Back to search
GovernmentCommerce & Securities

Securities Regulation

15 min read·Updated Apr 21, 2026

Securities Regulation

U.S. securities regulation is built on two foundational statutes enacted after the 1929 market crash: the Securities Act of 1933 and the Securities Exchange Act of 1934. The '33 Act requires registration of new securities offerings with the SEC and mandates full disclosure to investors before they buy — the "full and fair disclosure" philosophy that governs the entire framework. The '34 Act established the Securities and Exchange Commission (SEC) itself, created ongoing disclosure requirements for public companies (10-Ks, 10-Qs, 8-Ks), and prohibits fraud and manipulation in securities markets. The system doesn't judge whether an investment is a good one — the SEC doesn't approve or disapprove investments for merit — only whether investors have been given material facts to make their own decisions. Today the SEC oversees approximately 6,000 public companies, broker-dealers, investment advisers, and exchanges, with enforcement tools including civil injunctions, fines, disgorgement of profits, and criminal referrals. Securities offering exemptions — Regulation D (private placements), Regulation A+ (mini-IPOs up to $75 million), and Regulation Crowdfunding (up to $5 million) — provide pathways for raising capital from investors without a full registered public offering.

Current Law (2026)

ParameterValue
Governing lawsSecurities Act of 1933 + Securities Exchange Act of 1934
Enforcing agencySecurities and Exchange Commission (SEC)
Registration requirementAll securities offered to the public must be registered unless exempt
Key exemptionsReg D (private placement), Reg A+ (mini-IPO up to $75M), Reg CF (crowdfunding up to $5M)
Disclosure standardMaterial information — anything a reasonable investor would consider important
Insider tradingIllegal to trade on material nonpublic information
Fraud liabilityPrivate right of action for securities fraud; SEC enforcement
  • 15 U.S.C. § 77a — Securities Act of 1933 (short title)
  • 15 U.S.C. § 77b — Definitions (security, issuer, person, sale, underwriter, accredited investor)
  • 15 U.S.C. § 77c — Exempt securities (government securities, bank securities, insurance, short-term commercial paper)
  • 15 U.S.C. § 77d — Exempt transactions (secondary sales, private offerings, small offerings)
  • 15 U.S.C. § 77d-1 — Crowdfunding requirements (intermediary registration, disclosure, investment limits)
  • 15 U.S.C. § 77e — Registration requirement (illegal to sell or offer unregistered securities through interstate commerce)
  • 15 U.S.C. § 77f — Registration statements (filing requirements, signature, fees)
  • 15 U.S.C. § 77g — Required information (Schedule A for domestic securities, Schedule B for foreign)
  • 15 U.S.C. § 77h — Effective date (20 days after filing unless SEC accelerates or issues stop order)
  • 15 U.S.C. § 77j — Prospectus requirements (must contain registration statement information)
  • 15 U.S.C. § 77k — Civil liability for false registration statements (buyer can sue all signers, directors, underwriters, experts)
  • 15 U.S.C. § 77h-1 — Cease-and-desist proceedings (SEC administrative enforcement)

Implementing Regulations (17 CFR — SEC)

  • 17 CFR Part 229 (Regulation S-K) — Standard instructions for filing forms: non-financial disclosure requirements for registration statements and periodic reports — business description, risk factors, management discussion, executive compensation, related party transactions

  • 17 CFR Part 230 (Regulation D) — Rules governing limited offer and sale exemptions: Rule 504 (offerings up to $10M), Rule 506(b) (unlimited private placement to accredited investors + up to 35 sophisticated non-accredited), Rule 506(c) (general solicitation with accredited investor verification)

  • 17 CFR Part 227 (Regulation Crowdfunding) — Rules for crowdfunding offerings up to $5M: investor limits based on income/net worth, Form C filing, intermediary requirements, ongoing reporting

  • 17 CFR Part 230, Rules 251-263 (Regulation A+) — Mini-IPO framework: Tier 1 (up to $20M/year, state registration required) and Tier 2 (up to $75M/year, state preempted, ongoing reporting)

  • 17 CFR Part 240 (General Rules and Regulations, Securities Exchange Act of 1934) — The core SEC Exchange Act rulemaking (554 sections) — every ongoing obligation of public companies, broker-dealers, and market participants flows through here. Key rule families:

    • Rule 10b-5 — Anti-fraud: the foundational securities fraud rule — unlawful to employ any device, scheme, or artifice to defraud, make untrue statements or omit material facts, or engage in acts that operate as a fraud in connection with the purchase or sale of any security; basis for most SEC enforcement actions and private civil suits
    • Rules 10b5-1 and 10b5-2 — Insider trading standards: 10b5-1 defines trading "on the basis of" material nonpublic information (awareness standard — if you know it, you're on notice) and governs pre-planned trading programs (10b5-1 plans) that provide an affirmative defense when adopted in good faith without MNPI; 10b5-2 establishes duties of trust or confidence for misappropriation cases (family relationships, express confidentiality agreements, and history of sharing confidences)
    • Rule 10b-18 — Issuer repurchase safe harbor: conditions under which a company buying back its own stock won't be deemed to have manipulated the price — single daily broker, timing restrictions (last 30 minutes of regular session), volume limits (25% of average daily trading volume), and price limits (at or below the prevailing market price)
    • Rules 10A-1/2/3 — Auditor independence and audit committee governance: auditors must report illegal acts to audit committee; audit committees must have financial literacy and independence requirements; listing standards must require independent audit committees with authority to hire and oversee auditors — post-Sarbanes-Oxley reforms
    • Rules 10C-1, 10D-1 — Compensation committee standards and executive clawback: 10C-1 requires listing standards for independent compensation committees; 10D-1 (the Dodd-Frank "clawback rule" effective 2023) requires listed companies to recover incentive-based executive compensation paid in error based on financial results that were later restated — applies to current and former executive officers for 3 years
    • Rules 12b-2 and 12g — Definitions and registration thresholds: 12b-2 defines key terms (affiliate, significant subsidiary, public float, fiscal year); 12g-1 sets the threshold triggering required Exchange Act registration — companies with a class of equity securities held by 2,000+ persons (or 500+ non-accredited investors) and $10M+ in total assets must register, triggering ongoing periodic reporting obligations
    • Rules 13a and 15d — Periodic and current reports: 13a-1 (annual 10-K), 13a-13 (quarterly 10-Q), 13a-11 (current 8-K for material events), 13a-14 (CEO/CFO certifications under Sarbanes-Oxley §302) — the disclosure backbone for public companies; Rule 15d imposes the same reporting obligations on issuers who filed registration statements under the Securities Act but whose securities aren't exchange-listed
    • Rules 13d and 13g — Beneficial ownership reporting: any person or group acquiring 5% or more of a registered equity class must file Schedule 13D within 10 days (long form — discloses purpose and plans) or Schedule 13G (short form for passive investors); amendments required on any material change; hedge funds and activists use these filings to signal hostile intent, driving significant market reaction
    • Rules 14a (proxy) and 14c — Proxy solicitation rules: 14a-2 (exemptions), 14a-3 (delivery of proxy materials), 14a-8 (shareholder proposals — 300-word limit, company can exclude on specified grounds), 14a-9 (anti-fraud for proxy statements), 14a-16 (internet delivery "notice and access" — companies may post proxy materials online instead of mailing); 14a-101 (Schedule 14A format for proxy statements including executive compensation "say-on-pay" disclosures, director independence, audit committee report)
    • Rules 14d and 14e — Tender offer rules: 14d-1 governs commencement of cash tender offers (20 business day minimum offer period); 14e-1/2 prohibit fraudulent tender offer practices and require target board to respond within 10 business days; 14e-3 prohibits trading on material nonpublic information about a pending tender offer (stricter than general 10b-5 — no tipper-tippee relationship required)
    • Rules 15c3-1 and 15c3-3 — Broker-dealer financial requirements: 15c3-1 (net capital rule) requires broker-dealers to maintain liquid capital above a minimum based on their business — the "haircut" approach deducts a percentage of each securities position's value based on its risk profile; 15c3-3 (customer protection rule) requires broker-dealers to segregate customer fully paid securities and maintain a reserve account equal to the net amount owed to customers — prevents firms from using customer assets to fund proprietary positions (designed after the 1970 brokerage failures)
    • Rules 16a and 16b — Insider reporting and short-swing profits: Section 16 officers, directors, and 10%+ shareholders must report transactions within 2 business days (Form 4, filed electronically with SEC); short-swing profits — any profit from matching buy/sell transactions within 6 months — are recoverable by the issuer regardless of intent; Form 3 (initial report) and Form 5 (annual catch-all) complete the reporting scheme
    • Rules 17a-3 and 17a-4 — Broker-dealer recordkeeping: 17a-3 specifies records that broker-dealers must create (blotters, ledgers, confirmations, customer account records); 17a-4 specifies retention requirements — most records must be kept 6 years, with the first 2 years in an accessible location; electronic storage is permitted with WORM (write once, read many) requirements and independent third-party access
  • 17 CFR Part 242 (Regulation NMS) — National market system: order protection rule (trade-through prohibition), access rule, minimum pricing increments, market data governance — the framework governing equity market structure

  • 17 CFR Part 246 (Regulation RR — Credit Risk Retention) — The Dodd-Frank Act's "skin in the game" rule for asset-backed securitization (22 sections — jointly issued by the SEC, Federal Reserve, FDIC, OCC, FHFA, and CFPB; implements Section 941 of Dodd-Frank's mandate that securitizers retain credit risk). Key provisions:

    • § 246.3 — Base requirement: a sponsor of a securitization transaction (or majority-owned affiliate) must retain an economic interest in at least 5% of the credit risk of the securitized assets; the retained interest cannot be sold, transferred, or hedged during the required retention period — the rule is designed to ensure that the party originating and packaging ABS has ongoing financial exposure to the credit quality of the underlying loans
    • § 246.4 — Standard retention forms: the sponsor may satisfy the 5% requirement by retaining an eligible vertical interest (a proportional slice of each class of ABS issued — 5% of every tranche, senior and subordinate alike), an eligible horizontal residual interest (a first-loss position equal to at least 5% of the fair value of all ABS interests — the equity tranche), or any combination; the vertical approach provides the same credit exposure as all investors; the horizontal approach concentrates the sponsor's exposure in the most junior, first-loss position
    • § 246.5 — Revolving pool securitizations (credit card ABS, dealer floorplan ABS): the sponsor retains a seller's interest equal to 5% of the pool balance; the seller's interest fluctuates as the pool turns over — the sponsor's share of a revolving securitization trust (where new assets continuously replace maturing ones) must be maintained at the 5% level
    • § 246.7 — Commercial mortgage-backed securities (CMBS): an alternative structure for CMBS where a third-party purchaser (the "B-piece buyer") buys the most subordinated 5%+ of the deal at arm's length and retains it without hedging; the B-piece buyer must conduct independent due diligence on each loan in the pool and agree to hold the risk position — this structure recognizes that commercial real estate has specialist investors with the expertise to perform the first-loss role
    • § 246.9 — Open market CLOs: collateralized loan obligations assembled by a manager who selects loans on the open market (rather than originating them) satisfy the rule if the CLO manager retains 5% of each class or the equivalent horizontal interest; the rule was initially interpreted to apply to CLO managers who were not loan originators, creating litigation (the DC Circuit struck down the application to CLO managers in Loan Syndications and Trading Assoc. v. SEC, 2018); the final rule was amended to clarify that open-market CLO managers must retain the interest
    • § 246.12 — Hedging and transfer prohibition: sponsors may not sell or transfer the retained interest (except to majority-owned affiliates) or enter into any credit derivative or other hedging transaction that reduces or limits the sponsor's financial exposure to the retained interest during the retention period; this prohibition is the enforcement mechanism of the rule — without it, sponsors could formally retain the interest while economically eliminating their exposure
    • § 246.13 — QRM exemption: securitizations composed entirely of Qualified Residential Mortgages (QRM) — defined identically to the CFPB's "Qualified Mortgage" standard under Regulation Z — are exempt from the 5% retention requirement; the QRM exemption reflects a congressional judgment that well-underwritten residential mortgages meeting ability-to-pay standards do not need the additional safeguard of sponsor retention
    • § 246.15 — Commercial loan and CRE exemption: qualifying commercial loans, qualifying commercial real estate loans, and qualifying automobile loans meeting conservative underwriting standards specified in §§ 246.16–246.18 are subject to a 0% retention requirement

    Regulation RR applies to the US ABS market — roughly $2–3 trillion in new issuance annually across mortgage-backed securities, CLOs, auto ABS, credit card ABS, and CMBS. The rule transformed the capital structure of securitization: sponsors must now capitalize the retained interest at regulatory capital levels (for bank sponsors), which increased the cost of securitization and reduced the relative economics of originate-to-distribute models that were central to the pre-2008 crisis. The QRM/QM safe harbor has shaped residential mortgage underwriting: originating conforming loans that fit the QM definition allows bank originators to sell them into agency MBS (Fannie/Freddie) without any retention obligation, while non-QM jumbo and non-agency mortgages trigger the 5% requirement.

How It Works

Federal securities regulation is built on a simple principle: investors are entitled to know material facts about the securities they buy. The Securities Act of 1933 governs the initial offering of securities; the Securities Exchange Act of 1934 governs ongoing trading in secondary markets. Together they form the framework that makes U.S. capital markets the deepest and most trusted in the world.

Any company offering securities to the public must file a registration statement with the SEC containing detailed information about its business, financial condition, management, risk factors, and the terms of the offering. The registration statement becomes public on EDGAR; the prospectus derived from it must be delivered to every purchaser. The theory is that sunlight is the best disinfectant — if investors have accurate information, the market will price securities fairly. Not every offering needs full registration: Regulation D allows private placements to accredited investors without registration (though anti-fraud rules still apply); Regulation A+ allows companies to raise up to $75 million with simplified disclosure (sometimes called a "mini-IPO"); Regulation Crowdfunding allows small companies to raise up to $5 million from the general public through registered intermediaries. These exemptions balance investor protection against the need for smaller companies to access capital without prohibitive compliance costs. Dodd-Frank further expanded SEC authority over derivatives, whistleblower programs, and systemically important firms.

Section 11 of the Securities Act creates strict liability for material misstatements or omissions in a registration statement — the buyer doesn't need to prove intent to deceive. Directors, officers who signed the filing, underwriters, and accountants who certified financials can all be liable; the only defense is "due diligence," proving a reasonable investigation and no reason to believe the statement was misleading. The Investment Company Act of 1940 separately regulates mutual funds, ETFs, and other pooled vehicles, while the Investment Advisers Act of 1940 regulates firms that advise investors for compensation — both impose fiduciary obligations and disclosure requirements beyond those in the basic securities acts. For enforcement, the SEC can bring administrative proceedings (cease-and-desist orders, suspensions), civil suits in federal court (injunctions, disgorgement, civil penalties), and refer cases for criminal prosecution by DOJ. Private plaintiffs can also sue under Section 11 for false registration statements and under Section 10(b)/Rule 10b-5 for securities fraud in trading — making the securities laws enforced from both directions simultaneously.

How It Affects You

If you're an investor in public stocks, bonds, or funds: Federal securities law is what makes the research you do before investing meaningful. Every publicly traded company must file annual 10-K reports, quarterly 10-Q reports, and proxy statements with the SEC — all publicly available for free at SEC EDGAR (sec.gov/edgar). Before buying any public company stock, spend 20 minutes on EDGAR: the 10-K tells you the actual financial condition (not the press release version), who the executives are and what they're paid, what risks the company itself discloses, and what legal proceedings are pending. If you lose money because a company made materially false statements in its public filings, you may have a private right of action under Section 10(b) of the Exchange Act and Rule 10b-5 — class action securities fraud cases are common, and class members don't need to hire a lawyer individually. If your broker churned your account, recommended unsuitable investments, or stole from you, file a complaint with FINRA at finra.org/investors/have-problem and the SEC at sec.gov/tcr. The SEC Whistleblower Program (sec.gov/whistleblower) pays 10-30% of sanctions over $1 million to individuals who provide original information about securities violations.

If you're a startup founder raising your first round: You cannot sell equity or convertible notes to investors without either registering with the SEC (expensive, slow, and inappropriate for startups) or qualifying for a securities exemption. The most common startup exemptions: Regulation D Rule 506(b) allows unlimited raises from up to 35 non-accredited sophisticated investors and unlimited accredited investors, with no general solicitation — the foundation of traditional VC and angel investing. Rule 506(c) allows general solicitation (advertising your raise publicly) but requires verifying that all investors are accredited. Regulation Crowdfunding (Reg CF) allows raises up to $5 million from the general public through an SEC-registered funding portal (Republic, Wefunder, StartEngine). Regulation A+ allows "mini-IPOs" up to $75 million per year with a streamlined disclosure process. The threshold question before any raise: talk to a securities attorney. Selling securities without a valid exemption — even to friends and family — can result in rescission rights, regulatory action, and personal liability. NVCA at nvca.org and Gust at gust.com publish model term sheets and investor documents.

If you're an employee of a public company with access to material nonpublic information (MNPI): Insider trading enforcement is one of the SEC's most active areas. Trading on MNPI — or tipping someone else who then trades — is illegal under Section 10(b) and Rule 10b-5 regardless of whether you're a C-suite executive or a mid-level employee who overheard something. The SEC uses sophisticated analytics to detect unusual trading patterns before earnings announcements, M&A disclosures, and other material events. Your company's securities trading policy defines your specific restrictions; typically: trading windows open only for brief periods after quarterly earnings releases, and any trades over a threshold require pre-clearance from the general counsel. If you're unsure whether information you have constitutes MNPI, assume it does and don't trade. Violations can result in disgorgement of profits, civil penalties up to three times profits, and criminal prosecution with up to 20 years imprisonment under the Insider Trading Sanctions Act. Consult your company's general counsel or an outside securities attorney before trading if you have any doubt.

If you're an institutional investor, fund manager, or investment advisor: Depending on your AUM and activities, you may be subject to SEC registration and ongoing compliance obligations. Investment advisers managing $100 million or more in assets must register with the SEC as Registered Investment Advisers (RIAs) and file Form ADV, which is publicly available at adviserinfo.sec.gov — where investors can research your firm's background, fees, and disciplinary history. Advisers below $100 million typically register at the state level. Under the Investment Advisers Act of 1940, you owe a fiduciary duty to your clients — acting in their best interest, disclosing conflicts of interest, and maintaining the investment policies you've committed to. The SEC's Regulation Best Interest (Reg BI) extended a best-interest standard to broker-dealers for retail recommendations. CFTC has parallel jurisdiction over derivatives and commodities advisors. Track SEC rulemaking at sec.gov/rules and the SEC's Office of Compliance Inspections and Examinations (OCIE) exam priorities at sec.gov/ocie.

State Variations

Securities regulation operates under a dual federal-state system. The National Securities Markets Improvement Act (1996) preempts state registration for nationally traded securities and Reg D offerings, but states retain:

  • Anti-fraud authority: States can bring fraud enforcement actions on any securities transaction
  • Blue sky laws: State registration requirements still apply to some smaller offerings
  • Broker-dealer regulation: States register and examine broker-dealers alongside FINRA and the SEC
  • Notice filings: States require notice filings and fees for many exempt offerings

Pending Legislation (119th Congress)

  • HR4134 / HR7008 — Stop Insider Trading Act — Bars lawmakers and immediate families from buying public company stocks; requires 7-14 day public notice for sales; imposes fees for violations
  • HR7085 — Conflict Minerals Disclosure Repeal — Would repeal SEC rules requiring companies to report use of conflict minerals in securities filings
  • HR6161 — SEC Data Protection Act — Requires SEC to create rules protecting sensitive nonpublic proprietary information from investment advisers
  • HR3880 — Small Business Investor Capital Access Act — Raises the private fund adviser exemption to $175M with five-year CPI-U inflation adjustments
  • HR3935 — Municipal Securities Rulemaking Board Reform Act — Restructures MSRB membership, expands rule powers, sets data fee limits
  • HR 3318 (Rep. Downing, R-MT) — SEC Modernization Act. Would reorganize several SEC offices, shift reporting lines, and allow regional office consolidations. Status: Introduced.
  • HR 2689 (Rep. McClain, R-MI) — Would move oversight of national securities associations to the SEC. Status: Introduced.
  • HR 216 (Rep. Sessions, R-TX) — SEC Act of 2025. Sets one standard across four securities laws so related acts can count as a single violation for penalties. Status: Introduced.
  • S 658 (Sen. Kennedy, R-LA) — Protecting Investors' Personally Identifiable Information Act. Keeps investors' PII out of routine consolidated audit trail reports. Status: Introduced.
  • HR 257 (Rep. Bice, R-OK) — SEC Act of 2025. Blocks the SEC from forcing companies to report climate information unless material to investors. Status: Introduced.
  • HR 3690 (Rep. Lucas, R-OK) — Securing Innovation in Financial Regulation Act. Would create SEC FinHub and codify CFTC LabCFTC to centralize fintech engagement. Status: Introduced.

Recent Developments

The SEC has expanded its enforcement focus to include cryptocurrency and digital assets, pursuing cases alleging that certain tokens are unregistered securities — overlapping with CFTC jurisdiction over crypto derivatives. The CFPB exercises complementary authority over consumer financial products. Climate-related disclosure rules have been proposed and partially adopted. The SEC has also updated the accredited investor definition to include certain professional certifications, and has modernized Regulation Crowdfunding and Regulation A+ to increase offering limits and reduce compliance burdens.

In March 2026, the SEC adopted final amendments to its rules and forms implementing the Holding Foreign Insiders Accountable Act, strengthening disclosure requirements for foreign companies listed on U.S. exchanges. Separately, the 24X National Exchange LLC applied for a temporary exemption to permit overnight securities trading.

  • In January 2026, the Securities Investor Protection Corporation (SIPC) filed notice of an inflation adjustment to the SIPA customer protection limits, updating the maximum advance amounts for cash claims.