DOJ Updates Corporate Compliance Guidelines with Focus on Whistleblowers and AI
In a recent address to the Society of Corporate Compliance and Ethics, Nicole M. Argentieri, the Principal Deputy Assistant Attorney General of the Department of Justice’s (DOJ) Criminal Division, unveiled significant updates to the Evaluation of Corporate Compliance Programs (ECCP). The updated guidelines aim to enhance the efficacy of corporate compliance programs and incentivise self-reporting of misconduct through new whistleblower programs and AI considerations.
Key Updates to the ECCP
The ECCP serves as a benchmark for the DOJ in assessing the effectiveness of a corporation’s compliance program, potentially impacting the credit or mitigation a company can receive if subject to prosecution. Argentieri emphasized several new factors that the DOJ will now evaluate:
Integration of Technology and Resources: Companies must ensure that the technologies they use, including advanced tools like generative AI, are fully integrated into their compliance programs. This includes assessing the risks posed by these technologies.
Culture of Reporting: Corporations are encouraged to nurture a culture where employees feel safe and empowered to report corporate misdeeds without fear of retaliation.
Adequate Resources for Compliance Departments: Ensuring that the compliance department has sufficient resources and access to data is imperative for effective monitoring and enforcement.
Learning from Past Mistakes: Companies should demonstrate that they have learned from previous errors and from incidents experienced by other organizations.
Encouraging Self-Reporting through Whistleblower Incentives
Argentieri highlighted the early successes of the DOJ’s Whistleblower Awards Program, which financially rewards individuals for reporting violations. Although it is too soon to measure the long-term impact of this program, initial feedback suggests active utilisation by whistleblowers.
In conjunction with this program, the DOJ has amended its Corporate Enforcement and Voluntary Self-Disclosure Policy to state that companies that disclose wrongdoing within 120 days of receiving an internal report—and before the DOJ initiates contact—can expect a presumptive declination to prosecute. This policy aims to incentivise quick self-reporting by providing clear benefits for timely disclosure.
Alternatively, organizations can reduce potential criminal penalties by up to 50% by fully cooperating with DOJ investigations. Factors considered in determining cooperation include the timeliness of the reporting and whether appropriate remedial actions, such as improving compliance programs and disciplining employees, were taken.
AI and Compliance: A New Frontier
The updated ECCP guidelines also introduce specific criteria for evaluating the use of artificial intelligence in corporate operations. As AI technology becomes more prevalent, the DOJ urges companies to scrutinise its implementation to prevent misuse. Key questions posed to compliance officers include how the company assesses the impact of AI on compliance, mitigates potential negative consequences, and guards against deliberate or reckless misuse by insiders.
Argentieri stated that in their evaluations, prosecutors will examine whether companies are vulnerable to schemes facilitated by AI, such as false approvals and documentation. Firms are encouraged to actively monitor and test AI applications to ensure they function correctly and ethically.
Broader Implications
These updates underscore the DOJ’s commitment to fostering a proactive and transparent compliance culture within corporations. By providing financial incentives for whistleblowers and setting clear guidelines for technology use, the DOJ aims to bring clarity and consistency to corporate compliance measures.
Companies are advised to reassess their compliance programs to align with these new guidelines and ensure robust mechanisms are in place to handle potential risks, especially those associated with new technologies like AI. By doing so, they can better navigate the complexities of compliance and mitigate the risks of criminal penalties.
Source: Noah Wire Services