An enforcement action is a formal legal proceeding a government agency or regulator brings against a person or company for violating a law, rule, or regulation. That is the core meaning of an enforcement action: it is the moment a regulator moves past warnings and informal guidance and puts the weight of government authority behind a demand for compliance, backed by fines, business restrictions, or criminal prosecution. It also creates a public record that can follow the target for years.
Why the Word “Formal” Matters
Not every contact from a regulator is an enforcement action. A phone call, a warning letter, or informal staff guidance is not. A formal enforcement action is a binding legal proceeding that appears in public records and triggers specific legal rights and obligations on both sides. The agency has decided it can impose penalties, restrict operations, or take the target to court.
That shift changes three things at once: your legal exposure, your disclosure obligations, and often your ability to keep doing business. Before an agency reaches this stage, staff investigators have usually spent months gathering evidence and consulting with supervisors. The target typically gets some advance notice and a chance to respond. Once the agency files, the matter is on the record.
The Three Types of Enforcement Actions
Enforcement actions come in three categories, and the differences aren’t just procedural. They determine who hears the case, what penalties apply, and how much the government has to prove.
Administrative actions happen inside the agency’s own legal system. An administrative law judge employed by the agency hears the case and issues a ruling. Penalties usually include fines, license revocations, suspensions, and orders to stop specific conduct. These proceedings move faster than federal court and give the agency significant home-field advantage.1Administrative Conference of the United States. Administrative Law Judge Basics
Civil actions are lawsuits filed in federal or state court. The agency asks a judge to order the target to pay money, stop certain behavior, or both. No one goes to prison, and the burden of proof is lower than in a criminal case. The financial exposure, though, can be enormous. In fiscal year 2024, the SEC alone obtained $8.2 billion in financial remedies, including a single case against Terraform Labs that produced $4.5 billion.2Securities and Exchange Commission. SEC Announces Enforcement Results for Fiscal Year 2024
Criminal actions involve prosecutors, grand juries, and the possibility of prison time. The government must prove guilt beyond a reasonable doubt. Criminal enforcement is reserved for the most serious violations, such as securities fraud, knowing environmental contamination, or deliberate export control violations, which can carry up to 20 years in prison.3Bureau of Industry and Security. Penalties
The categories are not mutually exclusive. A company that knowingly dumps chemicals into a river might face an EPA administrative order to stop, a civil lawsuit for penalties, and a criminal referral to the Department of Justice from the same conduct.
Which Agencies Bring Enforcement Actions
Dozens of federal and state agencies have enforcement authority, each within its own subject area. The Securities and Exchange Commission polices federal securities laws, sanctioning market participants for fraud, misleading disclosures, and market manipulation.4Cornell Law Institute. Securities Exchange Act of 1934 The Consumer Financial Protection Bureau covers banks with more than $10 billion in assets along with non-bank financial companies like payday lenders, debt collectors, and mortgage servicers, and it can compel documents and testimony through civil investigative demands.5Consumer Financial Protection Bureau. Investigatory Authority
FINRA is worth noting because it looks like a government agency but isn’t. It is a self-regulatory organization authorized under federal law to oversee broker-dealer firms and their representatives, and it can fine firms, suspend people, and permanently bar them from the securities industry.6FINRA. About FINRA
The Environmental Protection Agency enforces the Clean Air Act and Clean Water Act, among other statutes.7US EPA. Air Enforcement8Environmental Protection Agency. Water Enforcement OSHA handles workplace safety, with penalties up to $16,550 per serious violation as of 2025, a figure that stays in effect for 2026 after the Office of Management and Budget directed agencies not to adjust penalties this year.9Occupational Safety and Health Administration. OSHA Penalties The Federal Trade Commission covers consumer protection and antitrust across most industries outside banking and insurance.10Federal Trade Commission. Enforcement The Department of Justice handles criminal prosecutions referred by other agencies and brings its own civil actions. State attorneys general enforce consumer protection and financial laws within their borders and often coordinate with federal agencies on large cases.
How the Process Unfolds
Every enforcement action follows a rough sequence, though timelines vary from months to years depending on the agency and the complexity of the case.
Investigation
Long before anything formal happens, the agency investigates. Subpoenas go out for documents, emails, and financial records. Witnesses give testimony. Agencies have broad authority to compel this cooperation, and ignoring a lawful subpoena can itself trigger additional penalties.11Congress.gov. Administrative Subpoenas in Criminal Investigations: A Brief Legal Analysis The CFPB uses civil investigative demands that can require written answers and oral testimony, and it can go to federal court to enforce them.5Consumer Financial Protection Bureau. Investigatory Authority
In securities matters, the target typically gets a Wells Notice before the SEC files. That notice tells you the staff intends to recommend an enforcement action and gives you a chance to submit a written response arguing why the Commission shouldn’t proceed.12Securities and Exchange Commission. Division of Enforcement Enforcement Manual It is not a conviction, but it is a serious signal that the agency believes it has the evidence to move forward.
Formal Filing
The agency then files a complaint in court or institutes an administrative proceeding, laying out the specific allegations and the laws allegedly violated. For public companies, that filing often triggers a separate disclosure obligation. Significant enforcement actions typically qualify as reportable events on SEC Form 8-K within four business days.13U.S. Securities and Exchange Commission. Form 8-K Current Report
Hearing or Trial
Administrative cases go before an administrative law judge who acts as both judge and factfinder, reviewing evidence and issuing a written decision with findings of fact and conclusions of law.1Administrative Conference of the United States. Administrative Law Judge Basics Civil cases in federal court proceed with discovery, motions, and potentially a jury. Criminal cases follow the full criminal trial process with constitutional protections for the defendant.
How Most Enforcement Actions End
Most cases never reach a final hearing or trial. The vast majority settle, and regulators prefer it that way because settlements free up resources for the next case.
In a typical settlement, the target agrees to pay a fine, stop the offending conduct, and put remedial measures in place. In SEC cases, the Commission generally does not require settling parties to admit the allegations. Until recently, the SEC also barred them from publicly denying the allegations, but it rescinded that “no-deny” policy in 2026, so a company can now settle and still publicly contest the agency’s version of events.14Securities and Exchange Commission. SEC Rescinds Policy Regarding Denials of Settlements in Enforcement Actions
When a case settles in court, the result is often a consent decree: a court-approved agreement that becomes a legally binding order. Violating its terms lets the court hold the target in contempt and impose additional sanctions. Consent decrees are common in environmental and civil rights enforcement, and they can last for years.
For serious violations, a settlement may require the company to hire an independent compliance monitor at its own expense. The monitor assesses whether promised reforms are actually being implemented, reports back to the regulator, and can flag new problems. Monitor appointments typically last 18 to 36 months. The company has no say over what the monitor reports, and the monitor’s duty runs to the regulator, not to the company paying its bills. Monitor fees can run into the tens of millions of dollars for large corporations.
How Long Regulators Have to Act
Agencies cannot wait forever. Under the general federal statute of limitations, the government must bring an action seeking a civil fine, penalty, or forfeiture within five years of when the claim first arose.15Office of the Law Revision Counsel. 28 USC 2462 – Time for Commencing Proceedings The five-year clock applies broadly across federal agencies unless a specific statute sets a different deadline.
The Supreme Court strengthened that limit in Kokesh v. SEC in 2017, ruling that disgorgement (forcing a wrongdoer to give back ill-gotten gains) counts as a penalty subject to the same five-year window.16Supreme Court of the United States. Kokesh v. SEC Before Kokesh, the SEC had argued disgorgement was remedial and had no time limit, which let it reach back decades. That door is closed. Most federal crimes carry their own five-year statute of limitations, though fraud offenses and certain other serious violations can have longer windows, and the clock can pause under specific circumstances such as when the target is a fugitive.
What an Enforcement Action Really Costs
The fine listed in an enforcement order is often the smallest part of the bill. The downstream consequences reach further and last longer.
Companies that violate federal law risk being barred from government contracts. Under the Federal Acquisition Regulation, debarment generally lasts up to three years, though drug-free workplace violations can extend the period to five years.17Acquisition.GOV. Subpart 9.4 – Debarment, Suspension, and Ineligibility For a contractor that depends on federal work, debarment can be an existential threat that dwarfs any monetary penalty.
Individuals face professional bars. The SEC can bar someone from serving as an officer or director of a public company. FINRA can bar brokers from the securities industry.6FINRA. About FINRA State licensing boards in healthcare, law, and real estate routinely revoke or suspend licenses based on enforcement findings. These bars apply whether the underlying case was criminal or civil.
Formal enforcement actions are also public. They appear in government databases, press releases, and news coverage. For publicly traded companies, the market reaction to an announcement can wipe out far more shareholder value than the fine. For individuals, an enforcement record surfaces in background checks and licensing reviews for years. Even a settlement with no admission of wrongdoing leaves the public record of the action itself.
The severity of these collateral consequences is why the Department of Justice’s March 2025 Corporate Enforcement Policy uses them as leverage. A company that discovers misconduct internally, voluntarily self-reports it, cooperates with the investigation, and remediates the problem promptly can avoid prosecution entirely, provided there are no aggravating circumstances such as prior criminal history or egregious harm.18United States Department of Justice. Department of Justice Releases First-Ever Corporate Enforcement Policy for All Criminal Cases That policy is a strong incentive to come forward before regulators come knocking.