How Should a Corporation Respond to an Fcpa Case?

An FCPA investigation typically begins when the DOJ or SEC identifies a potential violation through a whistleblower report, an internal audit disclosure, a foreign government complaint, or routine examination of export transactions or third-party payments. A corporation can and should respond immediately upon learning of a credible allegation or government inquiry, even before a formal subpoena arrives. Early engagement with counsel, preservation of relevant documents, and voluntary disclosure to the government can substantially reduce criminal exposure and often result in lower civil penalties.

Common defenses include the business purpose exception (payment was made for a lawful service unrelated to obtaining business), the facilitating payments exception (payment to a non-decision-making official for routine governmental action), and the local law defense (conduct was legal under the foreign country's law, though this defense is narrow). The government must prove that the corporation acted with knowledge or deliberate indifference to the violation, not mere negligence. If the company can show that it had robust anti-corruption policies, conducted training, and had internal controls designed to prevent such payments, this evidence supports a defense or mitigation argument that the violation was rogue employee conduct not attributable to corporate policy.

Procedural defects, such as an overly broad subpoena or weaknesses in establishing that the foreign recipient was a foreign official under the FCPA definition, can undermine government allegations. If the government cannot establish the foreign recipient's governmental status or the payment's connection to a specific business benefit, the case may be defensible or dismissible.

Document preservation is the foundation of any FCPA defense. Counsel must immediately implement a litigation hold that covers all custodians involved in the transaction, business unit, or geographic region under investigation, including executives, finance staff, business development personnel, and third-party agents or consultants. A corporation should preserve emails, instant messages, expense reports, invoices, payment records, wire transfer documentation, travel records, board minutes, compliance audit files, and any internal investigations or whistleblower complaints related to the foreign official or transaction.

Digital forensics may be necessary to recover deleted files or identify when documents were created or modified. Counsel should work with IT to secure backup systems and prevent the automatic deletion of emails or files. Any destruction of documents after the litigation hold is issued can result in severe sanctions, including default judgment or criminal contempt charges.

FCPA settlements typically involve a deferred prosecution agreement (DPA), a non-prosecution agreement (NPA), or a guilty plea followed by sentencing. Under a DPA, the corporation agrees to cooperate, implement compliance reforms, and pay penalties; if the company complies, the government dismisses the charges after a term, usually 2 to 3 years. Criminal penalties can include substantial fines, often calculated as a percentage of revenue from the affected business line or a multiple of the bribe amount, mandatory compliance monitoring, and potential exclusion from federal contracts.

The SEC may pursue civil penalties separately, seeking disgorgement of ill-gotten gains plus civil penalties of up to three times the benefit received. The DOJ calculates criminal fines using the U.S. Sentencing Guidelines, which consider the seriousness of the offense, the company's prior history, and the existence of effective compliance programs. Cooperation with the government, including voluntary disclosure, can reduce penalties by 20 to 50 percent.

A corporation facing an FCPA allegation should take the following actions in immediate sequence: (1) retain experienced FCPA counsel and a forensic accounting firm; (2) issue a litigation hold across all relevant business units and custodians; (3) conduct an internal investigation to identify the scope of potential violations, the officials involved, and the payments made; (4) preserve all evidence and segregate privileged materials; (5) assess whether to make a voluntary disclosure to the DOJ or SEC; (6) implement interim remedial measures such as suspending the third-party agent or business relationship; (7) prepare a compliance remediation plan; and (8) engage with the government through counsel to discuss the allegations and settlement options.

A corporation's response to an FCPA investigation requires careful coordination of legal strategy, evidence preservation, and compliance remediation. Early engagement with specialized counsel, transparent communication with the government, and demonstrated commitment to anti-corruption compliance can substantially reduce criminal and civil exposure. The corporation should prioritize documentation of its response efforts and maintain detailed records of all investigative steps and remedial measures. Counsel should also consider whether administrative cases involving regulatory agencies parallel the FCPA investigation, as coordinated defense across multiple forums may be necessary. If company officers face personal criminal liability, separate counsel for those individuals ensures that their interests do not conflict with the corporation's settlement strategy. A corporation that acts promptly, cooperates meaningfully, and implements credible compliance reforms can often negotiate a resolution that allows the company to move forward while minimizing long-term reputational and financial damage.