DOJ Updates Corporate Compliance Program Guidance
Washington, D.C. – September 23, 2023: The U.S. Department of Justice (DOJ) has introduced significant updates to its guidance for evaluating corporate compliance programs, commonly referred to as the ECCP. The announcement was made by Principal Deputy Assistant Attorney General Nicole Argentieri during her address at the Society of Corporate Compliance and Ethics' 23rd Annual Compliance & Ethics Institute. These revisions to the ECCP underline the DOJ’s push for more robust and forward-thinking compliance mechanisms in corporations.
Key Highlights of the Updated ECCP
1. Enhanced Risk Assessments for M&A:
The new guidelines place a stronger emphasis on the necessity for thorough compliance integration following mergers and acquisitions. Companies are now expected to conduct detailed risk assessments on newly acquired entities and adapt their existing policies and procedures to address any emerging risks post-transaction.
2. Addressing Emerging Technologies:
A critical update involves the consideration of risks associated with emerging technologies, particularly artificial intelligence (AI). This is twofold, requiring companies to manage risks stemming from both their operational use of new technologies and the integration of technological advancements within the compliance program itself. The ECCP mandates that companies implement measures to prevent misuse of these technologies and ensure the integrity of compliance-monitoring tools. Regular updates and risk assessments are required to keep pace with technological advancements.
3. Strengthened Whistleblower Protections:
The revised ECCP further details the expectations surrounding whistleblower protections and anti-retaliation policies. Companies must have firm anti-retaliation policies, ensure that employees are informed about reporting mechanisms, and demonstrate zero tolerance for retaliation. Whistleblowers’ reports must be investigated promptly, with appropriate responses to demonstrate the company’s commitment to addressing misconduct.
4. Adequate Allocation of Compliance Resources:
The new guidance underscores the necessity for sufficient resource allocation to compliance programs. Prosecutors will assess whether companies are allocating appropriate budgets to their compliance departments. Companies must ensure their compliance programs are well-funded, adequately staffed, and equipped with the necessary data resources and analytical tools to evaluate and improve their compliance effectiveness.
Background and Significance
The ECCP has become an essential tool guiding DOJ’s charging and resolution decisions concerning corporate misconduct. It provides a framework for prosecutors to evaluate the effectiveness of corporate compliance programs, influencing decisions on whether to bring charges against a company or to potentially offer reduced penalties. This framework aims to incentivise companies to develop robust compliance programs that can detect and prevent misconduct proactively.
These updates arrive in the context of the DOJ’s ongoing efforts to intensify enforcement against white-collar crime, highlighted earlier this year through various initiatives, including remarks by Deputy Attorney General Lisa Monaco on integrating disruptive technologies like AI in DOJ evaluations. The DOJ has been reinforcing the importance of preserving materials on collaboration tools and addressing ephemeral messaging platforms—important factors in its assessment of corporate compliance.
In addition, recent initiatives such as the DOJ’s whistleblower reward pilot program and an individual self-disclosure pilot program further stress the importance of internal investigations and self-disclosure for companies.
Implications for Corporate Compliance
Argentieri's remarks emphasized that companies equipped with well-resourced compliance departments are better prepared to prevent and detect misconduct. The updated ECCP is designed to foster more proactive, dynamic compliance programs, aligning with the DOJ’s broader enforcement goals.
By requiring companies to consider new risks, continually update their compliance practices, and allocate adequate resources, the DOJ is pushing for more genuine and effective compliance efforts across the corporate landscape. These revisions present a clear message: effective compliance is an ongoing, active process that demands substantial investment and attention.
These updates to the DOJ’s ECCP invite companies to reassess and enhance their compliance protocols to ensure alignment with the latest expectations and advance their ability to manage emerging risks effectively.
Source: Noah Wire Services