Categories
Life with GDPR

Life With GDPR: Exposed – The Shocking PSNI Data Release

Tom Fox and Jonathan Armstrong, renowned experts in cyber security, co-host the award-winning Life with GDPR. In this episode, Tom and Jonathan discuss a troubling inadvertent data release by the Police Service of Northern Ireland (PSNI).

The release occurred when a document containing sensitive information about PSNI employees was mistakenly uploaded to a public site, putting officers at risk. The document, inadvertently released based upon a valid FOIA request, wrongfully included the names, ranks, locations, and even surveillance and intelligence details of the Northern Ireland constabulary. This inadvertent release highlights how the bypassing of security checks caused the breach, emphasizing the real-world impact of data breaches on individuals. Tom and Jonathan also discuss the use of spreadsheets in data breaches and express frustration with the lack of attention given to these incidents. Overall, the conversation stresses the importance of data protection and compliance and the urgent need for improved measures to address this issue.

 Key Takeaways:

  • Data release at PSNI
  • Data release implications
  • Regulator’s Call for Improved Data Protection
  • Spreadsheets are evil

 Resources:

For more information on the issues raised in this podcast, check out the Cordery Compliance News Section. For more information on Cordery Compliance, go their website here. Also check out the GDPR Navigator, one of the top resources for GDPR Compliance by clicking here.

Connect with Tom Fox

●      LinkedIn

Connect with Jonathan Armstrong

●      Twitter

●      LinkedIn

Categories
It's art

It’s art, let’s talk about it – Phil Bob Borman – Capturing God’s Glory in Cloud Paintings

The Museum of Western Art is dedicated to excellence in the collection, preservation, and promotion of Western Heritage and the education and cultural enrichment of our diverse audiences. The Museum serves as a bridge between the past and the present, ensuring that the legacy of the American West will be preserved for the future. Western Art is as engaging and important as ever. In this podcast series, Museum Executive Direct Darrell Beauchamp visits with the artists who work in this western heritage to talk about their work, the legacy of Western Art and why talking about it is so important today. In this episode, Darrell visits with Phil Bob Borman.

Borman’s artistic journey is a testament to the power of following one’s passion and embracing change. From his early days as a cowboy pencil drawer to his current status as a renowned artist specializing in cloud paintings, Borman’s career trajectory highlights the importance of staying true to oneself and constantly evolving as an artist.

Borman’s fascination with atmospheric pressure and the glory of God’s creation is evident in his artwork, which often features elements like rain, grass, cows, and horses. For him, painting clouds is a way of capturing and celebrating God’s glory in every sky. This deep connection to his subject matter is what sets Borman apart and gives his work a unique perspective.

One of the key factors that have shaped Borman’s artistic journey is his participation in various exhibitions and workshops. He recognizes the importance of these opportunities for an artist’s growth and development. Borman’s involvement in the “Our Heavens Declare” exhibition, alongside twelve other phenomenal cloud painters, was a significant milestone in his career. The exhibition showcased the beauty and diversity of cloud paintings, and being part of such a well-received show at the Museum of Western Art was a testament to Borman’s talent and dedication.

Looking ahead, Borman plans to continue painting and revive his sculpture work. He finds joy in teaching workshops and helping aspiring artists grow, recognizing the importance of passing on knowledge and inspiring the next generation of artists. Borman’s artistic journey serves as an inspiration to artists and art enthusiasts alike, reminding us of the importance of following our passions, embracing change, and staying true to our artistic vision.

In conclusion, Phil Bob Borman’s artistic journey is a testament to the power of passion, dedication, and embracing change. His fascination with atmospheric pressure and the glory of God’s creation is beautifully captured in his cloud paintings. Through exhibitions, workshops, and the support of his wife, Borman has navigated the art industry with a balance of artistic integrity and business acumen. His commitment to his craft and unwavering intent as an artist make his work authentic and impactful. As he continues to paint and inspire others, Borman’s artistic journey serves as a reminder of the importance of staying true to oneself and constantly evolving as an artist.

Remember to visit the Museum of Western Art in Kerrville, Texas, to explore the rich tapestry of Western art and support these talented artists.

Resources

Museum of Western Art

Darrell Beauchamp on LinkedIn

Phil Bob Borman

Categories
Daily Compliance News

Daily Compliance News: August 31, 2023 – The Switzerland AML Edition

Welcome to the Daily Compliance News. Each day, Tom Fox, the Voice of Compliance, brings you compliance-related stories to start your day. Sit back, enjoy a cup of morning coffee, and listen to the Daily Compliance News, all from the Compliance Podcast Network. Each day, we consider four stories from the business world: compliance, ethics, risk management, leadership, or general interest for the compliance professional.

·       Goldman Sanctioned for ephemeral messaging compliance failures.  (WSJ)

·       NIST framework and AI.  (Bloomberg Law)

·       China crackdowns rip through healthcare industry corruption. (FT)

·       Switzerland unveils money-laundering crackdown. (FT)

Categories
Compliance Into the Weeds

Compliance into the Weeds: 3M FCPA Enforcement Action

The award winning, Compliance into the Weeds is the only weekly podcast which takes a deep dive into a compliance related topic, literally going into the weeds to more fully explore a subject. Looking for some hard-hitting insights on sanctions compliance? Look no further than Compliance into the Weeds! In this episode, Tom and Matt consider the recent FCPA enforcement action involving the Chinese business unit of 3M.

The importance of post-event documentation and monitoring in preventing fraud and corruption cannot be overstated, as highlighted by the recent FCPA incident involving 3M China. Tom believes that while training and control environment adjustments are crucial, they may not be enough to prevent misconduct if individuals are determined to commit such acts. He emphasizes the need for hard evidence, such as post-event documentation, and recommends looking to the heavily regulated pharmaceutical sector for guidance.

Matt stresses the importance of rigorous post-event documentation to ensure the legitimacy of business activities. Both Fox and Kelly gained these insights from their extensive experience in the field of compliance and their analysis of various fraud cases. To learn more about their unique perspectives on post-event documentation and monitoring, join them on this episode of the Compliance into the Weeds podcast. 

Key Highlights

·      Background facts

·      GTE in FCPA enforcement actions

·      What happens when conduct is done secretly

·      Concerns over the use of messaging apps

·      Lessons Learned

 Resources

Matt in LinkedIn

Tom –blog post on the FCPA Compliance and Ethics Blog

Instagram

Facebook

YouTube

Twitter

LinkedIn

Categories
Daily Compliance News

Daily Compliance News: August 30, 2023 – The Matt Levine Explains NFTs Edition

Welcome to the Daily Compliance News. Each day, Tom Fox, the Voice of Compliance, brings you compliance-related stories to start your day. Sit back, enjoy a cup of morning coffee, and listen to the Daily Compliance News. All from the Compliance Podcast Network. Each day we consider four stories from the business world: compliance, ethics, risk management, leadership, or general interest for the compliance professional.

  • Is Shein using forced labor? (Reuters)
  • A convicted agent sues Adidas. (Yahoo Sports)
  • Are NFTs securities? Matt Levin explains it all. (Bloomberg)
  • Start the day like Jamie Dimon. (FT)
Categories
The Hill Country Podcast

The Hill Country Podcast – Loren Steffy on the 88th Texas Legislative Session

Welcome to award-winning The Hill Country Podcast. The Texas Hill Country is one of the most beautiful places on earth. In this podcast, Hill Country resident Tom Fox visits with the people and organizations that make this the most unique areas of Texas. Join Tom as he explores the people, places and their activities of the Texas Hill Country.

The 88th Texas Legislature recently concluded its biennial session and two special sessions, focusing on property tax relief, water infrastructure, and the electricity grid. The proposed property tax relief was a welcome move, and Patrick was on the right track with his proposal to ensure homeowners don’t lose their homes due to high tax rates. The legislature ultimately came up with a dual approach, which is a compromise, and homeowners will be glad to see some relief from the property taxes.

Sadly, the impeachment of Ken Paxton took the air out of all other legislative work. Paxton has been under indictment for a long time, and nobody on the Republican side seemed to care until he asked for state funds to pay for his legal settlement. It took a long time for state leaders to take action, and it shouldn’t have taken this much effort. The impeachment trial will be held in the Senate later this summer.

Tom Fox and Loren Steffy discussed the importance of access to education and public services in remote areas. Tom Fox’s junior high school history teacher posited that the American high school created the American middle class. The founding fathers of America wanted to get away from the class system and believed that with access to education, anyone can be anything. The founding fathers of the Republic of Texas, Mirabeau Lamar and Anson Jones, set aside land in every township for K-12 education. The disagreement between the governor and lieutenant governor of Texas was over how to reform property taxes or give people a break. The governor wanted to subsidize school property taxes, while the lieutenant governor wanted to raise the homestead exemption. The governor also wanted to take public funds to fund private education, but he did not get what he wanted.

The transfer of wealth from taxpayers to private companies running schools with less accountability than public schools was a major concern. Rural Republican and urban Democratic voters united in opposition to school vouchers. There was an argument that private schools would take away access to best athletes for rural football teams. There was also an analogy to rural hospitals closing due to lack of cost effectiveness. There was a potential for the education system to become exclusive and elite, and it would also lead to the draining of healthcare facilities in rural areas.

Tom Fox and Loren Steffy also discussed Tom’s book, The Big Empty. Steffy is starting a series called Podcasts in Print. The first Podcasts in Print will be the discussion between Tom and Loren about The Big Empty. It will be released in early August, and Loren is looking forward to its release.

This episode provided an insightful look into the issues facing Texas and the importance of access to education and public services in remote areas. The legislature’s efforts to provide property tax relief and the impeachment of Ken Paxton are two major issues that will have an impact on the state. Podcasts in Print series will be a great way to explore these topics further.

 Key Highlights

·       Assessment of the 88th Legislature

·       Property Tax relief

·      School Vouchers

·      Rural Texas

·      Ken Paxton impeachment by Texas House

 Resources

Loren Steffy

Stoney Creek Publishing

Tom Fox

Instagram

Facebook

YouTube

Twitter

LinkedIn

Categories
31 Days to More Effective Compliance Programs

One Month to a More Effective Compliance Program: Day 21 – Ten Compliance Questions To Pose To HR

As we end this month on the intersection of HR and compliance, I have developed a series of goals and objectives which you might want to use as a starting point for operationalizing your compliance initiatives through your corporate HR function.

  1. How are compliance goals cascaded down to individual workers?
  2. Does anyone complain that your compliance targets are too complex?
  3. How do you deal with repeated compliance failures in a specific business segment or compliance program area?
  4. How does your company show that attracting and developing talent who will engage in ethical business conduct is a top priority?
  5. How long is compliance underperforming tolerated?
  6. What makes it distinctive to work at your company?
  7. How do compliance programs that are not working typically get exposed and remediated?
  8. What key compliance indicators do you use for compliance tracking?
  9. For a given compliance problem, how do you identify the root cause?
  10. What are you doing to retain your top employees from the compliance perspective?

Compliance practitioners continually face the challenge of keeping up with the ever-evolving compliance best practices with little or no budget increase. By asking yourself and of your compliance program these questions you may create a road map to more fully operationalize your compliance regime.

Three key takeaways:

  1. What are the unique compliance targets you have set and how interconnected are they to your business unit goals?
  2. Use a root cause analysis to determine why compliance initiatives are not successful.
  3. Retraining employees in compliance is an under-utilized tool.

For more information, check out The Compliance Handbook, 4th edition, here.

Categories
Blog

3M in China-Where Secret Travel = FCPA Violations

You know that when the Securities Exchange Commission (SEC) uses the word ‘secretly’ when discussing a corporate program, it is a seriously not good look. That is certainly the case in the recently announced Foreign Corrupt Practices Act (FCPA) enforcement action involving 3M’s Chinese business unit. In an Order, outlining the facts and FCPA violations it stated, “During the Relevant Period, a former 3M-China marketing manager (the “Marketing Manager”) colluded with two China-based travel agencies (the “China Travel Agencies”) to secretly provide Tourism Activities for Chinese Government Officials during Educational Events. The Marketing Manager was aided in the scheme by several employees in 3M-China’s sales, marketing and professional services departments.” [emphasis supplied] For its ‘secret’ scheme without admitting or denying the SEC’s findings, 3M agreed to pay $4.5 million in prejudgment interest and disgorgement and a civil penalty of $2 million or a total of $6.5 million.

Background

The Order recited that certain 3M-China Employees targeted influential officials of Chinese state-owned enterprises and Chinese Government Officials for attendance at overseas Educational Events and, in collusion with the China Travel Agencies. To facilitate this scheme, 3M-China Employees would create a travel itinerary that included various legitimate business, training and marketing activities for submission to 3M-China’s compliance personnel for approval. However there were “alternate itineraries (the “Alternate Itineraries”)” planned which consisted of various Tourism Activities at or near the location of the Educational Events. There were free travel and lodging provided which “were designed to improperly induce the Officials to purchase 3M products, and violated company policy.”

Interestingly, the 3M-China Employees circulated the Alternate Itineraries through hand delivery or personal WeChat accounts or ephemeral messaging. The 3M-China Employees asked the participants to keep the agenda hidden, and falsified internal compliance documents so that the Tourism Activities were not shown to be planned as part of the overseas trip.

There were several indicia which demonstrated the travel was not for business purposes but for recreational purposes. From the Order it stated

(a) Tourism Activities were scheduled at the same time as the Educational Event activities;

(b) the ostensibly Educational Events were in English, and the trips included Chinese Government Officials who neither understood English nor had adequate translation services;

(c) at times Chinese Government Officials missed whole days of the Educational Event or simply never attended at all; and

(d) Certain Chinese Government Officials also requested Tourism Activities as part of the overseas trip.

To fund these illegal activities, 3M-China Employees would at times work with the collusive China Travel Agencies to inflate their billing invoices for ostensibly legitimate expenses such as  travel costs. In other instances, the 3M-China Employees submitted unpermitted invoices directly to the China Travel Agencies for reimbursement rather than to 3M China. Finally, the China Travel Agencies, with the support of the 3M-China Employees, at times directed that 3M-China’s distributors pay for portions of the non-reimbursable expenses. Rather stupidly from a legal and compliance perspective, 3M China employees measured the impact that this corruption had on sales. They tracked the effect of providing overseas travel on 3M-China’s sales to SOE Customers. One 3M-China Employee tracked post-trip sales “to ensure they were consistent with 3M-China’s sales goals. Most amazingly “3M-China management asked for the “return on investment” from an Educational Event (i.e. the effect of providing health care officials with overseas travel on sales to the SOE Customer) by comparing sales figures before and after an Educational Event.”

Finally, “from at least 2014 through 2017, 3M-China paid nearly $1 million to fund at least 24 trips for Chinese Government Officials that included Tourism Activities. The costs of these trips were improperly recorded in 3M’s books and records as legitimate business expenses, without any indication that they included Tourism Activities. As a result of the above conduct, 3M improperly benefited by at least $3.5 million from increased sales.”

Discussion

There are several key lessons to be garnered from this FCPA enforcement action. One key lesson from this case is that if your organization is paying for attendance at educational events, the value of rigorous post-event documentation, such as sign-in sheets and attendance verification is critical. By ensuring that officials were present at the events they are paid for, transparency is enhanced, and corruption can be prevented as your employee base will know that compliance is providing oversight and monitoring. This approach draws from the pharmaceutical sector, which has implemented stringent event monitoring practices.

The importance of post-event documentation and monitoring extends beyond coruption prevention. It also plays a crucial role in compliance efforts. By thoroughly documenting events and activities, companies can demonstrate their commitment to ethical business practices and compliance with regulations. This documentation serves as evidence of due diligence and can be invaluable in audits and investigations.

However, compliance professionals must strike a balance between the level of control and the resources required for documentation. While it is essential to have robust controls in place, excessive bureaucracy can hinder efficiency and productivity. Finding the right balance is crucial to ensure compliance without impeding business operations.

Another challenge lies in the use of ephemeral messaging, as seen in the Three M China case. Ephemeral messaging platforms, which automatically delete messages after a certain period, can raise concerns about transparency and compliance. While these platforms may have legitimate uses in private communications, their use in a corporate setting can be seen as a less than transparent attempt to conduct business ethically. Compliance professionals should carefully consider the implications of using such platforms and evaluate whether they align with their organization’s compliance objectives.

Data analytics also play a significant role in post-event documentation and monitoring. By leveraging advanced analytics tools, companies can detect patterns and anomalies that may indicate fraudulent activities. For example, multiple payments to the same vendor by different entities within the extended enterprise can be a red flag worth investigating. Implementing robust data analytics capabilities can enhance the effectiveness of post-event monitoring and help identify potential compliance risks.

In conclusion, the 3M China FCPA enforcement action underscores the importance of post-event documentation and monitoring in fraud prevention and compliance efforts. Rigorous documentation practices, inspired by the pharmaceutical sector’s approach, can enhance transparency and prevent corruption. However, finding the right balance between control and efficiency, addressing challenges associated with ephemeral messaging, and leveraging data analytics are crucial for effective post-event documentation and monitoring. By prioritizing these factors, companies can strengthen their compliance programs and mitigate the risks associated with fraudulent activities.

Categories
Innovation in Compliance

Innovation in Compliance – Oshri Cohen on the Role of a CTO in Compliance

The role of a Chief Technology Officer (CTO) in compliance and data governance is explored in this podcast episode between Tom Fox and Oshri Cohen. They discuss the varying responsibilities of a CTO based on company size, with larger organizations focusing on strategic planning while smaller organizations have the CTO as the head engineer. The importance of the CTO in managing risks, particularly in industries like healthcare and finance, is emphasized, along with the role of the board in providing oversight. The conversation also delves into the significance of data strategy, compliance, and data governance, emphasizing the need for collaboration between the CTO and the Chief Compliance Officer (CCO). Technical due diligence and the establishment of a data commission within organizations are suggested as strategies for effective data governance. Overall, the conversation highlights the crucial role of the CTO in ensuring compliance and protecting sensitive information.

  • The Role of a CTO in Compliance
  • Data Strategy and Compliance
  • Data Governance Challenges
  • Data Governance and Startups
  • Risks in System Audits

 Resources:

Oshri Cohen on LinkedIn

Tom Fox

Instagram

Facebook

YouTube

Twitter

LinkedIn

Categories
Daily Compliance News

Daily Compliance News: August 29, 2023 – The $6bn Edition

Welcome to the Daily Compliance News. Each day, Tom Fox, the Voice of Compliance brings to you compliance related stories to start your day. Sit back, enjoy a cup of morning coffee and listen in to the Daily Compliance News. All, from the Compliance Podcast Network. Each day we consider four stories from the business world, compliance, ethics, risk management, leadership or general interest for the compliance professional.

·       3M to pay $6bn in ear plug settlement.  (WSJ)

·       US does not want to ‘de-couple’ from China.  (NYT)

·       Regional Spanish soccer chiefs demand Rubiales resignation. (ESPN)

·       Non-lessons learned from cyber war in Ukraine. (FT)