SEC's CBIZ Order: Section 5 Enforcement and Meaningful Cooperation Credit

On September 28, 2026, the SEC filed settled charges against CBIZ for Section 5 violations related to the issuance of common shares in excess of the numbers registered on Forms S-8. The resolution involved no civil penalty and provides key signals regarding the SEC’s current posture:

• Section 5 is alive and well. A routine compliance breakdown, not fraud or scienter, resulted in a federal securities law violation.
• Innovation may get a sandbox. Traditional issuers still get Section 5. The Commission is increasingly using exemptions, safe harbors, conditional relief, and other tailored pathways to accommodate emerging technologies and market structures. CBIZ nevertheless shows that where the obligation is clear, the SEC will enforce Section 5.
• Cooperation changed the outcome. CBIZ identified the issue, stopped the conduct, investigated, self-reported, cooperated with the staff, and offered rescission. The SEC imposed no civil penalty and expressly cited those actions in explaining that result.
• You can outsource administration, but not accountability. Issuers remain responsible for tracking registered share capacity, even when a third party administers the plan.

A Traditional Section 5 Case

CBIZ issued 481,049 shares through its employee stock purchase plan after exhausting the shares registered on its Forms S-8. Because no registration statement covered those shares and no exemption was available, the SEC found violations of Sections 5(a) and 5(c). The order contains no allegations of fraud, scienter, or intentional misconduct. Instead, the violations resulted from deficiencies in the company's process for tracking shares issued under the plan.

The matter serves as a reminder that Section 5 is not limited to capital-raising transactions or offering frauds. It also applies to operational failures involving established registration requirements. The case further demonstrates that delegating administrative functions does not transfer responsibility for compliance. Even when a third party administers a plan, issuers remain responsible for maintaining accurate records and monitoring available registered share capacity.

Deregulation for Innovation, Section 5 for Everyone Else?

The timing of the order is notable. In recent months, the Commission has shown a growing willingness to create alternative compliance pathways for certain emerging technologies and market structures. Against that backdrop, CBIZ is a reminder that Section 5 remains a cornerstone of the federal securities laws. This was not a novel technology or a regulatory gray area. It was a straightforward registration failure. Even as the SEC creates alternatives in selected contexts, it continues to enforce registration requirements where no exemption applies.

The Significance of the No-Penalty Outcome

The most notable feature of the resolution may be the absence of a civil penalty. After identifying the violation, CBIZ suspended the plan, conducted an internal investigation, self-reported the issue, cooperated with the SEC staff, and offered rescission to affected current and former employees, including with respect to certain claims that otherwise may have been time-barred. The Commission expressly cited those actions in determining not to impose a penalty.

The result provides a particularly clear example of cooperation credit in practice. More importantly, it demonstrates that the Commission's repeated emphasis on self-policing, self-reporting, remediation, and meaningful cooperation is more than rhetoric. In CBIZ, those actions had a measurable effect on the sanction imposed. It is always difficult to draw broad conclusions from a single settlement. But CBIZ is a current and unusually clean example that, even in a strict-liability registration case: good cooperation still pays.  

Bottom Line

The CBIZ order does not break new legal ground. It is a straightforward Section 5 case involving a registration failure and no allegations of fraud.

What makes it noteworthy is the timing. As the Commission creates alternative pathways in some areas, it continues to enforce established registration requirements in others. Whether that reflects modernization, deregulation, or both, the contrast is notable.

For issuers, the message is simple: maintain effective controls, and if a violation is discovered, investigate, remediate, self-report where appropriate, and cooperate fully.

To receive the latest insights on US legal developments, subscribe to the Freshfields A Fresh Take Blog.