On April 1, 2015, the SEC announced a settled enforcement proceeding against KBR, Inc., a publicly traded, Houston-based technology and engineering company, for including “restrictive language” in confidentiality agreements used in the course of internal investigations. This is the first time the SEC has used its enforcement powers under Rule 21F-17 of the Whistleblower provisions of the Dodd-Frank Wall Street Reform and Consumer Protection Act of 2010. Rule 21F-17 provides that “[n]o person may take any action to impede an individual from communicating directly with the Commission staff about a possible securities law violation, including enforcing, or threatening to enforce, a confidentiality agreement … with respect to such communication.”

The language to which the SEC took exception appeared in confidentiality agreements KBR used in connection with internal investigations. The statement, which investigators required employees to sign before the interview, was included in the Company’s Code of Business Conduct Investigations Procedures manual. The statement read:

I understand that in order to protect the integrity of this review, I am prohibited from discussing any particulars regarding this interview and the subject matter discussed during this interview, without the prior authorization of the Law Department. I understand that the unauthorized disclosure of information may be the grounds for disciplinary action up to and including termination of employment.

It does not appear that the policy specifically referenced reporting to the SEC or any governmental authority. Moreover, it seems likely that the Company’s intent was to prevent employees from discussing the matter with each other. The SEC admitted that it had no evidence KBR ever prevented an employee from communication with the SEC staff or that KBR took any action to enforce the confidentiality provision. Nevertheless, the SEC posited that the language undermined the purpose of Section 21F and Rule 21F-17(a), which is to “encourage individuals to report to the” SEC.

The SEC indicated its approval of KBR’s amended policy by quoting it in the Order. The new policy provides:

Nothing in this Confidentiality Statement prohibits me from reporting possible violations of federal law or regulation to any governmental agency or entity, including but not limited to the Department of Justice, the Securities and Exchange Commission, the Congress, and any agency Inspector General, or making other disclosures that are protected under the whistleblower provisions of federal law or regulation. I do not need the prior authorization of the Law Department to make any such reports or disclosures and I am not required to notify the company that I have made such reports or disclosures.

While the Order imposes a modest civil penalty of $130,000, KBR is also required to contact KBR employees who signed confidentiality statements from August 21, 2011, to the present and to provide them with a copy of the Order and a statement that they do not need permission from KBR to communicate with any governmental entity.

This case of first impression underscores the SEC’s commitment to the Whistleblower program and its intent to punish employers that, intentionally or not, restrict an employee’s ability to report potential violations to the SEC. There has been much press about such restrictive language in employment agreements, not just related to the SEC, but also related to the National Labor Relations Board and other federal agencies. It is clear the SEC will consider such restrictive language wherever it may be found. By virtue of this Order, companies will have to manage protecting the integrity of internal investigations and avoiding accusations that it discouraged employees from going to the SEC. It also remains to be seen whether the SEC will take the position that companies are required to affirmatively inform employees of their ability to make reports to the SEC or other governmental bodies or whether employees must merely refrain from discouraging such activity. Because the Whistleblower provisions apply to both private and public companies, it seems a prudent course of action for all employers to review employment and confidentiality agreements.