On March 5, 2015, the U.S. Department of Labor issued a Final Rule implementing protections for employees of securities companies and their subsidiaries, as well as employees of national credit-rating agencies. The Final Rule protects employees of public companies, their subsidiaries, contractors and subcontractors from retaliation for reporting actions they believe to be violations of securities laws. The Final Rule is effective immediately.
SOX contained the original whistleblower provisions protecting employees who report fraudulent activity and violations of securities laws. Dodd-Frank amended and clarified several SOX whistleblower provisions. The law expanded the SOX statute of limitations for filing a complaint from 90 days to 180 days. It also expanded the definition of covered employers to include not just securities companies, but their subsidiaries and affiliates, as well as national credit-rating agencies.
The primary change among the substantive comments that were incorporated was the addition of a procedure whereby each party’s filings will be shared with the other, which the Interim Final Rule lacked.
Under the Final Rule, the complaint process is as follows: if a covered employee believes his or her employer took adverse action against him or her because he or she engaged in a protected activity (such as reporting what he or she “reasonably believed” to be mail fraud, bank fraud, wire fraud or securities fraud), he or she has 180 days from the date of the alleged retaliation to file a complaint with the Occupational Safety and Health Administration (OSHA). The complaint may be either oral or written, and the employee must show only that his or her protected activity was a contributing factor to the adverse action. In OSHA’s view, a complaint of any type simply initiates the investigation, at which point the employer is given an opportunity to respond.
If the employer is then unable to show by clear and convincing evidence that it would have taken the adverse action regardless of the protected activity, then OSHA’s investigation will continue. These standards set a low bar for complaining employees and a high bar for employers, increasing the likelihood of an investigation.
If at the end of its investigation OSHA concludes there is reasonable cause to believe a violation of the SOX whistleblower provisions occurred, it will issue a preliminary order that includes the relief it deems necessary to make the employee whole, up to and including reinstatement. Although the employer may file an objection within 30 days and request a hearing with an Administrative Law Judge (ALJ), any preliminary reinstatement the agency orders must take effect immediately. Put another way, if OSHA’s preliminary order requires reinstatement of the complaining employee, the employer must immediately reinstate the employee even if it files an objection and requests a hearing with an ALJ. Employers will not be able to avoid preliminary reinstatement by establishing that the complaining employee is a security risk. OSHA has declared that Congress intended for preliminary reinstatement to be the presumptive remedy in the event OSHA found reasonable cause to believe an employee was discharged in violation of SOX.
Notably, where the employer is eventually found to have not engaged in prohibited retaliation, the Final Rule does not permit the employer to recover wages paid during the reinstatement period, even if the reinstatement was economic rather than actual. The Final Rule contains no mechanism by which employers can recover in such situations.
In the event an employer knows, or suspects, that an employee has engaged in an activity protected by SOX, the employer must take great care to ensure that the employee does not suffer adverse action that he or she would not have otherwise suffered. Such adverse actions can include obvious actions such as termination, suspension, and demotion, but can also include any type of discipline or change in the terms of employment. When in doubt, proceed cautiously, and consult with an attorney.