As public reporting companies gear up for their 2025 SEC annual reports and proxy statements, most of the SEC’s recent disclosure rules are already in place. But a few new requirements and first-time milestones will apply to filings made in 2025.
This year’s filings bring notable updates: new data tagging for cybersecurity disclosures, the first complete year of cybersecurity reporting, and required summaries of executive compensation clawback policies. Companies will also see fully phased-in insider trading plan disclosures and shorter deadlines for beneficial ownership reports.
1. New Data Tagging Requirement for Cybersecurity Disclosures
Starting with 2025 annual reports, companies will need to submit their cybersecurity disclosures in a machine-readable format (known as Inline XBRL) so the SEC and investors can more easily analyze the information.
If your company’s 2025 Form 10-K includes discussion of cybersecurity risk management and governance, as most public companies now must, those sections will have to be electronically tagged under the SEC’s technical rules.
What to do now:
- Confirm your disclosure software or filing vendor is set up to handle this new tagging format.
- Coordinate early with your finance and IT reporting teams so you don’t hit technical snags at filing time.
2. First Full Year of Cybersecurity Reporting
For many calendar-year companies, the 2025 Form 10-K will be the first one to include a full year’s reporting under the SEC’s new cybersecurity rule. Companies must describe how they manage cybersecurity risks, who oversees those risks, and how they respond to significant incidents.
Action point: Review your existing disclosures to make sure they still accurately describe your current practices and board oversight structure.
3. Executive Compensation “Clawback” Policies Now in Effect
Public companies were required to adopt clawback policies by the end of 2023. Beginning with 2025 proxy statements, companies must include a summary of that policy and disclose any recoveries made under it.
Reminder: The clawback rule requires companies to recover incentive pay if there is a financial restatement and the restatement shows that the subject incentive pay performance targets weren’t actually met — for example, if bonuses or stock awards were based on financial results that later turn out to be overstated. The rule doesn’t depend on whether the executive was at fault; it’s designed simply to align pay with corrected results.
4. Trading Plans and Option-Grant Timing Disclosures
The SEC’s new insider-trading rules are now fully phased in. 2025 will be the first proxy season where investors will see a complete year of disclosure about:
- When executives or directors adopted, modified, or ended their pre-scheduled stock trading plans, and
- How the company times stock option grants in relation to earnings releases or other major announcements.
Tip: Double-check that board and HR documentation aligns with what will appear in the proxy.
5. Ongoing Pay-Versus-Performance Disclosures
Companies are now entering their third year of the SEC’s pay-versus-performance table, which compares executive compensation to company results. The format hasn’t changed, but the SEC has been paying close attention to consistency and clarity in how companies calculate “compensation actually paid.”
Good practice: Review last year’s table and ensure the same methodology is used, unless there’s a clear reason to update it.
6. Shorter Deadlines for Beneficial Ownership Reports
New rules shorten the filing deadlines for Schedule 13D and 13G reports (used by major shareholders and institutional investors to report ownership stakes). Public companies should be aware of these changes, which take full effect in 2025, since ownership updates will appear more quickly in the public record.
[View source.]
