Tag Archives: internal investigations

Managing Anticorruption Compliance Under the EU’s General Data Protection Regulation

Posted on by
1

Lawyers and businesses today are concerned with data privacy issues like never before—not only because of the mounting number of data privacy scandals, but also because of new regulations, most importantly the EU’s General Data Protection Regulation (GDPR). The GDPR, which was adopted in 2016 and became applicable in May 2018, reformed the entire personal data protection system in the EU by setting new rules of data protection and privacy. Moreover, the GDPR applies not only to entities that operate within the EU, but also to all entities established in the EU when operating outside the EU, as well as to entities established outside the EU when they are offering their goods and services inside the EU or monitoring individuals from the EU. The GDPR thus has global reach, as well as stringent penalties for violations.

The GDPR has implications for many different fields, and anticorruption is no exception. This is especially true for corporations conducting internal investigations of possible bribery by firm employees or agents, and when conducting due diligence on potential partners. Much of the data collected in these corporate investigations will include “personal data” as defined and regulated by the GDPR. For this reason, some commentators have warned that the effect of the GDPR on traditional corporate anticorruption investigations will amount to “a collision of galactic proportions.”

That may by hyperbole, but it is certainly the case that the GDPR will impose important new obligations that influence how companies handle anti-bribery compliance issues, both in the context of internal investigations and in the context of due diligence. Continue reading →

The UK Parliament Should Broaden and Sharpen the Legal Advice Privilege in Order to Encourage More Internal Investigations into Corruption

Posted on by
2

On September 5, 2018, the compliance departments and outside counsel of large corporations operating in the UK breathed a collective sigh of relief. In a much anticipated ruling, the Court of Appeal of England and Wales overturned a trial judge’s order that would have compelled a London-based international mining company, Eurasian Natural Resources Corporation Limited (ENRC), to hand over documents to UK prosecutors investigating the enterprise for bribery in Kazakhstan and Africa. Those documents were the product of an investigation that ENRC’s outside legal counsel had conducted following an internal whistleblower report that surfaced in late 2010. In conducting that internal investigation, lawyers from the law firm interviewed witnesses, reviewed financial records, and advised ENRC’s management on the company’s possible criminal exposure. Though the company tried to keep everything quiet, the UK’s Serious Fraud Office (SFO) came knocking in mid-2011. The SFO agreed to let ENRC and its lawyers continue to investigate on their own, periodically updating the SFO on their progress. In 2013, ENRC’s legal counsel submitted its findings to the SFO in a report arguing that, on the basis of the facts presented, the company should not be charged. The SFO disagreed and launched a formal criminal investigation. But the SFO then also demanded that ENRC turn over all of the files and documents underpinning its report—including presentations given by the lawyers to ENRC’s management and the lawyers’ notes from their interviews with 184 potential witnesses.

ENRC refused to comply, claiming that these documents were covered by two legal privileges under UK law: the “litigation privilege,” which guarantees the confidentiality of documents created by lawyers for the “dominant purpose” of adversarial litigation (including prosecution) that is “in reasonable contemplation,” and the “legal advice privilege,” which protects communications between lawyers and clients exchanged for legal advice. The trial court rejected ENRC’s privilege claims, a decision that sent shockwaves through the English defense bar and spurred much criticism on legal and policy grounds. But the Court of Appeal reversed, holding that ENRC’s lawyers didn’t have to share the documents. The Court’s ruling relied on the litigation privilege, holding, first, that documents created to help avoid criminal prosecution counted as those created for the “dominant purpose” of litigation, and, second, that criminal legal proceedings were in “reasonable contemplation” for ENRC once the SFO contacted the company in 2011.

Many commentators have hailed the Appeal Court’s decision (which the SFO declined to appeal) as a “landmark ruling” and a “decisive victory” for defense lawyers. The reality is a bit more nuanced. The Court of Appeal’s fact-specific ruling was very conservative in its legal conclusions, and it’s unlikely that its holding regarding the litigation privilege is sufficient to create the right incentives for companies and their lawyers. It’s also unlikely that further judicial tinkering with the scope of the litigation privilege will resolve the problem promptly or satisfactorily. The better solution would involve a different institutional actor and a different privilege: Parliament should step in and expand the scope of the legal advice privilege to cover all communications between a company’s lawyers and the company’s current and former employees. Continue reading →

Guest Post: By Refusing to Respect Attorney-Client Confidentiality, European Courts Threaten To Undermine Anti-Bribery Enforcement

Posted on by
Reply

GAB is pleased to welcome back Frederick Davis, a lawyer in the Paris and New York offices of Debevoise & Plimpton and a Lecturer at Columbia Law School, who contributes the following guest post:

In the fight against transnational bribery and other forms of corporate crime, a key element of some national prosecution agencies’ strategy is to encourage corporations to “self-report” to the government and to cooperate with any subsequent investigation. The United States Department of Justice (DOJ) pioneered this strategy, but other jurisdictions are beginning to adopt it as well. The basic approach is to offer companies both a stick and a carrot: The stick: If corporations do not self-report and are ultimately discovered, they will be prosecuted vigorously. The carrot: A self-reporting, cooperating company can obtain a more favorable settlement, and perhaps avoid prosecution altogether. From a public policy perspective, it is vastly more efficient for prosecutors to work with corporations in the fight against corruption, essentially enlisting them as partners to detect, investigate, and bring to justice the individuals responsible for corruption, than for prosecutors to do all this work themselves.

From the company’s perspective, though, the decision whether to self-report is difficult: By making a first phone call to a prosecutor, the company all but commits to negotiating a settlement and abandons both the chance of non-detection and the (perhaps scant) possibility of a successful defense. At a minimum, starting this process will entail large costs (particularly legal fees), as well as risks, including the risk that prosecutors may discover more matters to be investigated. There is also the problem, already discussed on this blog, of evaluating whether a negotiated outcome in one country will preclude or deter prosecution in another. And at least at the early stages, the company may not even be certain whether a violation has in fact taken place, or how widespread or egregious such violations may have been. For these reasons, when a company’s leaders learn that there may have been violations of anti-bribery or other laws, the company will retain a seasoned legal team to oversee a thorough internal investigation of the facts in order to make a reasoned decision whether, and where, to self-report.

When a company asks lawyers to do this, it is essential that the attorneys’ work be protected by the attorney-client privilege, at least until such time as the company decides to share fruits of the investigation with prosecutors. If a company knew that everything learned or generated by its lawyers in the course of an internal investigation could be subject to seizure or forced disclosure to prosecutors, then companies would face a huge disincentive to start the process of conducting an internal investigation at all, since doing so could simply create a handy road map – and compelling evidence — for the prosecutor. In the United States, although the conduct of such an internal investigation poses a number of possible traps for the unwary, if the investigation is properly managed then the company can generally be assured that no prosecutor will get her hands on the fruits of its lawyers’ work unless and until the company specifically authorizes such disclosure. Matters are more complicated in Europe, however. For example, in-house counsel are generally not considered to be “attorneys” capable of generating a protectable professional privilege. And in some countries, such as France, the client does not necessarily have the power to “waive” the secret professionel (the rough equivalent of the attorney-client privilege) at all. Most notably—and most troublingly—recent court decisions in the UK and Germany have gone even further in making the results of lawyers’ internal investigations discoverable by prosecutors without the company’s consent. These decisions, if not reviewed or curtailed by legislation, will create huge disincentives to self-investigation, and hence to self-reporting. Continue reading →