casemark/fcpa-compliance-policy

FCPA Compliance Policy

Drafts a litigation-ready FCPA Compliance Policy anchored in DOJ/SEC enforcement guidance, with specific thresholds, approval workflows, and role-based obligations.

Prerequisites

1. Company profile — jurisdiction, SEC issuer or domestic concern status, geographic markets, high-risk countries
2. Existing materials — prior FCPA policies, audit findings, enforcement history, third-party agent inventory
3. Org structure — approval hierarchies, Compliance Officer identity, board/audit committee structure
4. Risk appetite — facilitation payment election (recommend total prohibition), gift/hospitality thresholds
5. Third-party landscape — agents, distributors, JV partners interacting with foreign officials

Quick Start

1. Gather prerequisites above
2. Draft policy following the nine-section Output Structure below
3. Customize thresholds to company risk profile
4. Run Guidelines checklist before finalizing
5. Attach appendices (approval forms, due diligence checklists, red flag cards)

Output Structure

Draft a policy with these nine sections:

1. Introduction & Scope

| Element | Content | |---|---| | Statutory basis | Anti-bribery: 15 U.S.C. §§ 78dd-1, -2, -3; Accounting: 15 U.S.C. §§ 78m(b)(2)(A)-(B) | | Penalties | Corporate criminal: up to $2M/violation; individual: up to 5 years imprisonment [VERIFY post-inflation adjustments] | | Enforcement | DOJ (criminal), SEC (civil, issuers only) | | Tone | Compliance = legal obligation + business integrity; employees who refuse corrupt practices are supported |

2. Applicability

• Covered persons: All employees, officers, directors, agents globally — including foreign subsidiaries where U.S. jurisdictional nexus exists
• Nexus triggers: U.S.-routed emails, wire transfers through U.S. correspondent banks, calls to/from U.S., SEC registration
• Third parties: Agents, consultants, distributors, JV partners, customs brokers acting on company's behalf; willful blindness = liability
• Conflict of laws: Apply the more restrictive standard; consult Legal/Compliance

3. Prohibited Conduct & Key Definitions

Prohibits offering, promising, giving, or authorizing anything of value to a foreign official, directly or through intermediaries, corruptly to influence official action, induce duty violations, secure improper advantage, or obtain/retain business.

| Term | Scope | |---|---| | Foreign official | Government employees at all levels; state-owned enterprise officials (even minority ownership); political party officials/candidates; public international organization employees | | Anything of value | Cash, gifts, meals, travel, lodging, employment offers, charitable contributions, political donations, business opportunities | | Issuer | Company with U.S.-registered securities or periodic SEC filing obligations | | Domestic concern | U.S. citizens, nationals, residents; U.S.-organized entities |

Facilitation payments: Recommend total prohibition — narrow exception, difficult to document, prohibited by U.K. Bribery Act and many local laws.

Common schemes: Consulting fees to officials' shell companies; luxury travel to influence procurement; hiring officials' relatives as quid pro quo; directed charity donations; cash to expedite customs.

4. Gifts, Hospitality & Business Courtesies

All criteria must be met: reasonable value; lawful under recipient's policies and local law; tied to legitimate business purpose; transparent and documented; not cash; no expectation of official action; infrequent.

Default thresholds:

| Category | Limit | Approval | |---|---|---| | Single gift (foreign official) | ≤ $100 | None | | Aggregate per recipient/year | ≤ $250 | None | | Meals (with business discussion) | Reasonable | Manager | | Exceeding thresholds | Any | Legal/Compliance written | | Travel/lodging | Economy; standard hotel | Legal/Compliance written |

Always prohibited: Cash/equivalents; first-class travel (unless equal to internal policy); family member expenses; personal side trips; unattended event tickets.

5. Third-Party Due Diligence

Risk-tiered framework:

| Tier | Risk Factors | Diligence | |---|---|---| | Low | No government interaction; low-risk jurisdiction; fixed fee | Registration check; sanctions/media screening; FCPA representation | | Moderate | Occasional government contact; moderate jurisdiction; commission comp | + References; qualifications; comp reasonableness; anti-corruption policy review | | High | Regular government contact; high-risk jurisdiction (TI CPI < 50); success fee; government-recommended; official ownership | + Background investigation; ownership verification; site visit; compliance audit; ongoing monitoring |

Required contract terms: FCPA compliance reps/warranties; accurate books obligation; audit rights; training obligations; termination right for violations.

Compensation rules: Reasonable and documented; prohibit round-sum payments, cash, offshore routing, payments to unqualified parties.

Monitoring: Annual recertification; periodic transaction review; immediate red flag investigation.

6. Accounting Provisions & Internal Controls

All transactions recorded accurately in reasonable detail — not limited to foreign-official interactions.

Prohibited: Off-books accounts; false invoices/expense reports; generic payment descriptions.

Required controls:

| Control | Description | |---|---| | Segregation of duties | No single employee controls all aspects of high-risk transactions | | Approval hierarchy | Management review for foreign-official and high-risk third-party expenditures | | Expense flagging | Automated flags for unusual payments routed to Compliance pre-processing | | Periodic audits | High-risk accounts and third-party transactions | | Payment channels | Payments only to contracting party; only in country of service |

Finance red flags (escalate before payment): Round-sum invoices lacking detail; third-country/offshore payments; cash requests; shell companies; unusual urgency; unapproved vendors.

7. Training Requirements

| Population | Frequency | Content | |---|---|---| | All employees (intl ops, finance) | Hire + annual | FCPA overview, red flags, reporting channels | | High-risk (sales, BD, procurement) | Hire + annual + role change | Scenarios, approval workflows, due diligence | | Senior management | Annual | Compliance culture, resource adequacy, escalation | | Board/Audit Committee | Annual | Oversight, key risks, program effectiveness | | High-risk third parties | Per contract | FCPA fundamentals, policy obligations |

Require written certification of completion; maintain comprehension records (assessments).

8. Reporting & Non-Retaliation

Channels: 24/7 multilingual hotline (anonymous where permitted); web portal; direct Legal/Compliance access.

Investigation: Prompt review; independent investigators; document preservation; escalation to Audit Committee for significant matters.

Non-retaliation: Adverse actions prohibited for good-faith reporters or employees refusing to participate in violations. Retaliation = independent terminable offense.

Protections: Dodd-Frank (SEC reporter incentives/anti-retaliation) [VERIFY current bounty %]; SOX (public company fraud reporting).

9. Enforcement & Accountability

• Discipline: Violations subject to termination regardless of seniority; includes demotion, suspension, bonus/equity forfeiture
• Personal liability: Company cannot indemnify personal criminal fines; individual exposure includes imprisonment (up to 5 years), civil penalties, disgorgement, debarment
• Self-disclosure: Company reserves voluntary disclosure right; cooperation is significant in DOJ/SEC charging decisions
• Governance: Designated CCO with board reporting line; annual policy review; Compliance Officer escalation authority; adequate budget for training, diligence, monitoring, investigations

Appendices

Include: gift/travel approval form template; tiered due diligence checklist; red flag reference card; Compliance contact info and hotline; country risk tier list (current TI CPI).

Troubleshooting

• Facilitation payment ambiguity: Default to prohibition; document policy election and rationale explicitly
• SOE classification uncertainty: Always assess government ownership stake — even minority ownership qualifies employees as foreign officials
• U.K. Bribery Act overlap: Flag where U.K. nexus triggers stricter standards (no facilitation exception, adequate procedures defense)
• Threshold calibration: Adjust gift/hospitality limits to industry norms; document basis for chosen amounts
• "Paper program" risk: DOJ/SEC evaluate whether program is operationalized — policy without training, monitoring, and enforcement is insufficient

Guidelines

• Verify penalty amounts annually — subject to Federal Civil Penalties Inflation Adjustment Act
• Apply the more restrictive standard where local law conflicts; document analysis
• Do not speculate on whether specific historical company conduct violated the FCPA without attorney review
• Mark all jurisdiction-specific or time-sensitive figures with [VERIFY]