For over 50 years, the Securities and Exchange Commission (SEC) has allowed companies and individuals to settle enforcement actions with a peculiar phrase: neither admit nor deny. You pay the penalty, consent to the order, and move on without confirming the allegations are true.
That arrangement may be ending. The SEC filed a proposed rule with the Office of Information and Regulatory Affairs titled "Rescission of Policy Regarding Denials in Settlements of Enforcement Actions." The name suggests the agency is ready to abandon its longstanding settlement framework established in 1972 under 17 CFR 202.5(e).
For you and your team, this isn't just a procedural shift. It's a question about what settlement actually means and whether your organization should approach SEC investigations differently if admissions become mandatory.
The Case for Keeping Neither-Admit-Nor-Deny
The original policy had a clear rationale: to avoid creating an impression that a decree is being entered or a sanction imposed when the conduct alleged did not, in fact, occur.
In practice, this framework serves several purposes that matter to companies facing enforcement:
It allows settlement without collateral consequences. Admitting wrongdoing in an SEC settlement can become evidence in shareholder lawsuits, customer disputes, and regulatory actions in other jurisdictions. Neither-admit-nor-deny limits the damage, allowing you to resolve the matter with the SEC without handing ammunition to every plaintiff's attorney who wants to sue you next.
It recognizes that investigations aren't trials. The SEC's allegations are one side of the story. Companies often settle not because they agree with every claim, but because litigation is expensive, distracting, and uncertain. Neither-admit-nor-deny acknowledges that settlement is a business decision, not a confession.
It encourages cooperation. If settlement means admitting guilt, companies have less incentive to cooperate early in an investigation. You might as well fight if the reputational and legal consequences are the same either way. The current policy creates space for companies to resolve matters without the full cost of a public admission.
The Ninth Circuit upheld this framework in 2025, rejecting First Amendment challenges to the no-deny requirement. The court found that preventing defendants from denying allegations they've agreed to settle serves a legitimate government interest.
The Case for Requiring Admissions
Critics of neither-admit-nor-deny have been vocal for years, and their arguments have gained traction:
It looks like accountability theater. When a company pays a $50 million penalty but won't admit what it did wrong, the public sees a system that lets the powerful avoid consequences. The settlement announcement describes serious violations, but the company's press release says it "neither admits nor denies" and emphasizes its commitment to compliance. That disconnect erodes trust.
It undermines deterrence. If you can settle without admitting wrongdoing, what lesson does that send? Companies can treat penalties as a cost of doing business rather than an acknowledgment that they broke the law. Requiring admissions forces organizations to confront what happened and why.
It denies the public a full accounting. Under the current system, you get the SEC's version of events and a settlement with no admission. You don't hear the defendant's side because they've agreed not to contest the allegations. But you also don't get a clear statement of what actually occurred. Requiring admissions would at least establish an agreed-upon set of facts.
Other regulators already require it. The Department of Justice's Corporate Enforcement Policy and deferred prosecution agreements typically require companies to admit to factual statements. If DOJ can make admissions work in criminal settlements, why can't the SEC in civil ones?
Where Practitioners Actually Land
Compliance officers I've spoken with are split, but most share a common concern: they want clarity about what settlement means and what it requires.
Some see forced admissions as a wake-up call that will push boards to take compliance more seriously. If settling means publicly admitting you violated securities laws, you're going to invest more in prevention. You'll strengthen internal accounting controls, improve your Books and Records practices, and take whistleblower reports more seriously.
Others worry that mandatory admissions will make settlements rare and litigation common. If you're going to take the reputational hit of an admission anyway, you might as well fight and force the SEC to prove its case. That means longer investigations, higher legal costs, and less predictability for everyone involved.
The practical middle ground seems to be this: whether or not the rule changes, your compliance program needs to be strong enough that you're not relying on neither-admit-nor-deny to save you. If your strategy depends on settling without admissions, you're already in trouble.
Our Take
The neither-admit-nor-deny framework has outlived its usefulness, but not for the reasons most critics cite.
The real problem isn't that it lets companies avoid accountability. It's that it creates confusion about what settlement means. When you pay a penalty but don't admit wrongdoing, you send mixed signals to your employees, your board, and your shareholders. Your compliance team is supposed to learn from the incident and fix what went wrong, but the official position is that nothing went wrong.
That's not sustainable.
Requiring admissions would force companies to be honest about what happened and why. It would make settlement a genuine resolution rather than an expensive ambiguity. And it would push compliance officers to focus on prevention rather than damage control.
But there's a tradeoff. Mandatory admissions will make some companies fight cases they would have settled, which means longer investigations and less cooperation with regulators. The SEC will need to be more careful about what it alleges if defendants know those allegations will become admissions.
If the rule moves forward, expect to see companies take a harder look at their exposure before investigations even start. Your Due Diligence to Prevent and Detect Criminal Conduct under the Federal Sentencing Guidelines for Organizations matters more when settlement isn't a soft exit. Your Internal Reporting Channels need to surface problems before the SEC does. And your board needs to understand that settling an enforcement action will mean admitting what went wrong, not just paying to make it go away.
The shift won't happen overnight. The proposed rule still needs to go through notice and comment. But the direction is clear: the SEC is moving away from neither-admit-nor-deny, and compliance programs need to prepare for a world where settlement means saying what you did.
