Categories
31 Days to More Effective Compliance Programs

One Month to More Effective Written Standards: Day 17 – Policies for Third-Parties

As every compliance practitioner is well aware, third-parties still present the highest risk under the FCPA. The DOJ 2023 ECCP devotes an entire prong to third-party management. It begins with the following: A well-designed compliance program should apply risk-based due diligence to its third-party relationships.  Although the degree of appropriate due diligence may vary based on the size and nature of the company or transaction, prosecutors should assess the extent to which the company has an understanding of the qualifications and associations of third-party partners, including the agents, consultants, and distributors that are commonly used to conceal misconduct, such as the payment of bribes to foreign officials in international business transactions.
This set of queries clearly specifies the DOJ expects an integrated approach that is operationalized throughout the company. This means your compliance program must have a process for the full life cycle of third-party risk management. There are five steps in the life cycle of third-party management: 1) business justification; 2) questionnaire to third-party; 3) due diligence on third-party; 4) compliance terms and conditions, including payment terms; and 5) management and oversight of third parties after contract signing.
I continually give my mantra of compliance, which is “Document, Document, and Document”. Each of the steps you take in the management of your third parties must be documented. Not only must they be documented but they must be stored and managed in a manner that you can retrieve them with relative ease. The management of third parties is absolutely critical in any best practices compliance program.

Three key takeaways:

  1. Use the full five-step process for third-party management.
  2. Make sure you have Business Development involvement and buy-in.
  3. Operationalize all steps going forward by including business unit representatives.

For more information, check out The Compliance Handbook, 4th edition, here.

Categories
31 Days to More Effective Compliance Programs

One Month to More Effective Written Standards: Day 16: Policies on Facilitation Payments

From the information provided by the DOJ in Opinion Releases and in enforcement actions, there are several different insights which may be drawn on regarding what should go into your policy on facilitation payments. Do not forget that facilitation payments must be accurately shown on the books and records of your company. In all cases the employee who requested permission to make the facilitation payment must be responsible for obtaining all required approvals and forwarding a copy of the approvals and any other relevant supporting documentation as required, so that the it is recorded as a facilitation expense in the books and records and maintained in a central file. Facilitation payments should not be recorded as consulting fees, entertainment expenses, or other types of expenses that may misrepresent the true nature of the payments.
There may be emergency situations when it will be difficult or impossible for employees to obtain approvals before having to decide whether or not to pay a facilitation payment. If the facilitation payment is made in an emergency, the employee reports the facilitating payment to the compliance department and explains the emergency as soon as practical after making the facilitation payment.

Three key takeaways:

  1. What was the amount of the facilitation payment?
  2. Was the action truly routine?
  3. How high up was the government official who received the facilitation payment? Was his or her decision discretionary?

For more information, check out The Compliance Handbook, 4th edition, here.

Categories
31 Days to More Effective Compliance Programs

One Month to More Effective Written Standards: Day 15 – Enforcement Actions Featuring Facilitation Payments

One of the more confusing areas of the FCPA is in that of facilitation payments. Facilitation payments are small bribes but make no mistake about it, they are bribes. For that reason, many companies feel they are inconsistent with a company culture of doing business ethically and in compliance with laws prohibiting corruption and bribery. Further, the 2020 FCPA Resource Guide specified, “while the payment may qualify as an exception to the FCPA’s anti-bribery provisions, it may violate other laws, both in Foreign Country and elsewhere. In addition, if the payment is not accurately recorded, it could violate the FCPA’s books and records provision.” Additionally, the 2020 FCPA Resource Guide stated, “Whether a payment falls within the exception is not dependent on the size of the payment, though size can be telling, as a large payment is more suggestive of corrupt intent to influence a non-routine governmental action. But, like the FCPA’s anti-bribery provisions more generally, the facilitating payments exception focuses on the purpose of the payment rather than its value.”
In addition to these clear statements about whether the FCPA should continue to allow said bribes; you should also consider the administrative nightmare for any international company. The U.K. Bribery Act does not have any such exception, exemption or defense along the lines of the FCPA facilitation payment exception. This means that even if your company allows facilitation payments, it must exempt out every U.K. Company or subsidiary from the policy. Further, if your company employs any U.K. citizens, they are subject to the U.K. Bribery Act no matter who they work for and where they may work in the world, so they must also be exempted. Finally, if your U.S. Company does business with a U.K. or other company subject to the U.K. Bribery Act, you may be prevented contractually from making facilitation payments while working under that customer’s contract. As I said, an administrative nightmare.

Three key takeaways:

  1. Do not forget the administrative nightmare of facilitation payments for international organizations.
  2. The Kay decision made clear how narrow the “routine government action” exception is.
  3. Facilitation payments will usually be an add-on as they are symptomatic of an ineffective compliance program.

For more information, check out The Compliance Handbook, 4th edition, here.

Categories
31 Days to More Effective Compliance Programs

One Month to More Effective Written Standards: Day 11 – Charitable Donation Enforcement Actions

When is a rose not a rose? When it is a charitable donation not made for philanthropic purposes and violates the FCPA. This was a feature of the Eli Lilly and Company (Lilly) FCPA enforcement action brought by the SEC in 2012, involving a bribery scheme utilized by Lilly in Poland. The scheme and FCPA violations mirrored an earlier FCPA enforcement action, also brought by the SEC as a civil matter, rather than by the DOJ as a criminal matter, against another U.S. entity Schering-Plough, for making charitable donations in Poland which violated the FCPA. One of the remarkable things about both of these enforcement actions, brought almost eight years apart, was that they involved improper payments to the same Polish charitable foundation to wrongfully influence the same Polish government official to purchase products from both of these companies.

Three key takeaways:

  1. Every compliance practitioner should study both the Lilly and Schering-Plough enforcement actions.
  2. What is the purpose of the charitable entity you are making a donation to?
  3. “Document, Document, and Document” your due diligence around donors.

For more information, check out The Compliance Handbook, 4th edition, here.

Categories
10 For 10

10 For 10: Top Compliance Stories For the Week Ending September 16, 2023

Welcome to 10 For 10, the podcast which brings you the week’s Top 10 compliance stories in one podcast each week. Tom Fox, the Voice of Compliance brings to you, the compliance professional, the compliance stories you need to be aware of to end your busy week. Sit back, and in 10 minutes hear about the stories every compliance professional should be aware of from the prior week. Every Saturday, 10 For 10 highlights the most important news, insights, and analysis for the compliance professional, all curated by the Voice of Compliance, Tom Fox. Get your weekly filling of compliance stories with 10 for 10, a podcast produced by the Compliance Podcast Network.

  • Turkish fraud sentenced to 11,196 years in prison. (BBC)
  • EU has massive money-laundering problem.(AML Intelligence)
  • Will a name change for SNC-Lavalin help it overcome its corrupt past?  (Bloomberg)
  • Rubiales resigns. (ESPN)
  • Australian tycoon says workers need to see pain to return them to subservience. (BBC)
  • BP CEO resigns for lying about ‘multiple’ relationships with employees. (com)
  • Businesses should disclose China risks. (WSJ)
  • DOJ ramps up National Security enforcement resources. (WSJ)
  • No timeline for climate disclosure from SEC. (WSJ)
  • New pod on corruption. (Dirty Deeds)

You can check out the Daily Compliance News for four curated compliance and ethics related stories each day, here.

Connect with Tom 

Instagram

Facebook

YouTube

Twitter

LinkedIn

Categories
2 Gurus Talk Compliance

2 Gurus Talk Compliance – Episode 13 – The FCA Speaks Edition

What happens when two top compliance commentators get together? They talk compliance, of course. Join Tom Fox and Kristy Grant-Hart in 2 Gurus Talk Compliance as they discuss the latest compliance issues in this week’s episode! In this episode, Tom and Kristy take on a wide variety of topics, including a visit to Florida Man.

In the world of business, compliance and investigation protocols play a crucial role in ensuring fairness, consistency, and institutional justice. Organizations need to establish robust frameworks to handle incidents effectively and mitigate risks. In this episode of 2 Gurus Talk Compliance, a new investigation by the FCA in the UK, Rubiales resigns (finally), an interesting cyber compliance enforcement action, and Roger Ng. Kristy takes the lead in highlighting a new DOJ Opinion Release. Join them as they delve deeper into this topic on this episode of the 2 Gurus Talk Compliance podcast.

Highlights Include:

1.     Insufficient cyber plan = FCA violation.  (DOJ Press Release)

2.     Roger Ng banned for life.  (YaHooFinance)

3.     FASB adopts crypto accounting rules. (WSJ)

4.     Ken Paxton and slow creep of corruption. (Texas Tribune)

5.     Rubiales resigns. (NYT)

6.   U.K. Financial Regulator to Review Bank Treatment of Politically Exposed Persons (WSJ)

7.   FCPA Opinion Release Provides Guidance on Payment of Travel and Other Expenses for Foreign Government Officials (Volkov)

8. AI in Employment: Privacy Regulation Is Here (PLI Chronicles/Gibson Dunn)

9. Is It Time to Update Your Company’s Dress Code? What ‘Business Casual’ Means Today (Inc.)

10. Florida man banned from the ocean after trying to sail homemade hamster wheel (local news)

Resources 

Kristy Grant-Hart on LinkedIn

Spark Consulting

Tom

Instagram

Facebook

YouTube

Twitter

LinkedIn

Categories
Daily Compliance News

Daily Compliance News: September 13, 2023 – The Dirty Deeds Edition

Welcome to the Daily Compliance News. Each day, Tom Fox, the Voice of Compliance brings to you compliance-related stories to start your day. Sit back, enjoy a cup of morning coffee, and listen in to the Daily Compliance News. All, from the Compliance Podcast Network. Each day we consider four stories from the business world, compliance, ethics, risk management, leadership, or general interest for the compliance professional.

  • Businesses should disclose China risks. (WSJ)
  • DOJ ramps up National Security enforcement resources. (WSJ)
  • No timeline for climate disclosure from SEC. (WSJ)
  • New pod on corruption. (Dirty Deeds)
Categories
Compliance Into the Weeds

Compliance into the Weeds: Failure to Have Effective Compliance Program

The award winning, Compliance into the Weeds is the only weekly podcast which takes a deep dive into a compliance related topic, literally going into the weeds to more fully explore a subject. Looking for some hard-hitting insights on sanctions compliance? Look no further than Compliance into the Weeds! In this episode, Tom and Matt consider the recent DOJ enforcement action involving Verizon Business Network Services for failure to have an effective cyber security compliance program.

The recent case of Verizon’s non-compliance with cybersecurity standards and subsequent remediation efforts has sparked a significant conversation in the realm of cyber compliance. Tom views this case as a roadmap for companies to enhance their cybersecurity programs, emphasizing the importance of gap analysis and pressure testing. He draws parallels between cybersecurity compliance and the Foreign Corrupt Practices Act (FCPA) compliance, suggesting that Verizon’s case could serve as an example for other companies.

Matt applauds Verizon’s voluntary self-disclosure and extensive remediation efforts. He underscores the importance of disclosure, cooperation, and remediation in both cybersecurity and corruption cases, viewing Verizon’s actions as a positive example for other companies. Join Tom Fox and Matt Kelly as they delve deeper into this topic in the latest episode of the Compliance into the Weeds podcast. 

Key Highlights

·      Verizon’s Cybersecurity Program Failures

·      Enhancing Cybersecurity Compliance through Remediation Measures

·      Automating Compliance Efforts with GRC Tools

·      Potential Penalties for Non-Disclosure of Cybersecurity Issues

 Resources

Matt in LinkedIn

Matt on Radical Compliance

Tom 

Instagram

Facebook

YouTube

Twitter

LinkedIn

Categories
Principled Podcast

Season 10 Episode 1 – How Does the US Department of Justice Evaluate Ethics and Compliance Programs?

What you’ll learn on this podcast episode

The US Department of Justice Criminal Division has been increasingly vocal about what makes organizations’ ethics and compliance programs effective. This input on program effectiveness takes the form of guidance to prosecutors about what questions to ask when companies negotiate to resolve DOJ investigations into corporate wrongdoing on favorable terms. What does this guidance on program effectiveness mean in practice for E&C professionals? In the season 10 premiere of LRN’s Principled Podcast, host Susan Divers speaks with John Michelich, who retired last November after 35 years as a federal prosecutor with the Department of Justice’s Criminal Division. Listen in as they explore how the DOJ evaluates E&C programs, as well as best practices for companies settling misconduct investigations. 

Guest: John Michelich

John Michelich – Grayscale

John Michelich is a retired career prosecutor, who has served at the state, federal, and international levels for 45 years. A native of Illinois, John received his undergraduate education at Illinois Wesleyan University and then attended Drake University Law School in Des Moines, Iowa. For 10 years, John served as Assistant State’s Attorney and First Assistant State’s Attorney in Springfield, Illinois, where he prosecuted all types of state criminal felony violations including armed robbery, aggravated sexual assault and capital murder.   

In 1988, John moved to Washington, DC where he began his 35-year career as a prosecutor with the US Department of Justice, Criminal Division. As a federal prosecutor, John has handled a wide variety of cases including child pornography and obscenity, narcotics distribution and all types of white-collar criminal cases. John served for 30 years as a prosecutor with the Fraud Section of the Criminal Division where he handled numerous cases including health care fraud, bank fraud, telemarketing fraud, commodities and securities fraud and violations of the Foreign Corrupt Practices Act. Because Washington DOJ lawyers are traveling prosecutors, John has handled grand jury proceedings or jury trials in more than two dozen federal districts nationwide from Guam and Hawaii to Puerto Rico, and California to New York. Over his long career, John has tried dozens of jury trials to verdict.  

In 1998, the Justice Department sent John on loan to the United Nations’ International Criminal Tribunal for the Former Yugoslavia, also known as the War Crimes Tribunal, in the Hague, Netherlands, where he handled investigations and Tribunal proceedings involving crimes against humanity and serious breaches of the Geneva Convention that occurred during the Yugoslavian civil war.   

For over 40 years, John has been an active instructor of Trial Advocacy and has appeared regularly on the faculty of the NITA Trial Practice course offered at Georgetown University Law Center. In addition, John has served as an Adjunct Professor at Georgetown, teaching Trial Practice courses to third-year law students. In his retirement, John is available as a legal consultant to trial lawyers to advise them in preparation for jury trials and to consult with corporate counsel concerning internal investigations and to advise them on how to approach the government when there are allegations of wrongdoing, especially foreign bribery. 

John is licensed to practice in the states of Illinois and Iowa, and several federal courts, and is a licensed Solicitor of the Senior Courts of England and Wales.   

Host: Susan Divers

Headshot_Susan_Divers_S7E18_Principled_Podcast

Susan Divers is a senior advisor with LRN Corporation. In that capacity, Ms. Divers brings her 30+ years’ accomplishments and experience in the ethics and compliance area to LRN partners and colleagues. This expertise includes building state-of-the-art compliance programs infused with values, designing user-friendly means of engaging and informing employees, fostering an embedded culture of compliance and substantial subject matter expertise in anti-corruption, export controls, sanctions, and other key areas of compliance.

Prior to joining LRN, Mrs. Divers served as AECOM’s Assistant General for Global Ethics & Compliance and Chief Ethics & Compliance Officer. Under her leadership, AECOM’s ethics and compliance program garnered six external awards in recognition of its effectiveness and Mrs. Divers’ thought leadership in the ethics field. In 2011, Mrs. Divers received the AECOM CEO Award of Excellence, which recognized her work in advancing the company’s ethics and compliance program.

Mrs. Divers’ background includes more than thirty years’ experience practicing law in these areas. Before joining AECOM, she worked at SAIC and Lockheed Martin in the international compliance area. Prior to that, she was a partner with the DC office of Sonnenschein, Nath & Rosenthal. She also spent four years in London and is qualified as a Solicitor to the High Court of England and Wales, practicing in the international arena with the law firms of Theodore Goddard & Co. and Herbert Smith & Co. She also served as an attorney in the Office of the Legal Advisor at the Department of State and was a member of the U.S. delegation to the UN working on the first anti-corruption multilateral treaty initiative.

Mrs. Divers is a member of the DC Bar and a graduate of Trinity College, Washington D.C. and of the National Law Center of George Washington University. In 2011, 2012, 2013 and 2014 Ethisphere Magazine listed her as one the “Attorneys Who Matter” in the ethics & compliance area. She is a member of the Advisory Boards of the Rutgers University Center for Ethical Behavior and served as a member of the Board of Directors for the Institute for Practical Training from 2005-2008.

She resides in Northern Virginia and is a frequent speaker, writer and commentator on ethics and compliance topics. Mrs. Divers’ most recent publication is “Balancing Best Practices and Reality in Compliance,” published by Compliance Week in February 2015. In her spare time, she mentors veteran and university students and enjoys outdoor activities.

Categories
Report from IMPACT 2023

Report from IMPACT 2023: Larry Thompson on the Evolution of Compliance

ECI’s IMPACT 2023 was one of the leading compliance events in 2023. At this conference, Tom Fox, the Voice of Compliance, was able to visit with several of the speakers, exhibitors, participants, and one group of ethically-minded Girl Scout Troop. In this limited podcast series, Report from IMPACT 2023, Tom explores many of the most cutting-edge topics in ethics and compliance through short podcast episodes. Check out the full series of interviews. You will be enlightened and informed and come away with a fuller and more thorough understanding of the most cutting-edge topics in ethics and compliance. In this episode, Tom visits with Larry Thompson, former Deputy Attorney General and well-known compliance professional. Join Tom and Larry as they delve deeper into these topics on this episode of the Report from Impact 2023.

Larry Thompson is a seasoned professional in the field of compliance, with a career that spans several decades, starting as a young lawyer working with defense contractors in the late 1980s. Thompson’s unique insights on the evolution of compliance programs and ethical culture stem from his firsthand experience of the shift from a rules-based, legalistic approach to a values-based approach. He emphasizes the importance of companies having a common set of values that employees can embody and reflect in their actions, contributing to their long-term sustainability. Thompson also acknowledges the changing values and expectations of the new generation of employees, who prioritize working for companies that align with their own values and have a culture of integrity and purpose. These insights were shaped by his involvement in the establishment of the organizational Sentencing Guidelines in the early 1990s and his roles as a board member of various public companies and an active participant in the National Association of Corporate Directors.

 Highlights Include 

·      The evolution of compliance programs

·      The role of the DOJ in compliance

·      A new generation in the workforce

 Resources 

Larry Thompson