Robinson Cole LLP
High Contrast Mode
Marquee

Internal Investigations + Corporate Compliance

Businesses, nonprofits, educational institutions, and a wide range of organizations often call on our Internal Investigations + Corporate Compliance practice group to investigate concerns of organizational, employee, and third-party misconduct.

Our clients trust us to conduct discrete, expeditious and thorough internal investigations of complex sensitive matters.  We understand the urgency when corporate compliance issues come to light.  Our team is trained to conduct efficient and cost-effective investigations with the goal of limiting potentially damaging publicity or possible regulatory or prosecutorial action. Because we service a broad array of international clients, we are frequently retained to conduct complex cross-border investigations. We help you consider the full range of appropriate remedial actions, while taking your business objectives into and the regulatory landscape into account.

Although most of our investigations are resolved before they become public, when required we mobilize our world-class trial practice that combines the substantial resources of a large firm with the depth of trial experience, efficient staffing, and responsiveness of a trial boutique.

Our Services

We conduct internal investigations in a vast range of industries, such as manufacturing, health care, financial services, education, construction, insurance, aerospace, and technology. Our investigations involve many types of allegations and issues, including:

  • Antitrust concerns
  • Consumer fraud and unlawful sales practices
  • Corporate governance
  • Corruption and Foreign Corrupt Practices Act (FCPA) violations
  • Data breaches and cybersecurity
  • Executive and employee misconduct, including embezzlement and harassment
  • Financial and accounting reporting issues
  • Health care fraud and abuse
  • Government contracting and grant fraud
  • Insider trading, market manipulation and other securities fraud
  • Misappropriation of trade secrets
  • Product safety
  • Sexual misconduct allegations
  • Tax offenses
  • Trade and export compliance
  • Workplace safety and environmental violations


We have extensive experience conducting internal investigations in the context of parallel government investigations, civil litigation, and administrative actions. We assist clients make voluntary disclosures to government agencies when appropriate, and often marshal the facts and the law to convince government agencies to decline prosecution. We have successfully negotiated favorable resolutions in disputes with the government where the amounts at issue have reached into the nine-figure range.

Our Team

Our team includes lawyers with substantial government and private sector experience, and who collaborate across our firm’s practice groups, including Business Transactions; Environmental, Energy + Telecommunications; Labor, Employment, Benefits + Immigration; and Litigation.

We collaborate with each client’s team to develop an appropriate investigation structure, timeline, and goals. We often work with our clients’ executives, general counsel, boards, and audit committees or special litigation committees.

Our strong credibility and long-standing relationships with government lawyers overseeing enforcement actions enable us to effectively advocate on behalf of our clients. In addition to conducting investigations, we apply our experience and proficiency in these matters to design and implement remedial and preventive compliance measures and enhance compliance programs.

Our top-tier Internal Investigations + Corporate Compliance practice group has an extensive understanding of the regulatory landscape in our clients’ industries. We take your business objectives into account while helping you navigate concerns of organizational, employee, and third-party misconduct.

Experience


Employee Misuse of Technology

Conducted internal investigations for manufacturing, health care, financial services, and educational organizations arising from concerns about misuse of the entities' technology by employees, including attempts to access potentially illegal or contraband content, or to misappropriate confidential, proprietary information or trade secrets. In some instances, those investigations have required coordination with law enforcement agencies to demonstrate that the client entity itself had not engaged in wrongful conduct.

Read More

Government Investigations: Claims of Defrauding Federal Government

Represented Rhode Island construction company in connection with claims that the company was defrauding the federal government in connection with an ongoing project. After conducting an internal investigation for the company, we worked with the company to prepare a self-disclosure to the federal government demonstrating the isolated nature of the issue and the company's remedial action. In response, the federal government decided to take no action whatsoever against our client.

Read More

Government Investigations: Alleged Fraudulent Billing

Counseled Rhode Island medical practice in connection with government investigation related to alleged fraudulent billing. As a result of our prompt and targeted internal investigation, which was conducted contemporaneously with the government's investigation, we were able to identify the source of the incorrect allegations and shared that with law enforcement, leading to the closure of the investigation of our client with no adverse action against it.

Read More


Publications


DOJ Issues Sweeping Guidance on Unlawful Discrimination for Federal Funding Recipients teaser
September 8, 2025

DOJ Issues Sweeping Guidance on Unlawful Discrimination for Federal Funding Recipients

March 24, 2025

Here’s how commercial contracts can ease the cost burden of new tariffs impacting manufacturers

Hartford Business Journal

Commercial contracts tend to be full of “boilerplate provisions” that, to paraphrase Mark Twain’s assessment of classic novels, everyone knows are important, but no one actually reads. When COVID-19 struck, manufacturers learned all about the significance of one particular boilerplate provision — force majeure. This type of provision can excuse or postpone contractual performance in the face of a materially unforeseen event beyond the party’s control. It was a pivotal tool for countless manufacturers seeking relief from their contractual burdens because of severe operational challenges brought on by the global pandemic. This boilerplate provision may become critical again as manufacturers in the U.S. and abroad face the increasing threat of new federal tariffs. Triggering events Force majeure translates as “superior force.” Arising from the Napoleonic Code, or French Civil Code, which was established in France in 1804 and remains in amended use today, this legal concept excused a commercial party from damages liability under a contract if their nonperformance (e.g., the product was not delivered) was “by consequence of a superior force or of a fortuitous occurrence.” Force majeure provisions have been part of American commercial contracting since at least the 19th century, when the U.S. Supreme Court recognized their validity in a case called The Tornado. Like the pandemic, tariffs may present a new severe operational challenge for manufacturers that rely on imported raw materials, components or equipment. “A 25% tariff on Canada and Mexico threatens to upend the very supply chains that have made U.S. manufacturing more competitive globally,” according to Jay Simmons, the president and CEO of the National Association of Manufacturers. “The ripple effects will be severe, particularly for small and medium-sized manufacturers that lack the flexibility and capital to rapidly find alternative suppliers, or absorb skyrocketing energy costs,” he added. This begs the question: Could these new federal tariffs constitute a force majeure event that excuses, or at least delays performance under a commercial contract? The answer depends on the specific language used in the contract. A provision’s heading is generally irrelevant to the parties’ rights, so merely including the words “force majeure” in a contract is unlikely to provide relief. Facing serious supply chain problems in 2020, many manufacturers were disappointed to learn that the force majeure provisions in their contracts listed a series of triggering events, such as acts of God, natural disasters and war, but said nothing about pandemics. The COVID-19 case law was not a model of consistency when it came to whether these provisions are interpreted narrowly, but some courts have been reluctant to imply that “pandemics” were meant to be covered when they were not expressly listed in the provision. The options may be better for manufacturers this time around. Force majeure provisions often list “government action” as a triggering event, and a tariff could qualify as such an action. If tariffs are not specifically listed, however, the rule of narrow interpretation might lead to a contrary result. The outcome will depend on the applicable state law and precise contract language. Additionally, force majeure provisions sometimes include requirements that the triggering event must be unanticipated and/or make performance impossible. Lawyers might argue that tariffs were not unanticipated events, particularly for contracts drafted since January 2025, or that substantially increased costs make performance “unprofitable” or “very difficult,” but not impossible. The development of a new commercial contract, or the renewal or amendment of an existing one, presents an ideal opportunity to mitigate uncertainty around this point. Manufacturers may want to evaluate whether (or not) a contract needs a force majeure provision excusing performance because of tariffs, and insist on language that explicitly includes (or excludes) tariffs and identifies the circumstances under which they may (or may not) qualify as a triggering event. The details matter here. Read the article.

January 27, 2025

The Promise and the Peril: AI and Disruptive Technologies in Operations and Compliance

ACC Docket

The article covers the Department of Justice’s (DOJ) September 2024 revisions to the Evaluation of Corporate Compliance Programs (ECCP) that incorporate artificial intelligence (AI) management and the benefits and concerns of this technology. "The 2024 ECCP update is a lighthouse for companies navigating the uncertain waters of the rapidly evolving world of AI and disruptive technologies,” they wrote. “It warns of the perils—the rocks of malign use—and the DOJ’s focus on those perils. [I]t guides to relative safety—a harbor calmed by the breakwater of risk awareness and mitigation.” David and Kathryn emphasize that “[c]ompanies with exposure to AI and disruptive technologies” should understand the ECCP update and the implications arising from it. To read the article, click here.

DOJ Issues Sweeping Guidance on Unlawful Discrimination for Federal Funding Recipients teaser
September 8, 2025

DOJ Issues Sweeping Guidance on Unlawful Discrimination for Federal Funding Recipients

March 24, 2025

Here’s how commercial contracts can ease the cost burden of new tariffs impacting manufacturers

Hartford Business Journal

Commercial contracts tend to be full of “boilerplate provisions” that, to paraphrase Mark Twain’s assessment of classic novels, everyone knows are important, but no one actually reads. When COVID-19 struck, manufacturers learned all about the significance of one particular boilerplate provision — force majeure. This type of provision can excuse or postpone contractual performance in the face of a materially unforeseen event beyond the party’s control. It was a pivotal tool for countless manufacturers seeking relief from their contractual burdens because of severe operational challenges brought on by the global pandemic. This boilerplate provision may become critical again as manufacturers in the U.S. and abroad face the increasing threat of new federal tariffs. Triggering events Force majeure translates as “superior force.” Arising from the Napoleonic Code, or French Civil Code, which was established in France in 1804 and remains in amended use today, this legal concept excused a commercial party from damages liability under a contract if their nonperformance (e.g., the product was not delivered) was “by consequence of a superior force or of a fortuitous occurrence.” Force majeure provisions have been part of American commercial contracting since at least the 19th century, when the U.S. Supreme Court recognized their validity in a case called The Tornado. Like the pandemic, tariffs may present a new severe operational challenge for manufacturers that rely on imported raw materials, components or equipment. “A 25% tariff on Canada and Mexico threatens to upend the very supply chains that have made U.S. manufacturing more competitive globally,” according to Jay Simmons, the president and CEO of the National Association of Manufacturers. “The ripple effects will be severe, particularly for small and medium-sized manufacturers that lack the flexibility and capital to rapidly find alternative suppliers, or absorb skyrocketing energy costs,” he added. This begs the question: Could these new federal tariffs constitute a force majeure event that excuses, or at least delays performance under a commercial contract? The answer depends on the specific language used in the contract. A provision’s heading is generally irrelevant to the parties’ rights, so merely including the words “force majeure” in a contract is unlikely to provide relief. Facing serious supply chain problems in 2020, many manufacturers were disappointed to learn that the force majeure provisions in their contracts listed a series of triggering events, such as acts of God, natural disasters and war, but said nothing about pandemics. The COVID-19 case law was not a model of consistency when it came to whether these provisions are interpreted narrowly, but some courts have been reluctant to imply that “pandemics” were meant to be covered when they were not expressly listed in the provision. The options may be better for manufacturers this time around. Force majeure provisions often list “government action” as a triggering event, and a tariff could qualify as such an action. If tariffs are not specifically listed, however, the rule of narrow interpretation might lead to a contrary result. The outcome will depend on the applicable state law and precise contract language. Additionally, force majeure provisions sometimes include requirements that the triggering event must be unanticipated and/or make performance impossible. Lawyers might argue that tariffs were not unanticipated events, particularly for contracts drafted since January 2025, or that substantially increased costs make performance “unprofitable” or “very difficult,” but not impossible. The development of a new commercial contract, or the renewal or amendment of an existing one, presents an ideal opportunity to mitigate uncertainty around this point. Manufacturers may want to evaluate whether (or not) a contract needs a force majeure provision excusing performance because of tariffs, and insist on language that explicitly includes (or excludes) tariffs and identifies the circumstances under which they may (or may not) qualify as a triggering event. The details matter here. Read the article.

January 27, 2025

The Promise and the Peril: AI and Disruptive Technologies in Operations and Compliance

ACC Docket

The article covers the Department of Justice’s (DOJ) September 2024 revisions to the Evaluation of Corporate Compliance Programs (ECCP) that incorporate artificial intelligence (AI) management and the benefits and concerns of this technology. "The 2024 ECCP update is a lighthouse for companies navigating the uncertain waters of the rapidly evolving world of AI and disruptive technologies,” they wrote. “It warns of the perils—the rocks of malign use—and the DOJ’s focus on those perils. [I]t guides to relative safety—a harbor calmed by the breakwater of risk awareness and mitigation.” David and Kathryn emphasize that “[c]ompanies with exposure to AI and disruptive technologies” should understand the ECCP update and the implications arising from it. To read the article, click here.

November 7, 2024

A Blueprint for Targeted Enhancements to Corporate Compliance Programs

Corporate Counsel

The Department of Justice (DOJ) recently updated the Evaluation of Corporate Compliance Programs (ECCP) to direct prosecutors who are considering charges or resolutions to assess how a company addresses, among other topics, disruptive technologies and AI, self-disclosure initiatives, and the compliance function's access to corporate data. This enhanced guidance follows a pattern for ECCP amendments and reveals a trend toward an expectation of more proactive compliance efforts as a predicate for credit from prosecutors. Compliance stakeholders, therefore, can use this update as a blueprint for high-value program enhancements. Since 2017, the ECCP has been prosecutors' formal tool to judge compliance program adequacy. Largely presented as questions rather than prescriptions, the original ECCP provided "some important topics and sample questions that the [DOJ] … has frequently found relevant in evaluating a corporate compliance program." In 2019, the DOJ reorganized the ECCP into three topics—program design, implementation, and efficacy—and better aligned the questions with policies and priorities. In 2020, the DOJ substantively expanded the ECCP to address the compliance function's data use, role in M&A, and resourcing. In March 2023, the DOJ made two significant changes to address the data preservation and corporate compensation programs. AI and Disruptive Technologies. Beginning in early 2024, the DOJ previewed anticipated ECCP changes addressing AI (defined in OBM Memo M-24-10) and new technologies. It announced the Justice AI Initiative to accelerate DOJ's understanding and use of AI and noted the "promise" and "peril" of AI and its anticipated robust enforcement and accompanying stiffer penalties for offenses involving AI. The ECCP update, developed in consultation with compliance executives with AI expertise, examines how a company addresses these technologies in its compliance life cycle. Prosecutors will ask questions such as: How do the business and compliance function use technology? Is "management of risks related to use of AI and other new technologies integrated into" risk assessments? What actions is the company taking to "curb[] any potential negative or unintended consequences" and to "mitigat[e] the potential for deliberate or reckless misuse of technologies"? What "controls [are] in place to monitor and ensure [technologies'] trustworthiness, reliability, and use"? DOJ expects a company to thoroughly inventory its use of technology—being mindful of the broad definition of AI—across the entirety of the enterprise so that the organization knows everywhere it uses AI and how it uses AI. In addition, the business should assess its exposure to the malign use of AI against it. With this context, a company is expected to assess risks associated with internal use and external misuse of technology. (A company needing guidance on an AI-focused risk assessment can look to the NIST's AI Risk Management Framework.) The next step is the adoption of appropriate controls to mitigate these risks and proactively monitor the use of these technologies. Finally, the ECCP suggests the compliance function consider leveraging AI and other new technologies as part of its compliance work and self-assessment. Developments in Voluntary Self-Disclosure (VSD) Initiatives. The DOJ seized upon this ECCP update to further publicize significant new policies encouraging the reporting of misconduct.  Speak Up Programs.The ECCP's section on whistleblower programs and protections now aligns with the Corporate Whistleblower Awards Pilot Program (CWA), announced in August 2024, and other recent VSD initiatives. Under the CWA, the DOJ provides financial rewards to non-culpable whistleblowers who report misconduct to the government. Similarly, the DOJ's other VSD programs aim to entice self-reporting in exchange for more lenient treatment. The CWA and VSD initiatives expect robust speak up mechanisms and anti-retaliation regimes. In this regard, prosecutors will ask whether a "company encourage[s] and incentivize[s] reporting" or "chill[s] such reporting," how a company evaluates employee comfort with reporting, and how comprehensive a company's whistleblower and anti-retaliation training is. The ECCP places a premium on proactive efforts to support speaking up and no longer appears to offer full credit for a purely reactive program. The ECCP now looks at what a company does to affirmatively encourage and incentivize reporting. This, coupled with the CWA, appears to be the strongest suggestion to date that the DOJ is amenable to a company providing financial rewards to its own whistleblowers who report substantiated claims. Regardless, a company cannot merely rely on reporting metrics to determine efficacy of a speak up program and must instead find other means to assess whether employees are comfortable raising concerns. Finally, this version of the ECCP includes the most directive guidance on training. No longer will the DOJ look only at a company's training on speak up policies and mechanisms and the applicable anti-retaliation laws, prosecutors will examine whether the company trains its employees about external reporting mechanisms, like the CWA. Mergers & Acquisitions Safe Harbor Policy. The M&A Safe Harbor Policy announced in October 2023, provides that the DOJ presumptively will decline to charge an acquiring company that voluntarily discloses and remediates, in a timely manner, misconduct discovered during pre- or post-acquisition diligence. This policy embodies the DOJ's goal of encouraging effective diligence and integration. Relatedly, the ECCP now directs prosecutors to ask what role "compliance and risk management functions play[ed] … in designing and executing the integration strategy" and whether the integration strategy is reasonably designed "to ensure appropriate compliance oversight of the new business." To meet DOJ expectations, a company that engages in M&A activity should fully integrate the risk and compliance functions in its M&A processes to help with early identification, assessment, and remediation of compliance matters. Further, the company should invest in timely remediation to preserve options if misconduct is identified at an acquired company. The compliance function needs to be fully engaged to meet the M&A Safe Harbor Policy's strict deadlines on reporting and remediation to qualify for a declination. Compliance Access to Data. The DOJ has been increasingly focused on leveraging data in the compliance function to detect and prevent misconduct—the word "data" appears 12 times in the 2023 ECCP and more than 20 times in the 2024 ECCP. The 2024 ECCP makes clear that the DOJ will no longer ask if compliance has access to corporate data; it will ask what data compliance has access to. Accordingly, compliance should inventory available data sources across the enterprise and its access to them. The amended ECCP directs prosecutors to measure a company's commitment to such data usage. Prosecutors will now ask questions such as: Do "compliance personnel have knowledge of and means to access all relevant data sources … to create efficiencies … and measure the effectiveness of … compliance programs"? How do "the assets, resources, and technology available to compliance and risk management compare to those available elsewhere in the company"? The ECCP also clarifies that access to data alone is not sufficient; what compliance does with the data and what skilled resources are enlisted to assist with those tasks also matter. As a result, compliance needs access to staffing and other resources to permit effective use of data to assess both compliance with company policies and efficacy of the compliance program itself. The updated ECCP reflects both the DOJ's priorities and expanding expectations regarding compliance programs. Although the ECCP update covers additional topics, those addressed here offer opportunities for a strong return on the investment of compliance budget and effort. David E. Carney and Edward J. Heath are partners with Robinson+Cole and focus their practices on government enforcement, internal investigations, and corporate compliance programs. Reprinted with permission from the November 7, 2024 edition of Corporate Counsel© 2024 ALM Global Properties, LLC. All rights reserved. Further duplication without permission is prohibited, contact 877-256-2472 or asset-and-logo-licensing@alm.com

Legal Update: Department of Justice National Security Division Announces First-of-Its-Kind Declination under Its Voluntary Self-Disclosure Program teaser
June 4, 2024

Legal Update: Department of Justice National Security Division Announces First-of-Its-Kind Declination under Its Voluntary Self-Disclosure Program

Legal Update: Department of Justice Criminal Division Announces Voluntary Self-Disclosure Pilot Program for Culpable Individuals teaser
April 26, 2024

Legal Update: Department of Justice Criminal Division Announces Voluntary Self-Disclosure Pilot Program for Culpable Individuals

Legal Update: DOJ Announces New Whistleblower Compensation Pilot Program, Ratcheting Up Pressure on Corporate Voluntary Self-Disclosures teaser
March 12, 2024

Legal Update: DOJ Announces New Whistleblower Compensation Pilot Program, Ratcheting Up Pressure on Corporate Voluntary Self-Disclosures

January 19, 2024

Health Care Transactions and Civil Investigative Demands: What Third Parties Need to Know

Health Law Weekly

The article analyzes mergers and acquisitions (M&A) trends in health care markets, the increased scrutiny transactions face from the Federal Trade Commission and U.S. Department of Justice, Antitrust Division (collectively, the Agencies), and the Agencies’ use of civil investigate demands (CIDs) and their impact on the M&A process. “With the expected increase in health care merger activity comes the likelihood of greater investigatory scrutiny by government authorities,” they write, “Given the potentially significant implications of non-compliance or insufficient compliance, recipients of CIDs and subpoenas would do well to take those demands seriously and act promptly and comprehensively, including by engaging experienced counsel. To read the article, click here.

Legal Update: DOJ Announces Extension of Voluntary Self-Disclosure Guidance for Misconduct Discovered Through M&A Due Diligence teaser
October 6, 2023

Legal Update: DOJ Announces Extension of Voluntary Self-Disclosure Guidance for Misconduct Discovered Through M&A Due Diligence



November 7, 2024

A Blueprint for Targeted Enhancements to Corporate Compliance Programs

Corporate Counsel

The Department of Justice (DOJ) recently updated the Evaluation of Corporate Compliance Programs (ECCP) to direct prosecutors who are considering charges or resolutions to assess how a company addresses, among other topics, disruptive technologies and AI, self-disclosure initiatives, and the compliance function's access to corporate data. This enhanced guidance follows a pattern for ECCP amendments and reveals a trend toward an expectation of more proactive compliance efforts as a predicate for credit from prosecutors. Compliance stakeholders, therefore, can use this update as a blueprint for high-value program enhancements. Since 2017, the ECCP has been prosecutors' formal tool to judge compliance program adequacy. Largely presented as questions rather than prescriptions, the original ECCP provided "some important topics and sample questions that the [DOJ] … has frequently found relevant in evaluating a corporate compliance program." In 2019, the DOJ reorganized the ECCP into three topics—program design, implementation, and efficacy—and better aligned the questions with policies and priorities. In 2020, the DOJ substantively expanded the ECCP to address the compliance function's data use, role in M&A, and resourcing. In March 2023, the DOJ made two significant changes to address the data preservation and corporate compensation programs. AI and Disruptive Technologies. Beginning in early 2024, the DOJ previewed anticipated ECCP changes addressing AI (defined in OBM Memo M-24-10) and new technologies. It announced the Justice AI Initiative to accelerate DOJ's understanding and use of AI and noted the "promise" and "peril" of AI and its anticipated robust enforcement and accompanying stiffer penalties for offenses involving AI. The ECCP update, developed in consultation with compliance executives with AI expertise, examines how a company addresses these technologies in its compliance life cycle. Prosecutors will ask questions such as: How do the business and compliance function use technology? Is "management of risks related to use of AI and other new technologies integrated into" risk assessments? What actions is the company taking to "curb[] any potential negative or unintended consequences" and to "mitigat[e] the potential for deliberate or reckless misuse of technologies"? What "controls [are] in place to monitor and ensure [technologies'] trustworthiness, reliability, and use"? DOJ expects a company to thoroughly inventory its use of technology—being mindful of the broad definition of AI—across the entirety of the enterprise so that the organization knows everywhere it uses AI and how it uses AI. In addition, the business should assess its exposure to the malign use of AI against it. With this context, a company is expected to assess risks associated with internal use and external misuse of technology. (A company needing guidance on an AI-focused risk assessment can look to the NIST's AI Risk Management Framework.) The next step is the adoption of appropriate controls to mitigate these risks and proactively monitor the use of these technologies. Finally, the ECCP suggests the compliance function consider leveraging AI and other new technologies as part of its compliance work and self-assessment. Developments in Voluntary Self-Disclosure (VSD) Initiatives. The DOJ seized upon this ECCP update to further publicize significant new policies encouraging the reporting of misconduct.  Speak Up Programs.The ECCP's section on whistleblower programs and protections now aligns with the Corporate Whistleblower Awards Pilot Program (CWA), announced in August 2024, and other recent VSD initiatives. Under the CWA, the DOJ provides financial rewards to non-culpable whistleblowers who report misconduct to the government. Similarly, the DOJ's other VSD programs aim to entice self-reporting in exchange for more lenient treatment. The CWA and VSD initiatives expect robust speak up mechanisms and anti-retaliation regimes. In this regard, prosecutors will ask whether a "company encourage[s] and incentivize[s] reporting" or "chill[s] such reporting," how a company evaluates employee comfort with reporting, and how comprehensive a company's whistleblower and anti-retaliation training is. The ECCP places a premium on proactive efforts to support speaking up and no longer appears to offer full credit for a purely reactive program. The ECCP now looks at what a company does to affirmatively encourage and incentivize reporting. This, coupled with the CWA, appears to be the strongest suggestion to date that the DOJ is amenable to a company providing financial rewards to its own whistleblowers who report substantiated claims. Regardless, a company cannot merely rely on reporting metrics to determine efficacy of a speak up program and must instead find other means to assess whether employees are comfortable raising concerns. Finally, this version of the ECCP includes the most directive guidance on training. No longer will the DOJ look only at a company's training on speak up policies and mechanisms and the applicable anti-retaliation laws, prosecutors will examine whether the company trains its employees about external reporting mechanisms, like the CWA. Mergers & Acquisitions Safe Harbor Policy. The M&A Safe Harbor Policy announced in October 2023, provides that the DOJ presumptively will decline to charge an acquiring company that voluntarily discloses and remediates, in a timely manner, misconduct discovered during pre- or post-acquisition diligence. This policy embodies the DOJ's goal of encouraging effective diligence and integration. Relatedly, the ECCP now directs prosecutors to ask what role "compliance and risk management functions play[ed] … in designing and executing the integration strategy" and whether the integration strategy is reasonably designed "to ensure appropriate compliance oversight of the new business." To meet DOJ expectations, a company that engages in M&A activity should fully integrate the risk and compliance functions in its M&A processes to help with early identification, assessment, and remediation of compliance matters. Further, the company should invest in timely remediation to preserve options if misconduct is identified at an acquired company. The compliance function needs to be fully engaged to meet the M&A Safe Harbor Policy's strict deadlines on reporting and remediation to qualify for a declination. Compliance Access to Data. The DOJ has been increasingly focused on leveraging data in the compliance function to detect and prevent misconduct—the word "data" appears 12 times in the 2023 ECCP and more than 20 times in the 2024 ECCP. The 2024 ECCP makes clear that the DOJ will no longer ask if compliance has access to corporate data; it will ask what data compliance has access to. Accordingly, compliance should inventory available data sources across the enterprise and its access to them. The amended ECCP directs prosecutors to measure a company's commitment to such data usage. Prosecutors will now ask questions such as: Do "compliance personnel have knowledge of and means to access all relevant data sources … to create efficiencies … and measure the effectiveness of … compliance programs"? How do "the assets, resources, and technology available to compliance and risk management compare to those available elsewhere in the company"? The ECCP also clarifies that access to data alone is not sufficient; what compliance does with the data and what skilled resources are enlisted to assist with those tasks also matter. As a result, compliance needs access to staffing and other resources to permit effective use of data to assess both compliance with company policies and efficacy of the compliance program itself. The updated ECCP reflects both the DOJ's priorities and expanding expectations regarding compliance programs. Although the ECCP update covers additional topics, those addressed here offer opportunities for a strong return on the investment of compliance budget and effort. David E. Carney and Edward J. Heath are partners with Robinson+Cole and focus their practices on government enforcement, internal investigations, and corporate compliance programs. Reprinted with permission from the November 7, 2024 edition of Corporate Counsel© 2024 ALM Global Properties, LLC. All rights reserved. Further duplication without permission is prohibited, contact 877-256-2472 or asset-and-logo-licensing@alm.com

Legal Update: Department of Justice National Security Division Announces First-of-Its-Kind Declination under Its Voluntary Self-Disclosure Program teaser
June 4, 2024

Legal Update: Department of Justice National Security Division Announces First-of-Its-Kind Declination under Its Voluntary Self-Disclosure Program

Legal Update: Department of Justice Criminal Division Announces Voluntary Self-Disclosure Pilot Program for Culpable Individuals teaser
April 26, 2024

Legal Update: Department of Justice Criminal Division Announces Voluntary Self-Disclosure Pilot Program for Culpable Individuals

Legal Update: DOJ Announces New Whistleblower Compensation Pilot Program, Ratcheting Up Pressure on Corporate Voluntary Self-Disclosures teaser
March 12, 2024

Legal Update: DOJ Announces New Whistleblower Compensation Pilot Program, Ratcheting Up Pressure on Corporate Voluntary Self-Disclosures

January 19, 2024

Health Care Transactions and Civil Investigative Demands: What Third Parties Need to Know

Health Law Weekly

The article analyzes mergers and acquisitions (M&A) trends in health care markets, the increased scrutiny transactions face from the Federal Trade Commission and U.S. Department of Justice, Antitrust Division (collectively, the Agencies), and the Agencies’ use of civil investigate demands (CIDs) and their impact on the M&A process. “With the expected increase in health care merger activity comes the likelihood of greater investigatory scrutiny by government authorities,” they write, “Given the potentially significant implications of non-compliance or insufficient compliance, recipients of CIDs and subpoenas would do well to take those demands seriously and act promptly and comprehensively, including by engaging experienced counsel. To read the article, click here.

Legal Update: DOJ Announces Extension of Voluntary Self-Disclosure Guidance for Misconduct Discovered Through M&A Due Diligence teaser
October 6, 2023

Legal Update: DOJ Announces Extension of Voluntary Self-Disclosure Guidance for Misconduct Discovered Through M&A Due Diligence


News


March 25, 2025

Ed Heath Authors Article on Use of Force Majeure to Lessen Impact of Tariffs on Manufacturers

Business Litigation group chair and co-chair of the Government Enforcement + Internal Investigations team Edward Heath authored the article, “Here’s how commercial contracts can ease the cost burden of new tariffs impacting manufacturers,” published in the Hartford Business Journal on March 24, 2025. Just as force majeure gained significance during the pandemic, Ed suggests that same contractual provision could be a pivotal tool for manufacturers facing the increasing threat of new federal tariffs. Because the ripple effects of impending tariffs could be severe across supply chains, Ed poses the question: Could these new federal tariffs constitute a force majeure event that excuses, or at least delays, performance under a commercial contract? He points out that “the specific language used in the contract matters…” and that “[F]orce majeure provisions often list “government action” as a triggering event, and a tariff could qualify as such an action.” Ed suggests that manufacturers may want to evaluate whether contracts need a force majeure provision excusing performance because of tariffs, and insisting “on language that explicitly includes (or excludes) tariffs and identifies the circumstances under which they may (or may not) qualify as a triggering event.” Read the article.

Hartford Business Journal
January 30, 2025

David Carney and Kathryn Rattigan Co-Author ACC Docket Article Discussing the Promise and Peril of AI

ACC Docket
November 18, 2024

David Carney and Ed Heath Author Corporate Counsel Article Discussing Corporate Compliance Programs

March 25, 2025

Ed Heath Authors Article on Use of Force Majeure to Lessen Impact of Tariffs on Manufacturers

Business Litigation group chair and co-chair of the Government Enforcement + Internal Investigations team Edward Heath authored the article, “Here’s how commercial contracts can ease the cost burden of new tariffs impacting manufacturers,” published in the Hartford Business Journal on March 24, 2025. Just as force majeure gained significance during the pandemic, Ed suggests that same contractual provision could be a pivotal tool for manufacturers facing the increasing threat of new federal tariffs. Because the ripple effects of impending tariffs could be severe across supply chains, Ed poses the question: Could these new federal tariffs constitute a force majeure event that excuses, or at least delays, performance under a commercial contract? He points out that “the specific language used in the contract matters…” and that “[F]orce majeure provisions often list “government action” as a triggering event, and a tariff could qualify as such an action.” Ed suggests that manufacturers may want to evaluate whether contracts need a force majeure provision excusing performance because of tariffs, and insisting “on language that explicitly includes (or excludes) tariffs and identifies the circumstances under which they may (or may not) qualify as a triggering event.” Read the article.

Hartford Business Journal
January 30, 2025

David Carney and Kathryn Rattigan Co-Author ACC Docket Article Discussing the Promise and Peril of AI

ACC Docket
November 18, 2024

David Carney and Ed Heath Author Corporate Counsel Article Discussing Corporate Compliance Programs

January 23, 2024

Jen Driscoll, Conor Duffy, and Ed Heath Author Health Law Weekly Article on Health Care Transactions and Civil Investigative Demands

Health Law Weekly
October 1, 2020

Five Robinson+Cole Lawyers Recognized During Connecticut Legal Awards

Connecticut Law Tribune
January 6, 2020

Robinson+Cole Expands Government Enforcement and White-Collar Defense Team


January 23, 2024

Jen Driscoll, Conor Duffy, and Ed Heath Author Health Law Weekly Article on Health Care Transactions and Civil Investigative Demands

Health Law Weekly
October 1, 2020

Five Robinson+Cole Lawyers Recognized During Connecticut Legal Awards

Connecticut Law Tribune
January 6, 2020

Robinson+Cole Expands Government Enforcement and White-Collar Defense Team

Events


Past

The First 48 Hours: Crucial Decisions and Actions During the Critical First Hours of a Government Investigation

Apr 30 2025
HCCA 29th Annual Compliance Institute
Past

AI, Access to Corporate Data + the 2024 ECCP Update: A Benchmarking Discussion

Apr 15 2025
R+C Hosted Webinar
Past

The First 48 Hours: Crucial Decisions and Actions During the Critical First Hours of a Government Investigation

Apr 30 2025
HCCA 29th Annual Compliance Institute
Past

AI, Access to Corporate Data + the 2024 ECCP Update: A Benchmarking Discussion

Apr 15 2025
R+C Hosted Webinar
Past

Lab Enforcement Trends and Avoiding Compliance Pitfalls

Nov 15 2023
G2 Intelligence Lab Institute
Past

Lab Enforcement Trends and Avoiding Compliance Pitfalls

Nov 15 2023
G2 Intelligence Lab Institute