31 Days to a More Effective Compliance Program

Where is compliance training headed? In the 2020 Update, the DOJ stated, “companies have invested in shorter, more targeted training sessions to enable employees to timely identify and raise issues to appropriate compliance, internal audit, or other risk management functions.” While this tactical solution has proven useful, I wanted to consider the broader compliance training themes that complianc...

The more you can operationalize compliance, the more it works to operationalize culture in your organization. It works for all levels of a company, literally from the Boardroom to the shop floor. The DOJ and SEC recognized this when they noted in their 2020 FCPA Resource Guide, “A compliance program should apply from the board room to the supply room - no one should be beyond its reach.” Yet cultu...

We are now at a place where there is sufficient data, academic research and actual use cases from corporations and businesses that demonstrate good ethics and compliance programs are not simply good for business but when properly used, they lead to greater profitability.  The data and information you collect, which might initially begin as a compliance solution or project can be used to improve bu...

Through restructuring, senior leadership can signal that digital transformation in compliance is critical for the future of the organization. From this point the compliance function can work with an internal digital product design group. By doing so, the corporate compliance function can work with a team dedicated to supervising the development of the new compliance solution through product design...

One of the lessons we have learned from various FCPA enforcement actions over the years is how complexity in business organizations can work to defeat compliance programs. Whether a corrupt employee is working to actively hide a pot of money, which can or will be used to pay a bribe, or an improper payment slips through the cracks; complexity can work to defeat a best practices compliance program....

Have you ever thought of compliance as an ecosystem? When you consider the concept, it becomes clear that this is one thing every company should strive towards. Obviously, every multi-national company must have a compliance program. But to have true effectiveness, your compliance program must be operationalized throughout the organization. One way to facilitate this is through the ecosystem concep...

Business ventures, whether JVs, partnerships, franchises, team agreements, strategic alliances or one of the myriad types of business relationships a U.S. company can form outside the U.S., are different than the usual risk presented by third-parties under compliance requirements such as those mandated by the FCPA. The problems for companies is that they tend to treat business venture risk the sam...

Three enforcement actions which made clear that there were no distinctions between agents and distributors. They were the Smith & Nephew, Inc., Oracle and Eli Lilly and Company. Each of these enforcement actions had different FCPA violations and they each revealed separate steps which a company should take to both prevent and detect FCPA violations in their company.  These three separate bribery s...

Polycom came to FCPA grief in China, as have many other US companies. The bribery scheme was long running, occurring from 2006-2014. They included the creation of an off-the books accounting and recordation system for corrupt payments made by or on behalf of Polycom China. The money to fund these bribes came through variations of the basic bribery scheme. There would be a discount between the pric...

Most franchisors have thorough financial vetting requirements before allowing any person or business to become a franchisee. However, how many of these same businesses perform compliance due diligence on their prospective overseas franchises? How many U.S. franchisors have compliance training programs? How many evaluate, on an ongoing basis, the compliance program of their overseas franchisees? Ho...

There remains a question about franchisor liability under the FCPA. Franchising has been a successful model in the U.S. and now many corporations are looking at overseas expansion opportunities. Franchise law has become well developed across the U.S., with many states developing laws to protect the rights and obligations of both parties in a franchise agreement.  There are no reported FCPA enforce...

Many compliance practitioners generally view distributors as a part of their third-party risk management program, with most of their attention on the pre-contract phase of the risk management process. Typically, most of the efforts are spent on due diligence with less on managing the relationship after the contract is signed. However, many facets of a corporate relationship with a distributor are...

One area not usually considered around your business ventures is the financial health of JV partner, teaming partner, strategic partner or any other type of business partner or relationship which might occur in a business venture. It turns out such an oversight may have some significant ramifications for an accurate picture of a business venture partner. The financial health of a business venture...

One area not often considered by the CCO as a key part of any compliance regime is the Corporate Controller. The Controller generally has the responsibility to accurately record and report the financial transactions of the company, to design, implement and execute the financial processes and controls of the company to be both effective and efficient, and to safeguard the financial assets of the co...

Do FCPA considerations come into play for customers? How should you think about your obligations under the FCPA for a group not traditionally associated with FCPA liability or even FCPA risk? These questions and perhaps others are raised by the 2015 FCPA investigation into certain transactions in Venezuela by Derwick Associates (Derwick) and a U.S. company ProEnergy Services (ProEnergy). ProEnergy...

I want to emphasize again the risks JVs pose under the FCPA. Mike Volkov has stated, “A joint venture requires the integration of disparate company cultures. It can be successful and is usually one of the significant reason for the joint venture itself.” Both parties should assess each other and decide that the JV is a good fit, meaning that each side will benefit. Too much time is spent on lookin...

Your company has just made its largest acquisition ever and your CEO says that he wants you to have a compliance post-acquisition integration plan on his desk in one week. Where do you begin? Of course, you think about the 2020 FCPA Resource Guide, 2nd edition but you also remember that the established time frames in the enforcement actions involving Johnson & Johnson (J&J), Pfizer Inc. and DS&S a...

The compliance component of your M&A regime should begin with a preliminary pre-acquisition assessment of risk. Such an early assessment will inform the transaction research and evaluation phases. This could include an objective view of the risks faced and the level of risk exposure, such as best/worst case scenarios. A pre-acquisition risk assessment could also be used as a “lens through which to...

One of the clearest themes from the original, 2012 FCPA Resource Guide was around the importance of your pre-acquisition work in any M&A on a target company. In the section on Declinations, the 2012 FCPA Resource Guide provided an example of a company which had received a declination in large part because of its pre-acquisition work, which then served as a basis of its post-acquisition remediation...

Why should a company engage in pre-acquisition due diligence in the M&A context? Certainly, compliance with anti-corruption laws such as the FCPA or U.K. Bribery Act is a good starting point. A Transparency International white paper, entitled “Anti-Bribery Due Diligence for Transactions”, suggested that there are greater forces driving compliance than simply compliance with anti-corruption and ant...

White collar defense practitioners have long called for a specific safe harbor for companies in the mergers and acquisition context where they meet the criteria set out by the DOJ. This clarion call was answered in the summer, 2018 when in July 2018, the DOJ announced a revision to the FCPA Corporation Enforcement Policy, specifically around mergers and acquisitions. The new language read:  M&A Du...

JVs provide many FCPA risks that other types of business relationships do not bring. For instance, the JV may interact with foreign government officials or employees of a state-owned enterprise; then leverage those relationships for an improper benefit relating to contracts, regulatory licenses, permits or customs approvals. It is difficult to regulate a JVs interaction with foreign government off...

Numerous U.S. companies have come to FCPA grief for their overseas JVs and this continues to be a bane for many companies under the FCPA. There are some basic compliance terms and conditions which should be considered for any foreign JV agreement to help U.S. companies manage these compliance risks.  As a starting point, it is important to have compliance terms and conditions, these reasons can in...

When you bring two entities together to operate jointly, there are several difficult issues to analyze. For the U.S. company operating under the FCPA, there must be an adequate business justification for a JV with a specific partner, all in writing and approved by an appropriate level of the organization. This is where the due diligence process comes into play. The due diligence process should be...

Just as the FCPA enforcement field is covered with actions centering around M&A, there are multiple actions involving JVs. JVs continue to plague many U.S. companies up to this day. In many ways, JVs present more difficult issues for the compliance practitioner than M&A because of the control issues present in JVs with foreign governments or state-owned enterprises ownership. There are other risks...