SOX Audit Interference Penalties: Section 802 Criminal Exposure

The broadest and most frequently charged SOX obstruction statute. Criminalizes knowingly altering, destroying, mutilating, concealing, covering up, falsifying, or making a false entry in any record, document, or tangible object with intent to impede, obstruct, or influence a federal investigation or bankruptcy proceeding. Critically, no formal investigation needs to be underway — the intent to impede a contemplated proceeding is sufficient. Applies to companies, employees, officers, and third-party auditors.

Enacted specifically to address audit firm document destruction. Requires accountants who conduct public company audits to retain all audit or review workpapers for 5 years from the end of the fiscal period covered by the audit. PCAOB Auditing Standard 1215 extends this to 7 years for registered public accounting firms. Willful destruction of these records — whether by the auditor or at the direction of company management — triggers criminal prosecution.

Prohibits corruptly altering, destroying, mutilating, or concealing a record, document, or other object with intent to impair its integrity or availability for use in an official proceeding. Unlike § 1519, § 1512(c) requires nexus to an actual or reasonably foreseeable official proceeding (including SEC enforcement actions and Grand Jury proceedings). DOJ often charges both § 1519 and § 1512(c) simultaneously — prosecutors choose whichever is easier to prove given the facts.

Parallel SEC civil enforcement commonly accompanies criminal charges. The SEC may seek disgorgement of all compensation received during the period of misconduct, civil monetary penalties under the Securities Exchange Act ($100,000–$1,000,000+ per violation depending on tier), and permanent officer and director bars. Companies found to have obstructed SEC investigations routinely face enhanced penalties in the underlying substantive case — obstruction converts potential $1M civil violations into multi-million-dollar settlements.

Understand Your SOX Penalty Exposure

Use ComplianceStack's free tools to identify gaps before regulators do.

Does an SEC investigation need to be formally open before document destruction becomes criminal?

No — this is the most misunderstood aspect of § 1519. The statute criminalizes destruction done with intent to impede a contemplated or pending proceeding. Courts have consistently held that once a company has reason to believe regulatory scrutiny is likely — a Wells Notice, informal SEC inquiry, press reports of an industry sweep, or even a whistleblower complaint — document preservation obligations attach. Destroying documents after receiving a customer complaint that later leads to an SEC inquiry has been prosecuted successfully. The practical standard: if you know regulators might ask, preserve. Issue litigation holds immediately.

Can a company be criminally prosecuted for its employees' document destruction?

Yes, under standard corporate liability doctrine. A corporation is criminally liable for the acts of its employees acting within the scope of their employment and at least partly to benefit the corporation. If a mid-level manager destroys records to protect the company from liability — even without board or C-suite authorization — the company can face criminal prosecution. Post-Arthur Andersen, DOJ policy strongly favors prosecuting companies with inadequate compliance programs that create destruction-permissive cultures. Conversely, companies with clear, enforced litigation hold policies that immediately investigated and self-reported destruction have received reduced penalties or declinations.

What triggers the duty to preserve documents before formal litigation hold orders?

The duty to preserve is triggered when litigation or government investigation is reasonably anticipated. Courts and regulators have found reasonable anticipation in numerous circumstances: receiving a demand letter from a regulator or private litigant, a Wells Notice from the SEC, news of a parallel investigation into industry peers, a terminated whistleblower complaint, or even a heated internal audit finding. Best practice requires written litigation hold notices distributed to all document custodians, suspended automatic deletion policies, and IT-enforced preservation across all systems — email, cloud storage, mobile devices, and third-party platforms including Slack and Teams.