Categories
Everything Compliance

Everything Compliance: Episode 146, The Holiday Season Edition

Welcome to this Special Edition of Everything Compliance. In this episode, Matt Kelly, Jonathan Marks, Karen Woody, and Karen Moore examine various issues for compliance professionals under the incoming administration.

  1. Jonathan Marks discusses how deepfake videos facilitate fraud and how companies can combat this scourge. He shouts out to Miriam Chamani and her Voodoo Spiritual Temple.
  2. Karen Moore takes a deep dive into sustainability requirements in the EU and what these obligations mean for US companies under the second Trump administration. She shouts out to all the delivery folks this holiday season.
  3. Matt Kelly examines the DOGE initiative and its potential impact on compliance. He rants about the Pete Hegseth nomination and praises the South Korean people who opposed the presidential coup.
  4. Karen Woody examines what the new Trump administration may mean for the SEC in the future and rants about Time Magazine naming Donald Trump its Man of the Year.
  5. Tom Fox shouts out to the Shuffle Mamas.

The members of the Everything Compliance are:

The host and producer, rantor (and sometime panelist) of Everything Compliance is Tom Fox, the Voice of Compliance. He can be reached at tfox@tfoxlaw.com. Everything Compliance is a part of the award-winning Compliance Podcast Network.

For more information on the Ethico Toolkit for Middle Managers, available at no charge by clicking here.

Check out the full 3-book series, The Compliance Kids on Amazon.com.

Categories
Blog

The McKinsey $650 Million Settlement: Compliance Lessons from the Opioid Crisis

Last week, McKinsey & Company resolved civil and criminal matters with the Department of Justice (DOJ). This settlement represents a seismic shift in corporate accountability. For the first time, a management consulting firm has been held criminally liable for advice that contributed to a client’s commission of a crime. This $650 million resolution with the DOJ offers profound lessons for industry compliance professionals. This should be coupled with the previous Foreign Corrupt Practices Act (FCPA) resolution for $122 million with the DOJ over the company’s bribery and corruption in South Africa. From failures in risk management to the imperative of ethical decision-making, McKinsey’s cases are a masterclass in how compliance missteps can lead to devastating consequences.

A Timeline of Ethical Erosion  

Between 2004 and 2019, McKinsey worked on 75 engagements with Purdue Pharma, a key player in the opioid epidemic. In 2013, McKinsey spearheaded a project to “turbocharge” OxyContin sales despite growing awareness of the drug’s role in the crisis. This “Evolve to Excellence” initiative targeted high-prescribing physicians, some already under scrutiny for unsafe practices. Despite Purdue’s 2007 guilty plea for misbranding OxyContin, McKinsey continued advising the company, prioritizing profits over public health.

The fallout included a criminal charge for obstruction of justice against a former senior partner, allegations of advising on fraudulent claims to federal healthcare programs, and revelations of conflicts of interest in dealings with the FDA. The penalties include a $231 million fine, $93 million in forfeitures, and $323 million under the False Claims Act. McKinsey also agreed to a Deferred Prosecution Agreement (DPA), mandating significant compliance reforms.

Key Compliance Takeaways  

1. Risk Assessment and Client Selection: The First Line of Defense

McKinsey’s failure to assess its work’s reputational and legal risks with Purdue underscores the importance of robust risk evaluation processes. Like any organization, consulting firms must consider client histories and engagement scopes. Purdue’s 2007 plea and ongoing controversies should have triggered heightened scrutiny, yet McKinsey continued its relationship unabated. One key lesson is to establish a formalized client diligence framework. Identify high-risk clients and engagements, factoring in legal histories, industry regulations, and reputational implications.

2. The Ethical Perils of Aggressive Strategy

The directive to “turbocharge” OxyContin sales illustrates the ethical blind spots that arise when profit-driven goals overshadow public welfare. McKinsey’s PowerPoint presentations and marketing strategies directly influenced Purdue’s ability to sustain OxyContin sales, exacerbating the opioid crisis. Every organization must build ethics into strategic decision-making. Compliance officers should collaborate with business units to ensure strategies align with ethical standards and regulatory requirements.

3. Document Retention and the Dangers of Obstruction

The case against former senior partner Martin Elling reveals how internal actions can escalate legal risks. Elling’s directive to “eliminate all our documents and emails” and his subsequent obstruction charge illustrates the severe consequences of tampering with evidence during investigations. Every company must develop and enforce strict document retention policies. Provide training to employees on legal holds and the dangers of obstructing investigations.

4. Conflict of Interest Management

McKinsey’s simultaneous work with Purdue and the FDA highlights a blatant disregard for conflict-of-interest policies. Misleading the FDA undermined trust and compounded McKinsey’s liability. Your organization must institute robust conflict-of-interest protocols. Regularly audit engagements to identify overlapping or competing interests and disclose conflicts proactively.

5. Deferred Prosecution Agreements: A Path to Reform

As part of the DPA, McKinsey committed to implementing significant compliance reforms, including a risk evaluation process, quality review programs, and new document retention procedures. These measures are designed to prevent a repeat of past mistakes. Indeed, no company wants to be under a DPA, but the conduct of McKinsey, both in this case and in its FCPA matter in South Africa, were both so egregious that the company should view its DPA as an opportunity for transformation. Compliance leaders should use such agreements to rebuild trust, enhance internal controls, and foster a culture of accountability.

Culture as a Compliance Imperative  

The most striking lesson from the McKinsey case is the absence of a culture of accountability. McKinsey’s actions were not the result of one rogue employee; they reflected systemic failings within the organization. From top executives to client teams, the firm consistently prioritized financial gain over ethical responsibility.

Building an ethical culture requires multiple steps. It all begins with Tone from the Top—a commitment from top leadership to demonstrate an unwavering commitment to compliance and ethics. A company must empower its corporate compliance functions with the authority and resources to challenge decisions that pose ethical risks. Through training, communication, and employee awareness, there must be awareness throughout the organization of this commitment to business ethically and in compliance. Organizations must regularly train employees on ethical decision-making, risk identification, and reporting mechanisms.

Looking Ahead: The Compliance Professional’s Role  

The McKinsey settlements are a wake-up call for compliance professionals. They challenge us to rethink our roles as rule enforcers and stewards of ethical integrity. This case underscores the importance of proactive measures to identify risks, implement controls, and foster a culture where doing the right thing is non-negotiable.

The DOJ’s message is clear: no entity is above the law. Consulting firms, financial advisors, and other service providers must now grapple with the reality that their advice carries legal and ethical implications. For compliance officers, this means doubling down on preventive measures, promoting transparency, and ensuring accountability at every level.

Categories
10 For 10

10 For 10: Top Compliance Stories For the Week Ending November 30, 2024

Welcome to 10 For 10, the podcast which brings you the week’s Top 10 compliance stories in one podcast each week. Tom Fox, the Voice of Compliance brings to you, the compliance professional, the compliance stories you need to be aware of to end your busy week. Sit back, and in 10 minutes hear about the stories every compliance professional should be aware of from the prior week. Every Saturday, 10 For 10 highlights the most important news, insights, and analysis for the compliance professional, all curated by the Voice of Compliance, Tom Fox. Get your weekly filling of compliance stories with 10 for 10, a podcast produced by the Compliance Podcast Network.

  • Larry Thompson looks back. (Press Release)
  • VW to exit Jingjing region of China. (NYT)
  • Hong Kong becoming financial crime hub.  (WSJ)
  • China Defense Minister under investigation for corruption. (FT)
  • Thale under corruption investigation. (BBC)
  • Was it fraud or worse? (NYT)
  • What happens when a company loses its groove.  (WSJ)
  • How the Adani case will test the long arm of US jurisdiction. (Bloomberg)
  • SEC racks up $8bn in penalties under Gensler. (WSJ)
  • 30 Chinese companies added to blacklist.  (WSJ)

For more information on the Ethico Toolkit for Middle Managers, available at no charge by clicking here.

You can check out the Daily Compliance News for four curated compliance and ethics related stories each day, here.

Check out the full 3-book series, The Compliance Kids on Amazon.com.

Connect with Tom 

Instagram

Facebook

YouTube

Twitter

LinkedIn

Categories
Daily Compliance News

Daily Compliance News: October 14, 2024 – The Do GC’s Face Peril Edition

Welcome to the Daily Compliance News. Each day, Tom Fox, the Voice of Compliance, brings you compliance-related stories to start your day. Sit back, enjoy a cup of morning coffee, and listen to the Daily Compliance News. All from the Compliance Podcast Network.

Each day, we consider four stories from the business world: compliance, ethics, risk management, leadership, or general interest for the compliance professional.

In today’s edition of Daily Compliance News:

  • Is routine legal advice risky? If you advise paying a bribe. (Law.com)
  • Deloitte fooled by fraudster in Texas (Houston Chronicle)
  • Moog settles FCPA claim. (WSJ)
  • TD Bank fined $3bn (WSJ)

Categories
10 For 10

10 For 10: Top Compliance Stories For The Week Ending October 5, 2024

Welcome to 10 For 10, the podcast which brings you the week’s Top 10 compliance stories in one podcast each week. Tom Fox, the Voice of Compliance, brings to you, the compliance professional, the compliance stories you need to be aware of to end your busy week. Sit back, and in 10 minutes hear about the stories every compliance professional should be aware of from the prior week.

Every Saturday, 10 For 10 highlights the most important news, insights, and analysis for the compliance professional, all curated by the Voice of Compliance, Tom Fox. Get your weekly filling of compliance stories with 10 for 10, a podcast produced by the Compliance Podcast Network.

  • CEOs turning to pods. (FT)
  • Francis Haugen says we need more whistleblowers. (WSJ)
  • Britain to give banks a new tool to fight fraud. (Reuters)
  • Cheat at home, cheat at work? (Bloomberg)
  • SEC head of enforcement to step down. (WSJ)
  • The ghost of Odebrecht lives on. (WSJ)
  • Where do you find modern slavery? At a McDonald’s in the UK.    (BBC)
  • Hearing on Boeing/DOJ guilty plea set. (Reuters)
  • SEC fines 11 more firms for failures in messaging apps.  (SEC Press Release)
  • Adams’s Lawyers Ask Judge to Dismiss Federal Bribery Charge. (NYT)

Connect with Tom 

Instagram Facebook YouTube Twitter LinkedIn

Categories
Daily Compliance News

Daily Compliance News: September 24, 2024 – The Revised ECCP Released Edition

Welcome to the Daily Compliance News. Each day, Tom Fox, the Voice of Compliance, brings you compliance-related stories to start your day. Sit back, enjoy a cup of morning coffee, and listen to the Daily Compliance News. All from the Compliance Podcast Network.

Each day, we consider four stories from the business world: compliance, ethics, risk management, leadership, or general interest for the compliance professional.

In today’s edition of Daily Compliance News:

  • DOJ releases a 2024 update to the Evaluation of Corporate Compliance Programs. (FCPA Compliance & Ethics Blog)
  • Jackson Walker referred for disciplinary proceedings. (Reuters)
  • Singapore gears up for huge corruption trial. (Al Jazeera)
  • The UK government says flexible work is better for companies. (BBC)

Categories
Blog

The Bre-X Mining Scandal: Part 6 – A Guide for the 2024 Compliance Professional (Part 2)

Today, we conclude a multipart blog post series exploring one of the biggest corporate scandals of the 1990s, the Bre-X mining scandal. Our most recent blog post explored the foundational lessons from the Bre-X scandal for today’s compliance professionals, focusing on due diligence, transparency, corporate governance, and more. In today’s concluding blog post,  we focus on additional critical areas where compliance officers can play a pivotal role in ensuring organizational integrity. From fostering a strong whistleblowing culture to leveraging modern technologies for continuous monitoring, these strategies will help prevent financial fraud, uphold ethical standards, and do business in compliance into 2024 and beyond.

The Role of Whistleblowing and Ethics Programs

A lack of transparency and accountability within Bre-X contributed to the persistence of fraud for years. If a robust whistleblowing mechanism had been in place, the red flags might have been raised earlier, potentially preventing the massive fallout.

  • Encouraging Whistleblowing. One of the most critical aspects of modern compliance is creating a culture where employees feel empowered to speak up without fear of retaliation. Compliance officers should focus on building and maintaining secure, confidential channels where employees can report unethical or suspicious activities. A strong whistleblowing framework protects the organization from reputational damage and demonstrates to employees that integrity is a top priority.
  • Ethics Training. In addition to promoting whistleblowing, regular ethics training can help build a culture of transparency and accountability. Employees must be educated on the importance of ethical decision-making and how their actions contribute to the company’s long-term success. Compliance teams can reinforce the core values of honesty and integrity across the organization through frequent workshops, case studies (including Bre-X), and clear guidance on ethical behavior.

Risk Management and Scenario Planning

The Bre-X scandal is a stark reminder of the importance of comprehensive risk management. The ability to foresee potential risks and prepare accordingly can be the difference between averting a disaster or getting caught in one.

  • Assessing and Mitigating Risk. Risk management is central to the work of a compliance officer. Rigid risk assessments are non-negotiable in industries like mining—where speculation, large financial stakes, and geographical challenges intersect. Compliance professionals must develop strategies that identify, assess, and mitigate potential risks early, whether they stem from operational, financial, or reputational sources. For instance, resource overestimation, as seen in Bre-X, could have been mitigated with proper checks on geological data and third-party verification.
  • Scenario Planning. Preparing for various fraud scenarios, including “what if” situations similar to Bre-X, is a valuable exercise. Scenario planning enables organizations to consider how they would respond in the event of fraud or a major compliance breach. Companies should develop detailed crisis management plans, identify key decision-makers, and outline steps for navigating potential crises. In the event of another large-scale scandal, having these contingency plans in place will reduce the organization’s response time and limit damage.

Continuous Controls Monitoring and Auditing

The importance of continuous monitoring cannot be overstated, particularly in industries prone to high levels of fraud, such as mining, finance, or healthcare. Compliance professionals must champion ongoing oversight to ensure early detection of potential issues.

  • Ongoing Oversight. Continuous auditing of processes and transactions is an effective way to catch problems before they escalate. In the Bre-X case, regular audits of geological sample reporting and financial disclosures could have flagged discrepancies early on. Compliance teams today should implement robust monitoring programs that examine critical areas like financial performance, regulatory adherence, and ethical behavior. Routine audits of key operational processes, especially in high-risk industries, can prevent fraudulent behavior from going undetected.
  • Use of Technology. The rise of data analytics and artificial intelligence (AI) has transformed the compliance landscape. In 2024, compliance professionals must embrace technology that enhances real-time monitoring capabilities. By leveraging AI and big data, companies can detect anomalies or suspicious activities before they evolve into significant problems. For example, automated systems can track financial reporting patterns or identify irregular resource estimates, helping compliance teams intervene before major fraud occurs.

Global Considerations and Jurisdictional Awareness

In today’s globalized business environment, companies often operate in multiple countries, each with its regulatory requirements. Compliance professionals must stay abreast of international standards and ensure the organization complies with all regions.

  • Navigating International Regulations. The Bre-X scandal highlighted the complexities of operating in different jurisdictions. While Bre-X was a Canadian company, much of its fraudulent activities occurred in Indonesia, and the regulatory landscape vastly differed between the two countries. In 2024, compliance officers must develop an in-depth understanding of the regulatory environments in each jurisdiction where their company operates. This includes legal compliance and cultural and business norms that could impact operations and risk management strategies.
  • Cross-Border Cooperation. In an interconnected world, no company is an island. Regulatory bodies across countries are increasingly cooperating on compliance and enforcement efforts, especially in mining, finance, and pharmaceuticals. Building relationships with regulatory agencies in different jurisdictions is vital for compliance professionals. These partnerships can help organizations navigate complex international regulations and stay on top of emerging global compliance trends.

The Bre-X scandal was a watershed moment for the mining industry and for compliance professionals across sectors. The lessons from this case are invaluable in shaping how compliance is approached in 2024. Compliance officers can safeguard their organizations from the devastating consequences of fraud by encouraging a culture of whistleblowing, implementing comprehensive risk management practices, leveraging technology for continuous monitoring, and understanding global regulatory landscapes.

Fraud prevention is a continuous journey that requires vigilance, transparency, and a proactive mindset. Today’s compliance professional’s responsibility is not just to respond to incidents but to anticipate them, fostering a corporate culture prioritizing ethics and accountability at every level. This concludes our series on the Bre-X scandal. By learning from the past, compliance professionals can build a more resilient, transparent future for their organizations.

Categories
The Corruption Files

The Corruption Files: Stranger Than Fiction: The Bre-X Mining Scandal

What is stranger than fiction? The stories of worldwide corruption. In this podcast series, co-hosts Tom Fox, the Voice of Compliance and Mike DeBernardis, partner at Hughes Hubbard, discuss some of the most audacious corruption cases in anti-corruption enforcement. More importantly, they will discuss the lessons learned on what your organization can do to prevent running afoul of international anti-bribery laws.

In this episode of Season 2, Tom and Mike take a deep dive into the Bre-X mining scandal of the mid-1990s. Tom and Mike explore the fraudulent gold discovery announced by the Canadian company in Indonesia, which led to a massive media frenzy, skyrocketing stock prices, and eventually, a colossal financial collapse. The discussion includes the scandal’s sensational aspects, lack of individual prosecutions, and the regulatory responses that followed. Fox and DeBernardis also examine the greed and desperation driving the fraud and draw vital compliance lessons for today’s professionals.

Key Highlights:

  • Overview of the Bre-X Mining Scandal
  • The Sensational Details of the Fraud
  • The Aftermath and Lack of Prosecution
  • Regulatory and Legal Responses
  • Compliance Lessons for Today

Resources:

Mike DeBernardis on LinkedIn

HughesHubbardReed

Tom Fox

Instagram

Facebook

YouTube

Twitter

LinkedIn

Categories
Blog

The Bre-X Mining Scandal, Part 2: Why Was it So Sensational?

In the annals of corporate fraud, few scandals match the magnitude of the Bre-X mining affair. For compliance professionals, the lessons from this incident resonate deeply, not just because of the scale of the deception but because of its far-reaching impact on global markets, regulatory frameworks, and the reputations of major institutions. This blog post continues our series on scandals and the lessons for compliance professionals. In today’s Part 2, we deeply dive into why the Bre-X scandal became so sensational, providing key takeaways for compliance officers and business managers.

The Scale of the Discovery

Bre-X Minerals, a little-known Canadian company, exploded onto the global scene in the mid-1990s, announcing that it had made the largest gold discovery ever. Located in the remote Busang region of Indonesia, the supposed find was estimated at around 200 million ounces of gold—potentially the most valuable gold deposit in history. The news sent shockwaves through the mining industry, leading to a dramatic surge in Bre-X’s stock price, which catapulted the company’s market capitalization to nearly $6 billion at its peak.

From a compliance perspective, the sheer size of the claim should have been a red flag. While due diligence procedures existed, the excitement around the discovery caused many investors, including large institutions, to overlook the necessary checks and balances. This episode highlights the importance of remaining skeptical of “too-good-to-be-true” claims, no matter the excitement surrounding a company’s prospects.

Global Impact

Bre-X’s fraudulent claims did not simply captivate Canadian investors and the Toronto Stock Exchange; the scandal involved major international players, including the Indonesian government and multinational mining companies like Freeport-McMoRan. With such a significant discovery located in a developing country, the situation became a geopolitical issue, raising questions about resource control, corruption, and the distribution of wealth.

For compliance professionals, the Bre-X scandal is a sobering reminder of the global nature of financial frauds. In today’s interconnected markets, a localized scandal can have ripple effects that span continents. Investors worldwide were drawn into Bre-X, and when the fraud was exposed, it became a global financial disaster. The lesson is that due diligence must extend beyond national boundaries, particularly when international stakeholders are involved.

The Scale of the Deception

I am not sure what the right word is here: breathtaking, unbelievable, fantastic, improbable, or some other word, as what set Bre-X apart was the elaborate nature of the fraud. The company engaged in “salting” its gold samples—adding trace amounts of gold to drill core samples to inflate the perceived value of the deposit. This sophisticated deception went undetected for years, partly because it was executed with such audacity. Bre-X’s claims of having discovered the world’s largest gold deposit seemed almost unbelievable—and they were.

This should serve as a cautionary tale for compliance teams regarding the lengths to which some companies will go to perpetrate fraud. It also underscores the importance of rigorous, independent verification processes, especially when dealing with complex technical industries like mining. Major mining companies’ due diligence in the case of Bre-X was insufficient, allowing the fraud to go unchecked for far too long.

Human Drama and Tragedy

The Bre-X scandal was a human drama with mysterious deaths and personal tragedies as its main plot points rather than just financial deception. Chief among these was the death of Michael de Guzman, Bre-X’s chief geologist, who allegedly committed suicide by jumping from a helicopter into the Indonesian jungle as the fraud was being uncovered. His death remains shrouded in mystery, and many questions remain unanswered to this day.

Additionally, the founder of Bre-X, David Walsh, conveniently died of a suspected brain aneurysm shortly after the scandal came to light. His death further deepened the sense of tragedy, leaving unresolved questions about how much he knew and whether he bore responsibility for the fraud. These events highlight the profound personal toll corporate scandals can take on compliance officers. While the focus is often on financial or regulatory issues, the human cost of fraud can be equally devastating.

Media Frenzy

The Bre-X scandal was tailor-made for the media. The story captured the world’s attention with incredible wealth, deception, mysterious deaths, and international intrigue. Sensational headlines painted a picture of greed, betrayal, and the collapse of fortunes, turning the scandal into a global media phenomenon.

For compliance professionals, this aspect of the Bre-X case illustrates the power of public perception. Once the media gets hold of a scandal, it can magnify the reputational damage to a company and its stakeholders. Preventing such scandals requires rigorous internal controls and a proactive approach to managing external communications and public relations.

Lack of Accountability

Despite the overwhelming evidence of fraud and the massive financial losses suffered by investors, no one was successfully prosecuted for the Bre-X scandal. This lack of accountability remains one of the most frustrating aspects of the case. The idea that such a large-scale fraud could occur without significant legal consequences is troubling for compliance officers, whose role is ensuring violations are met with appropriate action.

The Bre-X affair is a stark reminder of the gaps in enforcement, especially when jurisdictional and international complexities are involved. This was not Too Big to Prosecute, but something different. Compliance teams must work closely with regulators and legal teams to ensure that accountability is maintained and that fraudsters are brought to justice.

Impact on the Mining Industry

One of the Bre-X scandal’s most lasting legacies is its impact on the mining industry. The fallout led to significant regulatory changes, particularly in Canada, where weaknesses in the regulatory framework were exposed. New standards were implemented to prevent future fraud, including more rigorous reporting requirements for mineral resources and reserves.

This is a critical takeaway for compliance officers in any industry: regulatory frameworks must evolve in response to major frauds or scandals. While Bre-X was an extreme case, it catalyzes continual improvement in compliance standards, particularly in industries vulnerable to fraudulent claims.

Psychological and Social Elements

As Mike Debernardis noted in the Corruption Files podcast on the matter, at its core, the Bre-X scandal is a story about greed and speculation. Investors, driven by the promise of massive profits, rushed to buy shares without fully understanding the risks involved. The result was a speculative bubble that burst spectacularly, leaving many investors with significant losses. The psychological aspect of this story—how people can get swept up in hype and speculation—offers a cautionary lesson for investors and compliance professionals.

For those in compliance, the key takeaway is educating stakeholders about the risks of speculative investments and ensuring that companies maintain transparency and integrity in their communications with investors.

The Bre-X mining scandal was sensational for its massive scale, the human drama, and the profound financial and regulatory consequences. For compliance professionals, it is a powerful reminder of the importance of due diligence, transparency, and accountability. In an increasingly globalized world, the lessons from Bre-X continue to resonate, offering valuable insights into how to prevent such scandals from happening again.

Join us tomorrow as we consider why no one was prosecuted.

Resources

The Bre-X Fraud by Donald Goold and Andrew Willis

Bre-X-The Inside Story of the World’s Biggest Mining Scam by Jennifer Wells

The Corruption Files podcast with Mike DeBernardis and Tom Fox

Categories
Daily Compliance News

Daily Compliance News: September 3, 2024 – The Fictional Company Edition

Welcome to the Daily Compliance News. Each day, Tom Fox, the Voice of Compliance, brings you compliance-related stories to start your day. Sit back, enjoy a cup of morning coffee, and listen to the Daily Compliance News. All from the Compliance Podcast Network.

Each day, we consider four stories from the business world: compliance, ethics, risk management, leadership, or general interest for the compliance professional.

In today’s edition of Daily Compliance News:

  • A Nigerian tech boss fined $250MM for a fictional company. (FT)
  • How much did Stewart Health Care pay its agent? (OCCRP)
  • 9 people have died from a listeria outbreak, so far. (NYT)
  • HP to go after Lynch’s widow. (Reuters)

For more information on the Ethico Toolkit for Middle Managers, available at no charge by clicking here.