SOX Whistleblower Protection

Sarbanes-Oxley Whistleblower Protection

Congress passed the Sarbanes-Oxley Act (SOX) in 2002 in direct response to the Enron and WorldCom accounting scandals, which devastated shareholders and employees while exposing how little protection existed for the people who might have spoken up sooner. Section 806 of SOX created a federal whistleblower protection specifically for employees who report corporate and securities fraud. See our Whistleblower Protection Law overview for how this fits alongside other whistleblower statutes.

Who Is Protected

SOX covers employees of publicly traded companies — but it reaches further than that. In a 2014 decision, Lawson v. FMR LLC, the U.S. Supreme Court held that SOX also protects employees of private contractors and subcontractors who perform work for a public company, not just employees of the public company itself. This matters a great deal in industries like mutual fund management, where the public-facing fund often has few direct employees and relies heavily on privately held contractors to do the actual work. Following a 2010 Dodd-Frank amendment, SOX also covers employees of nationally recognized statistical rating organizations (credit rating agencies).

A meaningful limit: SOX does not cover employees of purely private companies with no public company affiliation, and a contractor’s fraudulent practices don’t become subject to SOX merely because that contractor happens to have some unrelated contract with a public company — the retaliation generally needs to relate to the employee’s work connected to the public company.

What Is Protected

SOX protects employees who reasonably believe — consistent with the reasonable belief standard described on our overview page — that conduct constitutes mail fraud, wire fraud, bank fraud, securities fraud, a violation of any SEC rule or regulation, or any federal law relating to shareholder fraud. You don’t need to prove your report definitively and specifically matched one of these categories; the focus is on whether your belief was reasonable at the time, not on how the underlying conduct is later characterized.

Protected reporting can go to a supervisor or other person at your employer with authority to investigate, a federal regulatory or law enforcement agency, or a member or committee of Congress. Participating in, or assisting with, an investigation or proceeding about this kind of misconduct is also protected.

Filing Process and Timeline

Unlike a typical lawsuit, a SOX retaliation claim must start with an administrative complaint to OSHA — you generally cannot go straight to court. Some key deadlines and mechanics:

180-day filing deadline. You must file your OSHA complaint within 180 days of the retaliation, or within 180 days of when you became aware of it, whichever is later. This deadline was extended from an original 90 days by the 2010 Dodd-Frank amendments.
The “kick-out” provision. If OSHA hasn’t issued a final decision within 180 days of your filing, you gain the right to remove your case out of the administrative process and file it directly in federal district court — with a right to a jury trial. This is a genuinely important strategic option, discussed further below.
Preliminary reinstatement. If OSHA finds reasonable cause to believe retaliation occurred, it can order preliminary reinstatement to your job while the case continues — and that reinstatement order isn’t automatically paused just because your employer appeals it.

A Strategic Reason to Consider the Kick-Out Provision

This is worth understanding clearly: SOX itself does not authorize punitive damages. But if you exercise your right to remove your case to federal court after the 180-day period, you may be able to add other legal claims to your case that do allow punitive damages — including, for DC and Maryland employees, a common-law wrongful discharge claim like the ones described on our DC and Maryland wrongful termination page. SOX explicitly states that it doesn’t diminish your rights under any other federal or state law, which preserves this option.

Remedies

A successful SOX whistleblower may be entitled to:

Reinstatement to your former position, with the same seniority you would have had
Back pay, with interest
Special damages, including compensation for emotional distress in many cases
Litigation costs, expert witness fees, and reasonable attorney’s fees

Distinct Issues Specific to SOX Cases

Executive certification requirements. SOX requires a company’s CEO and CFO to personally certify the accuracy of the company’s financial reports. Concerns about the truthfulness of these certifications — or pressure to help prepare a certification you believe is false — are a common source of SOX whistleblower claims.
Internal controls. SOX requires public companies to establish and maintain internal controls over financial reporting, and to have those controls independently assessed. Reporting weaknesses or manipulation of internal controls is a frequent basis for a protected disclosure.
Criminal certification. Beyond the civil certification requirement, SOX separately makes it a crime for a CEO or CFO to knowingly certify a false financial report, carrying significant criminal penalties.
The PCAOB. SOX created the Public Company Accounting Oversight Board to oversee the audits of public companies. Issues involving auditor independence or PCAOB standards sometimes intersect with whistleblower claims, particularly for employees who work in or alongside a company’s audit function.
Document destruction. SOX includes its own criminal provision making it a felony, punishable by up to 20 years in prison, to knowingly destroy, alter, or falsify documents with the intent to impede a federal investigation. Concerns about document destruction or preservation are a serious and recurring issue in SOX whistleblower cases, and can themselves be the basis for a protected disclosure.

Talk to a SOX Whistleblower Attorney

SOX’s administrative filing requirement, strict deadlines, and the strategic choice around the kick-out provision all make early legal advice especially valuable in these cases. Wilkenfeld Law Office can help you understand your strongest path forward.

Or call 301.245.3035 · Intake@WilkenfeldLO.com

This article provides general information and is not legal advice. Contacting us does not create an attorney-client relationship.

Reviewed by Ari Wilkenfeld, Esq. (DC Bar No. 461063; MD Bar No. 9806240300). Ari has over 27 years of experience litigating in federal and state courts, and before the U.S. Equal Employment Opportunity Commission (EEOC), the U.S. Merit Systems Protection Board (MSPB), and various arbitration panels. Ari has been recognized by Esquire Magazine as “a famously determined Civil Rights lawyer” and by the New York Post as “a high powered DC Lawyer.” Last updated: August 28, 2026.