FCPA Compliance and Ethics Blog

August 13, 2015

Cymbeline – Doing Virtue and FCPA Compliance

CymbelineCommentators still level the hue and cry that it is somehow the fault of the Department of Justice (DOJ) and Securities and Exchange Commission (SEC) that companies continue to violate the Foreign Corrupt Practices Act (FCPA). Things would improve if only the DOJ and SEC would (1) prosecute companies more aggressively; (2) prosecute companies less aggressively; (3) make an example of ‘rogue’ employees who violate their corporate overseers pronouncements not to violate the law; (4) prosecute more corporate executives to ‘send a message’; (5) amend and clarify the FCPA because the concept of do not pay bribes is somehow too complicated for mere mortals to understand; (6) implement a compliance defense because apparently the DOJ does not consider that enough in any decision to prosecute; and/or (7) as The Donald desires, simply do away with the FCPA to restore the ability to pay a fair price for fair corruption.

I thought about all of these varied and contradictory reasons when considering one of Shakespeare’s most enigmatic plays, Cymbeline. In an article in the Wall Street Journal (WSJ) entitled “The Long, Painful Drama of Self-Knowledge”, Stephen Smith considered the character Posthumus who was thought of as virtuous yet, through the crush of the plot, has his virtuous image shattered. Smith poses the question of “Why is Posthumus such a poor leader of himself, and a danger to others?” He answers his own question by saying, “The play suggests that his lack of self-knowledge, along with the flattery of his culture, make him overconfident.” In other words, he was human.

I thought about this analysis in the context of the recent accounting and financial scandal that engulfed the Toshiba Corporation in Japan. For those who did not follow the news, Toshiba announced last month that it had overstated its profits from 2008-2014 by over $1 billion dollars. This was in the face of the company having been publicly recognized for its good governance standards and practices. In an article in the Financial Times (FT), entitled “Japan Inc left shaken by Toshiba scandal”, Kana Inagaki reported, “On paper, it had a structure that gave its external directors the authority to many top executives and an auditing committee to monitor the behaviour of the company’s leaders. It was lauded for its efforts. In 2013, the group was ranked ninth out of 120 publicly traded Japanese companies with good governance practices in a list compiled by the “Japan Corporate Governance Network.””

But it was all a sham as it turned out that chairman of the audit committee was in on the fraud in addition to a plethora of top executives. Kota Ezawa, an analyst at Citigroup was quoted in the piece that “Toshiba was lauded as the frontrunner in governance efforts but that was a misunderstanding. Its governance structure looked good but the execution was not.” Ezawa further stated, “We need to make sure that companies understand that having structures is not enough.” So even a company with $52bn in annual sales must have more than a paper program.

For those who want to point to some defect in the Japanese corporate character, reminding us of the Olympus scandal from 2011, where successive corporate executives covered up long running accounting fraud, Andrew Hill, also writing for the FT in an article entitled “The universal dangers shown by Toshiba’s failings”, says not to point that self-righteous finger quite so quickly. He reminds readers of WorldCom from earlier this century. Being from Houston, I would remind readers of Enron and its accounting fraud as well. Hill cites to the work of Professor Michael Jones to identify four main types of accounting fraud, (1) increasing income, (2) decreasing expenses, (3) increasing assets, and (4) decreasing liabilities. Hill further notes that one common failing in all of these examples is the failure of internal controls. A second key failing is the “Unwillingness to challenge authority, a trait attributed to employees at Toshiba and Olympus — and often given an “only in Japan” spin — is a recurring problem everywhere, from Royal Bank of Scotland under Fred Goodwin to Fifa under Sepp Blatter.”

Hill’s explanation of the how and why of these accounting scandals is as age old as the time of Cymbaline. He wrote, “The most important lesson from Toshiba is about the malign impact of top-down pressure to meet unrealistic targets. Toshiba’s ex-chief executive denies having given direct instructions to staff to inflate profits. But the investigating panel said he told executives to “use every possible measure to achieve profitability” and added that Toshiba’s corporate culture did “not allow employees to go against the will of their superiors”.”

The lessons that Hill finds in the Toshiba accounting scandal are equally applicable to FCPA compliance and enforcement. It is not the DOJ or SEC’s “fault” when companies do not comply with the FCPA. It is up to the companies to which the law applies to comply with it. Make no mistake; it is quite simple not to pay bribes. One only has to wake up and say “I am not paying a bribe today, no matter what the economic benefit is to me”. Yet for a company, it is not easy because you have to not only put the appropriate controls in place, but you have to do compliance by ensuring these controls are executed upon. That was the failing of Toshiba, it had the controls in place but it did not execute on them.

I think this speaks directly as to why FCPA violations continue to occur and be prosecuted. Hill ended his piece by noting, “When aggressive targets, irresistible management pressure and weak controls coincide, misconduct can spread quickly. Rival companies see the inflated numbers and strain to match them. To suggest such weaknesses are confined to one corporate or national culture is a first step into dangerous complacency.” As long as humans are involved with corporations and there are incentives in place for more and greater sales, you will always have the motivation to cut corners and pay bribes. That impulse can be brought on by a bump in salary, a nice bonus, a promotion or sometimes simply keeping your job. That is why a compliance program must be put in place and those controls must be effective.

In Cymbeline the protagonist Posthumus learns that one key component of virtue is prudence. Near the end of his article on Shakespeare’s play Smith writes, “In his story, we glimpse one goal of Shakespearean drama: to help forge just such a character – an integrated human person capable of leading himself and others to peace, with the help of virtue.” For FCPA compliance, as long as there are incentives in place to make money, there will be people who cut corners by paying bribes. Yet companies can temper this by putting an effective compliance program in place and actually doing compliance. Much like Posthumus learns in Cymbeline it is one’s actions which lead to being virtuous; for a company, it is doing compliance that leads to it being called ethical.

This publication contains general information only and is based on the experiences and research of the author. The author is not, by means of this publication, rendering business, legal advice, or other professional advice or services. This publication is not a substitute for such legal advice or services, nor should it be used as a basis for any decision or action that may affect your business. Before making any decision or taking any action that may affect your business, you should consult a qualified legal advisor. The author, his affiliates, and related entities shall not be responsible for any loss sustained by any person or entity that relies on this publication. The Author gives his permission to link, post, distribute, or reference this article for any lawful purpose, provided attribution is made to the author. The author can be reached at tfox@tfoxlaw.com.

© Thomas R. Fox, 2015

August 10, 2015

Social Media Week Part VI – Social Media and CCO 3.0

Social Media VII conclude this exploration of the uses of social media in doing compliance by exploring why the compliance function is uniquely suited to using social media tools. Long gone are the days when Chief Compliance Officers (CCO) or compliance practitioners were lawyers housed in the Legal Department or the General Counsel’s (GC’s) office writing policies and procedures and then putting on eight hour training programs on same. Donna Boehme has written passionately about CCO 2.0 and the structural change to separate the CCO role from that of the GC because of the differences in focus of a CCO and GC. Simply put, a GC and legal department is there to protect the company while the CCO and compliance function exists to solve problems before the company needs protections from them.

Freed of the constraints to write policies and procedures by lawyers for lawyers, the profession has moved to integrating compliance directly into the fabric of the company. I often say that a Foreign Corrupt Practices (FCPA) compliance program is a business solution to a legal problem. The problem is how to comply with the FCPA and other anti-corruption regimes. The solution is to burn compliance into the DNA of your company so that it is not only owned by the business unit but also acted on by the business unit in its day-to-day operations.

I think this means that we are now moving to CCO 3.0 where a CCO or compliance practitioner is putting compliance into the forefront of how a company does business. The example of safety comes to mind when every corporation I ever worked at made clear that safety was everyone’s responsibility, literally from the shop floor to top of the company. I once heard of a Executive Vice President (EVP) of a major oil and gas operating company, while touring a contractor’s facility, stop the tour to point out that a contractor carry two bags of trash down a set of stairs was an unsafe practice and required the employee to carry one bag at a time so she could hold the handrail while descending the stairs. That is the level of the awareness of safety now.

The evolution of compliance is just as dramatic. Moreover, the compliance function should be on the cutting edge of moving it forward within your company. The important thing to remember about social media tools is precisely that; they are tools that a CCO, compliance practitioner or any company can use to communicate with their employee base. Put another way, social media is but one part of the communication ecosystem which can be used to market the message of compliance.

Last week I wrote that there are still many companies who do not allow their employees access to the most popular and useful social media tools at work or even on company computers. While these companies always claim it is due to security issues, the reality is that they simply do not trust or even respect their employees. In such a company, management is much more concerned about what employees might say about an organization than trusting that they not only want to do the right thing but will execute such a strategy when provided the opportunity to do so, through the mechanism of social media. This means that companies which trust and respect their employees do not have to worry about employees releasing confidential data through social media channels because there are plenty of other ways that employees can release confidential information if they were so inclined. Indeed think of the Dodd-Frank Whistleblower provision and how many employees who report to the Securities and Exchange Commission (SEC) reported or tried to report internally before going to the SEC. Simply put if a company does not trust and respect its employee base, communicating the message of compliance throughout an organization will be more difficult but that is clearly not the signal senior management is sending to its employees.

The compliance function must engage with its customer base, AKA the employees in a company. Charlene Li, in her recent work “The Engaged Leader”, said in the introduction “In order to be truly effective today, leaders in business and society must change how they engage, and in particular how they establish and maintain relationships with their followers via digital channels.” The same is true for the compliance function. She believes that technology has changed the dynamic between leaders and their followers. In The Engaged Leader she explains:

  • Why leaders need to master a new way of developing relationships, which begins by stepping out of traditional hierarchies
  • How to listen at scale, share to shape, and engage to transform
  • The art of making this transformative mind shift
  • The science of applying the right tools to meet your strategic goals

Li believes that “This transformation is not optional. Those who choose not to make this change will be abandoned for those who inspire people to follow them.” In an interview for the podcast HBR Ideacast, entitled ““Social Media Savvy CEO” is no Oxymoron, Li further expounded on these views. She asked why a leader would be afraid to engage with those in his or her corporation? But more than simply engagement, she asked why would a leader want to cut themself off from the best source of information for them and available to them; their employee base, through social media. After all, every company strives to have an active engagement with their customer base so why not have it with employees.

Now change out Li’s language from ‘leaders’ and insert ‘CCOs or compliance practitioners’. I think it is even more critical for the CCO or compliance practitioner because doing compliance is something that should occur in the business units. Yes a CCO can put those policies and procedures in place but it is the folks in the field who must implement them going forward. If social media can be a tool to help facilitate doing compliance why not embrace it for communications, training, input, problem identification or resolution?

Yet there is another reason for the compliance function to embrace social media going forward. One of my favorite thought leaders around innovation in the legal arena is Professor David Orozco. In a blog post, entitled “Innovation in the Legal Sector”, he said, “Innovation is a big deal. It’s been a big deal ever since customers rewarded differentiation and punished companies that failed to maintain their creative edge.” The same is equally, if not more so, applicable to the compliance arena. The Department of Justice (DOJ) has consistently made clear that FCPA compliance programs should be evolving and using the newest and best tools available. That sounds suspiciously like social media to me. So if these tools are available to you and at a very reasonable cost (i.e. free) why not consider using them. If you are afraid of information getting out of your company, why not consider using the social media concepts behind your firewall in your company intranet system?

Finally, even if you cannot use some of the publicly available tools discussed earlier, there is no reason that you cannot incorporate the concepts into your compliance program. By that I mean you can use the communication ideas inside of your company for your compliance program. You can create the equivalent of a Tweet-Up where the CCO or others answer questions that employees submit. Similarly, you can live stream a Q&A session using the concepts articulated by Meerkat and Periscope for social media live streaming. Pinning compliance reminders or other information in some type of internal company bulletin board is using the basic concept of Pinterest. I am sure that you can accomplish the same by using SharePoint. Why not create an internal compliance reminder video series using the same tools that a millennial would use to create a Facebook post?

Think all of this sounds far-fetched? Think again. In this month’s issue of the Compliance Week magazine, Guest Columnist Raphael Richmond, the CCO at Ford Motor Company, in an article entitled “Compliance? There Should Be an App for That!, detailed how the company has created an app for iPhone and Android devices that “allows users to access compliance information quickly, including brief, easy-to-understand policy summaries and answers to frequently asked questions (FAQs). The app also has a “Can I … ?” tab that acts as a quick decision tree for finding specific answers to commonly asked questions. Topics in our app address a range of compliance issues, from anti-bribery guidance to Ford’s approach to gifts and favors, meals, travel, and social events. Individuals can also report a suspected violation directly from the app to the Corporate Compliance Office.” It will certainly be exciting to see how Ford develops this tool going forward.

I often say that as a CCO or compliance practitioner you are only limited by your imagination. The use of social media in your compliance function is one that is crying out for imaginative usages. As we move to CCO 3.0, the compliance function will need to avail itself of all the tools it can to communicate the message of compliance. The DOJ currently requires companies that enter into Deferred Prosecution Agreements (DPAs) to keep abreast of technological innovations in compliance. How long do you think it will take for the DOJ to start asking how much compliance communication you have both up and down the chain? If you are not using a social media tool or even a social media technique you may already be behind the 8-ball and you certainly will be left behind in the marketplace of ideas going forward.

I hope that you have enjoyed this six-part series on the use of social media in your compliance program as much as I have enjoyed researching it, writing and posting it. If you are currently using social media tools, concepts or techniques in your compliance program please contact me, as I would appreciate the opportunity to learn more about what your organization is up to in that realm. Also, please remember that I am compiling a list of questions that you would like to be explored or answered on the use of social media in your compliance program. So if you have any questions email them to me, at tfox@tfoxlaw.com, and I will answer them within the next couple of weeks in my next Mailbag Episode on my podcast, the FCPA Compliance and Ethics Report.

This publication contains general information only and is based on the experiences and research of the author. The author is not, by means of this publication, rendering business, legal advice, or other professional advice or services. This publication is not a substitute for such legal advice or services, nor should it be used as a basis for any decision or action that may affect your business. Before making any decision or taking any action that may affect your business, you should consult a qualified legal advisor. The author, his affiliates, and related entities shall not be responsible for any loss sustained by any person or entity that relies on this publication. The Author gives his permission to link, post, distribute, or reference this article for any lawful purpose, provided attribution is made to the author. The author can be reached at tfox@tfoxlaw.com.

© Thomas R. Fox, 2015

May 7, 2015

Doing Compliance – Released in Amazon Kindle and Apple iBook Formats

Doing Compliance 05I am extraordinarily pleased to announce that Compliance Week has released my most recent hardbound book, Doing Compliance: How to Design, Create, and Implement an Effective Anti-Corruption Compliance Program, in both Amazon Kindle and Apple iBook formats. Of course you can also purchase a hard copy to keep on your reference shelf as well. It is the book that a compliance practitioner should use as a one-volume reference for the everyday ‘Nuts and Bolts’ work of anti-corruption compliance.

Just as the world becomes more flat for business and commercial operations, it is also becoming so for anti-corruption and anti-bribery enforcement. Any company that does business internationally must be ready to deal with a business environment with these new realities. Doing Compliance is designed to be a one-volume work that will give to you some of the basics of creating and maintaining an anti-corruption and anti-bribery compliance program that will meet any business climate you face across the globe. The book format is an easy reference to assist you with your compliance program and I have based my discussion of a best practices compliance program on what the Criminal Division of the US Department of Justice (DOJ) and Enforcement Division of the Securities and Exchange Commission (SEC) set out in their jointly produced “A Resource Guide to the U.S. Foreign Corrupt Practices Act” (the FCPA Guidance) and the “Ten Hallmarks of an Effective Compliance Program”.

The FCPA Guidance wisely made clear that there is no ‘one-size-fits-all’ approach when it stated, “Individual companies may have different compliance needs depending on their size and the particular risks associated with their businesses, among other factors.” Thus, the book is written to provide insight into the aspects of compliance programs that the DOJ and SEC assess, recognizing that companies may consider a variety of factors when making their own determination of what is appropriate for their specific business needs.

The book has struck a cord with other well-known figures in the compliance community. Professor Andy Spalding, writing in the FCPA Blog, in a post entitled “Book Review: Tom Fox’s Doing Compliance: Design, Create, and Implement an Effective Anti-Corruption Compliance Program”, said, “Compliance must be thorough, systematic, and highly attentive to detail. But no one ever said it had to be boring. And Tom Fox has proven this yet again. His Doing Compliance provides the most sophisticated and comprehensive compliance guidance available, with a delivery that is witty, lively, and even entertaining.”

The FCPA Professor, in a post entitled “Doing Compliance” – An FCPA Compliance Toolbox”, said, “Fox approaches the FCPA and related topics with a singular goal in mind: analyzing and articulating the vast body of literature on FCPA best practices in a digestible, practical, and workable way to be of value to compliance professionals in the field. In short, Fox is the “nuts and bolts” guy of FCPA compliance who not only offers his own insight and perspective on best practices, but also effectively aggregates the insights and perspectives of others. Fox’s latest book is “Doing Compliance: Design, Create, and Implement an Effective Anti-Corruption Compliance Program” and in it he provides, in his words, “the basics of how to create and maintain an anti-corruption and anti-bribery compliance program to suit any business climate across the globe.” The nine chapters of the book are grouped around topics such as senior management commitment to compliance; written policies and procedures; conducting a risk assessment; training; hiring and other human resources issues; reporting and investigation; and merger and acquisition due diligence. “Doing Compliance” is peppered with many helpful checklists and factors that compliance professionals can use on a daily basis to implement, assess and improve FCPA compliance policies and procedures.”

This book does not discuss the underlying basis of the FCPA, the UK Bribery Act or any other anti-corruption or anti-bribery legislation. The book is about doing business in compliance with these laws. As with all Americans, I appreciate any list that is deca-based, so the format of 10 hallmarks resonates with me. I have used this basic ten-part organization in laying out what I think you should consider in your anti-corruption and anti-bribery compliance program. In addition to presenting my own views in these areas, I also set out the views of both FCPA practitioners and commentators from other areas of business study and review, including Mike Volkov, the FCPA Professor, David Lawler, Stephen Martin, Marjorie Doyle, Russ Berland and Scott Moritz, and many others.

If there is one book on the ‘Nuts and Bolts’ of how to design, create and implement a best practices compliance program, I submit to you this is the one. I hope that you will check it out in one of the new formats now available. Finally, the price is set at a very reasonable $69.95 so if you are a Chief Compliance Officer (CCO) or General Counsel (GC), you can purchase an entire set for your compliance team. You can even buy them for your friends and family if you want them to have a better understanding of what you do at work!

To purchase a copy of Doing Compliance: How to Design, Create, and Implement an Effective Anti-Corruption Compliance Program click on one of the links below:

 Hard copy

Amazon Kindle

 Apple iBook

This publication contains general information only and is based on the experiences and research of the author. The author is not, by means of this publication, rendering business, legal advice, or other professional advice or services. This publication is not a substitute for such legal advice or services, nor should it be used as a basis for any decision or action that may affect your business. Before making any decision or taking any action that may affect your business, you should consult a qualified legal advisor. The author, his affiliates, and related entities shall not be responsible for any loss sustained by any person or entity that relies on this publication. The Author gives his permission to link, post, distribute, or reference this article for any lawful purpose, provided attribution is made to the author. The author can be reached at tfox@tfoxlaw.com.

© Thomas R. Fox, 2015

February 27, 2015

Gulliver’s Travels, Truth or Fiction?

Gulliver's TravelsThere was once a man named Gulliver who traveled widely and wrote a book about his adventures called Gulliver’s Tales. During his first voyage, Gulliver is washed ashore after a shipwreck and finds himself a prisoner of a race of little people, who live in the country of Lilliput. After giving assurances of his good behavior, Gulliver becomes a resident in Lilliput and becomes a favorite of the court. From there, the book follows Gulliver’s observations on the Court of Lilliput. He is also given the permission to roam around the city on a condition that he must not harm their subjects and otherwise engage in illegal, immoral or unethical conduct.

I am continually amazed at how life imitates art because if I told you the following tale you might accuse me of simply making up things to write about. Imagine there is a corporate banking Chief Executive Officer (CEO), whose company signed one of the largest Deferred Prosecution Agreements (DPA) ever a little over two years ago giving assurances of good behavior going forward. Now imagine I tell you that the same CEO has been hiding money for years in a Swiss bank account through a shell corporation for ‘his privacy’ (IE., Hiding money from the Lilliputians of this world). Unfortunately for the real Stuart Gulliver, the CEO at the banking giant HSBC, these facts are true. While his company is in yet another scandal involving its illegal conduct, while under a DPA for its past sins, it turns out the CEO was hiding approximately $7.7MM in a Swiss bank account. To compound this effort to conceal his monies, he did so through a shell Panamanian company.

Yet, just like the fictional Gulliver, the real Gulliver has a very simply explanation for this practice. According to Jenny Anderson, in an article in the New York Times (NYT) entitled “HSBC Chief Defends Swiss Bank Account Worth $7.7 Million”, Gulliver said “This has an everyday explanation to it” and said the explanation was that he was trying to hide the money so his co-workers would not know he much money he made. Or as Anderson wrote, “In an effort to protect his privacy — he was the bank’s top earner — he put the money in Switzerland to hide it from the prying eyes of his Hong Kong colleagues. But he then had to hide it from his curious Swiss colleagues, so he created an anonymous Panamanian company.”

So it turns out that Gulliver was not only trying to hide his money from his co-workers but also from the Swiss by creating a shell corporation to launder the money into before depositing it in Switzerland. Similar to those pesky Lilliputians, who might want to find out something about him that he did not want them to know, as when the fictional Gulliver agreed to not violate the law or engage in otherwise unethical conduct. Of course the real Gulliver has protested that such arrangements were not illegal at the time he engaged in them, side-stepping the question of whether his conduct was unethical (Ethical bankers, does that topic belong in the fiction section?).

Gulliver also went on a charm offensive essentially claiming that not only him but the entire banking industry in general was being picked on. Channeling his inner Mother Theresa, Gulliver was quoted in an article in the Financial Times (FT), entitled “Standards for bankers higher than for bishops, claims HSBC chief Gulliver” by Martin Arnold and George Parker, as saying “It seems to me that we are holding large corporations to higher standards than the military, the church or civil service.” While I am not quite certain as to the pay scale of UK church leaders, I am relatively certain that those in the civil service and military do not have an extra $7.7MM laying around that they need to launder through a Panamanian corporation to hide in a Swiss bank account.

The real Gulliver should have just channeled his fictional Gulliver and said that when in the land of Lilliput, you do not have to tell the Lilliputians the truth, even if you have sworn in a pesky DPA to do so. From the real Gulliver’s statement about bankers being held to higher standards, he obviously thinks that the church, military and civil service (and probably the rest of us mere mortals) have Lilliputian ethical obligations compared to him.

What does all this mean for prosecuting HSBC in the newly erupted money laundering through its Swiss subsidiary scandal? Well it is great to know your CEO has first hand knowledge of the mechanics of such activities. The appropriate UK authorities or even the US Department of Justice (DOJ) could interview the real Gulliver as a subject matter expert (SME) on not only how to hide money from your fellow employees, but also from the Swiss and even gain insight into such machinations to hide money from your own national tax authorities. The real Gulliver may be a real find for the DOJ as an expert witness, at the trial of his company for breach its DPA.

Further, just think of the credibility the real Gulliver would have in negotiations with the DOJ on whether HSBC broke its promises to do business in compliance with US anti-money laundering (AML) laws when it signed its DPA back in 2012. He could go right into the meeting and say, “Lads, let me dispel any misconceptions you might have about Swiss bank accounts. They exist to hide money. At least that is how I use them personally.” He could then walk the lowly civil servants who work in the DOJ Fraud Section and who have lower standards than the whiter-than-white bankers through how the real world of money laundering works, or at least the real world of multi-millionaires who, for some reason, want to protect their own privacy.

The real Gulliver could answer yet another rhetorical question that he posed, and was reported in the FT article, when he asked, “Can I know what every one of 257,000 people is doing? Clearly, I can’t. If you want to ask the question could it ever happen again – that is not reasonable.” The real Gulliver could then go on to respond to this rhetorical flourish along the lines of the following, But I can tell you what is reasonable, to ask me if I know what I am doing and how I am doing it. I am hiding money in my Swiss bank account through a shell Panamanian company. He might even add, How brilliant is that?

Since the fictional Gulliver lived and traveled over 300 years ago, he may be distantly related to the real Gulliver of HSBC today. Nevertheless for a bank CEO to have laundered his own money through a shell corporation into a Swiss bank account ‘for privacy’ is one of those convergences where truth surely is stranger than fiction.

TexasBarToday_TopTen_Badge_Large

This publication contains general information only and is based on the experiences and research of the author. The author is not, by means of this publication, rendering business, legal advice, or other professional advice or services. This publication is not a substitute for such legal advice or services, nor should it be used as a basis for any decision or action that may affect your business. Before making any decision or taking any action that may affect your business, you should consult a qualified legal advisor. The author, his affiliates, and related entities shall not be responsible for any loss sustained by any person or entity that relies on this publication. The Author gives his permission to link, post, distribute, or reference this article for any lawful purpose, provided attribution is made to the author. The author can be reached at tfox@tfoxlaw.com.

© Thomas R. Fox, 2015

February 16, 2015

Economic Downturns and Increased Compliance Risk

Oil PricesOil is hovering around $50 per barrel. For most of the US economy this drop in oil price has provided a much-needed economic boost. One piece on the NPR website, entitled “Oil Price Dip, Global Slowdown Create Crosscurrents For U.S.”, said “economists have suggested the big drop in oil prices is a gift to consumers that will propel the economy.” Liz Ann Sonders, who is the chief investment strategist at Charles Schwab, was quoted as saying “The U.S. economy is 68 percent consumer spending, so right there you know that falling oil prices is a benefit.” Another economist said the positive effects could be “worth $400 billion” for the US economy as a whole.

But in the energy space, particularly in the city of Houston, Texas, this plunge has been devastating. It is so bad that in this past week’s issue of the Houston Business Journal (HBJ), it provided a ‘Box Score’ for energy company lay-offs. And that was before Halliburton announced a 10%-15% reduction and Hercules Offshore announced that it had laid off some 30% of its work force since last October. Nationally, for the energy industry, it will be just as bad. In the NPR piece, David R. Kotok, of Cumberland Advisors, said, “cuts in production and energy company payrolls will cost the U.S. economy up to $150 billion.” The Houston Chronicle headlined it was a “Bloodbath”.

I thought about what this plunge in the price of oil could mean for the compliance function in energy and energy related companies going forward. Many Chief Compliance Officers (CCOs) and compliance practitioners struggle with metrics to demonstrate revenue generation. Most of the time, such functions are simply viewed as non-revenue generating cost drags on business. This may lead to compliance functions being severely reduced in this downturn. However I believe such cuts would be far from short-sighted; they would actually cost energy companies far more in the short and long term.

Almost any energy company of any size has gone through a Foreign Corrupt Practices Act (FCPA) investigation, whether internal or formal by the Department of Justice (DOJ) or Securities and Exchange Commission (SEC). Many had gone through enforcement actions. The risk profiles of these companies did not change because of the drop in oil prices. Extractive resources are still located largely in countries with a high perception of corruption. In others, the inherent compliance risks that currently exist for energy companies will certainly not lessen. Unfortunately they may well increase.

At this point I see two increasing compliance risks for energy companies. The first is that companies will attempt to reduce their costs by cutting their compliance personnel. A tangent but equally important component of this will be that companies that do not invest the monies needed to beef up their oversight through monitoring or other mechanisms are setting themselves up for serious compliance failures.

Moreover, what will be the pressure on the business folks of such companies to ‘get the deal done’ with this slashing of oil prices? Further, if there is a 10% to 30% overall employee reduction, what additional pressures will be on those employees remaining to make their numbers or face the same consequences as their former co-workers?

I think both of these scenarios are fraught with increased compliance risks. For companies to engage in behaviors as I have outlined above would certainly bring them into conflict with the Ten Hallmarks of an effective compliance program as set out in the FCPA Guidance. For instance on resources, the FCPA Guidance does not say in a time of less income, when your compliance risk remains the same or increases, you should cut your compliance function or the resources to support it. Indeed it intones the opposite, when stating, “Those individuals must have appropriate authority within the organization, adequate autonomy from management, and sufficient resources to ensure that the company’s compliance program is implemented effectively.” Moreover, the FCPA Guidance adds, “Moreover, the amount of resources devoted to compliance will depend on the company’s size, complex­ity, industry, geographical reach, and risks associated with the business. In assessing whether a company has reasonable internal controls, DOJ and SEC typically consider whether the company devoted adequate staffing and resources to the compliance program given the size, structure, and risk pro­file of the business.” So the resource issues is stated in reference to the risk profile of the business and not the current or fleeting economic issues of the day.

Also note that the FCPA Guidance speaks to an analysis from the DOJ side, which would presumably be a criminal side review. For instance, if a company cuts its compliance staff while its risk profile has not decreased, does this provide the required intent to commit a criminal act under the FCPA? Moreover, who would be the guilty party under such an analysis? Would it be the Chief Executive Officer (CEO) who ultimately decides we need a fixed percentage cut of employees or simply a raw number to be laid off? How about the department head (as in the CCO) who is told to cut your staff 10% or we will make the cuts for you? Or is it a company’s Human Resources (HR) department who delivers the dreaded knock on a compliance practitioner’s door (I’m from HR and could you come with me). What if a company’s decision-making authority is so decentralized that there is no one person who can be held accountable?

You should also note the SEC role in FCPA enforcement, as alluded to in the quote from the FCPA Guidance. There will be an assessment of internal controls. Now that the COSO 2013 Framework has become effective, will companies delay plans to implement the new Framework and to begin to audit against it? If so, would that be a per se FCPA violation?

But there is a second reason that I believe that energy companies risk profiles will increase in this industry-specific downturn. Unfortunately it will come from those employees who survive the lay offs. They will be under increased pressure to do the jobs of the laid-off folks so there will be a greater chance that something could slip through the cracks. If you are already working full time at one job and one, two or three other employees in your department are laid-off, which job is going to get priority? Will you only be able to put out fires or will you be able to accomplish what most business folks think is an administrative task?

But more than the extra work the survivors will have laid upon them will be the implicit message that some companies senior management may well lay down, that being Get the Deal Done. If economic times are tough, senior management will be looking even more closely at the sales numbers of employees. The sales incentives could very well move from a question of what will my bonus be if I close this transaction to one of will I be fired if I do not close this transaction. If senior management makes clear that it is bring in more business or the highway, employees will get that message.

Once again, where would the DOJ look for to find intent? Would it be the person out in the field who believed he was told that he or she either brought in twice as much work since there were half as many employees left after lay-offs? Would it be the middle manager who is more closely reviewing the sales numbers and sending out email reminders that if sales do not increase, there may well have to be more cuts? What about the CEO who simply raises one eyebrow and says we need to hunker down and get the job done?

What might be the DOJ or SEC reaction to the downsizing of compliance in the face of such increased compliance risk? The energy industry has not gone through this type of economic downsizing in the new age of FCPA prosecutions, largely since 2004, so there is no relevant time frame of FCPA enforcement to reflect from. However, the financial industry did go through such a contraction in the 2007-2010 time frame. We have seen the DOJ and other financial industry regulators draw huge penalties for a series of anti-money laundering (AML) and LIBOR scandals. My guess is that the DOJ and SEC will not allow companies to use economic arguments in the face of known and recognized increase in compliance risks. Indeed they may focus on some of these points as reasons for increased compliance vigilance in an energy company’s compliance function going forward.

This publication contains general information only and is based on the experiences and research of the author. The author is not, by means of this publication, rendering business, legal advice, or other professional advice or services. This publication is not a substitute for such legal advice or services, nor should it be used as a basis for any decision or action that may affect your business. Before making any decision or taking any action that may affect your business, you should consult a qualified legal advisor. The author, his affiliates, and related entities shall not be responsible for any loss sustained by any person or entity that relies on this publication. The Author gives his permission to link, post, distribute, or reference this article for any lawful purpose, provided attribution is made to the author. The author can be reached at tfox@tfoxlaw.com.

© Thomas R. Fox, 2015

February 13, 2015

Bone-headed Moves on the Football Field and Idiotic Statements About Corruption

Pete CarrollThree things can happen when you throw the football, and two of them are bad.”

That football truism (allegedly) came from former Texas Longhorn head coach Darrell Royal. While he intoned it in a different era, Pete Carroll and his Seattle Seahawks proved it still to be valid in the most recent Super Bowl, Carroll called for a pass play on the one-yard line in the last minute of the game and his quarterback threw an interception. Was it the most idiotic call in Super Bowl history? I will leave that answer to the pundits but I will say that Carroll now has the ignominy of making two of the most bone-headed decisions of all-time in football, one in the Super Bowl and the second in College Football’s 2005 National Championship Game, which cost his team the game. Perhaps not what you might want as your epitaph.

For those of you who may have forgotten Carroll’s NCAA National Championship Game FUBAR, his team, the University of Southern California, needing to make one yard at the University of Texas (UT) 43 yard line to achieve a first down and ice the game, Carroll called a running play after pulling off the field that year’s Heisman Trophy winner Reggie Bush. That left one running back on the field and everyone on the field, everyone in the stands and watching the game knew the remaining running back, Lendale White, would get the ball. He did and was promptly stuffed by the UT defense. Vince Young then led UT down the field, scored and Texas won the National Championship. As a UT alum all I can say is, thanks Pete.

I thought about Carroll and his making not one but two idiotic calls for the ages as I have been studying the ongoing Petrobras bribery scandal. While the GlaxoSmithKline PLC (GSK) corruption enforcement action in China may well presage a new era of countries enforcing their local anti-bribery and anti-corruption laws, the Petrobras case may herald this too. The scandal came to the attention of many American’s in the fall of 2014 during Brazil’s Presidential election in a New York Times (NYT) article, entitled “Scandal Over Brazilian Oil Company Adds Turmoil to the Presidential Race, where Simon Romero detailed the bribery scandal involving a former official of Petrobras, the Brazilian national oil company, named Paulo Roberto Costa. Mr. Costa was the person who oversaw the company’s refining operations. He has admitted to having engaged in the receipt of bribes for at least a 10 year period “equivalent to 3 percent of the value of the deals from the Brazilian construction companies that obtained the contracts” to build refineries. This amounted to literally millions being “stashed in bank accounts in Switzerland and the Cayman Islands.”

Costa who “was first arrested in March as part of a money laundering investigation by the federal police, has already agreed to surrender the $25 million fortune he hid in offshore accounts, his yacht and his luxury car, in addition to paying a fine of more than $2 million.” He “inflated budgets for new projects” by 3% and then had that amount kicked back to him as bribes. The allegations were verified “through an associate, Alberto Youssef, a black-market money dealer who testified that he helped launder funds in the scheme. Mr. Youssef, who has also accepted a plea deal, testified that more than a dozen of Brazil’s largest construction companies had paid hefty bribes to obtain lucrative Petrobras contracts.”

Further “He testified that a portion of the money was then handed to João Vaccari Neto, the treasurer of the Workers Party. Mr. Costa said that other top political allies of President Rousseff, including the leaders of both houses of Congress, Henrique Eduardo Alves and Renan Calheiros, also benefited from the kickbacks, according to a report by Veja, a Brazilian magazine.” Interestingly, President Rousseff “has also effectively acknowledged the prevalence of corruption inside the executive suites of Petrobras, while denying that she had known about the kickbacks when they were taking place.”

To say things have mushroomed would be almost likely citing Darrell Royal on passing the football to Carroll. Petrobras is in many ways the engine that drives the Brazilian economy. Not only is it directly responsible for the employ of upwards of 80,000 employees. It is also the continent’s largest company by market capitalization so the amount of work that it generates for the Brazilian economy is staggering.

Just as staggering is this bribery scheme in which it finds itself now engulfed. According to an article by Luciana Maglahaes and Rogerio Jelmayer in the Wall Street Journal (WSJ), entitled “Petrobras Ex-CEO Weighs In”, the company has “lost $80 billion, or 65% of its market share over the past five months.” The company has publicly said that it cannot estimate the amount of money it lost or was overcharged by. The WSJ article noted, “Prosecutors estimate that around $732 million may have been skimmed. But former Petrobras Chief Executive Maria das Graças Silva Foster, who resigned under pressure last week, said projects tied to the alleged scheme may be overvalued by as much as $31 billion.” Think about that number $31 billion in overcharges to the company.

So, how does Carroll and his bone-headed passing call work into this story? First of all it was not Carroll who made the call but the team’s Offensive Coordinator. Yet he did so because Carroll told him to call a passing play. In other words, idiotic tone at the top reigned and the employee base simply followed the boss’s wishes.

In the Petrobras corruption scandal, we were treated to remarks by José Sergio Gabrielli, the former Chief Executive Officer (CEO) of the company from 2005 to 2012. This was also one of the company’s most successful periods of financial growth. The former CEO has claimed not to know anything about any corruption issues that may have arisen during his tenure. Moreover, “Mr. Gabrielli said the alleged fraud was the work of a few bad apples inside the company, and not an indication of broader problems with corporate governance or internal controls at Petrobras.” He then added that the business generated by the company surely outweighed any nefarious effects by stating “Even if the numbers are huge…how much has Petrobras invested from 2003 to 2014? Probably it invested an average of $30 billion a year.” He also added it was really all much ado about nothing by noting that the press had blown the “scandal out of proportion”.

So there you have it encapsulated in three lines; the clearest articulation of a defense of bribery and corruption that I have recently seen. First it was the oldie but goodie rogue employee defense. (I mean there were 80,000 plus employees, how could you stop all of them from engaging in illegal conduct.) Second, look at all the money we made, so even if the corruption cost us $31bn we averaged that much per year while he was at the helm. Finally, it is really no big deal anyway and is all “blown out of proportion.”

Is it really any wonder Petrobras now finds itself in one of the world’s largest corruption scandals? If that is the attitude of the former CEO, do you think he communicated this laissez-faire attitude to his direct reports and that perhaps it cascaded down the organization? As to Carroll, if he gets back to a championship game, either in professional or college football, he might want to consider his play calling. As for the former CEO of Petrobras, Brazilian prosecutors are fighting to freeze his assets and his major complaint is that he has to deal with too many lawyers. Enough said.

This publication contains general information only and is based on the experiences and research of the author. The author is not, by means of this publication, rendering business, legal advice, or other professional advice or services. This publication is not a substitute for such legal advice or services, nor should it be used as a basis for any decision or action that may affect your business. Before making any decision or taking any action that may affect your business, you should consult a qualified legal advisor. The author, his affiliates, and related entities shall not be responsible for any loss sustained by any person or entity that relies on this publication. The Author gives his permission to link, post, distribute, or reference this article for any lawful purpose, provided attribution is made to the author. The author can be reached at tfox@tfoxlaw.com.

© Thomas R. Fox, 2015

December 22, 2014

The Avon FCPA Settlement, Part I

AvonIt is finally done. The long awaited Avon Foreign Corrupt Practices Act (FCPA) enforcement action is on the books. I would say what a long, strange trip it has been but that does not really seem to capture everything that went on in this case. Before we only knew such things as a whistleblower contacting the Chief Executive Officer (CEO) of the company with allegations of bribery in the company’s China business unit, to the Head of Internal Audit being caught up directly in the scandal, put on administrative leave and then terminated; to a professional fee burn rate on the case which would rival the Gross National Product (GNP) of many countries; to Grand Jury subpoenas being issued (or threatened to be issued) to corporate executives to secure their testimony in criminal proceedings; to publicly negotiating with the Department of Justice (DOJ) and Securities and Exchange Commission (SEC); we all thought this FCPA matter had it all. But it turns out just how little we knew about the company’s conduct and just how bad it was which led to this settlement because to say it was bad would demean and belittle the word bad. So over the next few blog posts, I will be exploring Avon, its conduct and the FCPA enforcement action.

For the Record

The amount of the total fines and penalties was $135 million. As noted by the FCPA Professor, “the settlement is the third-largest ever against a U.S. company.” The enforcement action included several resolution vehicles, including a Criminal Information against Avon China resolved via a Plea Agreement; a Criminal Information against Avon Products resolved via a Deferred Prosecution Agreement (DPA) with an aggregate fine amount of $67.6MM. There was a separate SEC resolution through a Civil Complaint against Avon Products, which it agreed to resolve without admitting or denying the allegations through payment. The amount of the SEC settlement was $67.4MM. While the company’s internal investigation began in China, it quickly expanded so that it went far beyond China, including Japan, Argentina, Brazil, India and Mexico.

How Did We Get Here?

It all began back in May 2008, when an employee from Avon’s China business unit sent a letter to the head of the company alleging the China entity had engaged in bribery and corruption. In October 2008, Avon reported, in a Statement of Voluntary Disclosure, that it was investigating an internally reported allegation by an undisclosed whistleblower that corrupt payments had been made in its China operations. These allegations claimed that certain travel, entertainment and other expenses might have been improperly incurred. Although the details of the Avon case have not been disclosed, direct selling was not allowed in China under a law passed in 1998. The National Review reported that Avon was able to secure permission in late 2005 to begin direct selling on a limited basis. Later the Chinese government issued direct-selling regulations and granted Avon a broader license in February 2006 to make such sales.

In its 2009 Annual Report, Avon noted that the internal investigation and compliance reviews, which started in China, had now expanded to its operations in at least 12 other countries and was focusing on reviewing “certain expenses and books and records processes, including, but not limited to, travel, entertainment, gifts, and payments to third-party agents and others, in connection with our business dealings, directly or indirectly, with foreign governments and their employees”. The FCPA Professor, citing the Wall Street Journal (WSJ), reported that Avon suspended four employees, including the President, Chief Financial Officer (CFO) and top government affairs executive of Avon’s China unit as well as a senior executive in New York who was Avon’s head of Internal Audit.

One of the significant pieces of information to come out of the Avon matter is the related costs. As reported in the 2009 Annual Report the following costs were incurred and were anticipated to be incurred in 2010:

Investigate Cost, Revenue or Earnings Loss
Investigative Cost (2009) $35 Million
Investigative Cost (anticipated-2010) $95 Million
Drop in Q1 Earnings $74.8 Million
Loss in Revenue from China Operations $10 Million
Total $214.8 Million

Marketwatch also reported that after these investigations were made public Avon’s stock prices fell by 8%. Lastly, in addition to the above direct and anticipated costs and drop in stock value, the ratings agency Fitch speculated about the possibility of a drop in Avon’s credit ratings. But as bad as these numbers appear they only got worse for Avon as by 2012 its spend on professional fees was estimated to be over $247MM. As of this date, the total professional fees are closer to $300MM.

Grand Jury Investigation and Terminations

The WSJ reported in February 2012 that the DOJ had gone to a grand jury with evidence of FCPA violations against US executives at Avon. Joe Palazzolo and Emily Glazer reported that several company employees were terminated for their role in the scandal. They wrote, “The company said it fired Vice Chairman Charles Cramb on Jan. 29 [2012] in connection with the overseas corruption probe and another investigation into allegedly improper disclosure of financial information to analysts. Mr. Cramb couldn’t be reached for comment. In May [2011], Avon said it fired Ian Rossetter, its former head of global internal audit and security and previously Avon’s head of finance in Asia. Mr. Rossetter didn’t respond to requests for comment and his attorney declined to comment. Bennett Gallina, a senior vice president responsible for the company’s operations outside the U.S. and Latin America, left Avon in February 2011, two days after being put on leave in connection with the internal corruption investigation, the company said at the time.”

Negotiating in Public

I do not know who was advising Avon but the decision to try and force the government’s hand by making public its negotiating position was one of the most bone-headed moves I have seen a similarly situated company make. Avon initially announced that it had opened negotiations with the US government over the terms of a resolution in August 2012. In mid 2013, the FCPA Blog reported that Avon low-balled the SEC with an opening offer of $12MM. Later, in 2013, the company reported in an SEC filing that the “Securities and Exchange Commission offered an FCPA settlement last month with monetary penalties that were ‘significantly greater’ than the $12 million the company had offered.” But not to take such government tactics sitting down, Avon publicly announced in the filing that “Monetary penalties at the level proposed by the SEC staff are not warranted.” That certainly was great information to put out to the public enforcing that you are taking a hardball approach with the SEC and telling them their fines and penalties are not deserved for a company that has gone through all Avon has during this FCPA journey.

As I said, this matter was a long strange journey but as strange as things were that we knew about before last week, they became much stranger. Tomorrow we take a look at the facts that came out through the settlement documents to see the nefariousness of Avon’s conduct.

This publication contains general information only and is based on the experiences and research of the author. The author is not, by means of this publication, rendering business, legal advice, or other professional advice or services. This publication is not a substitute for such legal advice or services, nor should it be used as a basis for any decision or action that may affect your business. Before making any decision or taking any action that may affect your business, you should consult a qualified legal advisor. The author, his affiliates, and related entities shall not be responsible for any loss sustained by any person or entity that relies on this publication. The Author gives his permission to link, post, distribute, or reference this article for any lawful purpose, provided attribution is made to the author. The author can be reached at tfox@tfoxlaw.com.

© Thomas R. Fox, 2014

 

December 16, 2014

The Eve of Destruction and Tone at the Top – You Are Who Say You Are

Barry McGuireIn 1965 the single Eve of Destruction was released. It was written by an 18 year old named Phil Sloan and was sung by former member of the New Christie Minstrels named Barry McGuire. To top it off, it was produced by Lou Adler. These facts, the story of the song, its recording and release were related in a recent Wall Street Journal (WSJ) article by Steve Dougherty entitled “Still on the ‘Eve of Destruction’. There are some singles that got under my skin when they were released and have remained there. This song was one of them. For me, the single most powerful line in the song was following:

Think of all the hate there is in Red China; And take a look around to Selma Alabama. 

Even as an eight year old I pondered the import that line. While we were taught that the Soviet Union might have wanted to defeat, conquer, and then enslave us; it was Red China that hated us so much they wanted to wipe us out of existence As we were taught back then that it was the Red Chinese who hated us; I wondered if there was that much hate in Selma Alabama. For if there was as much hate in Selma Alabama as there was in Red China, it had to be quite a lot of it.

I thought about Eve of Destruction and those lyrics about the hate in Selma, Alabama when I read about the conduct of a couple of senior managers recently. While they have both apologized for their conduct and comments that were clearly beyond the pale, I wondered that if you do say and act a certain way, if it really translates into who you really are. For the compliance practitioner, I wondered what such comments or actions might mean about a Chief Executive Officer (CEO) or other senior management’s commitment to doing business in an ethical manner and in compliance with anti-corruption laws such as the Foreign Corrupt Practices Act (FCPA) or UK Bribery Act.

The first has been nicknamed Nut-Rage and involved the (now former) Korean Air executive Cho Hyun-ah (Heather Cho), who threw one of the greatest diva-worthy (or perhaps five year-old worthy) public temper tantrums of all-time. An article in the BBC Online, entitled “Former Korean Air executive apologises for ‘nut rage” ,reported that “Ms Cho was onboard a Korean Airlines plane departing from New York for Incheon last week when she demanded a crew member to be removed, after she was served nuts in a bag, instead of on a plate.” Also according an article in Slate, entitled “Flight Attendant Forced to Kneel for Serving Nuts in a Bag (Instead of a Dish) to Korean Air Executive” by Daniel Politi, Ms. Cho was not simply content to disrupt the plane’s service, air traffic control and airport scheduling, he wrote “Just when you thought the whole story about the Korean Air executive who went nuts over some nuts couldn’t get more ridiculous, the head of the cabin crew said he was forced to kneel to apologize about how a flight attendant served some macadamia nuts. Just in case you haven’t been following the case, Heather Cho, the daughter of the airline’s chairman and the executive in charge of in-flight service, forced a plane to return back to the gate at New York’s JFK airport last week after a flight attendant dared to bring her macadamia nuts in a bag and not a dish. Cho forced the head of the cabin crew to get off the plane.”

But the story did not end there. In another BBC article, entitled “Korean Air executive ‘made steward kneel over nut rage, the head of the cabin crew also reported that “Once home, officials from the airline came to his home to ask him to say that Ms Cho did not use abusive language and that he had voluntarily got off the plane.” Not to be outdone in this attempt to obstruct the truth and intimidate the witness, the BBC article also reported “Korean Air initially defended Ms Cho, noting that she was responsible for overseeing flight service in her role as vice-president, but the company later apologised.”

Unfortunately the second event is much closer to home here in the US and involves the Sony hacking scandal, which has been an unmitigated disaster for the company. In addition to all of the salary information, personal social security numbers and corporate intellectual properties that have been released, Sony’s Entertainment Chairman Amy Pascal sent some emails that can only at best be characterized as racially insensitive in nature. Jason L. Riley, in a WSJ entitled article “What Do You Call A Black President”, wrote that Pascal and Producer Scott Rudin engaged in the following email colloquy “Last year, Ms. Pascal and Mr. Rudin were invited to a fundraiser for Mr. Obama by Jeffrey Katzenberg, a DreamWorks Animation bigwig and major Democratic donor. Before the event, Ms. Pascal and Mr. Rubin joked about having to attend and what to say to the president. “What should I ask the president at this stupid Jeffrey breakfast,” wrote Ms. Pascal. “Should I ask him if he liked Django”, a 2012 film about slavery. Mr. Rudin responds with his own suggestion, “12 Years a Slave.” The two go back and forth naming movies they imagine the president enjoying—“The Butler,” “Think Like a Man,” “Ride Along”—all of which feature black actors or racial themes.” While Riley opines that this ­tete-a-tete is political in nature, my Southern upbringing reminds me of the line from Eve of Destruction to Think of all the hate there is in Red China; And take a look around to Selma Alabama. Maybe if McGuire were singing the song today, he would expand his geographic horizons.

While both Ms. Cho and Ms. Pascal have apologized for their actions and as noted, Korean Airlines has terminated Ms. Cho from her position. If you are what you say and show to others; what does all that mean when such people get into senior management positions? What does it say about Korean Airlines that it (1) fostered such a culture where the daughter of the President is given a job she clearly knows nothing about, (2) the same person humiliates an employee in public, (3) the Company tries to cover-up the incident by intimidating the employee, and (4) defends the actions of the daughter? Think that company has a culture of compliance? How about if a compliance incident is reported – would the company try to cover it up or thoroughly investigate it? Would the company try to intimidate witnesses to get them to change their recollections of events? How would you answer these questions if the incident in question were not over some nuts being served but over a safety issue?

As to Sony, how do you imagine minority employees might feel, given Pascal’s comments about the President of the United States? What about employees that might complain about discrimination in employment practices? If the head of the studio communicates in the manner about the President, what can a regular employee expect; similar sensitivity? Maybe the lesson for Sony and Pascal is simpler and much more direct, Don’t put stupid stuff in email. For even if your company is not hacked like Sony; in today’s world such emails uncovered in the context of a FCPA investigation might indicate a tone at the top which is not something you wish a regulator to see. But at the end of the day, you are you claim you are.

For a YouTube video clip of Barry McGuire singing Eve of Destruction, click here.

This publication contains general information only and is based on the experiences and research of the author. The author is not, by means of this publication, rendering business, legal advice, or other professional advice or services. This publication is not a substitute for such legal advice or services, nor should it be used as a basis for any decision or action that may affect your business. Before making any decision or taking any action that may affect your business, you should consult a qualified legal advisor. The author, his affiliates, and related entities shall not be responsible for any loss sustained by any person or entity that relies on this publication. The Author gives his permission to link, post, distribute, or reference this article for any lawful purpose, provided attribution is made to the author. The author can be reached at tfox@tfoxlaw.com.

© Thomas R. Fox, 2014

November 12, 2014

John Doar and the Bio-Rad FCPA Enforcement Action – Part II

John DoarJohn Doar died yesterday. He was perhaps most famously known for his role as the House Judiciary Committee Chief Counsel during the investigation of and impeachment proceedings against then President Nixon. However, it was his role in the civil rights movement in the South that in large part inspired me to become a lawyer. He rode with the Freedom Riders in Alabama; walked with James Meredith so that he could register to attend the University of Mississippi, then stayed in the same dorm room with Meredith while the campus rioted; prosecuted the KKK in Mississippi after the murder of three civil rights workers in 1964; and marched for voting rights with Dr. King in Selma. My favorite John Doar story was retold in his obituary in the New York Times (NYT), where he stopped a riot in its tracks with the following ““My name is John Doar — D-O-A-R,” he shouted to the crowd. “I’m from the Justice Department, and anybody here knows what I stand for is right.” That qualified as a full-length speech from the laconic Mr. Doar. At his continued urging, the crowd slowly melted away.”” In my book, he is right up there with Atticus Finch.

In an earlier post, I reviewed the Bio-Rad Laboratories, Inc. (Bio-Rad) Foreign Corrupt Practices Act (FCPA) enforcement action from the perspective of the Non-Prosecution Agreement (NPA) the company was able to secure with the Department of Justice (DOJ). Today I want to review the bribery schemes that the company used to either internally fund the bribes or attempt to evade internal detection. Both the NPA and the Securities and Exchange Commission’s (SEC) Order Instituting Cease-and-Desist Proceedings (Order). The compliance practitioner can use these bribery schemes not only for FCPA training but also to see if any such schemes or their indicia may be present in your company.

Initially I need to discuss the corporate structure. It was apparently quite decentralized. According to the Order, “Bio-Rad’s international sales organization (“ISO”) oversees the company’s international sales operations; this includes all locations outside the United States and Canada. In 2009, the ISO consisted of four sub-divisions: (1) Western Europe; (2) Asia Pacific; (3) Japan; and (4) Emerging Markets. Each sub-division had a general manager, reporting to the vice-president of ISO. The Asia Pacific sub-division included Vietnam and Thailand. The Emerging Markets sub-division included Russia and other eastern European countries. Some countries within the sub-divisions had a country manager who reported to the ISO sub-division general manager.” Emerging markets is clearly a high-risk area for pharmaceutical companies. If your business development or sales organization has such a designation, I would suggest that you check and see if there are sufficient protections in place to at least raise any red flags, which might need further investigation.

However, it was more than the management structure of the business operations that was decentralized, the compliance function was similarly structured. The NPA stated, “BIO-RAD also decentralized its compliance program such that its international offices were responsible for ensuring adequate compliance with its business ethics policy and code of conduct.” This decentralization so defanged the company’s compliance program that it could not perform even the most basic functions of a compliance organization; no due diligence on third parties, indeed no management of third parties at all from the compliance perspective; no risk assessments were performed and, finally, the most damning was that the compliance function could not even ensure compliance with the company’s own business ethics policy.

The Russia Scheme

However the company used third party representatives to facilitate the bribery scheme. In addition to the lack of due diligence or usual steps that a compliance practitioner might put in place to manage third parties under the FCPA there were several other items of note which constitute lessons learned by the compliance practitioner. First and foremost was the commission rate paid to these third parties, that being between 15%-30%. This alone may well have been enough to demonstrate “a conscious disregard for the high probability that the Russian Agents were passing along at least a portion of their commissions to Russian government officials to obtain profitable public contracts for the sale of medical diagnostic equipment.” Further, the payments made to these agents were sent to countries outside Russia, where neither the alleged services were delivered nor where the agents were legally domiciled. Moreover, not only did these agents have no offices in Russia, they had no employees in Russia either.

Apparently there were contracts in place with these agents. The services these agents were specified to deliver included, “acquiring new business, creating and disseminating promotional materials to prospective customers, distributing and installing products and related equipment, and training customers.” But it really is hard to deliver services if you have no employees. Apparently there were times these agents did deliver something identified as “distribution services” for the commission rates between 15%-30%. However the estimated value of these services for the company was between 2%-2.5% of the total sales.

Another area of obvious concern should have been the pre-payment of commissions to these agents. Any time you pre-pay before a service is delivered (other than a retainer into a lawyer’s trust account) you can potentially run into trouble. But Bio-Rad took it a step further by making pre-payments before contracts with the ultimate buyer were negotiated. Any ideas where those pre-paid commissions might have gone? Another area was the amount of the commissions. They were just less than $200,000, which happened to be the authority level of the head of Bio-Rad’s Emerging Markets business unit. So there was no oversight or second set of eyes on these pre-payments because it was within the manager’s authority level. Finally, these pre-payments were actually forbidden under the contracts but they were made anyway.

The Vietnam Scheme 

The Vietnam Country Manager had contracting authority up to $100,000 and sales commissions up to $20,000. From 2005-2009 Bio-Rad apparently paid bribes directly to health care workers so they would purchase the company’s products. When it was pointed out to the Country Manager this was illegal, he simply moved to a distributor “at a deep discount, which the distributor would then resell to government customers at full price, and pass through a portion of it as bribes…Between 2005 and the end of 2009, the Vietnam office made improper payments of $2.2 million to agents or distributors, which was funneled to Vietnamese government officials. These bribes, recorded as “commissions,” “advertising fees,” and “training fees,” generated gross sales revenues of $23.7 million to Bio-Rad Singapore.” 

The Thailand Scheme

In Thailand, it was an almost mundane bribery scheme involved compared to Russia and Vietnam. Bio-Rad acquired an interest in a Thai Joint Venture (JV) through an acquisition where it performed “very little due diligence” on the JV. Bio-Rad acquired a minority interest in the JV and it did not communicate directly with the JV’s distributors but only through the majority owners of the JV. The bribery scheme was funded through “an inflated 13% commission, of which it retained 4%, and paid 9% to Thai government officials in exchange for profitable business contracts.” The due diligence was so poor that Bio-Rad did not know that the prime third party sales representative for the JV were the same majority owners of the JV.

Tomorrow, I will discuss some of the internal controls that a company might employ to help prevent such a compliance failure as occurred at Bio-Rad.

This publication contains general information only and is based on the experiences and research of the author. The author is not, by means of this publication, rendering business, legal advice, or other professional advice or services. This publication is not a substitute for such legal advice or services, nor should it be used as a basis for any decision or action that may affect your business. Before making any decision or taking any action that may affect your business, you should consult a qualified legal advisor. The author, his affiliates, and related entities shall not be responsible for any loss sustained by any person or entity that relies on this publication. The Author gives his permission to link, post, distribute, or reference this article for any lawful purpose, provided attribution is made to the author. The author can be reached at tfox@tfoxlaw.com.

© Thomas R. Fox, 2014

October 21, 2014

Carlton Fisk, The Homer and Oversight of a Profitable Subsidiary

Fisk HomerToday we celebrate one of the great moments in World Series history. At approximately at 12:34 AM on this date in 1975, Carlton Fisk came to bat at the bottom of the 12th, in Game 6 of the World Series between the Boston Red Sox and Cincinnati Reds. He hit a pitch down the left field line. He stood at the plate, bouncing up and down and flailing at the ball as though he was helping an airplane land on a dark runway. “I was just wishing and hoping,” he said at a ceremony some years later. “Maybe, by doing it, you know, you ask something of somebody with a higher power. I like to think that if I didn’t wave, it would have gone foul.” Whether or not the waving was responsible, the ball bounced off of the bright-yellow foul pole above the Green Monster for a home run. Fenway’s organist played the Hallelujah Chorus from Handel’s Messiah while Fisk rounded the bases. One for the ages indeed as it appeared the Baseball Gods might finally be smiling on the Red Sox nation. Alas, they lost the next game and it was not to be for another 30 years.

I thought about Fisk’s homer and the ultimate heartbreak of Red Sox nation once again in 1975 when I read about several recent issues involving corruption and corporate responsibility for oversight, or perhaps more appropriately, the lack thereof. The first was an article in the New York Times (NYT), entitled “Another Scandal Hits Citigroup’s Moneymaking Mexican Division”, by Michael Corkery and Jessica Silver-Greenberg. Their article spoke about the continuing travails of Citigroup’s Mexican subsidiary Banamex. Back in February, the company revealed “a $400 million fraud involving the politically connected, but financially troubled, oil services firm Oceanografía.”

However, company investigators have unearthed another problem at the Mexico unit. The article reported “An internal investigation, begun by Citigroup in July, found evidence that the security unit was overcharging vendors and may have been taking kickbacks, a person briefed on the investigation said. The internal inquiry also found shell companies that had been set up to look like vendors and receive payments from the Banamex unit.” In a statement reported in the piece, Citigroup’s Chief Executive Officer (CEO) Michael L. Corbat “called the conduct of the individuals in the security unit ‘appalling’”.

What I found most interesting in the article was the response of Citigroup and what its implications might mean for the compliance practitioner, particularly one whose company is under scrutiny for a Foreign Corrupt Practices Act (FCPA) violation by the Department of Justice (DOJ) and Securities and Exchange Commission (SEC). The NYT piece made clear that the Mexico unit is so profitable that it figuratively “mints money” for the company. Moreover, “despite the latest headline-grabbing turmoil at Banamex, Citigroup does not want to cede any ground in Mexico where it dominates a large portion of the retail market.”

What is the responsibility for a US corporate parent when a foreign subsidiary ‘mints money’ for the company? Should the corporate parent pay closer attention to make sure the subsidiary is doing business in compliance with the FCPA and other relevant laws? In the past few posts, I have discussed some of the specific internal controls a compliance practitioner might consider for a company’s international operations. One of the problems Citigroup is facing with the conduct of its Mexico subsidiary is the company’s concern of “lax controls and oversight”. Moreover, there is concern that some part of the ongoing troubles in the Mexico unit relates to its head, Manuel Medina-Mora. Citigroup Chairman Michael O’Neill, was said to have “privately expressed concerns to board members that Mr. Medina-Mora, who is also co-president of the parent company, has not always relayed problems in the region to executives at the bank’s headquarters on Park Avenue, according to the people briefed on the matter. Instead of looping in executives in New York, Mr. Medina-Mora has at times chosen to handle the issues himself.”

How much oversight should a parent corporation have over a subsidiary? At a basic level it would seem that oversight should be enough to prevent and detect illegal conduct. Clearly, a Chief Compliance Officer (CCO) should be considering the entity-wide internal controls for a company. Under the FCPA accounting provisions, issuers can be held liable for the conduct of their foreign subsidiaries, even though the improper conduct occurred outside of the US. The scope of liability is based on the issuer’s incorporation of the subsidiary’s financial statements in its own records and SEC filings.

While a CCO should expect (and the DOJ & SEC for that matter) that internal controls at locations outside the US are of the same effectiveness as internal controls in US business units and at the US corporate office; unfortunately, that might not always be the case. It is often the case that corporate level internal controls are stronger than those in foreign business units. The Citigroup situation with its Mexican subsidiary would seem to be a clear example of the oft-cited reason that many companies were built through acquisitions, resulting in many business units (both in and outside the US) having completely different accounting and internal control systems than US corporate office. There is often a tendency to leave acquired companies in the state in which they were acquired, rather than trying to integrate their controls and conform them to those of current business units. After all, the reason for the acquisition was the profitability of the acquired company and nobody wants to be accused of negatively impacting profitability, especially one that ‘mints money’.

The second example is one a bit closer to home and it is that of the General Motors (GM) legal department. In an article in the Wall Street Journal (WSJ) entitled “GM Says Top Lawyer to Step Down”, John D. Stroll and Joseph B. White, with contributions from Christopher Matthews and Joann S. Lublin, reported that GM General Counsel (GC) Michael Millikin will retire early next year. Millikin was criticized after the GM internal investigation found that he ran the GM legal department in such a hands off manner that he did not know about his legal department’s own settlements for product liability claims involving faulty ignition switches until February of this year. His defense was that his own lawyers “left him in the dark” even though there was evidence that he had been repeatedly warned, “GM could face punitive damage awards related to its failure to address the safety defect.” Missouri Senator Claire McCaskill summed up sentiment about Milliken with her statement “This is either gross negligence or gross incompetence.” In other words if you are a GC or CCO you had better know what is going on in your own department. What would it say about a CCO who did not know that compliance department members were dealing with violations of the FCPA without informing him or her? It would say that the CCO failed to exercise leadership and oversight.

And while you are watching things closely, you may want to check out a clip of Carlton Fisk’s famous homer by clicking here.

This publication contains general information only and is based on the experiences and research of the author. The author is not, by means of this publication, rendering business, legal advice, or other professional advice or services. This publication is not a substitute for such legal advice or services, nor should it be used as a basis for any decision or action that may affect your business. Before making any decision or taking any action that may affect your business, you should consult a qualified legal advisor. The author, his affiliates, and related entities shall not be responsible for any loss sustained by any person or entity that relies on this publication. The Author gives his permission to link, post, distribute, or reference this article for any lawful purpose, provided attribution is made to the author. The author can be reached at tfox@tfoxlaw.com.

© Thomas R. Fox, 2014

Next Page »

Blog at WordPress.com.