Civil vs. Criminal Enforcement by Regulatory Agencies

Regulatory agencies in the United States pursue violations through two fundamentally different legal tracks — civil enforcement and criminal enforcement — and the choice between them carries consequences that range from monetary penalties to incarceration. This page defines each track, explains how each operates procedurally, identifies the scenarios that trigger each, and describes the factors that govern which path an agency or the Department of Justice selects. Understanding this distinction matters for any regulated entity, legal practitioner, or policy observer engaged with the enforcement actions that regulatory agencies can take.

Definition and scope

Civil enforcement is the administrative and judicial mechanism through which a regulatory agency compels compliance, imposes financial penalties, or obtains injunctive relief — without seeking imprisonment. Criminal enforcement, by contrast, treats a regulatory violation as a crime, routes the case through federal or state criminal courts, and can result in fines, probation, or a term of incarceration for individuals.

The boundary between the two tracks is not always a strict divide. The same underlying conduct — discharging pollutants into navigable waters, filing false financial statements, distributing adulterated food — can simultaneously support a civil enforcement action brought by the agency and a criminal prosecution brought by the Department of Justice or a U.S. Attorney's Office. The two proceedings are legally independent; the Double Jeopardy Clause of the Fifth Amendment applies only to successive criminal prosecutions, not to a civil action following a criminal one (or vice versa), as the Supreme Court addressed in United States v. Halper, 490 U.S. 435 (1989), and subsequent cases.

Across the federal government, the scope of civil penalty authority is vast. The Environmental Protection Agency (EPA), the Securities and Exchange Commission (SEC), the Occupational Safety and Health Administration (OSHA), the Consumer Financial Protection Bureau (CFPB), and dozens of other bodies each hold statutory authority to impose per-violation civil fines, often subject to annual inflation adjustments under the Federal Civil Penalties Inflation Adjustment Act Improvements Act of 2015 (Pub. L. 114-74, § 701).

How it works

Civil enforcement typically begins inside the agency. Investigators gather evidence through inspections, document subpoenas, or tip-based referrals. The agency issues a notice of violation or a complaint. The matter may be resolved through a negotiated consent decree or settlement agreement, or it may proceed to an evidentiary hearing before an administrative law judge. The standard of proof in civil proceedings is a preponderance of the evidence — meaning it is more likely than not that a violation occurred. Penalties in civil cases are remedial in character: the goal is compliance, deterrence, and disgorgement of unlawful gains, not punishment in the criminal sense.

Criminal enforcement follows a different procedural path:

1. Federal prosecutors evaluate whether the evidence supports a criminal charge and whether prosecution serves the public interest under DOJ's internal charging standards (Justice Manual § 9-27.000).

Mens rea — the mental state required for criminal liability — is a critical distinction. Many regulatory crimes require proof of willfulness or knowing conduct. The Clean Water Act's criminal provisions at 33 U.S.C. § 1319(c) distinguish between negligent violations (punishable by up to 1 year imprisonment per day of violation), knowing violations (up to 3 years), and knowing endangerment (up to 15 years), with each tier requiring a higher level of culpable intent.

Common scenarios

The following scenarios illustrate how the two tracks apply across regulatory domains:

• Securities fraud: The SEC brings civil actions for insider trading, seeking disgorgement of profits and civil penalties under 15 U.S.C. § 78u. The DOJ simultaneously pursues criminal wire fraud or securities fraud charges where willful conduct is evident.
• Environmental violations: EPA refers knowing discharge cases to DOJ's Environment and Natural Resources Division; negligent violations typically resolve civilly. EPA's criminal enforcement program made 146 criminal referrals to DOJ in fiscal year 2022 (EPA Enforcement Annual Results 2022).
• Workplace safety: OSHA's enforcement authority under the Occupational Safety and Health Act of 1970 is almost entirely civil. Criminal prosecution under 29 U.S.C. § 666(e) applies only to willful violations causing employee death, carrying a maximum of 6 months imprisonment — a limitation that Congress has addressed through legislative proposals but not yet amended.
• Food and drug law: The FDA pursues civil seizures and injunctions for misbranded or adulterated products; criminal prosecutions under the Federal Food, Drug, and Cosmetic Act (21 U.S.C. § 333) can proceed on a strict liability basis for misdemeanor offenses, meaning no proof of intent is required for the lowest tier of criminal liability.
• Financial institution fraud: The Office of the Comptroller of the Currency (OCC) and CFPB issue civil money penalties; bank fraud prosecutions under 18 U.S.C. § 1344 run through DOJ and carry a maximum of 30 years imprisonment per offense.

Decision boundaries

The decision to pursue civil versus criminal enforcement rests on four primary factors:

1. Culpability and intent. Knowing, willful, or fraudulent conduct is the threshold indicator for criminal referral. Negligent or strict-liability violations typically remain in the civil track. Agency investigators document intent evidence — internal communications, prior warnings, deliberate concealment — as the foundation for any criminal referral.

2. Severity and harm. Physical injury, death, or large-scale financial harm to consumers substantially increases the likelihood of criminal prosecution. Agencies weigh the magnitude of harm against the deterrent value of imprisonment versus civil penalties.

3. Deterrence calculus. When civil penalties are insufficient to deter a well-resourced entity — because the penalty is economically trivial relative to the profit from the violation — prosecutors and regulators view criminal exposure (including individual liability for executives) as a necessary complement. The DOJ's Individual Accountability Policy (the "Yates Memo" framework, 2015, updated 2022) formalizes the principle that corporations cannot use civil settlements to shield individual officers from criminal liability.

4. Evidentiary sufficiency. The beyond-a-reasonable-doubt standard requires substantially stronger evidence than a civil preponderance standard. Even where conduct appears willful, prosecutors may decline criminal charges if documentary evidence is incomplete or witness testimony is unreliable. Civil enforcement often proceeds in parallel to preserve remedies while criminal investigation continues.

These factors do not operate in isolation. Inter-agency coordination — between, for example, the SEC's Division of Enforcement, the FBI's Financial Crimes unit, and U.S. Attorneys — is formalized through memoranda of understanding and task force structures. Understanding the full scope and dimensions of regulatory agency authority requires accounting for this dual-track architecture as an integrated system, not two separate regimes.