industry. In addition, compliance programs that do not just exist on paper but are followed in practice will inevitably uncover compliance weaknesses and require enhancements. Consequently, DOJ and SEC evaluate whether companies regularly review and improve their compliance programs and not allow them to become stale.
According to one survey, 64% of general counsel whose companies are subject to the FCPA say there is room for improvement in their FCPA training and compliance programs.324 An organization should take the time to review and test its controls, and it should think critically about its potential weaknesses and risk areas. For example, some companies have undertaken employee surveys to measure their compliance culture and strength of internal controls, identify best practices, and detect new risk areas. Other companies periodically test their internal controls with targeted audits to make certain that controls on paper are working in practice. DOJ and SEC will give meaningful credit to thoughtful efforts to create a sustainable compliance program if a problem is later discovered. Similarly, undertaking proactive evaluations before a problem strikes can lower the applicable penalty range under the U.S. Sentencing Guidelines.325 Although the nature and the frequency of proactive evaluations may vary depending on the size and complexity of an organization, the idea behind such efforts is the same: continuous improvement and sustainability.326
Mergers and Acquisitions: Pre-Acquisition Due Diligence and Post-Acquisition Integration
In the context of the FCPA, mergers and acquisitions present both risks and opportunities. A company that does not perform adequate FCPA due diligence prior to a merger or acquisition may face both legal and business risks.327 Perhaps most commonly, inadequate due diligence can allow a course of bribery to continue—with all the attendant harms to a business’s profitability and reputation, as well as potential civil and criminal liability.
In contrast, companies that conduct effective FCPA due diligence on their acquisition targets are able to evaluate more accurately each target’s value and negotiate for the costs of the bribery to be borne by the target. In addition,
chapter 5
Guiding Principles of Enforcement
such actions demonstrate to DOJ and SEC a company’s commitment to compliance and are taken into account when evaluating any potential enforcement action. For example, DOJ and SEC declined to take enforcement action against an acquiring issuer when the issuer, among other things, uncovered the corruption at the company being acquired as part of due diligence, ensured that the corruption was voluntarily disclosed to the government, cooperated with the investigation, and incorporated the acquired company into its compliance program and internal controls. On the other hand, SEC took action against the acquired company, and DOJ took action against a subsidiary of the acquired company.328 When pre-acquisition due diligence is not possible, DOJ has described procedures, contained in Opinion Procedure Release No. 08-02, pursuant to which companies can nevertheless be rewarded if they choose to conduct thorough post-acquisition FCPA due diligence.329
FCPA due diligence, however, is normally only a portion of the compliance process for mergers and acquisitions. DOJ and SEC evaluate whether the acquiring company promptly incorporated the acquired company into all of its internal controls, including its compliance program. Companies should consider training new employees, reevaluating third parties under company standards, and, where appropriate, conducting audits on new business units.
For example, as a result of due diligence conducted by a California-based issuer before acquiring the majority interest in a joint venture, the issuer learned of corrupt payments to obtain business. However, the issuer only implemented its internal controls “halfway” so as not to “choke the sales engine and cause a distraction for the sales guys.” As a result, the improper payments continued, and the issuer was held liable for violating the FCPA’s internal controls and books and records provisions.330
62
Other Guidance on Compliance and International Best Practices
In addition to this guide, the U.S. Departments of CommerceandStatehavebothissuedpublicationsthatcontain guidance regarding compliance programs. The Department of Commerce’s International Trade Administration has published Business Ethics: A Manual for Managing a Responsible Business Enterprise in Emerging Market Economies,331 and the DepartmentofStatehaspublishedFightingGlobalCorruption: Business Risk Management.332
There is also an emerging international consensus on compliance best practices, and a number of inter-govern- mental and non-governmental organizations have issued guidance regarding best practices for compliance.333 Most notably, the OECD’s 2009 Anti-Bribery Recommendation and its Annex II, Good Practice Guidance on Internal Controls, Ethics, and Compliance,334 published in February
2010, were drafted based on consultations with the private sector and civil society and set forth specific good practices for ensuring effective compliance programs and measures for preventing and detecting foreign bribery. In addition, businesses may wish to refer to the following resources:
•Asia-Pacific Economic Cooperation—Anti- Corruption Code of Conduct for Business;335
•International Chamber of Commerce—ICC Rules on Combating Corruption;336
•Transparency International—Business Principles for Countering Bribery;337
•United Nations Global Compact—The Ten Principles;338
•World Bank—Integrity Compliance Guidelines;339and
•World Economic Forum—Partnering Against Corruption–Principles for Countering Bribery.340
Hypothetical: Third-Party Vetting
Part 1: Consultants
Company A, a U.S. issuer headquartered in Delaware, wants to start doing business in a country that poses high risks of corruption. Company A learns about a potential $50 million contract with the country’s Ministry of Immigration. This is a very attractive opportunity to Company A, both for its profitability and to open the door to future projects with the government. At the suggestion of the company’s senior vice president of international sales (Sales Executive), Company A hires a local businessman who assures them that he has strong ties to political and government leaders in the country and can help them win the contract. Company A enters into a consulting contract with the local businessman (Consultant). The agreement requires Consultant to use his best efforts to help the company win the business and provides for Consultant to receive a significant monthly retainer as well as a success fee of 3% of the value of any contract the company wins.
What steps should Company A consider taking before hiring Consultant?
There are several factors here that might lead Company A to perform heightened FCPA-related due diligence prior to retaining Consultant: (1) the market (high-risk country); (2) the size and significance of the deal to the company; (3) the company’s first time use of this particular consultant; (4) the consultant’s strong ties to political and government leaders;
(5) the success fee structure of the contract; and (6) the vaguely-defined services to be provided. In order to minimize the likelihood of incurring FCPA liability, Company A should carefully vet Consultant and his role in the transaction, including close scrutiny of the relationship between Consultant and any Ministry of Immigration officials or other government officials. Although there is nothing inherently illegal about contracting with a third party that has close connections to politicians and government officials to perform legitimate services on a transaction, this type of relationship can be susceptible to corruption. Among other things, Company A may consider conducting due diligence on Consultant, including background
(cont’d)
63
chapter 5
Guiding Principles of Enforcement
and reference checks; ensuring that the contract spells out exactly what services and deliverables (such as written status reports or other documentation) Consultant is providing; training Consultant on the FCPA and other anti-corruption laws; requiring Consultant to represent that he will abide by the FCPA and other anti-corruption laws; including audit rights in the contract (and exercising those rights); and ensuring that payments requested by Consultant have the proper supporting documentation before they are approved for payment.
Part 2: Distributors and Local Partners
Assume the following alternative facts:
Instead of hiring Consultant, Company A retains an often-used local distributor (Distributor) to sell Company A’s products to the Ministry of Immigration In negotiating the pricing structure, Distributor, which had introduced the project to Company A, claims that the standard discount price to Distributor creates insufficient margin for Distributor to cover warehousing, distribution, installation, marketing, and training costs and requests an additional discount or rebate, or, in the alternative, a contribution to its marketing efforts, either in the form of a lump sum or as a percentage of the total contract. The requested discount/allowance is significantly larger than usual, although there is precedent at Company A for granting this level of discount in unique circumstances. Distributor further advises Company A that the Ministry’s procurement officials responsible for awarding the contract have expressed a strong preference for including a particular local company (Local Partner) in the transaction as a subcontractor of Company A to perform installation, training, and other services that would normally have been performed by Distributor or Company A. According to Distributor, the Ministry has a solid working relationship with Local Partner, and it would cause less disruption for Local Partner to perform most of the on-site work at the Ministry. One of the principals (Principal 1) of the Local Partner is an official in another government ministry.
What additional compliance considerations do these alternative facts raise?
As with Consultant in the first scenario above, Company A should carefully vet Distributor and Local Partner and their roles in the transaction in order to minimize the likelihood of incurring FCPA liability. While Company A has an established relationship with Distributor, the fact that Distributor has requested an additional discount warrants further inquiry into the economic justification for the change, particularly where, as here, the proposed transaction structure contemplates paying Local Partner to provide many of the same services that Distributor would otherwise provide. In many cases, it may be appropriate for distributors to receive larger discounts to account for unique circumstances in particular transactions. That said, a common mechanism to create additional margin for bribe payments is through excessive discounts or rebates to distributors. Accordingly, when a company has pre-existing relationships with distributors and other third parties, transaction-specific due diligence—including an analysis of payment terms to confirm that the payment is commensurate with the work being performed—can be critical even in circumstances where due diligence of the distributor or other third party raises no initial red flags.
Company A should carefully scrutinize the relationship among Local Partner, Distributor, and Ministry of Immigration officials. While there is nothing inherently illegal about contracting with a third party that is recommended by the end-user, or even hiring a government official to perform legitimate services on a transaction unrelated to his or her government job, these facts raise additional red flags that warrant significant scrutiny. Among other things, Company A would be well-advised to require Principal 1 to verify that he will have no role in the Ministry of Immigration’s decision to award the contract to Company A, notify the Ministry of Immigration and his own ministry of his proposed involvement in the transaction, and certify that he will abide by the FCPA and other anti-corruption laws and that his involvement in the transaction is permitted under local law.
(cont’d)
64
Assume the following additional facts:
Under its company policy for a government transaction of this size, Company A requires both finance and compliance approval. The finance officer is concerned that the discounts to Distributor are significantly larger than what they have approved for similar work and will cut too deeply into Company A’s profit margin. The finance officer is also skeptical about including Local Partner to perform some of the same services that Company A is paying Distributor to perform. Unsatisfied with Sales Executive’s explanation, she requests a meeting with Distributor and Principal 1. At the meeting, Distributor and Principal 1 offer vague and inconsistent justifications for the payments and fail to provide any supporting analysis, and Principal 1 seems to have no real expertise in the industry. During a coffee break, Distributor comments to Sales Executive that the finance officer is naïve about “how business is done in my country.” Following the meeting, Sales Executive dismisses the finance officer’s concerns, assuring her that the proposed transaction structure is reasonable and legitimate. Sales Executive also reminds the finance officer that “the deal is key to their growth in the industry.”
The compliance officer focuses his due diligence on vetting Distributor and Local Partner and hires a business investigative firm to conduct a background check. Distributor appears reputable, capable, and financially stable and is willing to take on real risk in the project, financial and otherwise. However, the compliance officer learns that Distributor has established an off-shore bank account for the transaction. The compliance officer further learns that Local Partner’s business was organized two years ago and appears financially stable but has no expertise in the industry and has established an off-shore shell company and bank account to conduct this transaction. The background check also reveals that Principal 1 is a former college roommate of a senior official of the Ministry of Immigration. The Sales Executive dismisses the compliance officer’s concerns, commenting that what Local Partner does with its payments “isn’t our problem.” Sales Executive also strongly objects to the compliance officer’s request to meet with Principal 1 to discuss the off-shore company and account, assuring him that it was done for legitimate tax purposes and complaining that if Company A continues to “harass” Local Partner and Distributor, they would partner with Company A’s chief competitor. The compliance officer and the finance officer discuss their concerns with each other but ultimately sign off on the deal even though their questions had not been answered. Their decision is motivated in large part by their conversation with Sales Executive, who told them that this was the region’s most important contract and that the detailed FCPA questionnaires and robust anti-corruption representations in the contracts placed the burden on Distributor and Local Partner to act ethically.
Company A goes forward with the Distributor and Local Partner agreements and wins the contract after six months. The finance officer approves Company A’s payments to Local Partner via the offshore account, even though Local Partner’s invoices did not contain supporting detail or documentation of any services provided. Company A recorded the payments as legitimate operational expenses on its books and records. Sales Executive received a large year-end bonus due to the award of the contract.
In fact, Local Partner and Distributor used part of the payments and discount margin, respectively, to funnel bribe payments to several Ministry of Immigration officials, including Principal 1’s former college roommate, in exchange for awarding the contract to Company A. Thousands of dollars are also wired to the personal offshore bank account of Sales Executive.
How would DOJ and SEC evaluate the potential FCPA liability of Company A and its employees?
This is not the case of a single “rogue employee” circumventing an otherwise robust compliance program. Although Company A’s finance and compliance officers had the correct instincts to scrutinize the structure and economics of the transaction and the role of the third parties, their due diligence was incomplete. When the initial inquiry identified significant red flags, they approved the transaction despite knowing that their concerns were unanswered or the answers they received raised additional concerns and red flags. Relying on due diligence questionnaires and anti-corruption representations is insufficient, particularly when the risks are readily apparent. Nor can Company A or its employees shield themselves from liability because it was Distributor and Local Partner—rather than Company A directly—that made the payments.
The facts suggest that Sales Executive had actual knowledge of or was willfully blind to the consultant’s payment of the bribes. He also personally profited from the scheme (both from the kickback and from the bonus he received from the company) and intentionally discouraged the finance and compliance officers from learning the full story. Sales Executive is therefore subject to liability under the anti-bribery, books and records, and internal controls provisions of the FCPA, and others may be as well. Company A may also be liable for violations of the anti-bribery, books and records, and internal controls provisions of the FCPA given the number and significance of red flags that established a high probability of bribery and the role of employees and agents acting on the company’s behalf.
65
chapter 5
Guiding Principles of Enforcement
66