Voluntary Disclosure: Should Companies Self-Report before Whistleblowers Do?

DOJ Corporate Enforcement Policy (CEP, USAM 9-47.120) provides rebuttable presumption of declination of prosecution for companies that voluntarily self-disclose, fully cooperate, and timely remediate FCPA violations, with similar framework extended to broader corporate enforcement. January 2024 CEP updates expanded declination presumption framework across corporate criminal matters with parallel emphasis on Chief Compliance Officer (CCO) and CEO certification requirements at resolution. National Security Division (NSD) Voluntary Self-Disclosure Pilot Program (effective March 1, 2024) provides similar declination presumption framework for export control, sanctions, and national security violations across NSD authority. DOJ M&A Safe Harbor Policy (October 4, 2023) provides 6-month post-acquisition voluntary self-disclosure period with declination presumption for misconduct discovered during M&A diligence by acquirer. Our anti-corruption investigations practice handles DOJ CEP analysis, NSD pilot program eligibility, and parallel M&A safe harbor strategy across post-acquisition compliance issues.

IRS Voluntary Disclosure Practice (VDP, replacing terminated 2018 Offshore Voluntary Disclosure Program) requires submission of Form 14457 (Preclearance Request) before formal disclosure with civil penalty mitigation and substantial criminal prosecution avoidance for cooperating taxpayers. Streamlined Filing Compliance Procedures provide reduced framework for non-willful taxpayers with foreign account or asset issues, with 5% penalty for domestic and offshore submission programs. OFAC Self-Disclosure under Economic Sanctions Enforcement Guidelines (31 C.F.R. Part 501, Appendix A) provides up to 50% base penalty reduction with full credit for substantial cooperation and prompt remediation across IEEPA and trade sanctions matters. BIS EAR Voluntary Self-Disclosure (15 C.F.R. § 764.5) provides substantial penalty mitigation under June 2022 Policy Memorandum with expedited review process for routine matters and corrective action requirements. Our AML compliance practice handles IRS Form 14457 preclearance, OFAC penalty calculation, and parallel BIS EAR voluntary disclosure strategy across multi-agency compliance matters.

Internal investigation triggers include credible whistleblower allegations, audit findings indicating systemic issues, third-party diligence discoveries (typically M&A context), and external investigation initiation requiring assessment of disclosure strategy. Investigation scope determination must balance complete fact development against time-sensitive disclosure decisions, with substantial coordination required between investigation team, business leadership, and external counsel. Privilege protection through attorney-client and work product doctrines requires careful Upjohn warnings (Upjohn Co. .. United States, 449 U.S. 383 (1981)) to employee witnesses, careful interview memoranda preparation, and parallel investigation governance documentation. Discovery decision criteria include violation severity and scope, evidence quality, cooperation credit eligibility, whistleblower preemption risk, parallel regulatory exposure, and remediation feasibility within disclosure timeframe. Our compliance audit practice handles internal investigation initiation, scoping decisions, and parallel disclosure decision framework across compliance violation discoveries.

Attorney-client privilege protects confidential communications between attorney and client for purpose of obtaining legal advice, with corporate privilege extending to communications with employees authorized to act on legal matters under Upjohn. Work product doctrine protects materials prepared in anticipation of litigation under Federal Rule of Civil Procedure 26(b)(3), with substantial protection from disclosure even when not strictly privileged. Privilege waiver risks include inadvertent disclosure during investigation, third-party communications with non-essential individuals, communications later shared with regulators or in cooperation contexts, and parallel state law privilege variations. Joint defense and common interest privilege agreements (where appropriate) preserve privilege among parties with aligned interests in investigation outcome, requiring written agreements and careful information sharing protocols. Our corporate compliance & risk management practice handles privilege documentation, Upjohn warning implementation, and parallel joint defense coordination across complex internal investigations.

DOJ Corporate Enforcement Policy provides rebuttable presumption of declination of prosecution for FCPA matters when company voluntarily self-discloses, fully cooperates, and timely remediates, with monetary penalty reduction (50% of low end of Sentencing Guidelines range) when declination is not provided. USSG § 8C2.5 corporate sentencing guidelines apply culpability score reductions including effective compliance program (-3), voluntary disclosure plus cooperation (-5), full cooperation (-2 to -5), and acceptance of responsibility (-1 to -2) calibrating ultimate fine range. OFAC penalty mitigation framework provides up to 50% base penalty reduction (factor 50% of "base civil monetary penalty" under enforcement guidelines) with additional consideration of egregious vs non-egregious case classification. IRS Voluntary Disclosure Practice typically results in substantial civil penalty mitigation (replacing 75% fraud penalty with 27.5% income tax penalty + 50% accuracy penalty) and criminal prosecution avoidance for qualifying participants. Our anti-bribery compliance practice handles cooperation credit calibration, USSG penalty calculation, and parallel multi-agency penalty mitigation across complex disclosures.

DOJ M&A Safe Harbor (announced October 4, 2023) provides acquiring company with rebuttable presumption of declination for pre-acquisition misconduct disclosed within 6 months of closing, fully investigated, and remediated, encouraging robust pre-acquisition diligence and post-closing disclosure. M&A Safe Harbor applies across DOJ enforcement areas including FCPA, sanctions, antitrust, healthcare fraud, and other corporate criminal matters, with extension across US Attorneys' Offices through Voluntary Self-Disclosure Policy (February 2023). DOJ Pilot Program on Compensation Incentives and Clawbacks (March 2023) provides credit when company structures executive compensation with clawback provisions for misconduct and actually exercises clawback rights upon violation discovery. Compensation clawback enforcement coordinates with SEC Rule 10D-1 mandatory clawback rule (effective 2023) and Dodd-Frank § 954 with substantial corporate governance implications across financial restatement contexts. Our compliance regulatory affairs practice handles M&A safe harbor positioning, post-closing disclosure timing, and parallel clawback policy implementation across corporate acquisitions.

Deferred Prosecution Agreements (DPAs) under DOJ practice provide alternative resolution allowing prosecution charges to be deferred and dismissed upon compliance with agreement terms including monetary penalty, compliance monitor, and ongoing reporting obligations. Non-Prosecution Agreements (NPAs) avoid charge filing entirely while documenting violation acknowledgment and remediation commitments, with similar monitoring and reporting framework. DPA/NPA framework historically used in FCPA, sanctions, and corporate compliance matters with substantial corporate governance implications including potential third-party monitor appointment for 2-5 year terms. ECCP (Evaluation of Corporate Compliance Programs, updated September 2024) provides DOJ framework for assessing compliance program effectiveness with parallel cooperation credit and resolution structure considerations. Our corporate crime practice handles DPA/NPA negotiation, monitor selection coordination, and parallel ECCP compliance review across post-disclosure resolution proceedings.

SEC Whistleblower Program under Dodd-Frank § 922 (15 U.S.C. § 78u-6) provides 10-30% award of sanctions exceeding $1 million for original information leading to successful enforcement action, with substantial financial incentive for individual whistleblowers. DOJ Whistleblower Awards Pilot Program (announced August 1, 2024) extends similar reward framework to DOJ enforcement matters across corporate criminal cases, with substantial new whistleblower incentive across DOJ jurisdiction. Whistleblower-driven disclosure timing creates substantial pressure for voluntary disclosure decision, with cooperation credit and declination eligibility often depending on disclosure before whistleblower complaint or regulatory inquiry. Sarbanes-Oxley § 806 and Dodd-Frank § 922 whistleblower retaliation protections create substantial employee protection framework with potential parallel employment claims. Coordinated Dodd-Frank compliance defense manages whistleblower preemption analysis, DOJ Pilot Program eligibility, and parallel retaliation defense across multi-front compliance proceedings.

No, DOJ Corporate Enforcement Policy provides rebuttable presumption of declination (not guarantee) when company voluntarily self-discloses, fully cooperates, and timely remediates qualifying matters. Presumption can be rebutted by aggravating circumstances including senior executive involvement, significant profit from misconduct, pervasive criminal conduct, or significant repeat misconduct. When declination is not provided, voluntary disclosure still typically results in 50% reduction of low end of Sentencing Guidelines fine range plus charge bargain consideration.

DOJ cooperation credit can reduce monetary penalty to 50% of low end of Sentencing Guidelines range with potential declination of prosecution for FCPA and similar matters. OFAC provides up to 50% base penalty reduction for voluntary self-disclosure plus substantial cooperation, with additional egregious vs non-egregious case classification affecting base calculation. IRS Voluntary Disclosure Practice typically replaces 75% civil fraud penalty with 27.5% reduced penalty for qualifying participants plus criminal prosecution avoidance.

Whistleblower complaint filing before company voluntary disclosure substantially impacts cooperation credit and declination eligibility, with DOJ generally requiring disclosure before regulatory inquiry for full benefits. SEC Whistleblower Program (Dodd-Frank § 922) and DOJ Whistleblower Awards Pilot (August 2024) provide substantial financial incentives ($1 million+ sanctions threshold) that accelerate whistleblower reporting timing. Companies should expedite disclosure decision when potential whistleblower exposure exists, with parallel employment law considerations for ongoing retaliation protections.