In 2023, 12% of S&P 500 companies listed AI as a material risk in their annual filings. Today that number is 72%. That jump happened fast, under pressure to look current. Now someone is checking the answers.

The SEC's Division of Examinations listed AI as a priority in its 2026 exam guidance. It said it will "review for accuracy registrant representations regarding their AI capabilities." That is a different commitment than checking whether disclosure exists. Examiners are now asking whether what you wrote is actually true.

What changed about how the SEC looks at AI disclosures in 2026?

The SEC is not writing new AI-specific rules. It is applying the same principles-based standards it has always used — and pointing them directly at AI claims.

No new regulation is needed for this. SEC Chairman Paul Atkins has stated that existing rules already allow companies to report on material AI impacts. The old rules are sufficient. What changed is how seriously the agency is checking the answers.

Law firm Goodwin Law's December 2025 analysis of the 2026 priorities concluded that AI oversight will be "a component of virtually all examinations going forward." That language covers investment advisers, broker-dealers and public registrants. It is not limited to tech companies or large firms.

The shift is from disclosure to accountability. You had to say something about AI before. Now you have to say something accurate.

What is AI washing — and why is the SEC treating it as a problem?

AI washing means overstating your AI tools' capabilities, autonomy or proprietary nature in public filings, Form ADV brochures or investor marketing materials.

The name follows the same logic as greenwashing. You do not have to lie outright. Overstating is enough. SEC Chair Gary Gensler stated the core expectation clearly: companies must "say what they're doing and do what they're saying." That applies whether the overstatement was intentional or the result of marketing language no one fact-checked against the actual system.

Three real enforcement cases your clients should know about

The SEC has already charged and settled with multiple companies. These are not hypothetical risks.

Company What They Claimed What Was Wrong Penalty
Delphia (USA) Inc. AI analyzed client social media and banking data for investment decisions Data was collected but never used in an AI system $225,000
Global Predictions Inc. "First regulated AI financial advisor" with AI-driven forecasts Claim was false; AI capabilities were significantly overstated $175,000
Presto Automation Inc. Proprietary AI that eliminated the need for human intervention Third-party system; most orders still required human review Settled (2025)
Nate, Inc. (founder) Full AI integration disclosed to investors Only partial integration; founder misrepresented the extent Charges filed April 2025

Each case follows the same pattern. The AI existed. The company described it as doing more than it did. Examiners found the gap between description and reality. That gap was the violation.

Does vague language protect your clients?

Vague language does not protect a company. Generic phrases like "we leverage AI for efficiency" are exactly what examiners are trained to identify and flag.

Language like "we leverage AI to improve operational efficiency" does not protect a company. It can actually create a problem. The SEC's position, summarized in Paul Hastings' January 2026 client alert, is that companies should avoid language suggesting AI is "more advanced, capable, autonomous or proprietary than it is."

Vague language often overclaims by implication. If a filing says AI is driving outcomes and a human is actually doing the work, that statement may still be misleading — even if the word "AI" is never defined or quantified. The safer path is specific language that names the tool, describes what it does and says what it does not do.

That takes more work during the filing review. It also holds up when examiners ask.