Categories
SBR - Authors' Podcast

Transforming Corporate Careers: From Business to Academia to Fiction with Dr. James Gregory

Welcome to the SBR-Authors Podcast! In this podcast series, host Tom Fox visits with authors in the compliance arena and beyond. Today, Tom is joined by Dr. James Gregory, an author, academician, and former corporate branding expert.

They look at Dr. Gregory’s fascinating career journey from a graphic designer in New York to a celebrated author, highlighting the evolution of his professional life and the development of his research on corporate branding, which led to the creation of the Core Brand Index. Dr. Gregory also shares insights into his transition from non-fiction to fiction writing, providing a glimpse into his writing process and his passion for various genres.

Key highlights include Dr. Gregory’s discovery of his love for research during his academic pursuits, the inspiration behind his first novel, ‘Zephyr War,’ and his upcoming projects, including a book inspired by childhood games. This episode is a must-listen for compliance professionals eager to explore the intersections of corporate compliance, branding, and the literary world.

Key highlights:

  • Dr. Gregory’s Professional Journey
  • The Evolution into Academia
  • Transition to Fiction Writing
  • Writing Process and Character Development
  • Exploring Multiple Genres

Resources:

James Gregory Website

James Gregory on LinkedIn

Tom Fox

Instagram

Facebook

YouTube

Twitter

LinkedIn

Categories
Daily Compliance News

Daily Compliance News: April 1, 2025 the Hurry Up Edition

Welcome to the Daily Compliance News. Each day, Tom Fox, the Voice of Compliance brings to you compliance related stories to start your day. Sit back, enjoy a cup of morning coffee and listen in to the Daily Compliance News. All, from the Compliance Podcast Network. Each day we consider four stories from the business world, compliance, ethics, risk management, leadership or general interest for the compliance professional.

  • How Deutsche hid problems from regulators. (WSJ)
  • Adams asks judge to hurry up and dismiss his case.  (NYT)
  • Apple hit with $192MM anti-trust fine in France. (Reuters)
  • End of American exceptionalism. (Bloomberg)
Categories
Blog

What’s Under Your Hood? The CCPA and Compliance

California’s privacy agency, the California Privacy Protection Agency (CCPA), targeted design features and contracting policies used by many companies in its inaugural enforcement strike under the state’s data privacy law. This demonstrates a “broad regulatory approach experts say promises to heat up as the agency continues to mature.” In an article in Law360, author Allison Grande looked at the recent enforcement action against American Honda Motors Company (Honda).

California’s recent privacy enforcement action against Honda has made headlines, and rightly so. This inaugural move by the California Privacy Protection Agency (CPPA) sends an unmistakable signal to corporate compliance professionals: it’s time to examine data privacy practices closely or risk significant consequences.

The CPPA’s allegations against Honda were not industry-specific; instead, the allegations highlighted universal challenges and concerns around data privacy practices and compliance that apply broadly across sectors. Why should compliance professionals sit up and pay close attention?

Firstly, consider consumer data requests. Honda faced scrutiny for requiring excessive information from consumers exercising their privacy rights, specifically when opting out or limiting data use. This nuanced point underscores a critical compliance lesson: not all privacy rights are equal, nor should they be managed uniformly. Compliance teams must tailor their mechanisms, perhaps even developing distinct web forms or processes, to differentiate between requests requiring identity verification and those not.

Grande quoted Gregory Leighton from Polsinelli PC, who said, “Once there’s an investigation open, the CPPA will clearly look at everything.” An open investigation invites regulators to scrutinize every aspect of your compliance program. Compliance teams need robust processes and airtight documentation to withstand such scrutiny.

Secondly, the issue of “symmetry in choice” came into sharp focus. Honda was flagged for making it more straightforward for users to activate advertising cookies than turning them off, a seemingly minor point with significant implications. It emphasizes that regulators now view user experience in data privacy tools through a strict compliance lens. A two-step process for disabling versus a one-step process for enabling cookies was enough to trigger regulatory criticism. Compliance officers should revisit user interfaces of consent management platforms and cookie notices, ensuring equal simplicity in opting both in and out.

Another critical compliance takeaway surrounds vendor management and contract documentation. Honda stumbled by not swiftly producing its contracts with third-party advertisers. This illustrates vividly that having contracts isn’t enough; immediate access and retrieval capability are equally crucial. Grande quoted Lily Li of Metaverse Law, who noted, “The Privacy Protection Agency was looking under the hood,” spotlighting the importance of being compliance-ready regarding documentation.

Beyond immediate lessons, this enforcement marks a new maturity stage for the CPPA. The agency’s stringent interpretations mean past assumptions about compliance, such as the adequacy of generic, broadly used privacy forms or common consent tools, are being upended. Compliance teams should anticipate increasingly rigorous scrutiny and proactive enforcement stances from regulators.

Lisa Sotto, chair of the global privacy and cybersecurity practice at Hunton Andrews Kurth LLP, summarized her thinking, indicating California’s regulator’s growing maturity and stringent interpretations. Similarly, Travis LeBlanc from Cooley LLP emphasizes that this enforcement action has broader implications for any company engaging digitally with consumers, highlighting the CPPA’s widening lens.

Adding to the urgency is the CPPA’s leadership transition. The incoming executive director, cybersecurity veteran Tom Kemp, signals a future of heightened enforcement activity. Kemp’s background and commitment to stringent enforcement strongly suggest a proactive regulatory stance.

Compliance professionals must recognize that federal pullback on data privacy regulation will likely spur increased state activity. California’s actions could be the vanguard for similar initiatives in other states. Manatt’s Brandon Reilly notes the completion of rulemaking and transition toward increased enforcement activities at the CPPA, predicting a significant uptick in regulatory actions.

In short, compliance teams must prioritize several key actions to remain ahead of this regulatory curve.

  • First, differentiated handling for various privacy rights requests is crucial. Compliance teams need precise frameworks and targeted methodologies to distinguish between requests that necessitate identity verification and those that do not, ensuring effective and compliant processes.
  • Second, ensuring symmetrical ease in privacy-related user choices demands careful evaluation of user interfaces and consent management tools. Regulators will increasingly expect businesses to offer equally simple options for consumers to turn data-sharing functions on or off, emphasizing intuitive design and fairness.
  • Third, rapid accessibility and comprehensive documentation of third-party contracts have become imperative. Compliance teams must establish contractual arrangements with vendors clearly defining data handling and protection standards and maintain them in an organized, readily accessible manner to respond swiftly to regulatory inquiries and investigations.

The CPPA’s Honda is not simply California-specific but a wake-up call nationwide. Compliance professionals must heed this signal and review and reinforce privacy programs proactively. As Leighton warns, the enforcement action is likely “just the tip of the iceberg.” Now is the time for compliance to look deeply and proactively under their data privacy hoods.

Categories
Daily Compliance News

Daily Compliance News: March 31, 2025 the Mickey Mouse Under Investigation Edition

Welcome to the Daily Compliance News. Each day, Tom Fox, the Voice of Compliance brings to you compliance related stories to start your day. Sit back, enjoy a cup of morning coffee and listen in to the Daily Compliance News. All, from the Compliance Podcast Network. Each day we consider four stories from the business world, compliance, ethics, risk management, leadership or general interest for the compliance professional.

  • Charlie Javice found guilty. (WSJ)
  • Chinese ABC investigator caught up in corruption probe.  (South China Morning Post)
  • US presses French companies to stop DEI.  (NYT)
  • Disney under investigation for DEI. (BBC)
Categories
FCPA Compliance Report

FCPA Compliance Report – Gerry Zack Reports on the OECD Global Anti-Corruption and Integrity Forum

Welcome to the award-winning FCPA Compliance Report, the longest-running podcast on compliance. In this episode, Tom is joined by Gerry Zack, CEO and Founder of RiskTrek LLC, to discuss his recent attendance at the OECD Global Anti-Corruption and Integrity Forum in Paris.

Gerry provides an in-depth event recap highlighting significant presentations, panel discussions, and key takeaways. Topics covered include the current state of anti-corruption efforts, the international cooperation among governments in combating corruption, and the evolving role of compliance programs amid changes in U.S. enforcement policies. He also shares insights on applying artificial intelligence in compliance, the importance of building trust through compliance programs, and the unique challenges faced in the healthcare and private equity sectors. The episode underscores the forum’s overarching theme of innovation and the proactive steps needed to navigate a turbulent compliance landscape.

Key highlights:

• Structure and Highlights of the OECD Conference
• Key Themes: Compliance and Anti-Corruption
• Global Collaboration and Government Responses
• Incentives and Value of Compliance Programs
• Trust and Technology in Compliance
• Data Analytics and AI in Compliance

Resources:

Gerry Zack on LinkedIn

Gerry Zack’s Email: Gerry@risk-trek.com

RiskTrek LLC

Tom Fox

Instagram

Facebook

YouTube

Twitter

LinkedIn

Categories
Blog

Compliance Lessons from Sales Incentive Pitfalls

When the scandal broke around Wells Fargo’s sales incentive manipulation, it became clear that incentive structures weren’t just about motivating employees but also fertile ground for ethical missteps and compliance failures. The recent article by Timothy Gardner, Colin Wong, and Rick Butler, entitled How Salespeople Game the System in Harvard Business Review, sheds crucial light on this, offering a timely reminder for compliance professionals about the latent risks embedded in incentive-driven strategies.

Salespeople often exploit incentive programs to maximize their gain through various schemes, damaging company performance and putting the company at legal risk. The authors identify common cheating tactics, including sandbagging, falsifying data, and giving excessive discounts or incentives to close deals quickly. To counter these practices, companies should use data to detect irregularities, revise incentive plans to close loopholes and establish ongoing monitoring. Communication and education about acceptable behaviors are also crucial. Not all gaming tactics need immediate action; however, some may be tolerated if they have a minimal impact on performance and would cause undue disruption to the sales organization. Compliance professionals should adopt a continuous process to identify and mitigate cheating while balancing the need to maintain sales productivity and motivation.

Understanding the Landscape

From Wells Fargo’s notorious misconduct to Vivint Smart Home’s identity theft case, examples abound of sales incentives fostering environments ripe for unethical practices. Sales professionals, driven by quotas and commissions, employ an array of tactics—from sandbagging, where sales are delayed strategically to maximize later bonuses, to outright fraud, such as creating faux customer accounts.

The authors identified eight incentive gaming categories, offering corporate compliance teams a powerful diagnostic tool. These include:

  1. Sandbagging. This technique involves postponing the completion of sales to a later measurement period to optimize incentive earnings. The authors found that “some sales reps at his company would hold as many orders as possible from October through December and submit them in January. The extra sales translated into outstanding sales performance and a very high commission for far exceeding established quotas.”
  2. Partners in profit. This is a particularly dangerous fraud in which the BD folks will “team up with customers to manipulate company processes to secure a better deal for the customer and a higher bonus for themselves.” The authors heard “about personal bankers who coached customers to sign up for accounts to take advantage of promotional deals (earning the bankers a commission) and then close the accounts at the end of the promotion.” This was similar to the Petrobras FCPA bribery scheme.
  3. Squandering sales. This tactic involves misleading customers in ways that benefit the salesperson but not the organization or the customer. The authors cited the following example: “Sales reps would give customers discounts to upsell them to unneeded service levels to earn the higher commission associated with the higher service tier. Though the salespeople came out ahead, the upsell hurt the organization’s bottom line and the customers: The company paid out a higher commission as a result of the upsell, and the customers ended up paying more for unwanted, higher-tier services, possibly resulting in customer dissatisfaction and defection.”
  4. Lost in segmentation. Another FCPA latent risk is where BD folks will “game the system by focusing their efforts on buyer segments that provide greater opportunities for incentive payouts instead of the targeted segments favored by the company. One interviewee told us that this was common among customer service associates (CSAs) who were responsible for both inbound sales-and-service calls and outbound sales-only calls. The CSAs would avoid accepting the incoming calls to maximize the time they could devote to the outbound calls, thereby earning more commissions.”
  5. Carrot and stick. Salespeople may use rewards, promises, threats, or punishments to encourage customer behavior that maximizes incentive payouts. At one airline, “some agents offered to waive baggage fees for customers during check-in if they signed up for the airline’s credit card, thus earning themselves a generous bonus.” This was a Wells Fargo tactic.
  6. Misleading customers. This tactic involves misleading prospective customers or withholding information to move the sales process forward. An example cited by the authors was where sales “reps would falsely tell call-in customers that the transaction couldn’t be completed on the phone and encouraged them to meet with a financial adviser, which yielded them higher bonuses for in-house referrals.”
  7. Falsifying data. Another tactic with criminal overtones. Under this scheme, a “sales management system is fed false information or information is omitted to maximize incentive payouts. In one interview, we heard that sales reps often log in to sales management systems and add their names to deals they did not participate in to increase their bonuses.”
  8. Faux customers. Well Fargo redux. Here, sales folks create “fake customer accounts with the help of friends, relatives, or coworkers.” Simply fabricating accounts is also a common gaming tactic. Some sales reps ask friends to pose as buyers, one interviewer told us. After the rep receives the commission for the “sales,” the phony customers cancel their service.

While varying in severity and potential impact, each of these strategies has the potential to compromise organizational integrity and compliance standards. Therefore, compliance leaders must remain vigilant in recognizing these behaviors and preemptively addressing the conditions that allow them to flourish.

Anticipating Incentive Program Vulnerabilities

Compliance teams can learn from these sales incentive pitfalls by proactively thinking like unethical sales professionals—an approach Gardner, Wong, and Butler dub cultivating an “immoral imagination.” Such foresight enables compliance leaders to anticipate and identify incentive plan vulnerabilities before they manifest into actual misconduct.

For instance, organizations should routinely engage trusted leaders and experienced sales professionals to evaluate incentive plans critically. Using the typology as a checklist can spur proactive identification of potential loopholes and gaming opportunities, informing targeted policy enhancements and strengthened monitoring protocols.

Data-Driven Monitoring and Audits

A robust compliance monitoring infrastructure is central to preventing sales incentive exploitation. Auditing systems for irregularities is critical. This includes tracking sales timing, examining customer account patterns, and monitoring behavior like customer misdirection or misinformation. Companies that successfully curtail gaming implement sophisticated tracking and analysis systems capable of flagging suspicious activities for further investigation.

The authors highlighted instances where systematic auditing effectively detected fraudulent behaviors. A notable example includes a financial institution auditing deposit account closures to identify employees creating fake accounts to artificially boost commissions. The swift identification and termination of those involved prevented further ethical breaches and preserved organizational integrity.

Refining Incentive Plans with Clear Guidelines

Beyond monitoring, refining incentive plans to eliminate ambiguities and clearly articulate acceptable behaviors is imperative. Policies must explicitly outline ethical boundaries and the consequences of transgressions, including incentive clawbacks, disciplinary actions, and potential termination.

Gardner and his co-authors advise that companies embed explicit language prohibiting unethical behaviors and reinforce these through regular training and communication, emphasizing transparency and accountability. The case they presented, involving airline agents improperly waiving baggage fees in exchange for credit card sign-ups, underscores the importance of clear, enforceable policies and vigilant enforcement.

Strategic Communication and Ethical Culture

Communication is the bedrock of any robust compliance strategy. Sales teams need ongoing messaging about ethical standards and incentive program expectations. Establishing an open dialogue around compliance and ethics, including discussing discovered instances of misconduct, helps embed integrity deeply into organizational culture.

Leaders must foster a culture where ethical conduct is the norm rather than the exception. Regular compliance training, reinforced by real-world case studies like those discussed in the Harvard Business Review article, can significantly enhance sales teams’ ethical vigilance and deter potential gaming behaviors.

The Decision to Act or Tolerate

The authors noted that not all incentive gaming is equally damaging or requires immediate rectification. Some minor gaming activities, such as strategic timing of sales submissions, may present minimal risk or impact, suggesting that addressing these issues aggressively could inadvertently disrupt sales operations or morale. Hence, compliance professionals must judiciously evaluate the potential ramifications of intervention versus strategic tolerance.

Concluding Thoughts for Compliance Leaders

Incentive-driven environments inherently contain risks. The complexities and competitive pressures on sales professionals often create scenarios tempting unethical shortcuts. However, compliance leaders can significantly reduce opportunities for unethical behavior with strategic vigilance—anticipating risks, implementing rigorous monitoring, maintaining clear and enforceable incentive guidelines, and fostering an ethical culture.

The insights from this article offer a timely, instructive framework for compliance professionals tasked with overseeing incentive-driven business units. Understanding how incentive systems can be exploited becomes a powerful asset in our ongoing mission to uphold ethical standards, protect corporate integrity, and ensure sustainable business success as we continually adapt and refine our compliance strategies.

Categories
Compliance Tip of the Day

Compliance Tip of the Day – The Whole Greater Than the Sum of its Parts

Welcome to “Compliance Tip of the Day,” the podcast where we bring you daily insights and practical advice on navigating the ever-evolving landscape of compliance and regulatory requirements. Whether you’re a seasoned compliance professional or just starting your journey, we aim to provide bite-sized, actionable tips to help you stay on top of your compliance game. Join us as we explore the latest industry trends, share best practices, and demystify complex compliance issues to keep your organization on the right side of the law. Tune in daily for your dose of compliance wisdom, and let’s make compliance a little less daunting, one tip at a time.

Today, we discuss why Aristotle’s maxim that the whole should be greater than the sum of its parts is particularly true of compliance teams.

Categories
Compliance and AI

Compliance and AI: Harnessing Generative AI for Compliance: An Interview with Eric Sydell

What is the role of Artificial Intelligence in compliance? What about Machine Learning? Are you using ChatGPT? These are but three questions we will explore in this cutting-edge podcast series, Compliance and AI, hosted by Tom Fox, the award-winning Voice of Compliance. In this episode, Tom is joined by Eric Sydell, co-founder and CEO of Vero AI, to discuss the intersection of AI and compliance.

Eric shares his unique journey from industrial psychology to HR technology and ultimately to the realm of compliance through AI. They explore how Vero AI utilizes generative AI to analyze and interpret vast amounts of unstructured data at scale, such as text, video, and imagery. Eric emphasizes that AI provides a scalable solution for compliance processes, reducing manual labor and increasing efficiency.

Eric discusses the importance of AI governance in compliance, particularly in light of emerging standards like ISO 42001 and the EU AI Act. He introduces the Vero AI’s Violet Impact Model, which provides a comprehensive framework for evaluating the impact of algorithms and complex systems. The conversation covers practical applications of Vero AI in corporate procurement and risk management, highlighting how the tool can assist compliance officers in continuously monitoring and improving their compliance programs. Eric concludes by explaining how businesses can reach out to learn more about implementing these advanced AI-driven solutions.

Key highlights:

  • Generative AI and Unstructured Data
  • AI in Compliance and Predictive Models
  • AI Governance and Monitoring
  • The Violet Impact Model
  • Vero AI in Risk Management and Procurement

Resources:

Eric Sydell on Linkedin

Vero AI

Tom Fox

Instagram

Facebook

YouTube

Twitter

LinkedIn

Categories
Blog

Compliance Leadership Week: Building Compliance Teams Greater than the Sum of Their Parts

The sum is greater than the whole of its parts.-Aristotle

We conclude our exploration of leadership in the corporate compliance function by exploring how to build teams that are “greater than the sum of their parts.” We continue to mine the article Go, teams: When teams get healthier, the whole organization benefits by authors Aaron De SmetGemma D’Auria,  Maitham Albaharna, and Anaïs Fifer, all with McKinsey, as a starting point for our exploration.

In corporate compliance, effective team performance transcends individual capabilities. Cultivating teams that operate with a shared purpose and excel collectively rather than individually is essential. This approach ensures adherence to regulatory standards and fosters a culture of ethical excellence across the organization. So, how do compliance leaders create such cohesive and highly effective teams?

Understanding Key Drivers of Team Performance

Concentrating on the critical performance drivers of trust, communication, innovation, and decision-making is vital to achieving better compliance outcomes. When these elements are robust, compliance teams can more adeptly handle complex regulatory landscapes and proactively manage potential risks.

Trust is foundational, facilitating open dialogue, candid reporting, and collective problem-solving. Communication must be clear and consistent to ensure alignment and understanding across all compliance efforts. Innovation empowers teams to identify emerging risks and opportunities for process improvements proactively. Finally, effective decision-making ensures timely responses to compliance issues, reducing risk exposure and strengthening organizational resilience.

Addressing the Perception Gap

A common issue within teams is the perception gap; team members acknowledge the importance of certain behaviors but fail to exhibit them consistently. Recognizing this gap and working to close it for compliance teams can significantly enhance performance. Compliance leaders must encourage transparent self-assessment and discussions about team behaviors, promoting accountability for collective improvement.

Actions to Enhance Compliance Team Effectiveness

Here are four actionable steps compliance leaders can take to build teams greater than the sum of their parts:

1. Conduct Comprehensive Team Diagnostics

Team diagnostics provide compliance teams with essential insights into their strengths and weaknesses. By establishing a baseline of existing behaviors, teams can identify areas needing immediate attention. From there, developing a team charter can clearly outline collective expectations, behaviors to prioritize, and shared objectives. Crucially, compliance team members should commit not only to individual accountability but also to collective team success.

Additionally, individual team members benefit from a deeper understanding of their behaviors and how they influence team dynamics. Tools like 360-degree feedback and personalized coaching sessions can significantly enhance personal self-awareness, ultimately contributing to more effective team interactions.

2. Ensure Lasting Behavioral Changes

Once critical behavioral areas have been identified, compliance teams must commit to specific, actionable changes. Clear commitments, supported by tactical interventions and defined governance processes, are necessary for sustained behavioral shifts. Ensuring these commitments are implemented and not merely stated is critical for real transformation.

Periodic retrospectives can help teams continually evaluate their progress, acknowledge successes, and recalibrate strategies when needed. The journey to improved team effectiveness can be challenging, with inevitable setbacks and regressions. However, regular check-ins and open discussions can embed positive changes into team practices, preventing regression to less productive behaviors.

3. Leaders Must Champion and Support Team Changes

Compliance team leaders play a crucial role in driving effective teamwork. Leaders who struggle to transition from traditional command-and-control methods to more collaborative approaches significantly hamper team progress. Compliance leaders must embody the changes they seek, adopting a leadership style of openness, collaboration, and empowerment.

Investing in leadership coaching can significantly aid leaders who are resistant to change. Effective workshops and targeted interventions can help compliance leaders understand and adopt more collaborative and empowering approaches. Leaders must recognize that their perspective is just one among many. Research shows leaders often have overly optimistic views of team effectiveness, highlighting the importance of gathering comprehensive feedback from all team members to form a complete and accurate picture.

4. Embed Team Effectiveness into Organizational Practices

Achieving widespread and sustained team effectiveness requires embedding these principles into the organizational fabric. Adopting a systematic, scalable approach ensures these strategies benefit all compliance teams, not just select groups. The “train the trainer” model effectively disseminates best practices throughout the organization, empowering internal facilitators to carry forward these crucial initiatives.

For instance, consider the experience of an Asian bank that successfully scaled its team effectiveness initiatives across more than 200 teams. The bank first trained members of its HR team with external expert facilitators. These HR professionals progressively took on facilitation roles, first co-leading and eventually independently managing the team-effectiveness programs. This structured, cascading approach ensured consistency, sustainability, and widespread adoption of best practices throughout the organization.

The Imperative of High-Performance Compliance Teams

For compliance professionals, cultivating teams that are truly greater than the sum of their parts is no longer optional; it is essential. By systematically addressing the key drivers of trust, communication, innovation, and decision-making and embedding lasting behavioral changes into everyday practices, compliance leaders can build teams capable of navigating complex regulatory landscapes with agility and precision.

Effective teamwork in compliance is more than merely beneficial; it is fundamental to ensuring sustained organizational integrity, reducing regulatory risks, and fostering a culture where ethical behavior is the norm. By taking these structured, deliberate steps, compliance teams can become powerful agents of organizational value, consistently achieving collective outcomes that far exceed individual capabilities.

Categories
Compliance Tip of the Day

Compliance Tip of the Day – Enhancing Compliance Team Effectiveness

Welcome to “Compliance Tip of the Day,” the podcast where we bring you daily insights and practical advice on navigating the ever-evolving landscape of compliance and regulatory requirements. Whether you’re a seasoned compliance professional or just starting your journey, we aim to provide bite-sized, actionable tips to help you stay on top of your compliance game. Join us as we explore the latest industry trends, share best practices, and demystify complex compliance issues to keep your organization on the right side of the law. Tune in daily for your dose of compliance wisdom, and let’s make compliance a little less daunting, one tip at a time.

Today, we discuss why many teams struggle significantly with collaboration and achieving measurable outcomes.