Fcpa Due Diligence: Protecting Your Company from Successor Liability

FCPA due diligence must address three primary risk categories: direct transactions with foreign officials, payments to third-party intermediaries in high-corruption jurisdictions, and control gaps in acquired entities or joint ventures. Your investigation should produce a clear audit trail showing what was asked, what was discovered, and what remedial steps were taken before commitment of funds or execution of contracts.

Courts and enforcement agencies evaluate investigation credibility by examining whether the company posed direct questions to counterparties, verified answers independently, and escalated concerns to legal counsel when red flags emerged. Weak due diligence, particularly when warning signs appear in the record, can undermine your affirmative defense and increase criminal exposure for responsible officers.

Your due diligence strategy must prioritize markets where corruption is endemic and enforcement agencies actively prosecute violations The DOJ and SEC focus on transactions in sectors prone to bribery, such as defense contracting, oil and gas, pharmaceuticals, and infrastructure, and on deals involving state-owned enterprises or government procurement.

Red flags warranting deeper investigation include unusually high commissions or agent fees, requests for payments to shell companies or offshore accounts, involvement of politically connected individuals or family members of officials, vague descriptions of services, and resistance to standard due diligence questions. A counterparty's refusal to certify that it has no corrupt relationships with government officials, or its insistence on cash payments or unusual payment timing, should trigger legal review before the transaction proceeds.

When evaluating a potential acquisition or joint venture, examine the target entity's existing government relationships, vendor payment practices, and any prior compliance investigations. Acquiring a company with undisclosed FCPA violations can transfer liability to the parent corporation. Our team's experience with corporate due diligence processes helps identify structural gaps that increase corruption risk in target operations.

The strength of your FCPA defense rests on contemporaneous documentation showing that compliance questions were asked, answered, and evaluated before money moved. Your due diligence file should contain written questionnaires sent to counterparties, their signed responses with certifications regarding corrupt relationships and sanctions compliance, independent verification steps, and written conclusions by legal counsel about whether the transaction could proceed.

Each memo or email should be dated and identify the person who conducted the investigation and the basis for conclusions. If a counterparty's answers raise concerns, document the follow-up questions asked, any site visits or background checks performed, and the specific facts that led to approval or rejection. This record becomes critical if the DOJ or SEC later investigates; a gap between the due diligence file and the actual transaction structure can suggest the company knew of corruption risk but proceeded anyway.

Store due diligence documentation in a secure, organized system with clear version control and access logs. Many companies maintain separate compliance repositories for M&A transactions, vendor onboarding, and counterparty re-certification. When a transaction involves foreign government approvals or licensing, preserve copies of all official correspondence and approval letters, as these corroborate that the transaction followed legal channels.

If your corporation faces an FCPA investigation by the DOJ or SEC, the procedural posture typically begins with a civil investigative demand or target letter. In the Southern District of New York, which handles many high-profile FCPA cases, the government often moves quickly to preserve evidence and may seek preliminary injunctions to freeze assets. Your immediate compliance obligation is to preserve all documents related to the transaction, including emails, due diligence files, payment records, and communications with counsel.

Failure to preserve evidence after notice of investigation can result in adverse inferences at trial, meaning the court may assume that missing documents would have supported the government's case. A New York federal court may also impose sanctions or contempt findings if a corporation fails to comply with discovery orders or document preservation protocols. We recommend implementing a litigation hold notice within 24 to 48 hours of receiving government notice, identifying all custodians and systems that may contain relevant materials, and confirming that no routine document destruction occurs during the investigation.

The FCPA provides an affirmative defense if a company can show that a payment was lawful under the foreign country's written laws and regulations. This defense is narrow and rarely successful, but it requires proof that the foreign government explicitly permitted the payment. Preserve any foreign legal opinions, government guidance, or regulatory approvals that support this position.

A more practical mitigation path involves demonstrating that your company had a robust anti-corruption compliance program in place at the time of the transaction. The DOJ's FCPA Guidance identifies key elements: a clear anti-corruption policy, training for employees and agents, due diligence on third parties, internal controls over payments, and a mechanism for reporting concerns without retaliation. If your company can show that the violation resulted from a rogue employee who circumvented controls despite good-faith compliance efforts, enforcement agencies may reduce penalties or negotiate a deferred prosecution agreement.

Documentation of your compliance program, including training records, policy updates, and internal audit findings, becomes central to this defense. Engage outside counsel early to conduct a privileged internal investigation and preserve attorney-client privilege over findings. Our firm's expertise in due diligence regulatory affairs helps corporations assess compliance gaps, implement corrective measures, and prepare for government dialogue from a position of transparency.

Begin by auditing your current due diligence procedures against the DOJ's FCPA Guidance and the SEC's published enforcement priorities. Identify gaps in your questionnaires, verification protocols, or documentation standards and update them before the next material transaction. For existing counterparties and acquired entities, conduct a retrospective compliance review to assess whether prior transactions received adequate due diligence scrutiny.

Establish clear escalation paths so that due diligence red flags reach legal counsel and the board's audit committee promptly. Create a centralized due diligence repository with version control and access logs, ensuring that all investigators use consistent templates and that findings are documented in writing before transactions close. Train your compliance team and business unit leaders on the types of corruption risk most relevant to your industry and geography.

If your corporation is considering a significant acquisition, joint venture, or entry into a high-risk jurisdiction, retain experienced FCPA counsel to design the FCPA Due Diligence scope, oversee the investigation, and provide a legal opinion on transaction viability. This investment in upfront compliance reduces enforcement exposure, strengthens your affirmative defense if violations occur, and demonstrates to regulators and board members that your company takes anti-corruption obligations seriously.