# Regulator investigation reputation: what to do Regulator investigation reputation: what becomes public, what to say and not say, and how to keep search results accurate while a case runs. --- When a regulator or professional body opens a case, the reputational damage usually comes from what gets published, quoted or guessed, not from the opening itself. Most regulators say they keep investigations confidential until a defined point, so your first job is to learn where that point is for your regulator, say little before it, and make sure what search engines show about your name stays accurate while the case runs. This article is information, not legal advice. Rules differ by country, by regulator and by profession, and they change, so the article names the regulator whose own page was read and says what that page states. Your lawyer or professional defence body decides what you say and when. What follows is how reputation work sits around that advice: what is public, what to avoid saying, and how to watch and correct the record.
The short version
## What becomes public when a regulator opens a case: usually nothing at first In the regulators read for this article, the opening of a case is not published by default. The FCA's enforcement newsletter states that it will not normally make public the fact that it is investigating a particular matter. The US Securities and Exchange Commission says on its investor site that investigations are generally conducted on a confidential basis and that its Division of Enforcement will not confirm or deny the existence of an investigation or give status updates, while charges filed against a party make the matter public. Professional bodies work the same way in the examples read. The State Bar of California says its investigations and inquiries are, by statute, confidential. The Nursing and Midwifery Council (NMC) in the UK says that online search results do not show whether a registrant is under ongoing investigation, and that this information stays confidential until the case is referred for adjudication or an interim order is scheduled. Two consequences follow. There is often no official page about you yet, so the only public record may be what a complainant, employer or journalist says. And silence from the regulator is not a signal either way: it is following its own policy. ## The stages of a case and what each one can make public Public exposure arrives at different stages in different systems. The table is a map built from the regulators read for this article, not a prediction for your case.
StageUsually public?What the regulator pages sayYour reputation risk
Complaint or referral receivedNot by the regulatorSEC, FCA, State Bar of California and NMC pages describe confidentiality at this stageLeaks, a complainant going public, or a tip to the press
Formal investigationNot by defaultFCA announces only in exceptional circumstances; SEC investigations are nonpublic unless the Commission orders otherwiseThird-party reports, your own disclosures, market or client questions
Interim measureOften yes, for the measureNMC lists interim suspension or conditions orders on its register while they are in forceThe public sees a restriction without the evidence behind it
Charges or referral to a hearingOften yesState Bar of California: public when disciplinary charges are filed in State Bar Court; NMC publishes hearing details before the hearing startsSearch results begin to carry the allegation under your name
OutcomeDepends on outcome and regulatorAhpra publishes conditions, undertakings and reprimands; NMC publishes warnings for 12 months; no further action stays on the regulator's record (Ahpra)Outcome pages can persist and rank for as long as they are published
## Jurisdiction differences: what each regulator says it publishes A rule from one body is not the rule everywhere. Each subsection summarizes only what that regulator's own page, as read for this article, states. Check the live page before acting, because publication policies are revised. ### United Kingdom: the Financial Conduct Authority The FCA's enforcement newsletter says the regulator will not normally make public that it is investigating a matter, and that it may announce an investigation in exceptional circumstances, for example to maintain public confidence in the UK financial system or the market. It names a firm or individual only if that test is met, says the bar for an individual is high, and can announce an investigation without naming the subject. On 3 June 2025 the FCA [published an updated Enforcement Guide](https://www.fca.org.uk/news/statements/updated-version-our-enforcement-guide-published). Its statement says it retained the exceptional circumstances test for announcing investigations into regulated and listed firms, adds three situations of increased transparency, and says the changes apply only to investigations launched on or after that date. The three are: suspected unauthorized activity where an announcement would warn consumers or investors or help the investigation; investigations already made public by the subject, an affiliated company or a public body; and anonymized announcements that do not identify the subject. For individuals, the FCA's policy statement says it will not generally announce when it has opened an investigation into a named individual, and that specific legal restrictions apply to naming individuals. This is a financial services rule, not a rule for other UK regulators. ### United States: the Securities and Exchange Commission The SEC's investor bulletin says investigations are generally conducted confidentially and that enforcement staff may close one without recommending action. Without a formal order staff may request documents and interview witnesses voluntarily; with one, they can issue subpoenas. The SEC's [Enforcement Manual](https://www.sec.gov/files/enforcementmanual.pdf), in the version dated February 24, 2026, says investigative proceedings are nonpublic unless the Commission orders otherwise. A person who receives a Wells notice, the staff's preliminary notice that it may recommend an action, can make a written submission. The manual describes a four-week period for the submission, says offers of settlement may not be included in it, and says the recipient is told that a submission may be used by the Commission in any action or proceeding it brings. ### United States: a state bar example The [State Bar of California](https://www.calbar.ca.gov/frequently-asked-questions-complaints-claims) says its investigations are confidential by statute and that a complaint becomes public when disciplinary charges are filed against an attorney in State Bar Court, at which point the case is listed on the attorney's online profile. Other pending investigations of the same attorney stay confidential. It states a limited exception: the Chief Trial Counsel may publicly disclose a pending investigation where public protection is seriously at stake. This is one state's bar. Other states and licensing boards have their own rules. ### United Kingdom: a professional body example The NMC's [publication guidance](https://www.nmc.org.uk/globalassets/sitedocuments/ftp_information/publication-guidance.pdf) is a detailed example of a staged system. It says ongoing investigations are not shown in online search results and stay confidential until referral for adjudication or an interim order. Upcoming hearings are published with the registrant's name, hearing date and types of allegation, but not detailed charges before the hearing starts. Warnings are published for 12 months, undertakings while they are in force, and striking-off orders for five years from when the order takes effect. A decision that finds no impairment is not normally published. The Solicitors Regulation Authority (SRA) describes its own approach in an update on its publication policy. From 2 June 2025, the length of time a disciplinary record stays published depends on the seriousness of the misconduct, replacing a fixed three-year period for most decisions, and the most serious outcomes can stay public for long periods or indefinitely. That page does not cover the investigation stage. ### Australia: Ahpra Ahpra's page on [possible outcomes of a notification](https://www.ahpra.gov.au/Notifications/How-we-manage-concerns/Possible-outcomes.aspx) says that conditions restricting practice are published on the public register of practitioners until the board decides they are no longer needed, that accepted undertakings are published, and that reprimands issued since the start of the National Scheme appear on the national register. For a no further action outcome, the page says the details of the concern remain on record and may be considered if a similar concern is raised later. Ahpra's separate page on links to decisions says it includes links to adverse disciplinary decisions and court outcomes when the decision is already public and the practitioner's name is not suppressed, and that links stay on the register even after the sanction is no longer active. The Ahpra pages read do not say what is published while a notification is being assessed. ## Why your own statement can change what the regulator says A public statement by you can end the regulator's default silence. The FCA's policy statement says it may reactively confirm an investigation where the fact has been made public by the investigation subject, an affiliated company, or a regulatory, government or public body. It describes this as likely to be a confirmatory statement on its website, from its press office, or in response to a parliamentary request for information. The same document notes that, as at 1 June 2025, 40 investigations into regulated, listed or publicly traded firms were open, 22 of them were in the public domain, and 14 of those were made public by the firm. That does not mean you should never speak. Firms may have market disclosure obligations, and the FCA's policy statement refers to firms' own existing obligations to make market disclosures about ongoing investigations. Whether you must disclose is a question for your lawyer, not a communications decision. The communications point is narrower: a statement is a decision with consequences, so it should be made on purpose, once, and with the regulator's likely response in mind. The sources read state this rule only for the FCA. Ask your lawyer how your regulator treats a voluntary disclosure before you post, email clients or speak to a reporter. ## What to say, and what not to say, while the case is open Say only what is true, necessary and cleared by your lawyer, and say it in as few words as the situation allows. The aim is not to win the argument but to avoid new problems: a quote later read against you, an attack on the complainant that becomes the headline, or a denial a later finding contradicts. ### What a holding statement can contain A short holding statement usually does four things. It confirms awareness of the matter, if it is already known. It says you are cooperating. It states that you will not comment on the details while the process runs. It gives one contact for questions. Clients, staff and journalists get the same words, so no one hears a different version. ### What to avoid - **Characterizing the complainant.** Criticizing the person who raised the concern turns a regulatory file into a personal dispute and can create a separate problem for you. - **Predicting the outcome.** "I expect to be cleared" reads badly if the outcome is a warning or a condition. - **Sharing documents or details from the investigation.** The SEC manual itself describes controls on copies of a formal order. Treat investigation material as restricted unless your lawyer says otherwise. - **Contacting witnesses or complainants.** Even a friendly message can be read as pressure. Route any contact through counsel. - **Posting through an anonymous account.** If it is traced to you, what it says is attributed to you, and it looks like an attempt to mislead. - **Deleting old posts or pages in a hurry.** Removing material connected to the matter can look like concealment, and you may be under a duty to keep records. Ask counsel before touching anything related to the case. ## How to keep search results accurate while the case runs You cannot stop a regulator from publishing an outcome it is entitled to publish, and you should not try. You can make sure the first screens shown for your name are accurate and current. That is lawful, ordinary and slow work.
A search accuracy routine for the length of a case
  1. Audit your name nowSearch your name, your name plus your profession and your firm name in private windows across search engines and AI assistants. Record what appears on page one and what each AI assistant says, before anything is published.
  2. Fix factual errors that already existCorrect wrong job titles, old addresses and mixed-up identities on pages you control and on directories that accept corrections. A case is easier to read accurately when the basics are right.
  3. Strengthen owned pagesKeep your official profile, your professional register entry and one owned page current with accurate, neutral information. Do not mention the case unless counsel advises it.
  4. Set monitoringTrack new pages that mention your name and the regulator's name, plus the regulator's own publication pages for your type of case.
  5. Prepare correctionsDraft, but do not send, correction requests for the likely errors: a page that calls an investigation a finding, mixes you up with someone of the same name, or states a sanction that was not imposed.
  6. Act on the outcomeWhen the case ends, update owned pages, ask publishers to reflect the outcome, and request search refreshes for pages that have changed.
### The most common inaccuracy A frequent error in coverage of an open case is treating an investigation as a conclusion. The SEC's own bulletin says the purpose of an investigation is to determine whether anyone violated the securities laws and that staff may close it without recommending action. The SEC Enforcement Manual says a formal order is an early step in an investigation, not its conclusion. A headline that says a person "was found" to have done something is wrong if only an investigation exists. Ask the publisher for a correction, with the regulator's own wording attached. ### Search engines and AI assistants AI assistants repeat what pages say, so check what they say about you at the start, at each public stage and after the outcome. If an answer is wrong, the fix is usually at the source page first. Our [crisis desk](/crisis-management) handles this work for people and firms in an open regulatory matter. ## What not to do to search results during a case Do not try to remove or hide accurate, lawful, public-interest information about a regulatory outcome. Regulators publish outcomes so that clients, employers and the public can check a record, and the pages read for this article give that as their purpose in several cases. The SRA, for example, says publication lets users of legal services check a provider's record and lets prospective employers carry out background checks. Three tactics reliably make a case worse: - **Threatening publishers or complainants.** A legal threat about accurate reporting often becomes a second story about the threat. This is the Streisand effect: the effort to hide a page draws more attention to it. - **Fake reviews, fake profiles or paid manipulation.** These break platform rules, risk penalties, and look like an attempt to mislead, which is the worst impression to give during a regulatory case. - **Mass takedown requests against accurate pages.** Accurate, lawful coverage is not a ground most removal routes accept, so the requests fail and cost you credibility. Lawful routes exist for content that is inaccurate, outdated or unlawful. A page that states a false fact can be corrected. A page that has been changed or removed can be refreshed in search results using the search engine's tool for outdated content, such as Google's. Ahpra's own page on links to decisions describes one narrow route: a National Board can remove a link at a practitioner's request if it reasonably believes that publishing the link risks their health or safety, or that of their family or associates. That is a regulator's discretion, not a general right, and it applies in that system only. ## A worked timeline: how the stages and the search work line up The scenario below is invented: the regulator is generic, the durations are illustrative, and real cases vary widely in length. Assumptions: a solicitor-type professional is notified of a regulator inquiry; the regulator's rules keep the investigation confidential until charges; the case ends in a published warning.
PhaseWhat happensPublic?Search and communications work
Day 1 to 3Notice received; counsel appointedNoSilent audit of search results and AI answers; no posts; hold all record deletions
Weeks 1 to 8Document requests and responsesNoCorrect basic profile errors; monitoring live; draft holding statement and correction requests
Referral to hearingCharges filed or hearing listedYes, in this scenarioIssue the cleared holding statement once; notify the small private circle first; watch for pages that mix up allegation and finding
HearingPanel hears the caseOften yesNo commentary; review any press coverage for factual errors and request corrections with the regulator's wording
OutcomeWarning published for a set periodYesUpdate owned pages with neutral facts; request refreshes of changed pages; diarize the date the publication period ends
The NMC's published periods show why the last row matters. The figures below are the NMC's own, for its register, and they are not typical of other regulators.
How long the NMC publishes different outcomesMonths. Five-year striking-off period converted to 60 months. Advice is not published. No ranges are shown; a range would use its upper bound.
Advice0 months
Latest hearings and sanctions list4 months
Warning12 months
Striking-off order60 months

NMC publication guidance, paragraphs 21, 29 and 30. Caution, conditions and suspension orders are published for the duration of the order and interim orders while in force, so they are not shown.

## When the case closes: update the record A closed case does not close the search results by itself: each outcome leaves a different trail. The SEC Enforcement Manual says the staff is encouraged to close an investigation as soon as it becomes apparent that there is no violation, and that the Division's general policy is to notify individuals and entities at the earliest appropriate time after deciding not to recommend an action, in the form of a termination letter. It also says staff may, with proper supervisory approval, delay a termination letter in limited circumstances, and that a decision not to send one needs senior approval for some categories of people. At the NMC, a decision that finds no impairment is not normally published, and a decision that an allegation was not well founded may be published for four months if the registrant consents. At Ahpra, the page on possible outcomes says that for no further action the details of the concern remain on record and may be considered if a similar concern is raised later. Closure therefore does not always mean the file disappears. After closure, three tasks remain: 1. **Update owned pages** to reflect the outcome in neutral terms, if counsel agrees. 2. **Ask publishers to update** pages that describe the case as ongoing. A short note with the regulator's closing wording, where you may share it, often works. 3. **Request refreshes in search engines** for changed or removed pages. Google's help page on refreshing outdated content explains how to ask for a refresh, and says no request is needed if you have already updated the live page. ## Next step: set the quiet baseline before anything is public The best moment to work on search accuracy is before the case is public, while the record is quiet. Audit your name, fix basic errors, set monitoring and draft correction requests, then wait for your lawyer's guidance on what is said and when.
If this is happening to you now

If a regulator or professional body has contacted you, or you expect it to, Reputation Partners can run a private audit of what search engines and AI assistants show for your name and set up monitoring before anything is published. Start with the private audit, and keep your lawyer in charge of every statement.

## Questions people ask ### Will a regulator investigation show up in search results? Not usually at the opening, for the regulators read here, because their pages describe investigations as confidential until a set point. Registers, hearing lists and outcome pages that the regulator publishes can rank for your name once they exist. Third-party posts, press and your own statements can appear earlier, so audit your name before anything is public. ### Can I make a regulator remove a published decision? Generally no. Regulators publish outcomes for public protection and checking a record, and their pages describe set publication periods. Some systems allow narrow exceptions, such as Ahpra's discretion to remove a link on health or safety grounds. A decision you believe is wrong is challenged through the regulator's own appeal or review route, with your lawyer. ### Is it safe to post a denial online? Treat any post as evidence. A denial can also change what a regulator may say: the FCA's policy statement says it may confirm an investigation made public by the subject. Ask your lawyer before posting, keep any statement short, and never attack the complainant. ### How do I handle press that says I was found guilty when it is only an investigation? Ask the publisher for a correction in writing. Quote the regulator's own description of the stage, such as the SEC's statement that its purpose is to determine whether anyone violated the law and that staff may close a case without action. Ask for the headline and body to reflect the actual status, and keep a copy of the request.