Regulation FD is a disclosure rule that stops public companies from selectively sharing material non-public information with favoured parties. If information is given to analysts, investors, or other market participants, the company must make broad, timely public disclosure so the market receives the same material facts at the same time.
What Regulation FD means in practice
Regulation FD is an anti-selective-disclosure rule. Its purpose is to stop a public company from giving material non-public information to a preferred audience, then leaving the broader market to learn the same facts later.
That changes disclosure from a relationship-based exercise into a market-wide one. If a company decides to share price-sensitive facts with analysts, investors, or other market participants, it must consider whether broad public disclosure is required at the same time or promptly after.
Why selective disclosure is a market integrity problem
The core concern is unequal access to material facts. When some recipients can trade or reprice risk before everyone else sees the information, the market can move on an information gap rather than a common disclosure baseline.
That creates fairness, trust, and pricing problems at once. It can also increase legal and reputational exposure if a company’s communications process appears to privilege one group over another, especially when the information is material enough to influence investment decisions.
How the rule affects company communications
Regulation FD is most relevant in ordinary disclosure channels that can become uneven in practice, such as earnings calls, investor meetings, one-on-one conversations, and scripted remarks that drift into new facts. The issue is not only what is said, but who hears it and when.
Companies therefore need discipline around prepared statements, escalation paths, and public dissemination. A controlled disclosure process helps ensure that material information is either already public or is made public broadly enough to avoid selective advantage.
What organisations should use it for
This rule is best understood as a communications governance control for public-company disclosure. It helps legal, finance, investor-relations, and executive teams coordinate when a statement crosses from general commentary into material non-public information.
Practically, it also encourages consistency across channels. A company should treat analyst briefings, investor decks, and executive interviews as part of one disclosure surface, not as separate conversations with different visibility rules.
Risk and Threat Considerations
Selective disclosure can create asymmetric market access, insider-trading concerns, and immediate reputational damage if a company appears to give favoured parties a trading advantage. The risk is highest when material facts are shared casually, outside a controlled disclosure workflow, or without rapid public release.
Failure mechanism: Material non-public information is disclosed to a limited audience before it is broadly available, allowing information asymmetry to shape trading and market perception.
Impact: The company may face regulatory scrutiny, litigation risk, broken investor trust, and avoidable volatility once the same facts reach the wider market.
Standards & Framework Alignment
This section maps relevant standards and security frameworks to the operational risks and controls described in this guidance.
NIST CSF 2.0 sets the technical controls, while ISO/IEC 27001:2022 and SOC 2 (AICPA) define the regulatory obligations.
| Framework | Control / Reference | Relevance |
|---|---|---|
| NIST CSF 2.0 | GV.OC-02 — Roles, Responsibilities, and Authorities | Regulation FD depends on clear ownership for controlled public disclosure. |
| Recommendation — Assign disclosure ownership and approval authority before any material market communication. | ||
| ISO/IEC 27001:2022 | A.5.14 — Information transfer | The rule is fundamentally about controlling how material information is transferred to external parties. |
| A.5.1 — Policies for information security | Selective-disclosure controls need a formal policy basis for approved communications behavior. | |
| Recommendation — Define transfer rules for material information so selective disclosure cannot occur. Publish a disclosure policy that governs when material information may be shared externally. | ||
| SOC 2 (AICPA) | CC1.3 — Commitment to integrity and ethical values | Fair, consistent disclosure reflects integrity in external communications and governance. |
| Recommendation — Set expectations that material company information is communicated consistently and fairly. | ||
Practitioner Guidance
Governance implication: Public companies should treat disclosure discipline as a cross-functional control, not just a legal review step. Investor relations, finance, legal, and executives need a shared standard for when a conversation is non-public, material, or broad enough to require public release.
What to watch for: The highest risk moments are unscripted remarks, side conversations, selective follow-ups after a public event, and situations where one audience receives detail that others will not see until later.
Practitioner takeaway: If a statement would matter to investors, assume it needs the same level of public visibility as any other material company announcement.
Related resources from NHI Mgmt Group
- What should organisations do before auditing AI regulation readiness?
- Who is accountable when a payment activity is non-compliant under activity-based regulation?
- How should financial institutions prepare for BNPL regulation changes?
- How should crypto firms design onboarding when regulation and fraud risk both increase?
Deepen Your Knowledge
Free weekly newsletter
Subscribe to the NHI & AI Identity Journal
The latest on NHI and Agentic AI security – articles, research, breaches, news and events every week.
Bonus 33% off our NHI Course when you subscribe.
Reviewed and updated by the NHIMG editorial team on October 29, 2026.
NHI Mgmt Group — the #1 independent authority on Non-Human Identity, IAM, and Agentic AI security. nhimg.org