Skip to main content
Category: Whistleblowing and Reporting

Dodd-Frank Whistleblower Provisions

Also known as: Dodd-Frank Section 922 Whistleblower Protections, Dodd-Frank Whistleblower Program
Simply put

The Dodd-Frank Whistleblower Provisions are parts of a U.S. law passed after the 2008 financial crisis that encourage people to report certain financial wrongdoing to regulators and protect them from retaliation for doing so. Under these provisions, an individual (or two or more people acting together) who reports information about violations may qualify for legal protections and, in some cases, monetary awards. The specific rules, eligibility, and remedies vary and are matters that require qualified legal counsel; this entry is educational and not a substitute for professional advice.

Formal definition

The Dodd-Frank Whistleblower Provisions refer primarily to Section 922 of the Dodd-Frank Wall Street Reform and Consumer Protection Act, which amended the Securities Exchange Act of 1934 to expand whistleblower protections and establish the U.S. Securities and Exchange Commission (SEC) whistleblower program. Under Section 922, a 'whistleblower' is defined as an individual, or two or more individuals acting jointly, who provide information to the SEC regarding securities law violations; the provisions broadened anti-retaliation prohibitions and, per SEC guidance, expanded protections for whistleblowers who report such violations. These securities-focused provisions are jurisdiction-specific to the United States and enforced by the SEC. Note that commodities-related whistleblower incentives and protections are established separately (via the Commodity Exchange Act and the CFTC program) and fall outside the scope of Section 922; some sources also reference coverage extending to foreign bribery matters, but the precise statutory scope, eligibility criteria, award determinations, and applicable remedies should be confirmed against primary legal sources and qualified counsel. This entry addresses the whistleblower provisions specifically and does not cover the full breadth of the Dodd-Frank Act.

Why it matters

The Dodd-Frank Whistleblower Provisions matter because they reshaped how information about potential securities law violations reaches regulators. By establishing the SEC whistleblower program under Section 922 and broadening anti-retaliation prohibitions, the provisions created a channel through which individuals, or two or more individuals acting jointly, may report violations directly to the SEC. For compliance and ethics program managers, this external reporting avenue is a reminder that employees who perceive wrongdoing have options beyond internal channels, which raises the stakes for building internal reporting mechanisms that people trust and use.

The existence of these provisions is generally regarded as a factor that compliance programs should account for when designing whistleblower channels, investigation protocols, and anti-retaliation safeguards. If internal reporting is discouraged, mishandled, or followed by retaliation, individuals may be more inclined to report externally, and the organization may lose the opportunity to identify and remediate issues before they escalate. It is important to note that these provisions do not guarantee any particular outcome, protection, or award in a given case; eligibility, remedies, and award determinations depend on the specific facts and applicable legal standards.

Because the provisions are jurisdiction-specific to the United States and are enforced by the SEC, their application, scope, and interpretation are matters that require qualified legal counsel. Exact statutory language, eligibility criteria, and remedies should be confirmed against primary legal sources rather than summarized secondhand.

Who it's relevant to

Compliance Officers
Compliance officers need to understand that these provisions create an external reporting avenue to the SEC for securities law violations. This informs how internal whistleblower channels, escalation procedures, and anti-retaliation policies are designed, so that employees are more likely to raise concerns internally first, while recognizing that external reporting remains an available option. The provisions are one element to account for within a broader compliance program, not a substitute for one.
Ethics Program Managers
Ethics program managers focus on building a culture where individuals feel able to speak up without fear of retaliation. Because the provisions broadened anti-retaliation prohibitions, they underscore the importance of consistently reinforcing non-retaliation commitments and ensuring that reported concerns are handled fairly and credibly.
Legal and Audit Teams
Legal and audit teams must interpret how these securities-focused, U.S.-jurisdiction provisions apply to specific situations, including questions of eligibility, protection, and potential awards. Because scope distinctions matter, Section 922 addresses SEC-enforced securities violations, while commodities whistleblower matters are handled separately through the CFTC program, these teams should confirm details against primary legal sources and qualified counsel.
Learning and Development Staff
Learning and development staff who build training on reporting and non-retaliation can reference these provisions to explain why internal reporting channels matter and what protections exist for those who report securities law violations to regulators. Training should present the concept accurately and note that specifics, such as eligibility and remedies, require qualified legal counsel and vary by facts and applicable law.

Inside Dodd-Frank Whistleblower Provisions

SEC Whistleblower Program (Section 922)
Section 922 of the Dodd-Frank Act amended the Securities Exchange Act of 1934 to establish a whistleblower program administered by the U.S. Securities and Exchange Commission. It applies to violations of the federal securities laws within the SEC's jurisdiction. This is distinct from the separate commodities whistleblower program.
Monetary Award Provisions
The program authorizes monetary awards to eligible whistleblowers who voluntarily provide original information leading to successful enforcement actions meeting a monetary threshold set by statute. Exact award percentages and monetary thresholds should be confirmed against the statute and SEC rules, as this glossary does not restate specific figures.
Anti-Retaliation Protections
The provisions include protections intended to shield whistleblowers from retaliation by employers for reporting conduct covered by the program. Whether and how these protections apply in a given situation can turn on legal interpretation and should be assessed with qualified legal counsel.
Original Information Requirement
Eligibility generally depends on the whistleblower providing information that is original and derived from independent knowledge or analysis, as defined by the program's rules. This is a threshold concept, not the full set of eligibility criteria.
Relationship to the CFTC Program (context)
A separate provision of Dodd-Frank, Section 748, amended the Commodity Exchange Act to create a whistleblower program administered by the Commodity Futures Trading Commission for commodities-related violations. Section 922 and the SEC program do not cover commodities violations; that scope belongs to the distinct CFTC program.

Common questions

Answers to the questions practitioners most commonly ask about Dodd-Frank Whistleblower Provisions.

Do the Dodd-Frank whistleblower provisions cover commodities violations along with securities violations?
Not under the same provision. Section 922 of the Dodd-Frank Act amended the Securities Exchange Act and established the SEC whistleblower program, which addresses violations of the federal securities laws. Whistleblower incentives and protections for commodities-related violations were created separately by Section 748, which amended the Commodity Exchange Act and established the CFTC whistleblower program. These are two distinct programs administered by two different agencies, so a matter involving commodities laws would fall under the CFTC program rather than the SEC program created by Section 922. This distinction should be confirmed against the primary statutory text, and specific coverage questions may require qualified legal counsel.
Does completing whistleblower training or having a Dodd-Frank-compliant reporting channel satisfy an organization's compliance program obligations?
No. A whistleblower channel and related training are individual components, not a complete compliance program. The Dodd-Frank whistleblower provisions concern a statutory reporting and anti-retaliation framework tied to the SEC; they do not, on their own, constitute a code of conduct, risk assessment, monitoring and auditing function, or the other elements generally expected of an effective program. Training on these provisions may support awareness, but it should not be described as fulfilling broader program requirements. Program design implications vary by organization and jurisdiction and are educational here rather than legal advice.
What should internal reporting channels account for given that Dodd-Frank permits reporting directly to the SEC?
Because the provisions allow individuals to report potential securities law violations to the SEC, internal channels are generally designed to encourage employees to raise concerns internally while recognizing that they retain the ability to go to the regulator. Programs often aim to make internal reporting accessible and responsive so issues can be surfaced and addressed, though whether and how an individual reports is ultimately their decision. Specific channel design choices should be validated against current SEC rules and qualified legal counsel, as requirements can change.
How do the anti-retaliation aspects of these provisions affect how organizations respond to internal reporters?
The provisions include anti-retaliation protections intended to shield individuals who report covered conduct from adverse action. In practice, organizations generally structure investigation, personnel, and documentation processes so that responses to reporters are not, and do not appear to be, retaliatory. The precise scope of protected activity and available remedies is a legal matter that depends on statutory text, applicable rules, and case interpretation, and should be assessed with qualified legal counsel rather than resolved through a glossary entry.
What role can training on these provisions play in a compliance program, and what are its limits?
Training is intended to help employees and managers understand what the whistleblower and anti-retaliation framework covers, how internal channels work, and why retaliation is prohibited. It is one component and is generally regarded as supporting awareness and a speak-up culture. It does not guarantee that misconduct will be prevented, that retaliation will not occur, or that the organization is legally protected; outcomes depend on implementation, culture, and consistent follow-through across the broader program.
How should organizations keep their approach to these provisions current over time?
Because the framework is administered by the SEC and its implementing rules and interpretations can evolve, organizations generally review their reporting channels, anti-retaliation practices, and related training against current primary sources on a periodic basis. Exact rule details, effective dates, and any award or penalty figures should be confirmed against authoritative SEC materials rather than assumed. This is an area where qualified legal counsel is typically involved, and this entry is educational and not a substitute for professional advice.

Common misconceptions

The Dodd-Frank whistleblower provisions in Section 922 cover commodities violations along with securities violations.
Section 922 amended the Securities Exchange Act and applies to securities violations handled by the SEC. Commodities-related whistleblower incentives and protections were established separately under Section 748, which amended the Commodity Exchange Act and created the CFTC whistleblower program. The two programs are administered by different agencies and cover different subject matter.
Having a Dodd-Frank-related whistleblower channel means an organization has a complete compliance program.
A whistleblower reporting channel is only one component of a broader compliance program. It does not by itself constitute risk assessment, training, a code of conduct, or monitoring and auditing functions, which are distinct elements that must be implemented separately.
The anti-retaliation protections guarantee that a whistleblower is legally protected in every circumstance.
The scope and application of the protections depend on how the statute and rules are interpreted in specific facts and may vary by circumstance. Whether a given individual or disclosure qualifies is a legal question that requires qualified legal counsel; this entry is educational and not a substitute for professional advice.

Best practices

Maintain clear internal reporting channels alongside awareness that employees may report externally to the SEC, and design programs so that internal reporting is encouraged without discouraging protected external disclosures.
Train relevant personnel to distinguish the SEC program under Section 922 (securities violations) from the separate CFTC program under Section 748 (commodities violations) so that intake and routing are accurate.
Establish and document anti-retaliation policies and procedures, and consult qualified legal counsel to confirm how the provisions apply to your organization's specific circumstances.
Treat the whistleblower channel as one element of a broader compliance program, and ensure it is integrated with risk assessment, training, a code of conduct, and monitoring and auditing functions.
Confirm any specific award percentages, monetary thresholds, and effective dates against the statute and current SEC rules rather than relying on general summaries.
Periodically review the effectiveness of intake, investigation, and confidentiality practices, recognizing that outcomes depend on implementation and context rather than on the existence of a channel alone.