Categories
Innovation in Compliance

Innovation in Compliance: Cracking the Digital Maturity Code: AI Readiness, Governance, and Trust for Leaders with Nav Thethi

Innovation occurs across many areas, and compliance professionals need not only to be ready for it but also to embrace it. Join Tom Fox, the Voice of Compliance, as he visits with top innovative minds, thinkers, and creators in the award-winning Innovation in Compliance podcast. In this episode, host Tom visits with Nav Thethi, creator of the “Cracking the Digital Maturity Code” series, to discuss leadership gaps in digital transformation, AI, and data governance.

Nav describes building a peer-learning platform through his podcast, developing digital maturity benchmarks with organizational scorecards, and co-authoring a book on digital maturity. He outlines an AI readiness gap driven by executive imposter syndrome, FOMO-driven pressure, education and alignment gaps, and lack of roadmap, citing Gartner’s view that 89% of AI initiatives fail for reasons beyond technology, including “pilot purgatory.” Nav’s maturity approach emphasizes measuring the current state across multiple pillars, including technology, data, customer experience, leadership/strategy, and talent/culture; aligning with business outcomes; upskilling; refining; integrating with governance; tracking meaningful KPIs; and scaling responsibly. He stresses C-suite-led governance, leader engagement in change management, and maintaining customer trust through human oversight of AI-generated content.

Key highlights:

  • Cracking the Maturity Code Format
  • AI Readiness Gap and FEAR
  • Who Owns AI Governance
  • Start Small and Scale Fast
  • Human AI Collaboration and Trust
  • Key Takeaways for Executives

Measure Your Digital Maturity — Stop Guessing. Start Scaling.

Take the Digital Maturity Assessment to benchmark your organization, identify blind spots, and connect your digital strategy to real-world outcomes that matter.

Assess your Digital Maturity Now: https://go.navthethi.com/digital-maturity-assessment

Resources:

Nav Thethi on LinkedIn

Nav Thethi Website

Nav Thethi podcast-The NavThethi Show

Cracking the Maturity Code with Nav Thethi on YouTube

Innovation in Compliance was recently ranked Number 4 in Risk Management by 1,000,000 Podcasts.

Categories
Daily Compliance News

Daily Compliance News: March 24, 2026, The Stoic Edition

Welcome to the Daily Compliance News. Each day, Tom Fox, the Voice of Compliance, brings you compliance-related stories to start your day. Sit back, enjoy a cup of morning coffee, and listen in to the Daily Compliance News. All, from the Compliance Podcast Network. Each day, we consider four stories from the business world, compliance, ethics, risk management, leadership, or general interest for the compliance professional.

Top stories include:

  • Stoicism without self-examination is moral bankruptcy. (FT)
  • Jury finds Musk liable for tweets. (Reuters)
  • The Trump Administration’s actions to silence the press are illegal. (NPR)
  • Super Micro Computer co-founder resigns after indictment. (WSJ)
Categories
AI Today in 5

AI Today in 5: March 24, 2026, The From Detection to Prevention Edition

Welcome to AI Today in 5, the newest addition to the Compliance Podcast Network. Each day, Tom Fox will bring you 5 stories about AI to start your day. Sit back, enjoy a cup of morning coffee, and listen in to the AI Today In 5. All, from the Compliance Podcast Network. Each day, we consider five stories from the business world, compliance, ethics, risk management, leadership, or general interest about AI.

Top AI stories include:

  1. The national AI law will not preempt current state law. (NMP)
  2. AI for advertising pre-check review. (BusinessInsider)
  3. AI is transforming financial crime compliance. (SCMedia)
  4. AI is reshaping sovereign responsibility. (FastCompany)
  5. Moving compliance from detective to preventative with AI. (FinTechGlobal)

For more information on the use of AI in Compliance programs, my new book, Upping Your Game, is available. You can purchase a copy of the book on Amazon.com.

Categories
Blog

Balt’s DOJ Declination: A Case Study in Why Speed, Cooperation, and Remediation Still Matter

The Justice Department’s first publicly announced resolution under its new Department-wide Corporate Enforcement and Voluntary Self-Disclosure Policy (CEP) offers corporate compliance officers a practical roadmap: disclose early, cooperate fully, remediate credibly, and be prepared to help prosecutors hold individuals accountable.

Some enforcement actions feel like one-off events. Then others operate like a flare shot into the compliance sky. The DOJ Declination involving French medical device company Balt SAS and its US subsidiary Balt USA (collectively ‘Balt) falls squarely into the second category.

Why? Because this was not simply another FCPA matter. It was the first publicly announced corporate resolution under the DOJ’s new CEP, and DOJ clearly meant it to send a message to the market. As the Wiley alert noted, the Balt matter demonstrates the benefits available to companies that voluntarily self-disclose, fully cooperate, and timely remediate, while also reinforcing DOJ’s emphasis on individual accountability. For compliance officers, that makes Balt important far beyond the four corners of the case itself.

What happened at Balt?

According to the Declination, Balt paid approximately $602,000 in bribes from around 2017 to 2023 to a physician who held a senior role at a state-owned public hospital in France to obtain or retain business. The payments were routed through a third-party consultant in Belgium, with fake invoices and purported bonus payments used to conceal the true nature of the transaction. The scheme generated roughly $1.68 million in revenue and approximately $1.214 million in profits for Balt. As Matt Kelly reported in Radical Compliance, the scheme involved all the old FCPA classics: sham consulting arrangements, fake invoices, and off-channel communications. That alone would have made the matter notable. But the more important point is what happened after Balt discovered the misconduct.

DOJ declined prosecution because Balt self-disclosed while its internal investigation was still ongoing; provided full and proactive cooperation; engaged in timely and appropriate remediation, including disciplinary measures and termination of tainted business relationships; and presented no aggravating circumstances sufficient to disqualify it from a Part I declination. DOJ also required Balt to disgorge approximately $1.2 million and noted that the company had entered into a parallel resolution in France that included compliance requirements. This is the template. And compliance officers should study it carefully.

The real lesson: self-disclosure means before you know everything

One of the most significant points in the Balt matter is timing. Balt disclosed the issue during an ongoing internal investigation, which strongly suggests the company came in before every fact had been nailed down.

That matters because many companies still hesitate, hoping to finish the investigation, validate every fact, and package the matter neatly before approaching the OJ. Balt is a reminder that DOJ wants speed and credibility, not perfection. The new policy framework still prizes timely self-disclosure as the clearest route to a declination. Wiley put it plainly: voluntary disclosure still provides the clearest path to that outcome, and delay can preclude eligibility for the most favorable result.

For the Chief Compliance Officer (CCO), this is where judgment, preparation, and governance structure come together. If your escalation protocols are weak, if privilege decisions are muddled, if your triage process is slow, or if your board and senior leadership do not understand the declination calculus, you can lose the timing advantage before the real work even begins. The Balt case is not simply a win for self-disclosure. It is a win for pre-existing readiness for investigation.

Cooperation means more than being polite

The second lesson is equally important. Under the CEP, cooperation is not a vague aspiration. It is an operational requirement. The Wiley analysis emphasized that full cooperation includes identifying all individuals involved in or responsible for the misconduct and providing facts and evidence concerning their conduct.

This is where compliance officers need to understand a hard truth. DOJ is not offering declinations because it has become sentimental, or even because this administration does not believe in the FCPA. It is offering incentives because it wants something in return. And one of the most important things it wants to do is help build cases against culpable individuals.

That is precisely what happened here. DOJ paired Balt’s declination with indictments of two individuals allegedly involved in the bribery scheme. Wiley correctly described the sequencing as no coincidence, but rather a reinforcement of the DOJ’s continuing focus on individual accountability. Kelly made the same point in even more direct terms: from DOJ’s perspective, if a company voluntarily self-discloses, coughs up illicit proceeds, and helps prosecutors hold wrongdoers accountable, the company can receive a declination.

For compliance professionals, this means internal investigations must be designed from the outset with evidentiary rigor. You need documentation discipline. You need clear interview protocols. You need a defensible record of who knew what, who approved what, and how the misconduct moved through the system. A half-hearted review that avoids hard questions about executives, consultants, or favored business relationships will not get you where Balt got.

Remediation is not a slide deck

The third lesson is on remediation. Too many organizations still treat remediation as presentation theater. They produce a deck, revise a policy, hold a training session, and call it transformation. The DOJ is looking for something more concrete. In the Balt Declination, remediation included disciplinary action against relevant individuals, termination of business relationships that gave rise to the misconduct, tailored compliance training for senior management, and improvements to the compliance program and internal controls. That list is worth lingering over. The DOJ did not only want a promise. It wanted decisions. It wanted changed relationships. It wanted management-specific training. It wanted better controls.

This is a point I have been making for 15 years. A compliance program is not judged by what sits in the binder; it is judged by what the company does when the pressure hits. Balt has shown DOJ that when misconduct surfaced, the company acted. That is the difference between a paper program and a living program.

For CCOs, the action item is straightforward. Build remediation plans that can be demonstrated, measured, and explained. Who was disciplined? Which third party was terminated? What internal control was changed? How was senior management retrained? What monitoring now exists that did not exist before? If you cannot answer those questions in concrete terms, you are not remediating. You are narrating.

The shadow issue: aggravating circumstances

There is another important dimension here. Balt qualified for a Part I declination, in part, because DOJ found no aggravating circumstances. But as Wiley noted, that assessment can be highly fact-dependent and may not be obvious in the early stages of an internal investigation. The line between Part I and Part II can, in practice, be subjective and outcome-determinative.

That is a crucial warning for compliance officers. Balt should not be read as a guarantee. It should be read as an incentive structure. Companies must still assess whether the misconduct is egregious or pervasive, whether senior management is implicated, whether the harm is severe, and whether the organization has a recidivist history. Those factors can dramatically change the result. So the compliance officer’s job is not to assume declination. The job is to gather facts rapidly, surface aggravating factors honestly, and help leadership make a disciplined disclosure decision.

The new DOJ Declination policy offers more clarity than many companies had before. But it does not eliminate judgment. It raises the premium on disciplined judgment.

Five Key Takeaways for Chief Compliance Officers

  1. Build a rapid disclosure protocol now. Balt’s outcome underscores that early self-disclosure, even during an ongoing investigation, can be decisive. Delay can cost you the best available resolution.
  2. Design investigations to identify individuals from day one. The DOJ expects cooperation to include facts about responsible individuals, not just corporate-level summaries.
  3. Make remediation provable. Discipline wrongdoers, terminate tainted relationships, retrain management, and strengthen controls in ways you can document and explain.
  4. Assess aggravating factors early and honestly. The Part I versus Part II distinction may turn on pervasiveness, seriousness, harm, and recidivism. Do not assume a declination path without a hard-eyed assessment of the facts.
  5. Train leadership that declinations are earned, not granted. Balt is a roadmap, not a safe harbor. The organizations that benefit will be the ones prepared to act with speed, rigor, and credibility.

What Balt means for the compliance profession

The Balt Declination is a policy statement in the form of a case. The DOJ is telling companies: we will reward timely self-disclosure, meaningful cooperation, and real remediation. But we will also pursue individuals. That combination is not new in spirit, but it is now being presented with renewed clarity under the new CEP. For corporate compliance officers, the message is not to wait for an issue and hope for good instincts in the moment. The message is to prepare now.

You need escalation protocols that move fast. You need investigation readiness. You need decision trees for voluntary disclosure. You need board education on what DOJ is rewarding and why. And you need remediation mechanisms that produce evidence, not adjectives.

Balt did not receive a Declination because the misconduct was trivial. It received a Declination because, once the misconduct came to light, the company appears to have done the things the DOJ has been asking companies to do for years. That is the real lesson.

In 2026, compliance officers should read the Balt matter not as an outlier, but as a stress test. If your company found a credible FCPA issue tomorrow, could you move quickly enough, investigate thoroughly enough, cooperate meaningfully enough, and remediate credibly enough to make a Balt-style pitch to DOJ?

That is the question. And the answer should shape your compliance program today.

Categories
TechLaw10

TechLaw10: OpenClaw & Agentic AI Risk

In this film, Punter Southall Law’s Jonathan Armstrong discusses OpenClaw & Agentic AI with Eric Sinrod, an attorney at Duane Morris LLP and a University Professor. This is episode 298 in the popular TechLaw10 series. You can listen to earlier podcasts here, including episode 291, which specifically looked at AgenticAI. You can also watch episode 291 here: Agentic AI – what is it & what are the risks?   The podcast includes top tips to help avoid issues when using Agentic AI. Jonathan & Eric discuss various aspects of the recent investigations into OpenClaw & Orchids, including:

  • OpenClaw’s history and security concerns
  • The concerns over prompt injection
  • The issues with ShadowAI
  • regulatory action against OpenClaw in the Netherlands and in Hong Kong
  • The issues with Orchids
  • The issues with OpenClaw’s connections with social media & LLMs
  • The need to ensure AI literacy
  • The importance of reasonable due diligence
  • the need for a DPIA or AIIA
  • the need to consider other regulatory obligations, e.g., under NIS or DORA

Resources:

There are more details on OpenClaw’s issues here.

Jonathan talked about the EU AI Act; FAQs are available here.

A glossary of AI terms is also available here. The paper Jonathan references by Darren Williams is here. Jonathan also mentions a BBC investigation into Orchids, available here.

Eric Sinrod’s details can be found here, and Jonathan Armstrong’s details are available here.

The TechLaw10 LinkedIn group is here.

Categories
The PfBCon Podcast

The PFBCon Podcast: Turn Your Podcast into a Trackable Growth Engine with Instagram DM Automation with Jeff Dwoskin

Jeff Dwoskin, Co-Founder of Stampede Social and a longtime podcaster, explains how podcasters can turn episodes into measurable growth engines by using Instagram and Facebook DM automation to connect podcast calls to action to trackable engagement and conversions.

Jeff outlines the core problem that podcasts are powerful but opaque—downloads don’t reveal who took action—and proposes a simple attribution path: prompt listeners to comment or DM a keyword, automatically deliver links via DM, and measure clicks and engagement to prove ROI. Jeff emphasizes why Instagram works well for podcasters (two-way conversations, discovery, private/trackable DMs), why “link in bio” adds friction, and how clear CTAs increase response. He highlights additional tactics, including Reels/Shorts/TikTok for discovery, Instagram Live with automation, giveaways, fan tracking, dashboards, social scorecards, and competitive reporting, plus a new YouTube comment automation feature that routes clickable links via YouTube notifications. The conversation closes with a reminder to evolve with audience behavior and formats—using a yacht rock/MTV analogy and a note that younger audiences watch YouTube like TV—along with a Black Friday offer code (indie50) for 50% off the middle and top Stampede Social plans.

Key highlights:

  • Turning Podcasts into Growth
  • The Podcast Attribution Problem
  • DMs Create Trackable ROI
  • Why Instagram Works
  • Calls to Action That Convert
  • Discovery Beyond Followers
  • Lives Giveaways Superfans
  • Case Study 70% Click Rate
  • Frictionless Engagement Rules
  • Dashboards and Social Intel
  • New YouTube Comment Automation
  • Yacht Rock and Evolving Media

Resources:

Follow Jeff Dwoskin on:

Stampede Social

LinkedIn

Instagram

Classic Conversations Podcast

X