The Department of Justice (DoJ) Criminal Division has issued updated guidance on how prosecutors should evaluate Corporate Compliance Programmes when there is the potential for bringing charges against a company or individuals, suspected of violating the Foreign Corrupt Practices Act. This new guidance is important because it provides clear pointers that should help all corporates to develop good programmes that will protect the company and its directors, in the event of any allegations against it. It is also important because it is likely to influence prosecutors working in other jurisdictions where the law requires an anti-corruption compliance programme to be implemented.
It asks the prosecutor to answer three questions:
- “Is the corporation’s compliance programme well designed?“
- “Is the programme being applied earnestly and in good faith?“ In other words, is the programme being implemented effectively?
- “Does the corporation’s compliance programme work“ in practice?
The key ten messages from this guidance are:
- Culture and tone from top management matter considerably – Companies able to demonstrate top management commitment and involvement in the programme will be more successful.
- The importance of good risk assessment and responding to real risks – Many corporates are still failing to evaluate risk and respond to real risks in their corporate compliance programmes. Big risks are higher up the organisation.
- Third party management is key – Good due diligence, active follow up of red flags and avoiding the use of unnecessary vendors and agents wherever possible are essential.
- Avoid paper based programmes – These overload and distract attention and do little to combat corruption.
- Engaging people through good training and communications is essential.
- Incentives matter – There is no point in having a strong programme on paper and then providing large all or nothing commission payments to agents to achieve sales.
- People working in ethics and compliance need protecting and support – Gathering evidence that they have been protected and taken seriously is crucial.
- Ethics and compliance teams need to be properly resourced.
- Independent whistleblowing channels are essential to ensure that issues are detected.
- Programmes should be assessed regularly – An assessment shows the prosecutor that the company has measured its compliance programme and can demonstrate that it is effective. Doing it after the company is in trouble is too late.
Posted May 2019
If Bob Diamond’s resignation is “the first step towards a culture of responsibility” in the UK’s banking industry, what is the second? Any suggestion that it should be more rules is erroneous; there are already plenty with expensive compliance departments…
Following revelations regarding mass surveillance operations by the US National Security Agency, the mechanisms through which the personal data of EU citizens is protected when transferred to US organisations have come under considerable scrutiny. In October 2015, the European Court…
As the Gambling Commission consults on new licensing standards that could include a social responsibility code as well as advertising restrictions, four of Britain’s biggest bookmakers have formed The Senet Group in a move to promote responsible gambling. At this…