Since 2015, the SEC has brought nearly two dozen enforcement actions for violations of the whistleblower protection rules under Rule 21F-17(a) against employers for actions taken to impede reporting to the SEC. The bulk of these actions have focused on language in employee-facing agreements that allegedly discouraged such reporting. The SEC shows no sign of slowing down; indeed, the Commission has brought five enforcement actions in this past fiscal year alone, and the penalties imposed for these violations appear to be increasing. The settlements – and the risk they represent – serve as a reminder for companies to review their existing employment documents and internal policies, including confidentiality policies, to ensure that restrictive language is removed and that appropriate whistleblower carveout language is included. Conducting this review, and making any appropriate changes, will help ensure compliance with Rule 21F-17(a).