers who voluntarily accept certain responsibilities and then act negligently in the performance of those tasks may be liable as a cause of Section 16(a) violations by insiders."
In one 2024 case, a company's insiders filed more than 200 untimely Form 4s over a three-year period from July 2019 to July 2022, covering open-market stock sales and equity award grants. The company had agreed to handle all filings. The SEC found it acted negligently. Both the company and affected insiders faced penalties.
The practical implication: if your company has a standard practice of filing Section 16 reports on behalf of officers and directors (which most public companies do), you have inherited the compliance obligation. Insufficient procedures are not a defense. The SEC explicitly rejected one company's explanation that late filings were due to administrative errors and the fact that its Israeli headquarters operates Sunday through Thursday. As NASPP put it: "Investors might be sympathetic to this rationale, but the SEC is not."
What Is Item 405 and Why Does It Create a Second Layer of Exposure?
Item 405 of Regulation S-K requires every public company to disclose insider filing delinquencies in its proxy statement, with specific detail. Getting this disclosure wrong is itself an independent violation, separate from the underlying late filing.
Under 17 CFR § 229.405, the required disclosure under the caption "Delinquent Section 16(a) Reports" must include:
- The names of insiders with delinquencies
- The number of late transactions per insider
- The number of late forms filed per insider
- Any known failures to file a required form
The most common Item 405 mistake: disclosing the number of late filings but omitting the number of late transactions. That omission is itself a violation. Three of the five company respondents in the 2023 sweep were charged specifically for Item 405 failures, each involving failures across multiple years and ranging from 75 to 150 delinquencies per company.
In the 2024 sweep, one issuer omitted Item 405 disclosure entirely from its Forms 10-K for fiscal years 2019, 2020, and 2021, despite numerous insiders having delinquent filings in each of those years. The SEC charged this as a separate violation.
If there are no delinquencies to report, the SEC encourages companies to simply omit the "Delinquent Section 16(a) Reports" caption rather than affirmatively stating that all filings were timely. Either approach is acceptable. What is not acceptable is stating that all filings were timely when they were not.
Rule 10b5-1 Plans Do Not Shift Section 16 Liability
Insiders on Rule 10b5-1 trading plans remain personally liable for Form 4 compliance. The 2024 sweep included delinquent transactions executed pursuant to 10b5-1 plans. The plan administrator or broker executing trades under the plan does not bear the Section 16 filing obligation.
This is a recurring compliance blind spot. An insider sets up a 10b5-1 plan, delegates execution to a broker, and assumes the broker handles all regulatory filings. The broker handles trade execution. The Form 4 obligation stays with the insider (or with the company if it has agreed to file on behalf of the insider).
For companies with large equity compensation programs and multiple insiders on 10b5-1 plans, this means each plan execution triggers a two-business-day Form 4 clock that the compliance team must track independently of the broker's execution confirmation.
The Foreign Private Issuer Exemption
Section 16 does not apply to foreign private issuers (FPIs). This is a significant carve-out that creates confusion for multinational companies with US-listed subsidiaries, dual-listed structures, or recently converted FPI status.
If a company qualifies as a foreign private issuer under SEC rules, its officers, directors, and significant shareholders are not subject to Section 16(a) reporting requirements. They are also not subject to the short-swing profit disgorgement rules under Section 16(b). For a detailed breakdown of the FPI rules and the March 2026 deadline implications, see Finrep's Section 16 Insider Reporting Compliance Guide 2026.
Companies that lose FPI status must ensure their newly covered insiders file Form 3 within 10 calendar days of the status change. Missing this initial filing is itself a Section 16 violation.
What to Do If You Discover a Pattern of Late Filings
Discovering a backlog of delinquent Form 4s before the SEC does puts a compliance team in a difficult position. The practical options:
-
File the late forms immediately. Amending or filing late is better than not filing at all. The SEC has pursued conduct from 2018 in a 2024 sweep, but unfiled forms remain an open violation. Filing late closes the transaction record, even if it does not eliminate the penalty exposure.
-
Conduct a full audit. Map every insider transaction against every Form 4 filed for the past five years. The five-year lookback aligns with the civil penalty statute of limitations under 28 U.S.C. § 2462, which is the practical enforcement horizon for sweep cases.
-
Fix Item 405 proxy disclosure. If prior proxy statements omitted or understated delinquencies, assess whether amended filings are warranted. The SEC has charged Item 405 failures spanning four consecutive fiscal years.
-
Engage outside counsel before self-reporting. The research dossier does not support a definitive claim that voluntary self-disclosure produces a specific penalty reduction in Section 16 sweep cases. What is clear is that the SEC treats negligent procedures as an aggravating factor and that documented remediation efforts are relevant to penalty negotiation.
-
Rebuild the compliance infrastructure. The SEC's cease-and-desist orders consistently identify insufficient procedures as the root cause. A compliance program that relies on informal notification from insiders will fail.
Section 16 Compliance Checklist for 2026
The next annual sweep window is the SEC's fiscal year-end on September 30, 2026. Use this checklist before then:
Transaction tracking
- Confirm that the two-business-day Form 4 clock is tracked from the transaction date, not the notification date
- Verify that all transaction types are covered: open-market purchases and sales, 10b5-1 plan executions, equity award grants, option exercises, gifts, trust conversions, and derivatives transactions
- Confirm that Form 3 deadlines (10 calendar days) are tracked separately from Form 4 deadlines (2 business days)
Filing responsibility
- Document in writing which party (company or insider) is responsible for each insider's Section 16 filings
- If the company has agreed to file on behalf of insiders, confirm that internal procedures are sufficient to meet the two-business-day deadline consistently
- Confirm that 10b5-1 plan administrators are not assumed to handle Form 4 filings
Item 405 proxy disclosure
- Pull all Form 4 filings for the fiscal year and cross-reference against transaction records
- For any delinquencies, confirm the proxy disclosure includes: insider names, number of late transactions per insider, number of late forms per insider, and any known failures to file
- Do not state that all filings were timely unless you have verified this against EDGAR records
Historical remediation
- Run a five-year lookback on Form 4 filing dates versus transaction dates for all current insiders
- File any outstanding late forms before the September 2026 sweep window
- Assess whether prior Item 405 disclosures were complete and accurate
For the full Section 16 transaction code reference and which transaction types require a Form 4, see Finrep's Section 16 Transaction Codes: 2026 Complete Guide. For Schedule 13D and 13G obligations that were bundled with Section 16 violations in the 2024 sweep, see the Schedule 13D and 13G Filing Requirements guide.
FAQ
What are Section 16 SEC filings? Section 16 of the Securities Exchange Act of 1934 requires officers, directors, and beneficial owners of more than 10% of a registered equity class to disclose their holdings and transactions via Forms 3, 4, and 5. Form 3 is the initial ownership statement, Form 4 reports most transactions within two business days, and Form 5 catches previously unreported transactions within 45 days of fiscal year-end.
How late can you file with the SEC before facing enforcement? The 2024 sweep included a proceeding where filings were only two weeks late. There is no de minimis safe harbor. The SEC's data analytics tools flag every Form 4 where the filing date exceeds two business days from the transaction date, regardless of how short the delay is.
Can the company be penalized even if the insider is the one who filed late? Yes. If the company agreed to file Section 16 reports on behalf of its insiders and then filed late, the SEC will charge the company for causing the violation. In at least two 2024 sweep cases, both the company and the individual insider were penalized for the same delinquent filings.
What is SEC Rule 16 and who does it apply to? Section 16 of the Exchange Act applies to insiders of US public companies: officers, directors, and beneficial owners of more than 10% of a registered equity class. Foreign private issuers are exempt. The rule covers both the disclosure obligation (Section 16(a)) and the short-swing profit disgorgement rule (Section 16(b)).
What is Item 405 of Regulation S-K? Item 405 requires public companies to disclose insider Section 16 filing delinquencies in their proxy statements, including the names of delinquent insiders, the number of late transactions, the number of late forms, and any known failures to file. Disclosing late filings but omitting the number of late transactions is itself an Item 405 violation.
Will the SEC run another Section 16 enforcement sweep in 2026? The pattern strongly suggests yes. The SEC has run annual sweeps timed to its September 30 fiscal year-end for two consecutive years (2023 and 2024), and the 2024 sweep was the largest in recent memory. The SEC has explicitly stated it uses data analytics to identify late filers systematically. Compliance teams should treat September 30, 2026 as the next enforcement horizon.
