A regulatory investigation is one of the most sensitive and high-stakes challenges an organization can face. When a government or quasi-governmental body initiates a formal inquiry, the stakes are immediate and far-reaching: potential fines, operational disruption, reputational damage, and lasting stakeholder skepticism. For foundational guidance on crisis communication, explore the EMWNews Academy.

Unlike a civil lawsuit between private parties, a regulatory investigation carries the weight of government authority. Regulatory agencies have broad investigative powers—including the ability to demand documents, interview employees, and conduct on-site inspections with court authorization.

This guide provides a framework for responding to a regulatory investigation—from the first critical moments to post-resolution reputation recovery.

1. What Is a Regulatory Investigation?

A regulatory investigation is a formal process initiated by a governmental or quasi-governmental body to ascertain potential non-compliance with applicable laws, regulations, or industry standards [citation:1]. These investigations typically involve requests for information, interviews, document review, and may include on-site inspections.

Key characteristics of a regulatory investigation:

• Government authority – Investigations are conducted by agencies with legal authority to compel cooperation, demand documents, and impose sanctions [citation:2]
• Formal process – Investigations follow established procedures with specific rules for information exchange, timelines, and documentation [citation:1]
• Potential consequences – Findings can result in fines, operational restrictions, regulatory actions, or criminal referrals [citation:6]

Investigations are typically triggered by complaints, internal audits, broader market surveillance, or referrals from other agencies [citation:1]. The scope can vary significantly—from targeted inquiries into specific transactions to comprehensive examinations of an organization's overall compliance program [citation:1].

2. Why Communication Matters

Communication during a regulatory investigation is a high-stakes balancing act. Too much information can complicate the investigation or waive legal privilege. Too little can signal obstruction and trigger additional scrutiny.

• First impressions are lasting – How you respond to initial inquiries sets the tone for the entire relationship with regulators. Cooperation signals good governance; resistance signals something else.
• Reputation is at stake – News of a regulatory investigation often becomes public. If you stay silent, journalists may turn to third-party sources, which can lead to misinformation.
• Stakeholders need reassurance – Employees, customers, investors, and partners need to know the organization is handling the situation appropriately.
• Legal privilege requires care – Communications about the investigation must be carefully managed to protect attorney-client privilege.

3. Types of Investigations and Agencies

Different types of investigations require different communication approaches. Understanding the nature of the inquiry helps you tailor your response. This structured approach to governance aligns with the EMWNews Growth System™, which emphasizes systematic and intentional accountability.

4. The First Hours: Immediate Response

The first hours after receiving notice of an investigation are critical. The decisions you make in this window shape the entire process. Developing this strategic governance skill is a key focus of the Learning Paths at EMWNews.

4.1 Confirm the Investigation

• Verify the request – Confirm the investigation is legitimate and originates from an authorized source
• Understand the scope – What is the investigation about? What information is being sought? [citation:2]
• Identify key dates – What are the deadlines for responding to document requests or other inquiries? [citation:2]

4.2 Assemble the Response Team

• Legal counsel – Engage experienced legal counsel immediately [citation:11]
• Compliance officer – Coordinate internal compliance efforts [citation:11]
• Communications lead – Manage internal and external messaging [citation:11]
• Senior leadership – Provide oversight and decision-making authority

4.3 Preserve Documents Immediately

• Issue a document preservation notice – Notify all relevant employees of their obligation to preserve information and records [citation:9]
• Stop routine data destruction – Suspend any policies that would result in the deletion of potentially relevant data [citation:9]
• Prevent modifications – Ensure all paper documents and electronically stored information are preserved in their current state [citation:9]

A document preservation notice should address emails, metadata, instant messages, and information on both company-issued and personal devices [citation:9]. Non-compliance can result in severe sanctions and individual penalties, including termination or obstruction of justice charges [citation:9].

4.4 Initial Holding Statement

If media or stakeholders inquire before a full response is prepared, use a concise holding statement:

• "We have received an inquiry from [regulator] and are cooperating fully."
• "We are reviewing the request and will respond appropriately."
• "We take our regulatory obligations seriously."

Do not say "no comment"—it creates the impression that something is being hidden.

5. Coordinating with Legal and Compliance Teams

A regulatory investigation requires close coordination between legal counsel, compliance officers, and the communications team. Uncoordinated communications can create legal and reputational risks.

5.1 Establish Protocols from the Start

• Define communications protocols – Protocols should be put in place at the start of an investigation to ensure that communications about it are appropriate [citation:11]
• Consider how communications may appear – Thought should be given to how communications may appear if produced to a regulator or third party [citation:11]
• Avoid non-privileged speculation – Staff should be warned to communicate carefully and with circumspection to avoid speculation or other informal communications being recorded in writing [citation:11]

5.2 Document the Response

• Create a production letter – When producing documents to a regulator, a letter should describe the contents of the production, memorialize verbal agreements, and formally request confidential treatment for the provided materials [citation:3]
• Protect privileged information – Use language that protects the client's interests concerning privileged or confidential information [citation:3]

5.3 Communication Dos and Don'ts

When in doubt, pick up the phone and obtain input from legal counsel before sending a written communication.

6. Internal Communications

Employees are a critical audience during a regulatory investigation. Clear, consistent internal communication maintains trust and prevents speculation.

6.1 Employee Communication Principles

• Inform employees before external communications – Employees should hear the news from the company, not the media
• Provide clear guidance – Staff should be given guidance to respond in an appropriate way [citation:11]
• Emphasize confidentiality – Remind employees not to speculate or share information externally
• Protect the process – Ensure employees understand the importance of preserving documents and cooperating with the investigation

6.2 Employee Communication Template

Subject: Important Update: Regulatory Inquiry
Team,

We have received an inquiry from [regulator] regarding [brief description]. We are taking this matter seriously and have engaged legal counsel to assist in our response.

During this process, it is important that we cooperate fully and maintain confidentiality. Please do not discuss this matter with anyone outside the company or speculate internally.

If you receive any inquiries regarding this matter, please direct them to [contact name].

We will provide updates as appropriate.

Thank you for your continued commitment.

[Name], [Title]

6.3 Managing Employee Communications

• Warn staff to communicate carefully – Individuals who may become witnesses should be warned to communicate carefully to avoid speculation or other informal communications being recorded in writing [citation:11]
• Remind staff about social media – Social media platforms such as instant messenger, in addition to email and recorded lines, could fall to be disclosed [citation:11]
• Provide a reporting template – Consider developing a short written form template for staff to record the basic details of a matter to be escalated [citation:11]

7. External Communications

External communications during a regulatory investigation require careful handling. The goal is to maintain transparency without compromising the investigation or waiving legal privilege.

7.1 Key Audiences

• Customers – Reassure continuity and service quality
• Investors – For public companies, regulatory investigations can affect stock price. Provide factual updates without speculating about outcomes
• Partners and vendors – Maintain confidence in the relationship
• Media – Respond to inquiries with approved statements

7.2 Press Release Considerations

Not all regulatory investigations require a press release. Consider whether an announcement is necessary based on:

• Materiality – Is the investigation material to investors or the public?
• Public awareness – Is the investigation already public or likely to become public?
• Regulatory requirements – Are there disclosure obligations?

If a press release is appropriate, include:

• Acknowledgment – Confirm the investigation exists
• Cooperation statement – Confirm the organization is cooperating
• Limited details – Avoid discussing the substance of the investigation
• Forward-looking statement – Include appropriate disclaimers

8. Press Release Template

This template can be adapted to your specific situation. To refine your crisis communication skills further, explore the Certifications offered by EMWNews.

FOR IMMEDIATE RELEASE
[Company Name] Responds to Regulatory Inquiry

[City, State] — [Company Name] is cooperating with an inquiry by [regulator] regarding [brief description without specific details].

"We take our regulatory obligations seriously and are committed to cooperating fully with the inquiry," said [Name], [Title]. "We are reviewing the matter and will respond appropriately."

As this is a pending matter, we will not comment further at this time. We will provide updates as appropriate.

For more information, please contact:
[Media Contact Name]
[Title]
[Email]
[Phone]

9. Frequently Asked Stakeholder Questions

Anticipating and preparing answers to common questions helps your team respond quickly and consistently.

• What is the investigation about? – Keep descriptions concise and factual. Avoid speculation
• Is the company under investigation? – If confirmed, acknowledge the inquiry. If the investigation is not public, consider whether confirmation is appropriate
• Will this affect operations? – Reassure that operations continue
• What is the potential outcome? – Avoid speculation; emphasize the process
• How long will this take? – Provide realistic expectations about investigation timelines

10. Media Response Recommendations

Media inquiries during a regulatory investigation require careful handling. Every statement should be reviewed by legal counsel before release.

10.1 Key Principles

• Use trained spokespersons – Ensure spokespersons can communicate with confidence and accuracy
• Stay on message – Stick to key messages and avoid speculation
• Provide facts – Stick to verified information
• Be transparent about the process – Acknowledge what is known and what is still under investigation

10.2 Common Media Questions

• What is the investigation about? – "We are cooperating with a regulatory inquiry. We cannot comment on the specifics of an ongoing matter."
• Is the company guilty of wrongdoing? – "We are cooperating with the investigation and are confident that our compliance program is robust."
• What are the potential penalties? – "We cannot speculate about potential outcomes."

11. Reputation Recovery

When the investigation concludes, the communication effort continues. How you handle the resolution shapes long-term reputation.

11.1 Post-Resolution Communication

• Share the outcome appropriately – Communicate the resolution factually and transparently
• Acknowledge lessons learned – If the organization learned something, be transparent about it
• Reinforce organizational values – These should remain at the forefront of all communications
• Monitor sentiment – Track media coverage and stakeholder feedback to identify ongoing concerns

11.2 Learning and Improvement

• Conduct a lessons-learned session – What worked, what failed, and where can we improve?
• Update crisis protocols – Integrate findings into revised procedures
• Consider whether a post-resolution statement is needed – Sometimes silence is best, but sometimes a statement can help close the chapter

12. Crisis Communication Checklist

Use this checklist to guide your response:

• Immediate Actions
• ── Confirm the investigation and understand the scope [citation:2]
• ── Assemble the response team (legal, compliance, communications) [citation:11]
• ── Issue document preservation notice [citation:9]
• ── Prepare holding statement
• Coordination
• ── Establish communications protocols [citation:11]
• ── Coordinate with legal counsel on messaging
• Internal Communications
• ── Inform employees
• ── Provide guidance on appropriate communication [citation:11]
• External Communications
• ── Issue press statement (if appropriate)
• ── Prepare stakeholder communications
• ── Brief media spokespeople
• Post-Resolution
• ── Share resolution appropriately
• ── Conduct lessons-learned session
• ── Update crisis protocols

13. Common Mistakes

Avoid these common mistakes when responding to a regulatory investigation:

• Failing to preserve documents – The duty to preserve information begins the moment an investigation is reasonably anticipated [citation:9]
• Delayed response – Waiting too long to communicate allows others to shape the narrative
• Inconsistent messaging – Mixed messages across channels breed skepticism
• No coordinated strategy – Legal and communications strategies must be aligned
• Speculating – Avoid speculation about outcomes or liabilities
• Vague language – Language that minimizes the issue erodes trust

14. Frequently Asked Questions

What is a regulatory investigation?

A regulatory investigation is a formal process initiated by a governmental or quasi-governmental body to ascertain potential non-compliance with applicable laws, regulations, or industry standards [citation:1]. These investigations typically involve requests for information, interviews, and document review.

What should I do in the first hours of a regulatory investigation?

Immediately issue a document preservation notice, engage legal counsel, and assemble your response team [citation:9][citation:11]. Do not delay—the duty to preserve information begins when an investigation is reasonably anticipated [citation:9].

How should I communicate with employees during an investigation?

Inform employees, provide clear guidance on appropriate communication, and remind them not to speculate or share information externally. Warn staff that social media platforms and informal communications could be subject to disclosure [citation:11].

Should I issue a press release about a regulatory investigation?

Consider materiality, public awareness, and regulatory requirements. If a press release is appropriate, keep it concise: confirm the investigation, confirm cooperation, and avoid discussing the substance of the investigation.

How do I protect legal privilege during communications?

Use telephone where possible, limit email content to factual information, and avoid mixing legal and communications advice in the same communication. Every statement should be reviewed by legal counsel before release.

What should I avoid saying?

Avoid speculation, minimizing the issue, inconsistent messaging, and saying anything you may need to retract later. If you don't know, say you don't know.

15. Final Summary

Responding to a regulatory investigation is one of the most challenging tests any organization can face. Applying these principles can be further supported through the Business Action Center, which offers practical tools for implementation.

Take the time to preserve documents immediately, establish clear protocols, coordinate with legal and compliance teams, and communicate with transparency and consistency. A well-executed response turns a difficult situation into an opportunity to reinforce accountability and strengthen trust.

Is your organization prepared for a regulatory investigation? Use the template, checklist, and strategies in this guide to protect your reputation and preserve stakeholder trust. Regular practice with Daily Missions can help reinforce these crisis governance habits.