Authored by CM Law Partner Mike Piazza, this client alert examines what Director David Woodcock’s first remarks mean for your business.

Key Facts at a Glance:

• • David Woodcock was appointed SEC Director of Enforcement in May 2026.
  • His first public remarks were delivered at the MFA Legal & Compliance Conference on May 13, 2026.
  • The SEC is pursuing a deliberate “quality over quantity” enforcement approach.
  • Core priorities: offering fraud, financial reporting, market manipulation, insider trading, private fund/adviser misconduct.
  • A new Retail Fraud Working Group and Cross-Border Task Force are operational or being reinstated.
  • The 2026 Enforcement Manual update (February 2026) materially tightens self-reporting and cooperation standards.

Overview

On May 13, 2026, David Woodcock delivered his first public speech as the SEC’s new Director of Enforcement at the MFA Legal & Compliance Conference. One week into his tenure, his message was clear and deliberate: the Enforcement Division is returning to its roots. The firms that will fare best are those that recognize the signals of potential enforcement exposure early and act accordingly — well before a subpoena arrives.

This alert summarizes Director Woodcock’s stated enforcement priorities, explains how SEC investigations begin and escalate, identifies the warning signs regulated firms should monitor, and provides actionable guidance on how to engage with the Division if an issue arises.

1. A Focused Enforcement Program — Not a Lighter One

Director Woodcock acknowledged the recent decline in enforcement case volume and endorsed it. The Commission has shifted toward quality over quantity, and he fully supports that direction. But this is not a signal to relax compliance programs.

Fraud-based matters inherently require more time and resources to develop, often taking two or more years to fully investigate. That means the SEC may be well into an investigation before a firm is aware of it. The cases that are brought will be well-developed, targeted, and consequential — including for individuals.

Individual accountability is a stated priority. Executives and other individuals face increased personal exposure. Firms and their officers should not assume that penalties will be limited to the entity.

2. Five Core Enforcement Priority Areas

Offering Fraud

The SEC is actively pursuing cases involving misuse of investor funds, Ponzi schemes, and retail-targeted offering frauds. Recent cases cited by Director Woodcock involved losses exceeding $400 million and $140 million respectively.

Practical steps: Audit fundraising documents for accuracy; maintain robust controls over investor funds; document how capital is deployed; ensure all material risks are disclosed, especially for retail investors. The newly reinstated Retail Fraud Working Group will focus specifically on this area.

Financial Reporting

The Division is bringing cases against public companies and executives for inflated segment performance, false inventory entries, and misleading public filings. Individual executives are being charged alongside entities.

Practical steps: Review internal accounting controls for gaps; ensure segment-level disclosures are accurate and supportable; establish independent verification processes before public filings are signed. Board audit committees should verify management representations independently.

Market Manipulation & Insider Trading

The SEC recently charged 21 individuals in a decade-long insider trading scheme involving misappropriated information from multiple law firms. The SEC’s Market Abuse Unit uses the Consolidated Audit Trail (CAT) to track all order and trading activity in U.S. equity markets, and an AI Task Force is accelerating the detection of suspicious patterns.

Practical steps: Refresh MNPI policies and information barrier procedures. Legal professionals and their associates are expressly in focus. Firms with international operations should review cross-border trading controls.

Cross-Border Fraud

The Cross-Border Task Force (established September 2025) is investigating pump-and-dump schemes involving foreign-listed companies, gatekeeper facilitation of fraudulent U.S. market access, and risks specific to jurisdictions such as China.

Practical steps: Assess whether compliance programs address cross-border risks specifically. Firms with foreign counterparties or exposure to foreign-listed securities warrant heightened scrutiny.

Private Funds & Investment Advisers

Director Woodcock named a comprehensive list of adviser-level concerns: misappropriated client assets, misleading strategy disclosures, undisclosed fees, fraudulent valuations, prohibited trading, and conflicts of interest. He also specifically flagged private credit, noting the SEC is actively monitoring stress in the sector.

The 2026 SEC Examination Priorities explicitly call out alternative investments, private credit, and funds with extended lock-up periods as areas of increased focus — and examination deficiencies are a primary source of enforcement referrals.

Practical steps: Ensure valuation methodologies are applied consistently and updated to reflect market conditions. Fees must be disclosed clearly. All conflicts touching portfolio decisions must be disclosed, not managed around. Representatives selling private fund products must understand suitability.

3. How to Know If You Are Facing a Potential Enforcement Matter

Many firms make costly mistakes by failing to recognize early warning signs or by assuming that silence from the SEC means safety. Understanding how investigations begin and escalate is essential to knowing when to act.

How Investigations Begin

The Division obtains evidence of possible violations from many sources: market surveillance, investor tips and complaints, whistleblower submissions, other SEC divisions, self-regulatory organizations such as FINRA, media reports, and referrals from state and foreign regulators. An investigation can begin from a disgruntled former employee, a competitor’s tip, an anomalous trading pattern flagged by CAT surveillance, or a news article — often without any notice to the firm being investigated. All investigations are conducted privately.

The Escalation Sequence — Warning Signs to Monitor

Signal 1: Voluntary information requests from SEC staff. During the informal phase, SEC staff have no subpoena power but can request voluntary production of documents and interviews. Informal cooperation at this stage is generally in a firm’s interest but must be managed carefully — what you produce shapes the investigation that follows.

Signal 2: Contact with current or former employees. When SEC staff approach employees individually — particularly those who have departed — the investigation is likely already substantively underway and staff are building a factual record.

Signal 3: A document subpoena (subpoena duces tecum). In March 2025, the SEC adopted a rule requiring a majority of Commissioners to approve the formal order of investigation before subpoenas can be issued. Receiving a subpoena now means the Commissioners themselves have reviewed preliminary evidence and deemed the matter sufficiently serious. The scope of the request provides clues: narrow requests suggest a peripheral role; broad requests for communications, financial records, and internal analyses suggest the firm or its personnel are central to the investigation.

Signal 4: A testimony subpoena. Receiving a testimony subpoena — particularly a combined document and testimony subpoena — is a serious escalation. Anyone who testifies does so under oath. Witness preparation requires experienced securities enforcement counsel.

Signal 5: A Wells Notice. A Wells Notice is a formal letter indicating that SEC staff intend to recommend enforcement action. This is not the beginning of the process — it is near the end of the investigative phase. Under the 2026 Enforcement Manual update, staff must now affirmatively provide key evidence to respondents, and file access is an affirmative right rather than a discretionary courtesy. Responding parties have the opportunity to submit a Wells Submission.

Signal 6: Parallel regulatory inquiries. Director Woodcock emphasized coordinated interagency enforcement. Simultaneous inquiries from FINRA, the CFTC, state securities regulators, or the DOJ are a significant warning sign. When an SEC staff attorney mentions that the DOJ has “taken an interest,” or subpoenas arrive from multiple agencies at the same time, criminal exposure must be assessed immediately.

The Exam-to-Enforcement Pipeline

Many firms overlook a critical pathway: SEC examinations conducted by the Division of Examinations are a primary source of enforcement referrals. The 2026 Examination Priorities signal increased focus on investment adviser and broker-dealer activity relating to retail investors — a likely indicator of Enforcement Division priorities as well. Deficiencies identified in an examination that are not remediated, and compliance failures that recur across examination cycles, are exactly the type of evidence that supports an enforcement referral.

Practical step: Treat every examination as a potential precursor to an enforcement matter. Deficiency letters are not formalities — they create a record. Firms should remediate examination findings promptly and document that remediation.

4. How to Engage — The Cooperation Framework

How a firm engages with the Division during an investigation will materially affect the outcome. Director Woodcock made this explicit: a company that self-reports, cooperates fully, and remediates will not be treated the same as one that conceals or obstructs.

“Engage early, engage seriously, and engage candidly. If your client operates in a gray area, take advantage of the Commission’s stated commitment to pre-enforcement dialogue.”

— David Woodcock, Director, Division of Enforcement (May 13, 2026)

The 2026 Enforcement Manual update — the first major revision since 2017 — sharpened the cooperation framework in ways that create both opportunity and risk. Understanding the specific standards is critical.

The Four Pillars of Cooperation (Seaboard Framework)

• • Self-policing: Establishing effective compliance programs and an appropriate tone at the top before misconduct occurs.
  • Self-reporting: Conducting a thorough review and promptly disclosing misconduct to the SEC when it is discovered.
  • Remediation: Dismissing or disciplining wrongdoers, modifying compliance programs, and compensating harmed investors.
  • Cooperation: Providing full and candid assistance to investigators, going above and beyond what is legally required.

Critical Standards Under the 2026 Enforcement Manual

Self-reporting credit is available only when a company reports misconduct before the staff learns of it from other sources, and before there is an imminent threat of disclosure or government investigation. Self-reporting credit is rarely appropriate for conduct that has already received media attention or is under investigation by another regulator. The window closes faster than most firms expect — and closes permanently once a news story breaks.

Effective remediation, in the SEC’s view, includes: clawing back compensation from responsible executives; making prompt corrective disclosures; strengthening internal controls; retaining independent compliance consultants; and providing training. Simply terminating a bad actor is not sufficient.

Mere compliance with subpoenas carries no cooperation credit. Cooperation credit requires going beyond what is legally required — for example, explaining internal processes, identifying who has relevant evidence, and summarizing factual findings from internal investigations.

To summarize:

Treated More Favorably

• • • Honest mistakes with no investor harm
    • Self-reporting before SEC learns of the issue
    • Full, candid cooperation
    • Meaningful remediation (clawbacks, controls, disclosures)
    • Pre-enforcement dialogue on gray areas

Treated More Harshly

• • • Concealment or obstruction
    • Intentional fraud or manipulation
    • Misappropriation of client assets
    • Undisclosed conflicts of interest
    • Conduct already in media or under investigation by another regulator

A Note on Counsel’s Role

Director Woodcock was explicit on this point: zealous advocacy is expected and welcomed, but counsel should respect the Division’s chain of command and not assume a perfect understanding of which cases will or will not ultimately be brought. Dialogue and respect go both ways. Attempting to go around Division staff to more senior officials prematurely, or treating staff with anything less than professional respect, will not serve clients’ interests

5. Key Takeaways for Clients

1. 1. The SEC’s enforcement program is more focused, not lighter. Fewer cases means each case carries more weight.
   2. Treat the five priority areas — offering fraud, financial reporting, market manipulation/insider trading, cross-border fraud, and private fund/adviser misconduct — as live enforcement risk, not abstract compliance categories.
   3. Recognize the warning signs: informal information requests, employee contacts, FINRA or CFTC inquiries, and examination deficiency letters are all potential precursors to enforcement action.
   4. Do not wait for a subpoena to assess your exposure. By the time one arrives, the Commissioners have already reviewed the evidence.
   5. The self-reporting window is narrow. The cooperation credit available before media attention or parallel regulatory inquiries is materially greater than what is available afterward.
   6. Remediate examination findings promptly and document that remediation. The exam-to- enforcement pipeline is a primary source of enforcement referrals.
   7. Engage qualified securities enforcement counsel early — before informal inquiries become  formal investigations

For more information, please contact your CM Law LLP relationship attorney or the author, Mike Piazza, at mpiazza@cm.law.

---

About CM Law

CM Law (cm.law) – formerly Culhane Meadows – is the largest national, full-service, women-owned & managed (WBE) law firm in the United States. Designed to provide experienced attorneys with an optimal way to practice sophisticated law while maintaining a superior work/life balance, the firm offers fully remote work options, a transparent, merit and math-based compensation structure, and a collaborative culture. Serving a diverse clientele—from individuals and small businesses to over 40 Fortune-ranked companies—CM Law is committed to delivering exceptional legal services across a broad spectrum of industries.

---

The foregoing content is for informational purposes only and should not be relied upon as legal advice. Federal, state, and local laws can change rapidly and, therefore, this content may become obsolete or outdated. Please consult with an attorney of your choice to ensure you obtain the most current and accurate counsel about your particular situation.