ARB Expands Sarbanes-Oxley to More Private Firms, Boosts Whistleblower Rights
The ARB's April 2024 rulings extend SOX protections and whistleblower rights to more private companies.
Why it matters: Legal and compliance teams at private firms must revise policies and training to address expanded SOX liability. This shift increases whistleblower protections and potential retaliation claims beyond public company boundaries.
- The Department of Labor's Administrative Review Board (ARB) issued key decisions in April 2024 expanding SOX's reach to additional private company employees and contractors.
- The 2002 Sarbanes-Oxley Act originally focused on public companies but included limited private company provisions related to evidence destruction.
- In 2014, the Supreme Court ruled in Lawson v. FMR LLC that SOX whistleblower protections extend to contractors of public companies, and in March 2024, Murray v. UBS Securities removed the need to prove retaliatory intent for protection.
- Seyfarth Shaw LLP highlighted these changes cover "vast numbers of employees and contractors not previously thought covered," requiring compliance updates for private companies.
The Sarbanes-Oxley Act (SOX), enacted in 2002, primarily targeted public companies to enhance financial transparency and corporate accountability. While SOX included narrow provisions affecting private companies—such as prohibiting evidence destruction to obstruct federal investigations—it did not broadly regulate private firm conduct initially (Congress.gov - SOX text).
On April 12, 2024, the Department of Labor's Administrative Review Board (ARB) expanded SOX’s whistleblower protections. These rulings clarify that certain private company contractors and employees now fall under SOX's protections against retaliation. This regulatory shift broadens the scope beyond the traditional public company focus and is consequential for compliance teams.
Key Supreme Court decisions reinforce this trend. The 2014 Lawson v. FMR LLC decision confirmed SOX whistleblower protections apply to employees of public company contractors and subcontractors (WilmerHale). More recently, in March 2024, the Court’s Murray v. UBS Securities ruling removed the requirement for whistleblowers to demonstrate retaliatory intent to invoke SOX protection (ABA Banking Journal).
Seyfarth Shaw LLP commented that these developments "mean vast numbers of employees and contractors not previously thought to be covered" may now be protected under SOX, heightening compliance risks for private firms. As a result, private companies need to reassess internal policies, training programs, and reporting mechanisms.
Legal and compliance professionals should closely monitor ARB rulings and apply these interpretations when advising clients or managing corporate risk. The evolving landscape signals increased whistleblower protections across a broader group of workers and contractors even outside public company domains.
By the numbers:
- April 12, 2024 — Date of ARB rulings expanding SOX whistleblower protections
- 2014 — Supreme Court’s Lawson v. FMR LLC ruling extended protections to contractors
- March 2024 — Supreme Court’s Murray v. UBS Securities ruling removed retaliatory intent requirement
Yes, but: While the ARB rulings broaden SOX coverage, precise application depends on specific contractual and employment relationships, requiring case-by-case legal analysis.
What's next: Pending further administrative guidance and potential future court challenges may clarify or limit the scope of SOX's application to private firms.