AI Disclosures and Registrant Governance
The one-paragraph answer
SEC AI enforcement covers AI-washing, AI-related disclosures, and AI use by investment advisers and broker-dealers. The Securities and Exchange Commission uses existing securities laws: disclosure rules for public companies, the Investment Advisers Act for advisers, and antifraud provisions. Public companies that overstate AI capabilities in investor communications face securities fraud exposure. Investment advisers using AI in client decisions face fiduciary and conflict-of-interest scrutiny.
Public companies mention AI in earnings calls, proxy statements, and 10-K filings. Most of those mentions are aspirational or promotional. The SEC has been explicit that AI claims in investor communications must be truthful and substantiated. When AI capability is overstated, or when AI risks are understated, the SEC treats it as securities fraud. The March 2024 SEC settlements against two investment advisers for AI-washing set the tone.
10-K and 10-Q filings must accurately describe AI use, AI risks, and material AI-related developments. Earnings calls, investor presentations, and press releases must not overstate AI capabilities. Under Regulation S-K, AI-related risk factors may require disclosure.
Registered investment advisers using AI in client portfolio decisions face fiduciary duty and conflict-of-interest scrutiny. The SEC's proposed rules on predictive data analytics would formalize these obligations.
Broker-dealers using AI in customer recommendations face Regulation Best Interest and suitability compliance.
Rule 10b-5 and Section 17(a) reach AI-washing that constitutes securities fraud.
Consistency between AI claims in investor materials and actual AI capability. Accurate disclosure of AI risks in periodic filings. Adequate governance of AI systems used in advisory or broker-dealer functions. Documentation supporting AI-related statements to investors.
Any public company faces SEC disclosure authority. Any registered investment adviser or broker-dealer faces SEC operating rules. AI features prominently in investor communications across virtually every industry. The AI-washing enforcement risk is broad.
The academic literature on SEC AI enforcement is ahead of most corporate practice, and it is unusually blunt. Two findings are worth putting in front of any executive who thinks this is a compliance formality.
“the shortcomings of conventional ex ante and ex post review under current administrative law doctrines”
That is the gap between having AI and governing it. The second finding is the one that tends to change the room.
“AI adoption significantly enhances corporate governance effectiveness and improves risk management”
Neither of these is a fringe position. Both come from peer-reviewed work, and both describe the condition most organisations are actually in when the question about SEC AI enforcement arrives from the board, the buyer, or the regulator.
This is the sequence that works, and it is not the sequence most organisations choose. They start with the framework and work backwards toward reality. Start with reality.
Done in this order, SEC AI enforcement becomes tractable. Done out of order, it becomes a document nobody uses and a control nobody exercises.
Material AI use and material AI-related risks must be disclosed. What is "material" is fact-specific and evolves with industry practice.
Overstating AI capability, involvement, or accuracy in investor communications. The SEC treats it as securities fraud when material.
Primarily to public companies, registered advisers, and broker-dealers. Private companies raising capital under Regulation D still face antifraud provisions.
The AI Communication Alignment Protocol™ from Volume III of The Operating Discipline for AI Library™ addresses AI messaging discipline for public companies and regulated financial services firms.
The pattern is consistent. A company describes an AI capability to investors in terms its own engineers would not recognise. The description moves the stock, or wins the mandate, or closes the round. Later, the gap between the claim and the product becomes discoverable, and the SEC treats the original statement as a material misrepresentation. SEC AI enforcement does not require a novel theory of AI. It only requires the ordinary law of securities fraud applied to a new subject.
The March 2024 settlements against two investment advisers set the template: both had told clients and prospects they used AI in ways they did not. Neither case turned on whether the AI worked. Both turned on whether the description was true.
Most companies think about SEC AI enforcement in terms of the 10-K. The 10-K is usually the most carefully lawyered document in the building and the least likely to contain the problem. The exposure sits in the places where nobody ran the language past counsel: the earnings call answer given off the cuff, the investor deck built by product marketing, the press release announcing an AI feature, the conference panel remark. These are all statements to the market, and all of them are actionable.
Three controls carry most of the weight. First, a substantiation file: for every AI claim made publicly, a written record of what the product actually does and who verified it. Second, a review gate: AI claims in investor-facing material go through the same review as any other forward-looking statement. Third, a consistency check: what the sales team says, what the product does, and what the 10-K describes should be the same thing. Divergence between those three is where SEC AI enforcement finds its cases.
The authoritative texts and agency pages behind this summary. We keep this page current, but where a compliance decision turns on exact wording, read the source. Anything concerning SEC AI enforcement that carries legal consequence should be confirmed against the enrolled text or the issuing body, not against a secondary summary, including this one.
The AI Business Enablement Audit™ measures your organization against every framework in this library, including SEC AI Enforcement, and delivers a defensible governance dossier. Start or finish your audit below.
Start or finish your AI Audit →