Legal Insider Trading Explained: Form 4, SEC Filings, and What Insider Transactions Signal

May 9, 2026 · guides · 14 min read

Legal Insider Trading Explained: Form 4, SEC Filings, and What Insider Transactions Signal

When most people hear "insider trading," they think of criminal activity -- executives trading on secret information before a merger announcement, hedge fund managers receiving tips from corporate contacts. That is the illegal kind, and it carries serious consequences including federal prosecution and prison time.

But there is another category entirely: legal insider transactions. Every time a CEO, CFO, board director, or major shareholder buys or sells shares of their own company's stock, they are required by law to disclose it publicly. These disclosures create a paper trail that self-directed investors can monitor and analyze. Understanding how to read that trail -- and more importantly, how to distinguish meaningful signals from noise -- is a genuine edge for investors who do the work.

This guide covers the full picture: who qualifies as a legal insider, what the SEC requires them to file, how to interpret the transaction codes, and what academic research says about the predictive value of insider purchases.

Illegal vs. Legal Insider Transactions: The Core Distinction

The term "insider trading" in federal law refers to trading securities based on material non-public information (MNPI) -- information that is not available to the general investing public and that a reasonable investor would consider important in making an investment decision.

Examples of illegal insider trading include a drug company executive buying shares before announcing positive clinical trial results that have not been released, or a corporate lawyer learning about an acquisition target and purchasing shares before the deal is announced. These are violations of SEC Rule 10b-5, which prohibits fraud in connection with the purchase or sale of any security.

Legal insider transactions are something entirely different. They involve the same category of people -- corporate insiders -- but the trades are made within a framework of mandatory disclosure. Before an insider can trade, they are already subject to various restrictions. After they trade, they must report it to the SEC within a tight deadline. The key distinction is transparency: the trade is disclosed, not concealed.

This matters for individual investors because public disclosure transforms what could be private information into a data point available to everyone. A CEO buying one million dollars of her own company's stock on the open market is a public fact once the Form 4 is filed. Any investor who monitors SEC filings can observe it. That is not insider trading in the criminal sense -- it is exactly the kind of market signal that disclosure laws are designed to create.

Who Is a Legal Insider?

Under Section 16 of the Securities Exchange Act of 1934, the following categories of people are considered statutory insiders for a public company:

Officers -- This typically includes the CEO, CFO, COO, General Counsel, Chief Accounting Officer, and any other executive with significant policy-making functions. Not every employee with a title is a statutory officer; the SEC focuses on function, not title.

Directors -- Every member of the board of directors, including independent directors, is a statutory insider for the company on whose board they sit.

Beneficial owners of more than 10% of any class of equity -- Any individual or entity that owns more than 10% of a company's outstanding shares is required to file as an insider. This includes activist investors, controlling families, and large institutional holders that cross the threshold.

All three categories are required to report their transactions in the company's equity securities. The rationale is straightforward: these individuals have access to information about the company that ordinary investors do not have. Requiring disclosure does not eliminate that informational advantage, but it does ensure that their trading activity becomes part of the public record.

Form 4: The Core Disclosure Document

Form 4 is the SEC filing that insiders must submit when they buy, sell, or otherwise transact in their company's securities. The filing requirement is strict: Form 4 must be submitted within two business days of the transaction date.

That two-day window is important. Before the Sarbanes-Oxley Act of 2002, insiders had up to 40 days to report transactions. The shorter deadline makes insider activity much more timely as a signal. When you see a Form 4 on EDGAR today, the trade it describes almost certainly happened within the last 48 hours.

Here is what each section of a Form 4 tells you:

Table I -- Non-Derivative Securities Acquired, Disposed of, or Beneficially Owned

This table covers direct purchases and sales of common stock (and other non-derivative equity). The key fields are:

Table II -- Derivative Securities

This table covers options, warrants, convertible securities, and similar instruments. It includes the exercise price, expiration date, and the underlying security.

Footnotes -- Often the most important part of the filing. Footnotes explain whether the transaction was part of a pre-planned 10b5-1 program, whether shares were withheld for tax purposes, or other context that affects interpretation.

Where to find Form 4 filings: The SEC's EDGAR system at edgar.sec.gov is the primary source. You can search by company (issuer) or by filer name. Under a company's filings, filtering by form type "4" will return all recent insider transactions. Third-party services like OpenInsider, Finviz, and Nasdaq's insider activity tool aggregate Form 4 data in more browsable formats.

Transaction Codes: What Each Letter Means

The transaction code field is one of the most important pieces of information on a Form 4. Not all transactions are created equal, and the code tells you the nature of the transaction before you interpret anything else.

P -- Open Market Purchase

This is the most meaningful transaction code. Code P means the insider went into the open market and purchased shares with their own money at the prevailing market price. No discount, no grant, no option exercise -- they paid what any investor would pay. When an insider code P transaction appears, it represents a voluntary commitment of personal capital based on their view of the stock's value.

S -- Open Market Sale

Code S is an open market sale. As discussed below, sales are far less informative than purchases for reasons related to the asymmetry of motivation.

A -- Grant or Award

Code A indicates that the insider received securities as compensation -- a stock grant, restricted share award, or similar. This is not a voluntary purchase; it is compensation. It does not reflect the insider's view of the stock's value, so it carries no informational signal about whether the insider thinks the stock is attractive or unattractive at current prices.

M -- Option or Warrant Exercise

Code M indicates that the insider exercised options or warrants to acquire shares. The signal value depends heavily on what the insider does afterward. If they exercise and immediately sell (often coded as two separate transactions), it is typically just cashing out compensation. If they exercise and hold, it may indicate more conviction about the stock's prospects -- but the context of the exercise price and expiration date matters.

G -- Gift

Code G represents a transfer of shares as a gift, typically to family members or charitable foundations. It is not a market transaction and carries no informational signal about the insider's view of the stock.

F -- Payment of Exercise Price or Tax Liability

Code F covers shares withheld by the company to satisfy tax obligations when restricted stock vests, or to pay the exercise price of options. This is a mechanical transaction that tells you nothing about the insider's market view.

J -- Other Acquisition or Disposition

Code J covers miscellaneous transactions that do not fit standard categories. It requires reading the footnotes to understand what occurred.

The practical rule: focus your attention on Code P transactions. They represent the clearest signal of voluntary insider conviction using personal capital at market prices.

Why Insider Purchases Are Informative but Insider Sales Are Not

This asymmetry is one of the most well-established findings in the academic literature on insider trading, and it has an intuitive explanation.

Insiders have many reasons to sell that have nothing to do with their view of the stock's value:

Insider purchases tell a different story. When an insider writes a personal check to buy shares of their own company on the open market, there is only one reason to do it: they believe the stock is worth more than the current price. They are not diversifying, they are concentrating. They are not following a plan -- they are making an active decision to increase exposure. They have access to information about the company's operations, pipeline, and competitive position that no outside analyst can fully replicate.

This is why code P transactions are the relevant signal for investors monitoring insider activity. The motivation behind purchases is far more constrained and informative than the motivation behind sales.

What Academic Research Says About the Signal

The academic literature on insider transactions spans decades and consistently reaches similar conclusions. The most widely cited work comes from H. Nejat Seyhun, a finance professor whose research in the 1980s and 1990s established that insider purchases, particularly open-market purchases by top executives, predict positive stock returns in the months following the transaction.

Seyhun's research found that portfolios mimicking insider purchases outperformed relevant benchmarks on a risk-adjusted basis, with much of the outperformance materializing over the 3-to-12-month horizon after the transaction.

Jeng, Metrick, and Zeckhauser (2003) in a widely cited Journal of Finance paper found that insider purchases generated substantial abnormal returns -- on the order of 6% annually above matched benchmark stocks -- while insider sales showed no significant predictive power. This finding aligns with the asymmetry of motivation described above.

More recent research has refined the signal further. The predictive power of insider purchases is:

The signal is not perfect, and no research suggests it is. Companies where insiders buy aggressively sometimes disappoint. But as an input to a broader research process, insider purchase data provides evidence that is difficult to replicate from public financial statements alone.

Cluster Buying: The Most Reliable Insider Signal

Cluster buying occurs when multiple insiders at the same company make open-market purchases within a short window -- typically 2 to 4 weeks. It is widely considered the most reliable variant of the insider purchase signal for several reasons.

First, it eliminates the idiosyncratic noise of individual decisions. Any single insider might buy for personal reasons that happen to align with a code P transaction. Multiple insiders independently making the same decision with their own money in the same compressed time period is a much stronger statement.

Second, it signals organizational alignment. When a CEO and CFO both buy, they are aware of the same internal operating data. When independent directors who sit on the audit committee are also buying, the signal extends beyond executive management.

Third, academic studies show cluster purchases generate higher subsequent returns than solo purchases on average. The convergence of multiple independent decisions appears to contain more information than any single transaction.

How to identify cluster buying: Filter Form 4 data for code P transactions on a specific ticker over a rolling 30-day window. If three or more distinct insiders have made code P purchases, that is a cluster signal worth investigating. Platforms that aggregate Form 4 data -- including OpenInsider, which allows filtering by number of buyers -- make this scan practical.

Context matters here too. A cluster of buys that occurs right after a stock has fallen 40% in two weeks is different from a cluster that occurs after six months of quiet price action. The former may reflect insiders seizing on what they view as an overreaction; the latter may reflect a quieter, more deliberate assessment that the stock is undervalued at current levels.

10b5-1 Plans: Why Scheduled Sales Are Mostly Noise

Rule 10b5-1 was adopted by the SEC in 2000 to provide insiders with an affirmative defense against accusations of trading on MNPI. The mechanism is straightforward: an insider sets up a pre-scheduled trading plan with a broker at a time when they are not in possession of MNPI. The plan specifies future trades by price, volume, date, or formula. Once the plan is in place, the insider has no discretion over when trades execute -- the broker handles it automatically.

The legal value of 10b5-1 plans is clear: they allow executives to diversify their concentrated stock positions without the constant risk of being accused of trading on inside information. For large-cap company executives whose compensation is predominantly equity-based, the plans are genuinely useful for routine liquidity management.

The signal value to outside investors is minimal. A sale coded with a footnote indicating it was executed pursuant to a 10b5-1 plan tells you only that the insider set up a plan at some point in the past and that plan triggered a sale today. You do not know:

For most practical purposes, 10b5-1 sales can be disregarded as a directional signal. The SEC tightened the rules governing these plans in December 2023, requiring a mandatory cooling-off period of 90 days (or until the next open trading window, whichever is later) between when a plan is adopted and when the first trade can execute. For CEOs and CFOs, the cooling-off period is the longer of 90 days or the next open window after the plan is adopted, up to a maximum of 12 months. The rule also prohibits insiders from having multiple overlapping 10b5-1 plans and limits single-trade plans to one per 12-month period.

These changes reduce (but do not eliminate) the ability to use 10b5-1 plans opportunistically. They also require additional disclosure about plan adoption and amendment dates, giving outside investors more information to assess whether a sale occurred genuinely outside of MNPI possession.

For the purpose of monitoring insider activity, the practical rule stands: weight purchases heavily, treat non-plan sales with moderate attention, and treat plan sales as noise.

Section 16 Short-Swing Profit Rule: The Constraint on Insider Trading

Section 16(b) of the Securities Exchange Act of 1934 contains a powerful enforcement mechanism that most retail investors are unaware of: any insider (officer, director, or 10%+ beneficial owner) who buys and sells -- or sells and buys -- the same company's equity within a six-month period must return any profits to the company. This is the short-swing profit rule.

The rule is mechanical, not intent-based. It does not matter whether the insider actually possessed MNPI during the trades. If the round trip occurred within six months and generated a profit, the profit must be disgorged. The company can sue to recover it, and any security holder can bring a derivative suit on the company's behalf if the company fails to act.

This rule has two practical implications for interpreting insider transactions:

First, it creates a powerful disincentive for insiders to make short-term trades. If a CEO buys shares with the intention of selling within a few months, they face the risk of mandatory disgorgement if the trades are profitable. This pushes insiders who do trade toward longer holding horizons.

Second, it means that when you observe a code P purchase, the insider likely intends to hold the shares for at least six months to avoid triggering short-swing liability. That holding horizon aligns with the 3-to-6-month window in which academic research finds the insider purchase signal is most predictive.

The Section 16(b) rule is enforced by the companies themselves (or by derivative suits from shareholders), not by the SEC directly. There are attorneys who specialize in scanning Form 4 filings for potential short-swing profit violations as a business model, so enforcement is more active than the lack of SEC involvement might suggest.

Institutional 13F Filings: A Different Layer of Information

While Form 4 covers insiders at individual companies, Form 13F is a separate disclosure requirement for large institutional investment managers. Any investment manager that exercises investment discretion over more than $100 million in equity securities must file a 13F within 45 days after the end of each calendar quarter.

A 13F lists all long equity positions held by the institution at the end of the quarter. It does not cover short positions, bond holdings, private investments, or non-equity derivatives. It is a snapshot of one moment in time, with a 45-day reporting lag.

What you can infer from 13F data:

What you cannot infer:

The 45-day lag is critical context. A 13F filed on November 14th shows holdings as of September 30th. If a significant amount has changed in the intervening six weeks -- and in volatile markets it often does -- the filing may be largely irrelevant as a trading input.

The funds whose 13F filings receive the most attention are those with demonstrated long-term track records in concentrated, high-conviction portfolios -- particularly value-oriented investors with transparent public track records. When a small number of well-regarded investors hold large, concentrated positions and their filings show new positions, the market pays attention. But even then, the lag and the lack of short position visibility limit the utility of the data.

One genuinely useful application of 13F data: identifying under-the-radar small and mid-cap names that high-quality investors have been quietly accumulating. These are less likely to be positions influenced by index weighting or passive inflows, and more likely to represent active research conclusions. Combining a 13F position with contemporaneous Form 4 purchases from management can be a strong combination of signals.

Building a Practical Insider Monitoring Process

The data is publicly available. The question is how to use it systematically without getting overwhelmed by noise. Here is a framework for incorporating insider transaction data into a research process.

Step 1: Set up EDGAR email alerts

EDGAR's full-text search system (efts.sec.gov) allows users to set up automated alerts for specific companies or filers. You can receive email notifications whenever a Form 4 is filed for any ticker on your watchlist. This eliminates the need to manually check filings and ensures you see transactions in close to real time.

Third-party services like OpenInsider and InsiderMonkey also offer alert functionality with more filtering options, including the ability to filter only for code P transactions above a minimum dollar value.

Step 2: Filter by transaction code and size

Not every Form 4 is worth reading. Start by filtering for code P only. Then apply a minimum dollar value threshold -- for large-cap companies, transactions under $100,000 are typically below the threshold of meaningful personal commitment. For smaller companies, proportionality matters more than absolute size.

A useful metric is the purchase as a percentage of the insider's estimated total compensation. If an executive earning $5 million annually purchases $50,000 of stock, it is a different signal than an executive earning $500,000 purchasing $500,000.

Step 3: Check for cluster signals

Before acting on any single insider purchase, check whether other insiders at the same company have made code P purchases in the past 30 days. A single insider buying is a data point. Multiple insiders buying is a pattern worth investigating further.

Step 4: Read the footnotes

Footnotes often contain information that changes the interpretation of a transaction. Common footnotes include: "This transaction was made pursuant to a Rule 10b5-1 plan adopted on [date]," which would reduce the signal value for purchases as well as sales. Look for footnotes that explain unusual circumstances.

Step 5: Add context from the company's recent public disclosures

Insider purchases are more informative in specific contexts. A CEO buying aggressively after a stock drops 30% on earnings disappointment -- especially if management has publicly said the selloff is an overreaction -- is a different signal than a purchase made during quiet price action.

Check recent earnings call transcripts, press releases, and any management guidance. Insider purchases that follow forward-looking statements from management about business momentum carry more combined weight than purchases in isolation.

Step 6: Consider the insider's track record

Not all insiders have equivalent track records as market timers. Some insiders have a history of purchasing near local price lows; others have purchased repeatedly into declining stocks. Over time, tracking specific insiders whose past purchases correlated with subsequent performance gives you a more calibrated view of whose transactions to weight more heavily.

Step 7: Use insider data as confirmation, not sole input

Insider purchase data is most powerful as a confirming signal within a broader fundamental research process. If you have already identified a stock as potentially undervalued based on valuation analysis, free cash flow generation, and business quality, and then you observe multiple insiders making large code P purchases, that is a convergence of independent evidence.

Treating insider purchases as a standalone screen without fundamental context increases the false positive rate. Companies in distress sometimes see insiders buying aggressively as the business deteriorates, either due to overconfidence or because insiders with concentrated exposure are averaging down. Fundamental analysis provides the context that insider transaction data alone cannot.

Putting It Together

Legal insider transaction data is one of the few categories of market information that is simultaneously public, legally required, timely, and generated by people with privileged access to their companies' operations. The disclosure framework created by Section 16 and Form 4 transforms what would otherwise be private market activity into a public research input.

The key principles for working with this data:

Code P open-market purchases are the signal that matters. Sales, option exercises, grants, and 10b5-1 plan transactions each have alternative explanations that dilute or eliminate their informational content.

Cluster buys are more reliable than single-insider purchases. Convergence of independent decisions by multiple insiders at the same company within a short window is the highest-quality version of the insider purchase signal.

Size relative to compensation matters more than absolute size. A $50,000 purchase means something different from a first-year analyst at $150K total comp than it does from a founder-CEO with $50 million in unvested RSUs.

Academic evidence consistently shows insider purchases predict 3-to-6-month outperformance on average, with the strongest effects in small-cap names where informational asymmetry is highest.

Combine insider transaction data with fundamental research for the most useful output. Insider purchases identify where management sees value; fundamental analysis tells you whether that view is supported by the numbers.

The tools are all free. EDGAR is public. OpenInsider is free. The discipline is in building a consistent process to filter noise, identify genuine signals, and integrate them into a research framework that already includes valuation work, business quality assessment, and risk analysis.

This article is for educational purposes only. Nothing in this guide constitutes investment advice or a recommendation to buy or sell any security. All investment decisions involve risk. Past patterns in insider transaction data do not guarantee future results. Always conduct your own research and consider your individual financial situation before making any investment decisions.