Two different SEC enforcement stats are circulating for fiscal 2025. One says monetary relief came in around $2.7 billion once a single outlier case is excluded. The other says monetary settlements hit their lowest level since 2012. Both are real numbers, taken directly from the SEC's own release — they just answer different questions, and it's easy to see only one of them and draw the wrong conclusion about how much enforcement appetite the Commission has heading into 2026.
We pulled the primary sources directly — the SEC's own enforcement results, FINRA's disciplinary data, and the actual regulatory text — for our 2026 compliance guide, and three things stood out enough to flag on their own.
1. There are two real SEC enforcement numbers for FY2025 — know which one you're reading
The SEC's April 2026 release reports $17.9 billion in total monetary relief ordered for fiscal 2025. But $14.9 billion of that is a single matter: the judgment closing out SEC v. Stanford International Bank, a Ponzi-scheme case first filed in 2009, finally resolving this year. Exclude that one case and relief ordered was roughly $2.7 billion. Separately, the SEC also reports total monetary settlements — a narrower measure of negotiated resolutions rather than relief won through litigation — and that figure fell to $808 million, down 46% from FY2024 and the lowest since 2012. If you've seen a guide cite "lowest since 2012," that's almost certainly the settlements figure, and it's accurate — it just isn't the same measurement as "total relief ordered," and conflating the two is where the confusion starts. Total enforcement actions did drop 22% year over year, and standalone actions fell 30% — both of those figures hold regardless of which dollar metric you're looking at.
2. AI governance isn't a large-firm problem — it scales with use, not headcount
If anyone at your firm drafts a client email with ChatGPT, summarizes research with Claude, or runs an AI note-taker in meetings, you already have a governance obligation. Both the SEC's 2026 exam priorities and FINRA's 2026 oversight report added dedicated AI sections for the first time this year. The bar isn't sophistication — it's evidence: an inventory of what's in use, a one-page policy, and a human review step before AI output reaches a client.
3. The Regulation S-P deadline for smaller entities has already passed
June 3, 2026 came and went. If your firm is under $1.5 billion in RAUM and doesn't yet have a written incident response program, client-notification procedures, and a vendor-oversight framework in place, that's no longer a planning item — it's an open compliance gap an examiner can cite today.
Get the full 2026 Compliance Guide
All three findings above, plus the state-to-SEC transition, what actually changed under the new administration, and ten specific moves to make before year-end — free, with every figure cited back to its primary source.
Download the Free GuideThe bottom line
None of this means the regulatory environment eased up as much as some guides suggest, and none of it means you're off the hook because the headline rule proposals got withdrawn. Fiduciary duty, accurate disclosure, and cybersecurity obligations are all still fully in force. Get the numbers right, and you can prioritize your time correctly. Get them wrong, and you're either overreacting to a threat that's smaller than advertised or underreacting to one — like Reg S-P or AI governance — that's already live.