Categories
Blog

Expanding Compliance Obligations of the Board – Part 1: Blue Bell

The role of the Board of Directors has always been a key part of any best practices compliance program. The Department of Justice (DOJ) and Securities and Exchange Commission (SEC) have consistently said that a Board’s role is active oversight of compliance. Over the past few years, the civil side of this obligation has become much more prominent, led by developments in case law under the Caremark doctrine, as modified by Stone v. Ritter by the Delaware Supreme Court. In response to demands for greater accountability and corporate accountability, the Delaware courts have been cutting back the Caremark standard and rejecting motions to dismiss filed by defendants. Recent cases are continuing down this path and raising the expectations for Board members exercising their duty of loyalty and duty of care. This week I will be exploring this expanded set of legal obligations laid down by the Delaware Supreme Court.
Mike Volkov has stated, “At the core of board member protection from liability is the well-known Caremark doctrine that requires corporate boards to make a good faith effort to implement a system for compliance program monitoring and reporting. For years, Delaware courts easily rebuffed shareholder derivative suits challenging board members’ performance after a corporate scandal occurred. The Caremark standard was reinforced in Stone v. Ritter, where the court stated director oversight liability requires a showing of either “the directors utterly failed to implement any reporting or information system or controls” or the directors, “having implemented such a system or controls, consciously failed to monitor or oversee its operations thus disabling themselves from being informed of risks or problems requiring their attention.”
Under Caremark and Stone v. Ritter, a director must make a good faith effort to oversee the company’s operations. Failing to make that good faith effort breaches the duty of loyalty and can expose a director to liability. But it is more than simply not doing your job as a Board, it is doing so in bad faith. The Court states, “In other words, for a plaintiff to prevail on a Caremark claim, the plaintiff must show that a fiduciary acted in bad faith—“the state of mind traditionally used to define the mindset of a disloyal director.” Bad faith is established, under Caremark, when “the directors [completely] fail[] to implement any reporting or information system or controls[,] or … having implemented such a system or controls, consciously fail[ ] to monitor or oversee its operations thus disabling themselves from being informed of risks or problems requiring their attention.” In short, to satisfy their duty of loyalty, directors must make a good faith effort to implement an oversight system and then monitor it.”
This change began in a case Marchand v. Barnhill and it involved that Texas institution, Blue Bell Ice Cream, the top ice cream manufacturer in the US. In this decision, the Court found that the Blue Bell Board completely abrogated its duty around the single largest safety issues it faced – food safety. That abrogation allowed a listeria outbreak, “causing the company to recall all of its products, shut down production at all of its plants, and lay off over a third of its workforce. Blue Bell’s failure to contain listeria’s spread in its manufacturing plants caused listeria to be present in its products and had sad consequences. Three people died as a result of the listeria outbreak. Less consequentially, but nonetheless important for this litigation, stockholders also suffered losses because, after the operational shutdown, Blue Bell suffered a liquidity crisis that forced it to accept a dilutive private equity investment.”
The job of every Board member is to represent the shareholders, not the incumbent Chief Executive Officer (CEO) and Chairman of the Board. To do so, the Board must oversee the risk management function of the organization. Blue Bell was and to this day is a single-product food company and that food is ice cream. This sole source of income would mandate that the highest risk the company might face is around food. But as the underlying compliant noted, “despite the critical nature of food safety for Blue Bell’s continued success, the complaint alleges that management turned a blind eye to red and yellow flags that were waved in front of it by regulators and its own tests, and the board—by failing to implement any system to monitor the company’s food safety compliance programs—was unaware of any problems until it was too late.”
The plaintiffs reviewed the Board records and made the following allegations:

  • there was no Board committee that addressed food safety;
  • there was no regular process or protocols that required management to keep the Board apprised of food safety compliance practices, risks, or reports which existed;
  • there was no schedule for the Board to consider on a regular basis, such as quarterly or biannually, any key food safety risks which existed;
  • during a key period leading up to the deaths of three customers, management received reports that contained what could be considered red, or at least yellow, flags, and the Board minutes of the relevant period revealed no evidence that these were disclosed to the Board;
  • the Board was given certain favorable information about food safety by management, but was not given important reports that presented a much different picture; and
  • the Board meetings are devoid of any suggestion that there was any regular discussion of food safety issues.

The Board’s response to these allegations is instrumental in understanding how Board’s viewed their obligations regarding oversight of compliance. The Court stated, “the directors largely point out that by law Blue Bell had to meet FDA and state regulatory requirements for food safety, and that the company had in place certain manuals for employees regarding safety practices and commissioned audits from time to time. In the same vein, the directors emphasize that the government regularly inspected Blue Bell’s facilities, and Blue Bell management got the results.”
The Delaware Supreme Court made short shrift of this argument, stating “fact that Blue Bell nominally complied with FDA regulations does not imply that the board implemented a system to monitor food safety at the board level. Indeed, these types of routine regulatory requirements, although important, are not typically directed at the board. At best, Blue Bell’s compliance with these requirements shows only that management was following, in a nominal way, certain standard requirements of state and federal law. It does not rationally suggest that the board implemented a reporting system to monitor food safety or Blue Bell’s operational performance.”
The Board’s next defense was even more inane and was so preposterous, the Delaware Supreme Court labeled it as “telling.” It was that because the Board had received information on the company’s operational issues and performed oversight on operational issues, it had fulfilled its Caremark obligations. This is basically the same argument that every paper-pushing argument for compliance program. We have something on paper, so we have complied is the clarion call of such practitioners. The Delaware Supreme Court also saw through the flimsiness of this argument stating, “if that were the case, then Caremark would be a chimera.” [emphasis in original] This is because operational issues are always discussed at the Board level. Finally, Caremark requires “that a board make a good faith effort to put in place a reasonable system of monitoring and reporting about the corporation’s central compliance risks. In Blue Bell’s case, food safety was essential and mission critical.”
It has long been axiomatic that bad facts can lead to large changes in how courts interpret the law. The Blue Bell case had facts that the Court all but said the Board engaged in bad faith regarding its compliance obligations. The change was only the beginning.

Categories
This Week in FCPA

Episode 273 – the Back in the ALCS edition


The Astros and Red Sox meet in the ALCS. Is it the Cheater’s Ball? Tom and Jay are back to review some of the top compliance and ethics stories on the Back in the ALCS edition.
 Stories

  1. Who knows what values lurk in the heart? The Shadow know (and your emails as well). The John Gruden firing. ESPN, Sports Illustrated, NYT, WSJ. Tom with a 2-part blog post series.
  2. Confronting Ethical and Moral Dilemmas: Don’t Go It Alone. Richard Snell in Knowledge@Wharton.
  3. Evolution of 3rd party risk management. Mike Volkov in Corruption, Crime and Compliance.
  4. The role of employees in weeding out corp misconduct. David Smagalla in the WSJ Risk and Compliance Journal.
  5. Ex-Braskem CEO gets 20 months. Kyle Brasseur in Compliance Week. (sub req’d)
  6. Cooperating (or not) with the SFO. Lloydettte Bai-Marrow in the FCPA Blog.
  7. Inconsistency in UK and EU banking regs? Deepali Nijhawan in CCI.
  8. What is tech risk? Carol Williams in Risk and Compliance Matters.
  9. Ozy from the audit perspective. Francine McKenna in The Dig. (sub req’d)
  10. ESG channels Watergate (as in follow the money). Lawrence Heim in practicalESG.

 Podcasts and Events

  1. Compliance Week is going ‘Inside the Mind of the CCO’. Participate in the survey here.
  2. Ethisphere’s World Most Ethical Company awards for 2022 are open for submission. For more information on the Application Process, click here.
  3. Are you exasperated? Then check, F*ing Argentina. In this podcast series co-hosts Tom Fox and Gregg Greenberg, author of F*ing Argentina explore the current American psyche of being overworked, over leveraged, overtired and overwhelmed. Find out about modern America’s exasperation with well…exasperation. In Episode 1, the dreaded Parent Meeting night at your child’s elementary school. In Episode 2, why F*ing Argentina? In Episode 3, one of the most beloved characters in musical theater, Officer Krupke is exasperated. In Episode 4, the ubiquitous ‘Couples Dinner’. In Episode 5, a tennis journeyman’s lament.
  4. This month on The Compliance Month, I visit with John Melican, Managing Director at Exiger on his journey to and from the CCO chair. In Episode 1, college and early professional career at NY County DA’s Office. In Episode 2, Melican moves into the corporate world and into compliance.
  5. What is Design Thinking in Compliance? Check out the newest edition to the CPN, where co-hosts Tom Fox and Carsten Tams discuss the social engineering tool of design thinking and how it creates greater compliance engagement and effectiveness. In Episode 2, we take up co-creation.
  6. How does a Compliance Bible become a best-seller? Check out Tom’s appearance on the C-Suite Network’s Best Seller TV to find out. Purchase The Compliance Handbook, 2nd edition here.

Tom Fox is the Voice of Compliance and can be reached at tfox@tfoxlaw.com. Jay Rosen is Mr. Monitor and can be reached at jrosen@affiliatedmonitors.com.

Categories
Everything Compliance

Episode 87, the Award-Winning Edition

Welcome to the only award winning roundtable podcast in compliance. Today, we are thrilled to have our newest panelist Karen Woody join us as a permanent panelist. The entire gang was also thrilled to be honored by W3 as a top talk show in podcasting.

 We end with a veritable mélange of shouts outs and one epic rant.

1. Karen Woody talks about the ‘wild west’ of cryptocurrency and the regulatory environment growing up around it. Karen has a shout out domestic tourism in Brown County Indiana.

2. Jay Rosen discusses the morally bankrupt culture at Facebook and how the company can begin to comeback from the abyss. Rosen shouts out to Josh Allen and the Buffalo Bills for being one of the best teams in the NFL this season and advises long-suffering Bills fan Lisa Fine to ‘enjoy the ride’.

3. Matt Kelly discusses the recent speech by SEC Director of Enforcement, Gurbir Grewal in which Grewal previewed an increase in penalties in enforcement by the SEC. Kelly shouts out to Kareem Abdul Jabbar for his evisceration of NBA players in general and Kyrie Irving in particular for their selfish attitudes in failing to get Covid vaccinations.

4. Jonathan Armstrong looks at whistleblowing in the EU. He shouts out to Emma Raducanu for her stunning win in the US Open this year.

5. Tom Fox rants about Waller County and its lack of criminal charges against drivers who intentionally or negligently run over cyclists.

The members of the Everything Compliance are:
•       Jay Rosen– Jay is Vice President, Business Development Corporate Monitoring at Affiliated Monitors. Rosen can be reached at JRosen@affiliatedmonitors.com
•       Karen Woody – One of the top academic experts on the SEC. Woody can be reached at kwoody@wlu.edu
•       Matt Kelly – Founder and CEO of Radical Compliance. Kelly can be reached at mkelly@radicalcompliance.com
•       Jonathan Armstrong –is our UK colleague, who is an experienced data privacy/data protection lawyer with Cordery in London. Armstrong can be reached at jonathan.armstrong@corderycompliance.com
•       Jonathan Marks is Partner, Firm Practice Leader – Global Forensic, Compliance & Integrity Services at Baker Tilly. Marks can be reached at jonathan.marks@bakertilly.com

Categories
The Compliance Life

John Melican- Move into the Corporate World and Compliance


The Compliance Life details the journey to and in the role of a Chief Compliance Officer. How does one come to sit in the CCO chair? What are some of the skills a CCO needs to success navigate the compliance waters in any company? What are some of the top challenges CCOs have faced and how did they meet them? These questions and many others will be explored in this new podcast series. Over four episodes each month on The Compliance Life, I visit with one current or former CCO to explore their journey to the CCO chair. This month, my guest is John Melican, former CCO at AMEX Travel and now Managing Director at Exiger.
Melican moved to the corporate world starting at the New York Stock Exchange and then into the financial services world at Bearn Sterns where he was a Managing Director/Principal for three years. It was at Bearn Sterns he began his career in AML work and in compliance. From Bearn Sterns he went to American Express. He talked about moving from a financial services firm to one of the largest multi-national companies in the travel and financial transactions business.
Resources
John Melican LinkedIn Profile
Exiger

Categories
Design Thinking in Compliance

Introduction to Design Thinking in Compliance


Welcome to the latest edition to the Compliance Podcast Network. In this podcast, I am joined by my co-host Carsten Tams, Ethical Business Architect and founder and CEO of Emagence LLC, a boutique consulting firm based in New York City, partners with corporate, academic and NGO clients to develop innovative and evidence-based strategies rooted in behavioral science for solving organizational challenges. Over this podcast series we will explore how Design Thinking can be used to improve your compliance program by increasing employee engagement. In this inaugural episode, Carsten and I will explore why the Design Thinking process can be such a powerful tool for the compliance professional. Highlights include:
1. What is the problem that Design Thinking can solve?
2. What is employee engagement?
3. Why is employee engagement so critical to compliance?
4. How can you design engagement into your compliance program?
Resources
Carsten Tams on LinkedIn
Design Thinking Meets Ethics and Compliance
Human-Centered Design: An Engaging Ethics & Compliance Program Serves Users’ Needs
The Co-Creation Imperative: If You Build It With Them, They Will Engage
 Ready, Set, Go: Running A Design Sprint

Categories
Daily Compliance News

October 1, 2021 the Manning Brothers edition


In today’s edition of Daily Compliance News:

  • Morgan Stanley faces scrutiny over Venezuela. (WSJ)
  • Joel and the robots on MNF. (WSJ)
  • Dan Kahn returns to private practice. (WSJ)
  • Crypto beefs up compliance. (WSJ)
Categories
This Week in FCPA

Episode 271 – the Monsterfest Month Returns


Jay and Tom  are back to unpack some of the stories that caught their collective eye on the Monsterfest Month Returns edition.

Stories

1.     WPP FCPA enforcement action. Tom with 5-part series on the FCPA Compliance and Ethics Blog. Matt Kelly in Radical Compliance. Tom and Matt on Compliance into the Weeds. Mike Volkov has a 3-part series in Corruption Crime and Compliance.
2.     Human rights litigation on the EU. Salomé Lemasson in the FCPA Blog.
3.     BOD structure as key to compliance oversight. David Katz and Laura McIntosh in Harvard Law School Forum on Corporate Governance.
4.     Bringing clarity to the chaotic world of the CCO. Chris Audet in CCI.
5.     Another week, another Wells Fargo fraud related penalty. Jaclyn Jaeger in Compliance Week (sub req’d)
6.     Dan Kahn returns to private practice. Dylan Tokar in the WSJ Risk and Compliance Journal.
7.     Do ABC academics fail? Matthew Stephenson in GAB.
8.     Conquering the last mile of delivery of your Code of Conduct. Harper Wells in CCI.
9.     What is Ozy and what does it mean for compliance. Ben Smith in the NYT.
10.  Who owns ESG? Matt Kelly explores on Radical Compliance.

Podcasts and Events

11.  CCI surveying stress in compliance. Henry Kronk in CCI. Take the survey here.
12.  Compliance Week is going ‘Inside the Mind of the CCO’. Participate in the survey here.
13.  Ethisphere’s World Most Ethical Company awards for 2022 are open for submission. For more information on the Application Process, click here.
14.  Check out the latest addition to the Compliance Podcast Network, A Yank at Oxford. It details the journey of Foley & Lardner partner David Simon as he heads back to university to matriculate for a MBA at Oxford. Episode 1.
15.  Are you exasperated? Then check, F*ing Argentina. In this podcast series co-hosts Tom Fox and Gregg Greenberg, author of F* Argentina explore the current American psyche of being overworked, over leveraged, overtired and overwhelmed. Find out about modern America’s exasperation with well…exasperation. In Episode 1, the dreaded Parent Meeting night at your child’s elementary school. In Episode 2, why F*ing Argentina? In Episode 3, one of the most beloved characters in musical theater, Officer Krupke is exasperated.
16.  Tom and Compliance Week EIC Dave Lefort look back at September in CW and forward to October (and talk some sports) in this month’s edition of From the Editor’s Desk.
17.  K2 Integrity’s Edoardo Fiora will present at, “ESG Getting Hitched to Business (and IP) Strategy—From Resilience Framework to Recovery Path,” on October 14th. Registration and Information here.
18.  Join Jay, Tom and the top E&C professionals at Converge21, a virtual conference on October 12 & 13. Registration and information here. Why should you attend? Check out some of the panelists discuss their presentation on the Converge21 podcasts. Michael Randrup Wendy Badger, Lloydette Bai-Marrow, Tom and Philip Winterburn.
19.  How does a Compliance Bible become a best-seller. Check out Tom’s appearance on the C-Suite Network’s Best Seller TV to find out.  Purchase The Compliance Handbook, 2nd edition here.

Tom Fox is the Voice of Compliance and can be reached at tfox@tfoxlaw.com. Jay Rosen is Mr. Monitor and can be reached at jrosen@affiliatedmonitors.com.

Categories
Blog

WPP Enforcement Action: Part 5 – The Lessons Learned

This week we have been exploring the recent Securities and Exchange Commission (SEC) Cease and Desist Order (Order) entered into last week with WPP plc, the world’s largest advertising group, for paying bribes to Indian government officials and participating in other “illicit schemes” in China, Brazil and Peru. WPP agreed to pay $11 million+ in disgorgement and interest and penalty of $8 million for a total amount of just over $19 million. Today we conclude with some lessons learned for the compliance professional.
Culture Matters
It seems about the most basic thing to say in the compliance realm, but the most important thing is your corporate culture. If your culture puts no value on doing business ethically and in compliance, your organization will surely have problems. As I have cited to multiple times in this exploration of WPP, the Order stated, “WPP had no compliance department during the relevant period”. If your company will not have a compliance function, it speaks about as highly as one can about the values and culture of your organization. It could not be put more simply, with no compliance program, your organization does not value having a culture of compliance. Throughout the Order are examples of this lack of value. From the perfunctory first investigation into allegations in India, to the paper compliance program in place, to the lack of preacquisition due diligence from the compliance perspective; it is clear WPP put no value into having a culture of compliance.
Investigations 
The Order made clear that after the initial whistleblower report, “which identified CEO A by name as the architect of the scheme”; WPP then tasked part of the group involved in the actions to investigate the allegations. That group then hired “an Indian partner firm of an international accounting firm ostensibly to investigate the allegations and review India Subsidiary’s processes regarding government contracts and transactions involving government clients.” [emphasis supplied] Who did this investigator rely on for information? The very leaders of the corruption scheme, the WPP-India Chief Executive Officer (CEO) and Chief Financial Officer (CFO).
What were other key deficiencies in the investigation?

  • There was no contact with the identified recalcitrant 3rd
  • The investigative firm relied on information from the parties identified in the whistleblower report.
  • There was no independent verification.
  • There were no conclusions related to the bribery allegations brought forward by the whistleblower.

The WPP matter is an excellent teaching tool for how NOT to perform an investigation.
Mergers and Acquisitions (M&A)
Here WPP apparently engage in none of the M&A components of even a minimum standard for compliance. There was no preacquisition due diligence into any of the entities acquired. Simply doing acquisitions in a high-risk environment is not verboten. But doing so with no compliance is. Moreover, there was apparently no integration of the acquired entities into the WPP compliance program, such as it was. Once again without a compliance function to drive this to the finish, there was no corporate group tasked to finish it out. Obviously, there was no forensic compliance audit of the acquired entities after acquisition as well. I cannot point to a shortcoming of WPP as there were no shortcomings in execution, as there was no effort.
Incentives
When do sales or remuneration incentives become perverse incentives? For Wells Fargo, it came when the corporate hierarchy determined that the proper number of Wells Fargo products was eight per customer and employees continued employment and compensation would depend on hitting that inane number. (Remember the CEO, John Stumpf, said “8 is great!”) WPP crossed that threshold when they made the earnouts for the founders of the organizations they acquired, who were kept on to run subsidiaries such as WPP-India, contingent on hitting sales numbers they could not reach without engaging in bribery and corruption. When you couple that with no effective controls, no culture of compliance and outright fraud, you see how WPP came to Foreign Corrupt Practices Act (FCPA) grief.
Whistleblower Reports
The bribery schemes were so blatant that in India there were seven internal whistleblower reports. As stated in the Order, “From July 7, 2015 through September 2, 2017, WPP received seven anonymous complaints alleging – with increasing specificity – two bribery schemes related to India Subsidiary’s work for DIPR.” That is seven, count them seven documented whistleblower reports which had details including names of the participants and the bribery schemes. This failure simply boggles the mind, yet is axiomatic of the culture of WPP.
It is still not clear how WPP came to the attention of the SEC. We do know if it was not through self-disclosure. It may well have been an internal whistleblower. For companies who decry whistleblowers who go public, WPP is Prime Example 1 of why. Moreover, how many whistleblowers would have the continued drive to continue to report illegal conduct after the first report which was dismissed through a sham investigation?
We are now at the end of the WPP sage from the perspective of the SEC enforcement action. I began this series with several questions which still remain open. They include:

  • How was the SEC made aware of WPP’s bribery and corruption?
  • Is there a parallel Department of Justice (DOJ) enforcement action?
  • Where is the Serious Fraud Office (SFO)?
  • How did WPP avoid a monitor?

As these questions remain open, we may well be revisiting WPP again.

Categories
Coffee and Regs

Regulator Insights & SEC Exam Priorities

Categories
This Week in FCPA

Episode 270 – the Heading to October edition


Jay returns from his travels to report on the 1st compliance conference since 2019. He and Tom unpack some of the stories that caught their collective eye on the Heading to October edition.

Stories

1.     ESG and Compliance. Mike Volkov on the ‘G’ in ESG. Tom has a 5-part series on why compliance should lead the ESG effort in the FCPA Compliance and Ethics Blog.
2.     Asking more of your auditors. Neil Hodge in Compliance Week (sub req’d)
3.     ISO weighs in on good governance standards. Dylan Tokar in the WSJ Risk and Compliance Journal.
4.     Regulating the wild west of crypto. Henry Kronk in CCI.
5.     Which Mozambique countenance or prosecute its President’s corruption? Rick Messick in GAB.
6.     Making the most from your risk assessment? Jeff Kaplan in the FCPA Blog.
7.     What is a criminal COI? Sara Kropf in Grand Jury Target.
8.     Revisiting whistleblower procedures. Wachtel Lipton lawyers in Harvard Law School Forum on Corporate Governance.
9.     The SEC investigation into Activision. Professor Stephen Bainbridge in his blog.
10.  Jay’s reflections on the first compliance conference since 2019.

Podcasts and Events

11.  CCI surveying stress in compliance. Henry Kronk in CCI. Take the survey here
12.  Check out the latest addition to the Compliance Podcast Network, A Yank at Oxford. It details the journey of Foley & Lardner partner David Simon as he heads back to university to matriculate for a MBA at Oxford.
13.  Are you exasperated? Then check out the latest offering from the Compliance Podcast Network, F*ing Argentina. In this podcast series co-hosts Tom Fox and Gregg Greenberg, author of F* Argentina explore the current American psyche of being overworked, over leveraged, overtired and overwhelmed. Find out about modern America’s exasperation with well…exasperation. In Episode 1, the dreaded Parent Meeting night at your child’s elementary school. In Episode 2, why F*ing Argentina?
14.  Jay spreads his wings by hosting his first podcast. He interviews Lisa Beth Lentini Walker and Stef Tschida about their new book, Raise Your Game, Not Your Voice, on this episode of Integrity Through Compliance.
15.  K2 Integrity is partnering with the DIFC Academy for a webinar, “Virtual Assets and FATF Guidelines—A Risk-Based Approach for Financial Institutions,” on September 28, 2021. Registration and Information here.
16.  Join Jay, Tom and the top E&C professionals at Converge21, a virtual conference on October 12 & 13. Registration and information here. Here some of the panelists discuss their presentation on the Converge21 podcasts. Wendy Badger and Philip Winterburn.
17.  Ethisphere’s World Most Ethical Company awards for 2022 are open for submission. For more information on the Application Process, click here.
18.  Breaking News features The Compliance Handbook, 2nd edition. Check out the Breaking News feature here. Purchase The Compliance Handbook, 2nd edition here.
Tom Fox is the Voice of Compliance and can be reached at tfox@tfoxlaw.com. Jay Rosen is Mr. Monitor and can be reached at jrosen@affiliatedmonitors.com.