Introduction to Securities Law for Quants - Part I Overview

By Dr. Jan Schroeder (PhD in Quantitative Finance)

On this page:

• How Federal Securities Law Is Made
• Concrete Example: Following a Statute from Congress to Form 10-K
  • Step 1: Congress passes the statute
  • Step 2: Two ways to cite the same provision
  • Step 3: The SEC writes the rules
  • Step 4: The rule points to a specific form
  • Step 5: SEC Releases explain the "why"
  • The Full Pipeline at a Glance
  • From Statute to SEC Rules and Forms
• Navigating the Citation System
  • How the U.S. Code Numbering Works
  • How the CFR Numbering Works
• Where to Find Primary Sources
  • For Statutes (the U.S. Code)
  • For Regulations (the CFR)
  • SEC Resources
  • Important Distinction

TLDR:

• U.S. securities law works in two layers.
• Congress passes broad laws called statutes (e.g., the Securities Exchange Act of 1934), which are recorded in the U.S. Code.
• Then the SEC writes detailed regulations to implement those statutes, which are published in the Code of Federal Regulations (CFR).
• Example: Annual reports on Form 10-K
  • Section 13(a) of the Securities Exchange Act 1934 is the statute (= law). Congress says issuers shall file periodic reports as the SEC prescribes.
  • 15 U.S.C. § 78m(a) — exactly the same as Section 13(a), just references the U.S. Code address.
  • Rule 13a-1 (17 CFR § 240.13a-1) — SEC regulation saying file an annual report on the appropriate form
  • Form 10-K (17 CFR § 249.310) — the specific EDGAR form describing what to include, when to publish it, and who
• Statutes are accessible on law.cornell.edu; regulations on ecfr.gov; form details on sec.gov.

Understanding U.S. securities regulation requires knowing how rules come into existence. The process has two layers: statutes passed by Congress, and regulations written by the SEC.

Congress passes a statute. When Congress enacts a new law — such as the Securities Exchange Act of 1934 — the text is recorded in the United States Code (U.S.C.). A statutory provision might be cited as 15 U.S.C. § 78m(a) or, equivalently, as Section 13(a) of the Exchange Act. These are two citation styles for the same provision. Statutes are intentionally broad: they establish principles, grant authority, and set boundaries, but they rarely specify operational details. You can find statutes on law.cornell.edu or uscode.house.gov.

Note: "15 U.S.C. § 78m" and "Section 13 of the Exchange Act" refer to the exact same legal text — they are just two different citation styles. The first is the U.S. Code citation (organized by title and section number), and the second is the Act citation (using the original section numbers from the 1934 statute). You will see both used interchangeably in SEC filings, court opinions, and legal commentary.

The SEC writes the regulations. The statute typically directs the SEC to design the detailed rules. These regulations are published in the Code of Federal Regulations (CFR), specifically in Title 17. Unlike statutes, regulations are precise and operational: they specify who has to do what, when, and how. Regulations cannot exceed or contradict the authority granted by the statute — they exist to fill in the operational details. You can find regulations on ecfr.gov.

Terminology: "statute" vs. "statutory provision"A statute is an entire law that Congress passed — for example, the Securities Exchange Act of 1934 is a statute. A statutory provision is a specific section, subsection, or clause within that statute — for example, Section 13(a) is a statutory provision of the Exchange Act. Think of it like a book vs. a chapter: the statute is the whole book, and a statutory provision is one particular chapter or paragraph within it. In practice, when someone says "the statute requires annual reporting," they are often referring loosely to a specific provision rather than the entire Act.

To see how all the layers fit together, let's trace the full path from a single statutory provision down to the form you'd pull from EDGAR.

In 1934, Congress passed the Securities Exchange Act (Public Law 73-291). Section 13(a) requires every company with registered securities to file periodic reports with the SEC. But the statutory language is deliberately broad — Congress granted authority without specifying the details.

Here is what that kind of broad statutory language looks like in practice. Section 13(b) reads:

The Commission [SEC] may prescribe, in regard to reports made pursuant to this chapter, the form or forms in which the required information shall be set forth, the items or details to be shown in the balance sheet and the earnings statement, and the methods to be followed in the preparation of reports.

Note how the statute grants authority but says nothing about which forms exist, what deadlines apply, or what content is required. That is all left to the SEC.

Section 13(a) is the provision's address within the Act. This is the citation practitioners use day to day — "Section 13(a) of the Exchange Act."

15 U.S.C. § 78m(a) is the same provision reorganized into the U.S. Code. Same words, different address. The Exchange Act starts at § 78a, and each section maps to the next letter — Section 13 lands at § 78m (the 13th letter). This is what you find on Cornell.

Rule 13a-1 is where the SEC steps in. Congress said "issuers shall file reports as the Commission prescribes." The SEC then wrote the actual rule saying "every registrant shall file an annual report on the appropriate form." That rule lives at 17 CFR § 240.13a-1, which you find on eCFR. There is a whole family of rules here — 13a-1 for annual reports, 13a-13 for quarterly reports, 13a-11 for current reports — each filling in a different detail.

Form 10-K is the specific form the rule points to. The rule says "file an annual report on the appropriate form," and Part 249 of the CFR prescribes that form. So Form 10-K has its own CFR citation (17 CFR § 249.310).

SEC Release numbers are the final layer. When the SEC adopts or amends any of these rules, it publishes a Release — numbered like "Release No. 34-49424" (the "34" prefix means it is under the Exchange Act). The release is the SEC's explanation of why it wrote the rule, what comments it received, and how the final version works. These get published in the Federal Register and archived on sec.gov. If you ever need to understand the SEC's intent behind a rule, the release is where you look.

For example, Release No. 33-8400; 34-49424 (March 2004) is the release that modernized Form 8-K by expanding the number of reportable events and accelerating the filing deadline.

Layer	Example (Section 13(a) path)	Example (Section 15(d) path)
Statute (Congress)	Section 13(a) of the Exchange Act	Section 15(d) of the Exchange Act
U.S. Code (same text, codified)	15 U.S.C. § 78m(a)	15 U.S.C. § 78o(d)
SEC Rule (implementing regulation)	Rule 13a-1 — 17 CFR § 240.13a-1	Rule 15d-1 — 17 CFR § 240.15d-1
Form (what gets filed)	Form 10-K — 17 CFR § 249.310	Form 10-K — 17 CFR § 249.310
SEC Release (example amendment)	Release No. 33-8238; 34-47986 (2003, SOX controls)	Release No. 33-8238; 34-47986 (2003, SOX controls)

The table below shows the most common reporting rules under Section 13(a) and Section 15(d), and the forms they produce.

Statute (U.S. Code)	Implementing Regulation (CFR)	What It Governs
Section 13(a) — 15 U.S.C. § 78m(a)	Rule 13a-1 — 17 CFR § 240.13a-1	Annual reports (Form 10-K) — requires every issuer with securities registered under Section 12 to file annual reports
Section 13(a) — 15 U.S.C. § 78m(a)	Rule 13a-13 — 17 CFR § 240.13a-13	Quarterly reports (Form 10-Q) — requires quarterly financial reports for every reporting issuer
Section 13(a) — 15 U.S.C. § 78m(a)	Rule 13a-11 — 17 CFR § 240.13a-11	Current reports (Form 8-K) — requires disclosure of material events (earnings, M&A, leadership changes, etc.)
Section 13(a) — 15 U.S.C. § 78m(a)	Rule 13a-15 — 17 CFR § 240.13a-15	Controls and procedures (SOX) — requires internal controls over financial reporting and disclosure
Section 15(d) — 15 U.S.C. § 78o(d)	Rule 15d-1 — 17 CFR § 240.15d-1	Annual reports for Section 15(d) filers — same obligation as Rule 13a-1 but for issuers who filed a registration statement
Section 15(d) — 15 U.S.C. § 78o(d)	Rule 15d-15 — 17 CFR § 240.15d-15	Controls and procedures for 15(d) filers — mirrors Rule 13a-15 for Section 15(d) registrants

Note: Section 13(a) and Section 15(d) create parallel reporting obligations. Section 13(a) applies to companies with securities registered under Section 12 (e.g., listed on an exchange). Section 15(d) applies to companies that filed a registration statement (e.g., for an IPO) but may not have exchange-listed securities. The SEC rules under each section mirror each other closely — Rule 13a-1 and Rule 15d-1 both require annual reports on Form 10-K, for instance.

Securities law uses two parallel citation systems, which can be confusing at first. They refer to the same provisions but reflect different organizational schemes. In practice, securities lawyers almost always use the Act citation ("Section 13(a) of the Exchange Act") in conversation and filings. The U.S.C. citation (15 U.S.C. § 78m(a)) appears in formal legal briefs, court opinions, and the CFR's authority citations.

"Section" always refers to the statute. When someone says "Section 16(a)," they mean the statutory provision in the Exchange Act itself. In the U.S. Code, this is found at 15 U.S.C. § 78p(a).

"Rule" always refers to an SEC regulation. When someone says "Rule 16a-1," they mean 17 CFR § 240.16a-1 — a regulation the SEC wrote to implement Section 16.

The Exchange Act starts at § 78a in the U.S. Code, with each subsequent section mapping to the next letter: § 78a is Section 1, § 78b is Section 2, § 78c is Section 3, and so on. This gives us:

• Section 12 → 15 U.S.C. § 78l (the 12th letter of the alphabet)
• Section 13 → 15 U.S.C. § 78m
• Section 14 → 15 U.S.C. § 78n
• Section 15 → 15 U.S.C. § 78o

The mapping can feel arbitrary, but it follows from where the Act was placed in the Code when it was first codified in the 1930s. Subsections carry over directly — Section 15(d) becomes § 78o(d).

The SEC's Exchange Act regulations live in 17 CFR Part 240. The regulation numbers mirror the section of the statute they implement:

• Section 12 rules → 240.12g-1, 240.12g-2, 240.12h-3, etc.
• Section 13 rules → 240.13a-1, 240.13a-11, etc.
• Section 15(d) rules → 240.15d-1, 240.15d-11, 240.15d-21, etc.

This means you can navigate in both directions. If you are reading a statute on Cornell and want to find the implementing regulations, go to the corresponding rule series on eCFR. Conversely, if you are reading a regulation on eCFR and it cites its authority as "Section 12(g)" or "15 U.S.C. 78l(g)," you can trace it back to the statutory provision on Cornell.

• uscode.house.gov — the Office of the Law Revision Counsel's official U.S. Code site (most authoritative)
• law.cornell.edu — Cornell's Legal Information Institute, a widely used and well-organized mirror
• congress.gov — the Library of Congress legislative portal; useful for tracking bills and legislative history, but for the U.S. Code itself it directs to uscode.house.gov

• ecfr.gov — the Electronic Code of Federal Regulations, maintained by the Government Publishing Office

• SEC Forms Index — lists all SEC forms including 10-K, 10-Q, 8-K
• SEC Statutes & Regulations — overview of the regulatory framework
• Exchange Act Sections (C&DIs) — SEC staff interpretive guidance organized by Exchange Act section
• Exchange Act Rules (C&DIs) — SEC staff interpretive guidance organized by rule number

These sources contain fundamentally different things. Cornell (law.cornell.edu) and uscode.house.gov host the United States Code — the statutes Congress passed. The eCFR (ecfr.gov) hosts the Code of Federal Regulations — the rules agencies write to implement those statutes. You will not find the text of Section 13(a) on eCFR, because eCFR only contains the SEC's regulations that flow from that section. Conversely, you will not find Rule 13a-1 on Cornell's U.S. Code pages — for that, use Cornell's CFR section or eCFR.