Regulation D Rule 506 is the most widely used securities exemption in the United States. Hundreds of billions of dollars are raised under this exemption every year, by companies ranging from early-stage startups to established private equity funds. It is also one of the most commonly misunderstood exemptions in securities law, and that misunderstanding creates enforcement risk that is both predictable and preventable.
The exemption is not self-executing. It requires compliance with specific conditions, and the failure to comply with those conditions — even inadvertently — can convert what was supposed to be an exempt private placement into an unregistered public offering. An unregistered public offering is a federal securities law violation, and the consequences can include rescission rights for investors, SEC enforcement action, and personal liability for the officers and directors who authorized the offering.
I spent nine years at the SEC reviewing Regulation D offerings and investigating cases where those offerings failed to comply with the exemption's requirements. The failure patterns are consistent, and they are almost always the result of one of three things: inadequate legal counsel, inadequate investor verification, or inadequate disclosure.
The Two Flavors of Rule 506: 506(b) and 506(c)
Rule 506 has two distinct variants, and understanding the difference between them is essential for anyone conducting a Regulation D offering.
Rule 506(b) is the traditional exemption. It permits sales to an unlimited number of accredited investors and up to thirty-five non-accredited investors who are "sophisticated" — meaning they have sufficient knowledge and experience in financial and business matters to evaluate the merits and risks of the investment. Rule 506(b) prohibits general solicitation and general advertising. The offering must be conducted through private communications with investors who have a pre-existing substantive relationship with the issuer or its placement agent.
Rule 506(c) was added by the JOBS Act in 2012. It permits general solicitation and general advertising, but it requires that all purchasers be accredited investors and that the issuer take reasonable steps to verify that each purchaser is accredited. The verification requirement under Rule 506(c) is more demanding than the self-certification that is typically used in Rule 506(b) offerings — the issuer must actually verify accredited investor status through documentation, not simply rely on the investor's representation.
The choice between 506(b) and 506(c) is one of the first decisions an issuer must make when structuring a Regulation D offering, and it is a decision with significant enforcement implications. An issuer that uses general solicitation — social media posts, public presentations, advertising — in a 506(b) offering has violated the exemption, regardless of whether all of the investors were accredited. An issuer that conducts a 506(c) offering without adequate verification procedures has also violated the exemption, even if all of the investors were in fact accredited.
The Accredited Investor Requirement: Where Most Failures Occur
The accredited investor requirement is the most important condition of the Rule 506 exemption, and it is where most enforcement failures occur. The definition of accredited investor is set forth in Rule 501 of Regulation D, and it includes individuals with a net worth exceeding $1 million (excluding the value of their primary residence), individuals with annual income exceeding $200,000 (or $300,000 jointly with a spouse) for the two most recent years with a reasonable expectation of the same income in the current year, and various institutional investors.
The failure pattern I saw most frequently during my time at the SEC was issuers who sold to investors who did not meet the accredited investor definition. Sometimes this was intentional — the issuer needed to raise money and was willing to sell to anyone who would write a check. More often, it was the result of inadequate verification procedures — the issuer asked investors to self-certify their accredited investor status without taking any steps to verify that the certification was accurate.
Self-certification is not adequate verification under Rule 506(c), and it is increasingly being questioned as adequate even under Rule 506(b). The SEC's enforcement record includes cases where issuers relied on investor questionnaires that asked investors to check a box confirming their accredited investor status, without any follow-up to verify the underlying financial information. When those investors turned out not to be accredited, the issuer lost the benefit of the exemption for the entire offering — not just for the non-accredited investors' purchases.
The lesson is that verification procedures must be designed with the enforcement standard in mind, not the convenience of the offering process. For Rule 506(c) offerings, that means reviewing tax returns, bank statements, or other documentation that actually supports the investor's claimed financial status. For Rule 506(b) offerings, it means maintaining records that demonstrate the substantive pre-existing relationship with each investor and the basis for the issuer's reasonable belief that each investor was accredited.
The General Solicitation Prohibition: The Line That Is Easier to Cross Than You Think
The prohibition on general solicitation in Rule 506(b) offerings is one of the most frequently violated conditions of the exemption. The reason is that the line between permissible private communication and prohibited general solicitation is not always obvious, and the consequences of crossing it are severe.
The SEC's guidance on what constitutes general solicitation has evolved over time, but the core principle is clear: a communication is a general solicitation if it is directed to the general public rather than to a specific, identified group of investors with whom the issuer has a pre-existing substantive relationship. A cold call to a stranger is a general solicitation. A presentation at a public conference is a general solicitation. A post on a public social media platform is a general solicitation. A press release that describes the terms of an offering is a general solicitation.
The pre-existing substantive relationship requirement is more demanding than many issuers appreciate. The relationship must be substantive — it must be based on actual knowledge of the investor's financial circumstances and investment experience, not simply a prior business contact or a name on a mailing list. And it must pre-exist the offering — relationships established for the purpose of the offering do not qualify.
I have seen enforcement actions brought against issuers who conducted what they believed were private placements but who had, in fact, engaged in general solicitation through a combination of social media activity, public presentations, and email campaigns to lists of contacts who did not have a pre-existing substantive relationship with the issuer. In each case, the issuer's counsel had advised that the offering was exempt under Rule 506(b), but the counsel had not adequately analyzed whether the communications constituted general solicitation.
The Form D Filing Requirement: The Procedural Obligation That Is Frequently Overlooked
Rule 503 of Regulation D requires issuers to file a Form D notice with the SEC within fifteen days after the first sale of securities in a Regulation D offering. The Form D is a relatively simple document — it identifies the issuer, describes the offering, and provides basic information about the investors. But the filing requirement is frequently overlooked, particularly by issuers who are conducting their first Regulation D offering without experienced securities counsel.
The failure to file Form D is a violation of Rule 503, and it can affect the availability of the Regulation D exemption in some states. More importantly, it is a red flag for SEC enforcement staff. When the SEC's surveillance systems identify trading activity that suggests an unregistered offering — for example, a sudden increase in trading volume in a company's shares that is not explained by any public announcement — enforcement staff will check whether the company has filed a Form D. The absence of a Form D filing, combined with other indicators of an unregistered offering, can be the trigger for an investigation.
The practical lesson is straightforward: file Form D on time, every time. The filing is not burdensome, and the failure to file creates unnecessary risk.
Disclosure Obligations in Rule 506(b) Offerings with Non-Accredited Investors
Rule 506(b) permits sales to up to thirty-five non-accredited sophisticated investors, but it imposes specific disclosure obligations when non-accredited investors participate. The issuer must provide non-accredited investors with the same kind of information that would be required in a registered offering — audited financial statements, a description of the business, risk factors, and information about management and significant shareholders.
These disclosure obligations are frequently overlooked by issuers who focus on the accredited investor requirement and assume that the exemption is straightforward. When non-accredited investors participate in a Rule 506(b) offering without receiving the required disclosure, the issuer has violated the exemption, and the non-accredited investors have rescission rights — the right to demand their money back.
The practical implication is that issuers who want to include non-accredited investors in their Regulation D offerings must be prepared to provide the same level of disclosure that would be required in a registered offering. For most early-stage companies, this is a significant burden, and the better practice is to limit the offering to accredited investors and avoid the disclosure obligations entirely.
The Enforcement Consequences of Regulation D Failures
The enforcement consequences of Regulation D failures depend on the nature and severity of the violation. Minor procedural violations — a late Form D filing, for example — typically result in a cease-and-desist order and a civil penalty. More serious violations — sales to non-accredited investors, general solicitation in a 506(b) offering, or failure to provide required disclosure to non-accredited investors — can result in rescission rights for investors, SEC enforcement action, and personal liability for officers and directors.
The most serious enforcement risk arises when Regulation D failures are combined with other violations — misrepresentations in the offering materials, undisclosed conflicts of interest, or use of proceeds that deviated from what was disclosed. In these cases, the Regulation D failure is not just a procedural violation — it is evidence of an intent to deceive investors, and the enforcement consequences can include disgorgement of all offering proceeds, civil penalties, and in the most serious cases, criminal referral to the Department of Justice.
The lesson from the enforcement record is that Regulation D compliance is not a formality. It requires careful attention to the conditions of the exemption, adequate verification procedures, and disclosure that is genuinely complete and accurate. Companies that treat Regulation D as a shortcut to raising capital without the burden of SEC registration are misunderstanding both the exemption and the enforcement risk it creates.
Frederick M. Lehrer served as an enforcement attorney in the SEC's Division of Enforcement at the Southeast Regional Office from 1991 through 2000, and concurrently as a Special Assistant United States Attorney in the Southern District of Florida from 1997 through 1999, prosecuting securities-related financial crimes. He has practiced securities and corporate law in private practice for more than twenty-five years, advising issuers worldwide on SEC registration, disclosure obligations, Regulation D private placements, Regulation A offerings, and going public transactions. The firm is based in Florida and serves clients internationally.