No Result
View All Result
SUBSCRIBE | NO FEES, NO PAYWALLS
MANAGE MY SUBSCRIPTION
NEWSLETTER
Corporate Compliance Insights
  • About
    • About CCI
    • Writing for CCI
    • NEW: CCI Press – Book Publishing
    • Advertise With Us
  • Explore Topics
    • See All Articles
    • Compliance
    • Ethics
    • Risk
    • FCPA
    • Governance
    • Fraud
    • Internal Audit
    • HR Compliance
    • Cybersecurity
    • Data Privacy
    • Financial Services
    • Well-Being at Work
    • Leadership and Career
    • Opinion
  • Vendor News
  • Downloads
    • Download Whitepapers & Reports
    • Download eBooks
  • Books
    • CCI Press
    • New: Bribery Beyond Borders: The Story of the Foreign Corrupt Practices Act by Severin Wirz
    • CCI Press & Compliance Bookshelf
    • The Seven Elements Book Club
  • Podcasts
    • Great Women in Compliance
    • Unless: The Podcast (Hemma Lomax)
  • Research
  • Webinars
  • Events
  • Subscribe
Jump to a Section
  • At the Office
    • Ethics
    • HR Compliance
    • Leadership & Career
    • Well-Being at Work
  • Compliance & Risk
    • Compliance
    • FCPA
    • Fraud
    • Risk
  • Finserv & Audit
    • Financial Services
    • Internal Audit
  • Governance
    • ESG
    • Getting Governance Right
  • Infosec
    • Cybersecurity
    • Data Privacy
  • Opinion
    • Adam Balfour
    • Jim DeLoach
    • Mary Shirley
    • Yan Tougas
No Result
View All Result
Corporate Compliance Insights
Home Featured

2 Paths, 2 Outcomes: DOJ’s Inconsistent Corporate Self-Disclosure Policies

The policy differences place a premium on quickly conducting thorough internal investigations when misconduct is suspected

by Josh Hurwit, Greg Goldberg, John Anderson and John Sullivan
December 22, 2025
in Featured, Risk
divergent paths aerial view

While the Criminal Division guarantees it “will decline” to prosecute companies that voluntarily self-disclose, cooperate fully and remediate appropriately, US attorney’s offices merely promise they “will not seek a guilty plea,” leaving open the possibility of NPAs or DPAs. Holland & Hart attorneys Josh Hurwit, Greg Goldberg, John Anderson and John Sullivan explore how this difference affects strategic decisions about where to report misconduct, the advantages of rural USAOs’ enhanced understanding of local industries versus Criminal Division certainty, and what the forthcoming single DOJ policy may change. 

The DOJ has recognized that, given limited law enforcement resources available to combat white-collar crime, an effective enforcement regime depends on persuading companies to voluntarily self-report wrongdoing. These policy nuances have significant practical implications: Companies that successfully leverage guaranteed declination policies avoid criminal prosecution entirely, while those subject to prosecutorial discretion may face deferred prosecution agreements, compliance monitoring, substantial fines and lasting reputational harm that can affect business operations, regulatory relationships and stakeholder confidence for years. 

In January 2023, DOJ’s Criminal Division announced its corporate enforcement and voluntary self-disclosure policy (CEP) designed to reward self-reporting companies. Then, in June 2023, the US attorney’s offices (USAOs) collectively announced a similar policy.

About two years later, in May 2025, the Criminal Division updated its policy to provide enhanced benefits and a guaranteed declination of prosecution under established criteria. Yet, the USAO policy remains unchanged and does not provide the same guarantee. Rather, it provides only that prosecutors will “not seek a guilty plea” where criteria are met but leaves open the possibility of a USAO requiring companies to enter into non-prosecution agreements or deferred prosecution agreements.

We expect that US attorney’s offices will feel pressure to honor the guarantee in the Criminal Division’s policy, and, indeed, earlier this month Deputy Attorney General Todd Blanche announced at a white-collar law conference that the DOJ planned to roll out a “single” corporate enforcement policy.

In the meantime, however, the possibility exists that companies may receive better outcomes by self-reporting to the Criminal Division rather than to an individual USAO, typically in the districts in which they are headquartered or incorporated. This choice of reporting agency has several implications for companies, including placing a premium on quickly conducting thorough internal investigations when misconduct is suspected.

The Criminal Division’s attempt to enhance clarity for voluntary self-reporting

The DOJ’s 2025 policy revision garnered attention for strengthening the incentive for companies to self‑report misconduct. As Criminal Division chief Matthew Galeotti announced, “Companies that meet our core requirements will not be required to enter into a criminal resolution. This is a clear path to declination.” 

The Criminal Division “will decline” to prosecute when the following criteria are met:

  • Voluntary: The company’s self-disclosure must come from the company itself before an imminent threat of disclosure or government investigation and within a reasonably prompt time after the company becomes aware of the misconduct. Note: A company can still qualify for declination even if a whistleblower reports to the DOJ first, provided the company self-discloses within 120 days of receiving the internal whistleblower report and meets other voluntary self-disclosure requirements.
  • Full cooperation: The company must disclose all relevant facts known to the company at the time, must make officers and employees available for interviews and must also share potential leads for further investigation.
  • Timely and appropriate remediation: The company must implement effective corporate compliance programs and maintain accurate business records to support detailed root-cause analyses when misconduct is identified. Remediation efforts must include disciplining employees involved in misconduct.
  • No aggravating factors: These factors relate to the nature and seriousness of the offense, the pervasiveness of the misconduct within the company, the severity of harm caused by the misconduct and whether the company has engaged in similar misconduct in the past five years. 

In addition, the 2025 policy creates a “near miss” category for companies that voluntarily disclose and act in good faith but do not technically qualify for guaranteed declination. This feature addresses circumstances in which a company attempts to self-disclose in good faith only to discover that the government was already aware of the misconduct or that aggravating factors warrant some form of criminal resolution despite the company’s efforts to cooperate. In such cases, the Criminal Division “shall” provide benefits in the form of non-prosecution agreements, probationary terms of fewer than three years, no requirement for independent compliance monitoring and 75% reductions off the low end of the sentencing guidelines fine range. 

woven threads
Compliance

Common Threads: What Global Enforcers & Policy-Makers Are Saying About Compliance Programs

by Staff and Wire Reports
September 17, 2025

Read moreDetails

Daylight between the current DOJ and USAO policies

The USAO policy substantially mirrors the Criminal Division’s policy in identifying the criteria needed to qualify for the policy’s benefits. Unlike the Criminal Division’s policy, however, the USAOs’ policy does not guarantee a declination. Rather, USAOs “will not seek a guilty plea where a company has (a) voluntarily self-disclosed in accordance with the criteria [in the policy], (b) fully cooperated and (c) timely and appropriately remediated the criminal conduct.” 

In cases where a USAO does “not seek a guilty plea,” the resolution could “include a declination, non-prosecution agreement or deferred prosecution agreement.”

Thus, while a USAO has discretion to decline to prosecute a self-disclosing company, that outcome is not guaranteed, and it appears that USAO prosecutors have more discretion than their counterparts in the Criminal Division to seek a resolution that imposes obligations or conditions on a company.

While the DOJ has indicated that it may rectify this difference between the policies, until this happens, the USAO policy does not provide the same clear path to a declination as the DOJ’s May 2025 update. 

Strategic decisions for companies

Despite the differences in the policies outlined above, the fundamental principle is the same: Companies that build strong cultures of compliance, detect misconduct early and cooperate fully with government investigations will benefit significantly. From this principle, two strategic imperatives stand out:

First, companies should place a premium on quickly conducting a thorough internal investigation when potential wrongdoing is suspected. Speed is important because both voluntary self-disclosure policies apply only when a company makes a “reasonably prompt” disclosure prior to an “imminent” government investigation or public allegations. Thoroughness is important because, under both policies, a company is required to disclose all facts known to it and to provide guidance to the government on where to gather additional information.

Second, companies should begin remediation of misconduct as soon as possible. When considering whether a company qualifies under their respective voluntary self-disclosure policies (and to what extent), both the Criminal Division and USAOs will look at whether a company has taken timely and concrete steps to stop misconduct. 

Having taken these steps, the next questions are (a) whether to self-report; and (b) to whom: the Criminal Division of main Justice, the applicable USAO or both.

For companies outside of major cities, the local USAO may have an enhanced understanding of the relevant business and industry compared to Criminal Division prosecutors based in Washington, D.C. Self-reporting to a USAO that covers one geographic district can also lead to a relatively higher level of predictability because prior resolutions may carry more weight with the USAO when it considers a new, similar matter. Moreover, in our experience, rural states do not historically garner as much attention from the Criminal Division as do larger urban centers on the coasts. All else being equal, this can create more uncertainty for a company self-reporting to the Criminal Division. 

This potential uncertainty is exactly what the Criminal Division’s May 2025 revision seeks to address by guaranteeing a declination if a company satisfies the requirements in the policy. After weighing both the Criminal Division’s policy and the potential advantages of reporting to a USAO, it may be advisable to report simultaneously to both.


Tags: DOJ
Previous Post

How to Reassure Stakeholders When Facts Are Still Unknown During Cyber Incidents

Next Post

What’s the Situationship Between TPRM and AI in 2026?

Josh Hurwit, Greg Goldberg, John Anderson and John Sullivan

Josh Hurwit, Greg Goldberg, John Anderson and John Sullivan

Josh Hurwit is a partner at Holland & Hart who represents companies and executives in government investigations, regulatory enforcement actions, and complex commercial litigation. As Idaho's former US attorney and federal prosecutor with over a decade of DOJ experience, he leverages prosecutorial expertise and agency relationships to deliver strategic defense solutions.
Greg Goldberg is a partner at Holland & Hart who leads the firm's government investigation and white collar defense practice. Drawing on his experience as a former DOJ prosecutor, he defends companies and executives in government investigations, False Claims Act proceedings and environmental matters.
John Anderson is a partner at Holland & Hart who defends individuals and companies in complex civil litigation and government investigations. As a former US attorney for the District of New Mexico and assistant US attorney, he leverages his DOJ experience and nationwide agency relationships to guide clients through federal and state investigations, False Claims Act matters and complex commercial disputes.
John Sullivan is a partner at Holland & Hart who represents clients in high-stakes criminal and regulatory investigations and complex civil litigation. As a former assistant US attorney, he leverages prosecutorial experience to counsel companies and individuals in DOJ investigations, False Claims Act matters, healthcare fraud and environmental law issues.

Related Posts

paxful screen

DOJ, FinCEN Reach Resolutions With Virtual Asset Trading Platform Over AML Violations

by Roberto Gonzalez, Elizabeth Hanft and Samuel Kleiner
January 9, 2026

Government documents say Paxful operated for years without a compliance officer, AML training or transaction monitoring controls

year end top stories

Top Stories of 2025

by Jennifer L. Gaskin
December 10, 2025

2025 was as advertised: the second Trump Administration introduced unprecedented uncertainty and disruption into the operations of organizations large and...

brazilian anti corruption protest

Brazil vs US: Diverging Paths in a New Phase of Global Anti-Corruption Enforcement

by Arthur Milanez
October 21, 2025

Brazil introduces marker mechanism securing priority for early self-reporters, while DOJ closes nearly half of pending FCPA matters to concentrate...

officers outside jail latin america

For US Companies Doing Business in Latin America, Regulatory Risk Multiplies Amid Web of Third Rails

by Richard Fogarty
September 30, 2025

Criminal networks now operate with corporate scale and structure, creating compliance intersections with AML and terrorism financing laws

Next Post
What’s the Situationship Between TPRM and AI in 2026?

What’s the Situationship Between TPRM and AI in 2026?

reminder to speak up
No Result
View All Result

Privacy Policy | AI Policy

Founded in 2010, CCI is the web’s premier global independent news source for compliance, ethics, risk and information security. 

Got a news tip? Get in touch. Want a weekly round-up in your inbox? Sign up for free. No subscription fees, no paywalls. 

Follow Us

Browse Topics:

  • CCI Press
  • Compliance
  • Compliance Podcasts
  • Cybersecurity
  • Data Privacy
  • eBooks Published by CCI
  • Ethics
  • FCPA
  • Featured
  • Financial Services
  • Fraud
  • Governance
  • GRC Vendor News
  • HR Compliance
  • Internal Audit
  • Leadership and Career
  • On Demand Webinars
  • Opinion
  • Research
  • Resource Library
  • Risk
  • Uncategorized
  • Videos
  • Webinars
  • Well-Being
  • Whitepapers

© 2025 Corporate Compliance Insights

Welcome to CCI. This site uses cookies. Please click OK to accept. Privacy Policy
Cookie settingsACCEPT
Manage consent

Privacy Overview

This website uses cookies to improve your experience while you navigate through the website. Out of these, the cookies that are categorized as necessary are stored on your browser as they are essential for the working of basic functionalities of the website. We also use third-party cookies that help us analyze and understand how you use this website. These cookies will be stored in your browser only with your consent. You also have the option to opt-out of these cookies. But opting out of some of these cookies may affect your browsing experience.
Necessary
Always Enabled
Necessary cookies are absolutely essential for the website to function properly. These cookies ensure basic functionalities and security features of the website, anonymously.
CookieDurationDescription
cookielawinfo-checbox-analytics11 monthsThis cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Analytics".
cookielawinfo-checbox-functional11 monthsThe cookie is set by GDPR cookie consent to record the user consent for the cookies in the category "Functional".
cookielawinfo-checbox-others11 monthsThis cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Other.
cookielawinfo-checkbox-necessary11 monthsThis cookie is set by GDPR Cookie Consent plugin. The cookies is used to store the user consent for the cookies in the category "Necessary".
cookielawinfo-checkbox-performance11 monthsThis cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Performance".
viewed_cookie_policy11 monthsThe cookie is set by the GDPR Cookie Consent plugin and is used to store whether or not user has consented to the use of cookies. It does not store any personal data.
Functional
Functional cookies help to perform certain functionalities like sharing the content of the website on social media platforms, collect feedbacks, and other third-party features.
Performance
Performance cookies are used to understand and analyze the key performance indexes of the website which helps in delivering a better user experience for the visitors.
Analytics
Analytical cookies are used to understand how visitors interact with the website. These cookies help provide information on metrics the number of visitors, bounce rate, traffic source, etc.
Advertisement
Advertisement cookies are used to provide visitors with relevant ads and marketing campaigns. These cookies track visitors across websites and collect information to provide customized ads.
Others
Other uncategorized cookies are those that are being analyzed and have not been classified into a category as yet.
SAVE & ACCEPT
No Result
View All Result
  • About
    • About CCI
    • Writing for CCI
    • NEW: CCI Press – Book Publishing
    • Advertise With Us
  • Explore Topics
    • See All Articles
    • Compliance
    • Ethics
    • Risk
    • FCPA
    • Governance
    • Fraud
    • Internal Audit
    • HR Compliance
    • Cybersecurity
    • Data Privacy
    • Financial Services
    • Well-Being at Work
    • Leadership and Career
    • Opinion
  • Vendor News
  • Downloads
    • Download Whitepapers & Reports
    • Download eBooks
  • Books
    • CCI Press
    • New: Bribery Beyond Borders: The Story of the Foreign Corrupt Practices Act by Severin Wirz
    • CCI Press & Compliance Bookshelf
    • The Seven Elements Book Club
  • Podcasts
    • Great Women in Compliance
    • Unless: The Podcast (Hemma Lomax)
  • Research
  • Webinars
  • Events
  • Subscribe

© 2025 Corporate Compliance Insights