Hidden in Plain Sight: How Undisclosed Related-Party Transactions Are Triggering SEC Enforcement and Lender Walkouts

There is a particular kind of financial risk that does not announce itself through declining revenue or rising costs. It accumulates quietly, embedded in the structure of how a business operates—who it buys from, who it leases space from, who sits on both sides of a contract. For a significant number of US companies, this risk has a specific name: inadequately disclosed related-party transactions.

The consequences, when they surface, are not minor. They range from SEC enforcement actions and shareholder litigation to sudden lender withdrawals and restatements that can permanently impair a company's credibility in capital markets. What makes this particularly troubling is that many of the businesses facing these consequences genuinely believed they were in compliance.

What the Regulations Actually Require—and Where Companies Fall Short

Under SEC rules, specifically Regulation S-K Item 404 and ASC 850 under US GAAP, public companies are required to disclose material transactions involving related parties—executives, directors, significant shareholders, and their immediate family members. Private companies following GAAP for lender or investor purposes face similar obligations under ASC 850.

The letter of the rule is well known. The practical application is where things unravel.

Common failure modes include transactions that are individually below materiality thresholds but cumulatively significant, arrangements entered into years prior that were never formally documented, and dealings with entities where the ownership connection is indirect or obscured through holding structures. In family-owned businesses, the problem is often compounded by a cultural assumption that internal arrangements do not require the same rigor as arm's-length transactions. That assumption is wrong, and regulators have made their position on it increasingly clear.

Enforcement Cases That Redefined the Standard

The SEC's enforcement record over the past several years provides a useful map of where these failures tend to concentrate.

In multiple high-profile cases, the Commission has pursued enforcement not merely for the transactions themselves, but for the inadequacy of the disclosure—meaning that the transaction occurred, was partially known to auditors, and appeared in some form in the notes, yet still failed to meet the standard of full and fair disclosure. This is a critical distinction. The presence of a disclosure does not equal an adequate disclosure.

In one case involving a mid-sized public company, the SEC found that the company had disclosed a lease arrangement with an executive's affiliated entity but had omitted the economic terms, the duration, and the fact that the arrangement had been renegotiated at above-market rates. The enforcement action resulted in civil penalties, mandatory restatements, and personal liability for the CFO.

In another matter involving a company with international operations, transactions between the US parent and a foreign subsidiary controlled by a board member's family were disclosed in aggregate but not individually itemized. The SEC's position was that aggregation obscured the nature of the arrangements and prevented investors from assessing conflicts of interest. The company settled, but the reputational damage outlasted the fine.

The Lender Dimension: Why Banks Are Increasingly Treating Disclosure Gaps as Credit Events

While SEC enforcement captures headlines, the more immediate threat for many US businesses—particularly private ones—comes from lenders.

Institutional lenders have materially tightened their covenant frameworks around related-party disclosures over the past five years. What was once a standard representation in a credit agreement—"no material undisclosed related-party transactions"—is now often accompanied by affirmative disclosure schedules, annual certification requirements, and audit committee sign-off obligations.

When a lender discovers, through a routine audit or a third-party review, that a borrower has been transacting with affiliated entities without proper disclosure, the response is rarely a quiet conversation. More commonly, the lender issues a notice of technical default, accelerates the review process, and in some cases exercises its right to demand repayment or renegotiate terms at a significant premium. For companies operating with tight liquidity, this sequence of events can be existential.

The pattern is particularly acute in the middle market, where companies often have sophisticated lender relationships but less robust internal governance infrastructure. The gap between what the CFO believes has been disclosed and what the credit agreement actually requires is frequently larger than either party realizes until it matters.

International Operations Add a Layer of Complexity That Most Compliance Frameworks Do Not Address

For US companies with operations in international markets—including those with Turkish subsidiaries, joint ventures, or supplier relationships—the related-party disclosure challenge takes on additional dimensions.

Cross-border structures often involve local partners, minority shareholders, or family members of key executives who hold interests in entities that transact with the US parent. These arrangements may be entirely legitimate from a business standpoint. They may even be disclosed to local auditors in the relevant jurisdiction. But if they are not surfaced in the US parent's financial statements and disclosures in a manner consistent with SEC requirements and GAAP, they represent a material vulnerability.

The FCPA adds yet another layer. Related-party transactions in international markets can, under certain circumstances, be scrutinized as potential vehicles for improper payments—particularly where pricing deviates from market rates or where the counterparty's beneficial ownership is not fully transparent. The intersection of related-party disclosure failures and FCPA risk is an area where enforcement exposure compounds rapidly.

A Practical Framework for Auditing Your Exposure

The good news is that related-party disclosure risk, unlike many forms of regulatory exposure, is highly amenable to proactive remediation. The following framework represents a starting point for companies that want to assess and address their position before a regulator or lender does it for them.

Step one: Map the full universe of related parties. This means going beyond the names on the board and the cap table. It means identifying immediate family members of executives, entities in which those individuals hold interests, and any entities that share common ownership with the company—including through holding structures or international arrangements.

Step two: Inventory all transactions with those parties over a rolling three-year period. Do not rely on what was previously disclosed. Conduct a fresh review of contracts, invoices, lease agreements, intercompany loans, and service arrangements. Look for patterns that suggest recurring transactions that may have been treated as routine but were never formally reviewed for disclosure purposes.

Step three: Apply a rigorous materiality analysis—not just quantitative, but qualitative. A transaction that is numerically small may still be material if it involves a significant conflict of interest, if it was entered into on non-arm's-length terms, or if a reasonable investor or lender would consider it relevant to their assessment of management's judgment.

Step four: Review existing disclosures against the actual transaction terms. Many disclosure failures occur not because a transaction was hidden, but because the description was vague, incomplete, or failed to capture the economic substance of the arrangement.

Step five: Establish a prospective process. Related-party transactions should be identified, reviewed, and approved by an independent committee or board subcommittee before they are executed, not after. The documentation of that review process is itself a component of adequate disclosure.

The Cost of Waiting

There is a version of this story that ends well: a company conducts a thorough internal review, identifies gaps in its related-party disclosure practices, remediates them proactively, and strengthens its governance framework before any external scrutiny arrives. That outcome is available to most companies that pursue it deliberately.

The version that ends badly is also predictable: a company assumes its existing disclosures are sufficient, defers a comprehensive review, and then faces the compounded cost of an SEC inquiry, a lender dispute, and a restatement—all simultaneously, all at the worst possible moment.

At Güvende Kalk KTC, we work with US businesses navigating precisely this kind of structural risk. The related-party disclosure gap is not a theoretical concern. For companies with complex ownership structures, international operations, or family governance arrangements, it is one of the most concrete and addressable financial strategy priorities available. The question is not whether to address it—it is whether to do so on your terms or someone else's.