SEC enforcement director says agency is investigating AI capability and risk disclosures
The SEC Enforcement Director confirmed the agency is investigating companies for overstating AI capabilities and failing to disclose AI risks.
The SEC's Division of Enforcement is examining public companies on two fronts: statements that exaggerate what their AI can do, and failures to disclose material AI use or risks. David Woodcock, the division's director, confirmed the scrutiny in separate interviews with Reuters and Law360, according to a Debevoise & Plimpton data blog post dated November 3, 2026.
In the Law360 interview, Woodcock said the division will examine statements by publicly traded companies that may exaggerate AI capabilities, or that fail to disclose AI use or risks in a fundamental part of their business. He pointed to private-company cases involving overstated AI and robotics capabilities, and said he expects further investigations of public companies that follow the pattern of those earlier matters. The Debevoise authors say his comments reinforce the need for companies to review what they say about AI in SEC filings, earnings-call scripts and investor presentations.
Woodcock told Reuters that the SEC does not want to impede technological innovation, but that investors need accurate disclosures about AI use and potential risks. The enforcement risk, he said, arises when those disclosures may be insufficient. The Law360 summary is brief, and the excerpts available to this desk do not show what specific cases or disclosure language the division is examining.
The Debevoise authors recommend that companies have legal, compliance and technical staff review investor-facing material, and that they distinguish conventional automation from agentic functionality. They also advise against describing pilots as scaled deployments or human-supervised workflows as fully autonomous. The firm's note adds that companies should document the basis for claims about functionality, revenue, productivity or staffing. It names a practice it calls "AI hushing," in which statements conceal or downplay a company's use of AI or the resources behind it. Those are the firm's recommendations, not findings from the SEC.
Why it matters
Public companies that describe AI capabilities or risks in filings may face enforcement if those statements are inaccurate or incomplete.
What you can do
Review AI claims and risk factors in public filings against what products actually do.
Original source
We have no link to the original source for this story yet.
Further reporting
Where we saw it
The AI Report
AI wrote this summary from the sources listed, and nobody reviewed it individually before publication. Check the original source before you rely on it. How it works