The Enforcement Cliff: SEC Cases Hit a 35-Year Low—And the Compliance Calculus Just Changed

The Numbers Don't Lie

The Securities and Exchange Commission filed just 348 enforcement actions in fiscal year 2026—the fewest since 1991, when George H.W. Bush occupied the White House and the agency's budget was a fraction of its current size. Reuters reports this represents a drop of more than 20% from the prior year, a decline so steep it demands attention from every practitioner advising public companies, investment advisers, or broker-dealers.

Let's be clear about what this means: the SEC has effectively announced that the era of aggressive enforcement-as-deterrence is over, at least for now. Chairman Paul Atkins has "recentered" the enforcement program, according to Reuters, though the agency has been notably vague about what that recentering actually targets. What's unmistakable is what it doesn't target: the broad-based sweeps, the broken-windows approach to technical violations, and the penalty-maximization strategy that characterized the Gensler years.

Why This Matters More Than You Think

If you're advising clients on securities compliance, this development should fundamentally alter your risk calculus—and not in the way you might expect. The conventional wisdom will be that enforcement risk has declined, so compliance budgets can shrink and disclosure controls can relax. That advice would be malpractice.

Here's why: enforcement statistics are a lagging indicator. The cases filed in fiscal 2026 largely reflect investigations opened in prior years. The real question is what happens to conduct occurring now, in an environment where the SEC has signaled it will bring fewer cases. History suggests two possibilities, neither particularly comforting.

First, the agency may be shifting toward fewer but larger cases—what former Enforcement Director Robert Khuzami once called "strategic enforcement." If that's the play, the cases that are filed will be carefully selected for maximum deterrent effect, and defendants will face an agency with more resources to devote to each matter. The 348 cases that did get filed may represent the agency's judgment about which violations are truly egregious—which means if your client is in that number, they're in serious trouble.

Second, and more troubling for long-term compliance planning, the drop may reflect a broader deregulatory philosophy that views vigorous enforcement as an impediment to capital formation. If that's the case, we may see a multi-year period of reduced enforcement followed by a whipsaw when political control changes. The conduct occurring today will be judged by tomorrow's enforcement standards, not today's. Remember: the statute of limitations for most securities violations is five years under 28 U.S.C. § 2462, and the SEC has historically argued for even longer periods in cases involving continuing violations.

The Shareholder Proposal Wildcard

Compounding the enforcement uncertainty is the SEC's September 16 proposal to rescind Rule 14a-8 entirely, as reported by Reuters Practical Law. If adopted, this would eliminate the federal shareholder-proposal regime that has governed proxy solicitations for decades, returning regulation to the states.

The practical implications are staggering. Rule 14a-8 has been the primary mechanism for shareholder activism on environmental, social, and governance issues. Its elimination would create a patchwork of state regulations—or potentially no regulation at all in states that don't act. Delaware, which has been notably hostile to ESG-driven shareholder activism, would likely impose minimal requirements. Other states might fill the void with their own regimes, creating compliance nightmares for companies incorporated in multiple jurisdictions.

For practitioners, this means the 2027 proxy season could be the last under the current regime—or the first under an entirely new one. The comment period on the rescission proposal will be critical, and companies should be preparing for multiple scenarios.

The Delaware Counterweight

While federal enforcement retreats, Delaware is stepping into the void. The Chancery Court's August 8 decision ordering Verisk to complete its $2.35 billion acquisition of AccuLynx demonstrates that Delaware courts remain willing to police corporate conduct aggressively, even when federal regulators stand down.

The Verisk ruling is particularly significant because it applied the "willful conduct" exception to the failure of a closing condition—a doctrine that has been more theoretical than practical in recent years. The court found that Verisk's own conduct caused the condition to fail, invalidating its termination and entitling AccuLynx to damages for direct costs with interest.

The message to deal lawyers is clear: Delaware courts will hold parties to their contractual commitments, even when federal regulators are looking the other way.

This creates an interesting dynamic: federal securities enforcement may be declining, but state-law fiduciary duty enforcement in Delaware remains robust. Companies may face less SEC scrutiny but more rigorous Delaware court oversight of their deal conduct and corporate governance decisions.

What You Should Do Now

First, resist the temptation to advise clients that compliance risk has decreased. The SEC's enforcement statistics reflect past conduct, not future risk. The cases being investigated today will be filed in fiscal 2027 and beyond, potentially under different political leadership with different enforcement priorities.

Second, pay close attention to the Rule 14a-8 rescission proposal. If you advise public companies, begin contingency planning now for a post-14a-8 world. Review your clients' advance notice bylaws and consider whether state-law changes might be necessary to fill the governance void.

Third, remember that Delaware remains the center of gravity for corporate law enforcement. The Chancery Court's willingness to order specific performance in Verisk and to police PBC director duties in the July 29 ruling shows that Delaware courts are not retreating from aggressive oversight—even if the SEC is.

The enforcement cliff is real, but it's not a compliance holiday. It's a shift in risk from federal to state enforcement, from SEC actions to private litigation, and from technical violations to strategic cases. Practitioners who understand that shift will serve their clients well. Those who don't will be explaining to clients why they didn't see the next wave coming.