What happened

The US Department of Justice plans to create a whistleblower program inside its fraud division to encourage substantial tips about business fraud, according to a memo from Colin McDonald, the department's national fraud chief. Compliance Week reported the memo, which was sent to DOJ staff and issued as Directive 26-12, titled Corporate Enforcement in the Fight Against Fraud.

The directive sets out four priorities and assigns responsibilities within the department's National Fraud Enforcement Division, which President Trump announced in January and launched in April, with McDonald taking the helm. A Corporate Enforcement Section will oversee how businesses comply with criminal resolutions, meaning the commitments companies make in settlements will have a named office watching whether they are met.

The memo restates the department's approach to corporate prosecutions. Prosecutors will look at whether a company's compliance policies, internal controls and history of misconduct show that the company caused or encouraged an offense, with serious and pervasive wrongdoing drawing particular attention. It also states that the department must credit companies that disclose misconduct, cooperate and remediate, and must guard against overbroad enforcement that interferes with legitimate business. Prosecutors are directed to follow existing policy, including the Principles of Federal Prosecution of Business Organizations, the Corporate Enforcement and Voluntary Self-Disclosure Policy, and the relevant sections of the Justice Manual.

Why this is a GRC story

A named office changes the calculus on settlements. Corporate enforcement commitments used to be monitored loosely. A section whose job is to oversee compliance with criminal resolutions makes the promises in a settlement real, and it raises the cost of an underbuilt program that cannot produce evidence when asked.

Whistleblower channels move closer to the center. A fraud division whistleblower program adds another route for insiders to report conduct directly to the government. Companies that rely on an internal hotline to catch problems first need that channel to be credible, or they will be learning about the allegation from a prosecutor instead.

The credit for cooperation is not automatic. The memo is explicit that disclosure and remediation earn credit, and explicit that the department weighs a company's control environment. That rewards firms whose compliance function can show what it found and fixed, with dates, and penalizes those that arrive at a meeting with a policy binder and nothing else.

What to watch

Watch how the fraud division's whistleblower program is scoped and funded, and whether it overlaps with existing programs at the SEC and CFTC that already reward tips. Watch, too, for the first set of corporate resolutions issued under the new section, because how those settlements describe compliance obligations will set the template companies are measured against.

For compliance teams the useful action is internal. Test whether the whistleblower channel actually works, check that reports are triaged and documented, and make sure remediation is written down as it happens. If a regulator asks what the program did, the answer should be a record, not a recollection.

Attribution: Analysis based on Compliance Week and related public reporting. This article is original commentary, not a repost of the source material.

More daily case studies
← Back to GRC News