The Sarbanes-Oxley Act protects employees of publicly traded companies — and of their contractors and subcontractors — who report conduct they reasonably believe is securities fraud, bank fraud, mail or wire fraud, a violation of SEC rules, or fraud against shareholders. A retaliation complaint generally must be filed with OSHA within 180 days of the retaliatory act or of learning about it, which is far shorter than most people expect.
Who does Sarbanes-Oxley protect?
The whistleblower provision, 18 U.S.C. 1514A, covers employees of companies with securities registered with the SEC or required to file reports with it, including their subsidiaries whose financial information is included in the consolidated statements. In Lawson v. FMR (2014), the Supreme Court held it also protects employees of private contractors and subcontractors to public companies.
The protected report can go to:
- A supervisor, or anyone at the company with authority to investigate or stop the misconduct
- A federal regulatory or law enforcement agency
- A member or committee of Congress
You can also be protected for filing, testifying in or assisting with a proceeding about the alleged violation.
What kinds of reports are protected?
The report must relate to conduct you reasonably believe violates:
- The federal mail, wire, bank or securities fraud statutes
- Any rule or regulation of the SEC
- Any provision of federal law relating to fraud against shareholders
In practice that includes concerns about falsified financial statements, internal-control failures that conceal fraud, misleading disclosures to investors, improper revenue recognition, insider trading and similar issues. As under New Jersey's CEPA, your belief must be reasonable — you do not have to prove the fraud occurred. See the broader overview of corporate and financial fraud whistleblowers.
What is the 180-day deadline, and how does a SOX case proceed?
- File with OSHA (part of the U.S. Department of Labor) within 180 days of the violation or of when you became aware of it. A complaint can be made in writing or orally; it does not need a particular form.
- OSHA investigates and issues findings.
- Either side can request a hearing before a Department of Labor administrative law judge, with further review by the Administrative Review Board.
- The "kick-out" option: if the Department of Labor has not issued a final decision within 180 days of the filing and the delay is not due to bad faith by the employee, the employee can take the case to federal district court and start over there, where a jury trial is available.
Missing the 180-day window generally ends the federal claim, even if a state claim remains. See also the CEPA statute of limitations.
What do I have to prove?
The employee must show that the report was protected activity, that the employer knew about it, that an adverse action followed, and that the report was a contributing factor in that action — a deliberately low standard. In Murray v. UBS Securities (2024), the Supreme Court confirmed that the employee need not prove the employer acted with retaliatory intent. The employer can escape liability only by showing, by clear and convincing evidence, that it would have taken the same action without the report.
What can I recover?
Sarbanes-Oxley remedies are designed to make the employee whole:
- Reinstatement with the same seniority
- Back pay with interest
- Special damages, including litigation costs, expert fees and reasonable attorney fees
Punitive damages are not available under Sarbanes-Oxley itself. New Jersey's CEPA can allow them in appropriate cases, which is one reason the two are often evaluated side by side. See CEPA damages.
How does SOX fit with CEPA and the SEC program?
- CEPA covers private and public employers of all kinds, has a one-year limitations period and a jury trial, and allows punitive damages — but filing a CEPA action waives certain other state-law claims (N.J.S.A. 34:19-8).
- Sarbanes-Oxley is limited to public companies and their contractors, runs on a 180-day clock, and generally cannot be forced into arbitration.
- Dodd-Frank protects people who report to the SEC and can lead to a financial award. See the SEC whistleblower program.
Which claims to bring, where, and in what order is a strategic decision that should be made before the first filing.
Who handles these matters at Gray Law Group?
The firm's whistleblower practice is led by partner Bruce D. Nimensky, a New Jersey trial attorney whose practice focuses on CEPA retaliation and complex employment litigation.
Talking to a lawyer about your situation
If you work for a public company, or for a contractor to one, and you were demoted, sidelined or fired after raising concerns about financial reporting or fraud, the 180-day clock may already be running. A confidential conversation can help you understand your options under federal and New Jersey law.
Gray Law Group's office is in Jefferson, in Morris County, and the firm represents employees throughout New Jersey. Call 973-240-7313 or request a consultation.
Frequently asked questions
Does Sarbanes-Oxley apply if my company is private?
Generally only if it is a contractor, subcontractor or agent of a publicly traded company and the fraud relates to that work, as the Supreme Court held in Lawson v. FMR (2014). Employees of purely private companies usually rely on New Jersey's CEPA instead, which covers private and public employers alike.
Can my employer make me arbitrate a Sarbanes-Oxley claim?
Generally no. Since Dodd-Frank amended the statute, predispute arbitration agreements are not enforceable for Sarbanes-Oxley whistleblower claims. State-law claims such as CEPA may be treated differently, which is one reason the claims need to be planned together.
Do I have to prove my company meant to retaliate?
No. In Murray v. UBS Securities (2024), the Supreme Court held that a Sarbanes-Oxley whistleblower must show the protected report was a contributing factor in the adverse action, not that the employer acted with retaliatory intent. The employer can still avoid liability by showing by clear and convincing evidence it would have taken the same action anyway.
Can I file both a Sarbanes-Oxley complaint and a CEPA lawsuit?
Often a worker has potential claims under both, but they have different deadlines, forums and remedies, and filing a CEPA action waives certain other state-law claims. Decide the strategy with a lawyer before filing either.
Who handles these matters
This website is for informational purposes only and does not constitute legal advice. Prior results do not guarantee a similar outcome.