How Should a Corporation Approach Climate-Related Disclosures?

The SEC is the primary federal enforcer for public company disclosures and has brought enforcement actions alleging misleading climate statements in SEC filings and investor communications. State attorneys general, particularly in New York and California, enforce climate disclosure rules under state consumer protection and environmental statutes. The Financial Industry Regulatory Authority (FINRA) oversees broker-dealer disclosures on climate risk in investment products. Corporations should designate an internal compliance officer to monitor updates from each applicable regulator and maintain a centralized disclosure policy that documents the review process, sign-off authority, and periodic audits of climate-related statements.

Documentation supporting climate disclosures should include detailed emissions inventories with methodology notes, third-party verification reports, board resolutions authorizing climate-related policies, and written risk assessments showing how climate scenarios were modeled and evaluated. Corporations should create a disclosure control and procedures memo documenting the sign-off chain, the dates of internal reviews, and the rationale for materiality conclusions. Maintain contemporaneous records of any climate-related incidents, regulatory inquiries, or stakeholder concerns that influenced disclosure decisions. In jurisdictions like New York, where state regulators increasingly scrutinize climate claims in insurance and financial services contexts, corporations should document compliance with state-specific guidance and any corrective actions taken if prior disclosures required updating. Preserve email chains, meeting notes, and external consultant reports in a centralized repository accessible to the disclosure committee. This record creates both a defense against allegations of recklessness and evidence of good-faith compliance efforts if a regulator later challenges the disclosure.

In New York state regulatory proceedings, corporations can challenge an enforcement action if the state agency failed to provide clear notice of the alleged violation, did not follow its own rulemaking procedures, or lacks statutory authority to impose the specific disclosure requirement. New York courts have held that vague or retroactively applied climate disclosure standards may violate due process principles, particularly if a corporation relied on prior regulatory guidance that differed from the new enforcement posture. Corporations should request the complete investigative file to identify potential bias or inconsistency in the enforcement action. Timing defenses are also critical: if a corporation received a regulatory inquiry but the regulator missed applicable statute-of-limitations windows or failed to comply with procedural notice rules, the corporation can move to dismiss on jurisdictional or procedural grounds. Early coordination with legal counsel to file a timely response and preserve all procedural objections is essential.

A corporation operating in multiple jurisdictions should map the climate disclosure requirements of each applicable regulator, identify overlapping and conflicting standards, and establish a single disclosure framework that satisfies the most stringent requirement across all jurisdictions. For example, if a corporation files with the SEC, operates in California, and has significant insurance operations in New York, the corporation must comply with SEC materiality standards, California's climate corporate accountability rules, and New York Department of Financial Services climate risk guidance simultaneously. Create a master disclosure template that includes all material climate risks and emissions data required by any applicable regulator, then tailor public filings to extract the subset of information required by each specific jurisdiction. Use a cross-functional team to review drafts and confirm that no material information is omitted from any filing. This integrated approach reduces the risk that a corporation will inadvertently make inconsistent statements that could trigger enforcement action in multiple jurisdictions simultaneously.

Corporations should also recognize that climate-related disclosures intersect with other compliance regimes. For instance, corporations subject to alcohol-related assault litigation or workplace safety claims may need to address how climate impacts affect workplace safety protocols in their disclosures. Similarly, corporations developing climate-related technologies or relying on artificial intelligence and related fields for emissions modeling must disclose the limitations and assumptions underlying AI-driven climate analysis to avoid overstating the reliability of climate projections.

Moving forward, a corporation should prioritize three concrete steps:

First, conduct an internal audit of all climate-related statements made in the past three years to identify any gaps or inconsistencies that could trigger regulator questions;

Second, establish a formal disclosure control and procedures policy that documents the sign-off chain, materiality analysis, and supporting data for each climate disclosure; and

Third, schedule quarterly board-level climate compliance reviews to ensure that material changes in climate risk, regulatory guidance, or corporate strategy are captured in timely updates to public filings and regulatory submissions.

This systematic approach demonstrates good-faith compliance efforts and substantially reduces both enforcement risk and shareholder litigation exposure.