What Does a Foreign Corrupt Practices Act Lawyer Do?

Prosecutors and civil enforcement agencies must establish that a defendant acted with knowledge that the recipient was a foreign official and that the payment was intended to influence an official act or obtain a business advantage. The statute does not require proof that the bribe actually succeeded or that the official was corruptible. Instead, the government must show that the defendant's purpose was corrupt, meaning that the payment was intended to induce the official to misuse his or her official position.

Knowledge can be inferred from circumstantial evidence, including the structure of a transaction, the involvement of high-commission intermediaries, the absence of legitimate business justification, and prior compliance concerns. Courts have found knowledge where a company ignored obvious red flags, such as intermediaries with vague job descriptions, payments to shell entities, or lack of supporting invoices or delivery evidence.

The accounting provisions impose an affirmative duty on issuers to maintain accurate books and records and to devise and maintain internal accounting controls. These controls must be reasonably designed to detect and prevent unauthorized payments and to ensure that transactions are properly authorized and recorded. The statute does not require perfection; however, a control system must be robust enough to catch violations in the ordinary course of business.

Deficiencies in documentation, approval processes, or reconciliation procedures can trigger enforcement action even absent evidence of actual bribery. Regulators examine whether a company's accounting system would have flagged suspicious transactions, and they assess whether management had reasonable visibility into the company's spending and agent activities. A weak control environment, combined with actual misconduct, often results in higher penalties.

A company that suspects FCPA violations typically initiates an internal investigation to determine the scope of conduct, identify responsible parties, and assess the company's knowledge and controls. Counsel must structure the investigation to preserve attorney-client privilege and work product protections while gathering facts. This often involves engaging forensic accountants, compliance specialists, and outside counsel to conduct interviews and review documents.

The investigation must be thorough and documented. Regulators expect companies to conduct a searching inquiry and to disclose findings voluntarily when appropriate. Incomplete or superficial investigations can signal bad faith and increase enforcement risk. The company must also consider whether to self-report to the Department of Justice or the Securities and Exchange Commission, as voluntary disclosure can lead to reduced penalties under agency guidelines.

When the Department of Justice or SEC initiates an investigation, the company receives a subpoena or investigative demand requesting documents and testimony. The company must respond within the specified timeframe, typically 14 to 21 days for document productions, and counsel must review materials for privilege assertions and responsive scope. Delays in producing documents or incomplete responses can result in contempt findings or adverse inferences.

In New York, where many multinational corporations maintain offices and where the SDNY has prosecuted high-profile FCPA cases, the procedural demands are rigorous. Counsel must ensure that the company's document retention policies are followed, that custodians are identified and interviewed, and that all responsive materials are located and produced. A company that fails to preserve documents or that produces incomplete responses may face sanctions and heightened credibility scrutiny during settlement negotiations or trial.

The DOJ's Fraud Section and the SEC's Enforcement Division offer reduced penalties for companies that self-report, cooperate fully, and implement comprehensive remediation. Self-reporting can reduce criminal penalties by 50 percent, and cooperation can reduce them further. Counsel must weigh the risks of disclosure against the benefits of penalty mitigation and must evaluate the company's ability to demonstrate remediation before regulators conclude their investigation.

Remediation includes replacing responsible executives, overhauling compliance programs, enhancing training, and strengthening internal controls. Regulators assess whether remediation is genuine and whether the company has committed adequate resources. A company that implements superficial changes or that retains individuals associated with violations may face skepticism and higher penalties.

Many FCPA investigations conclude with settlement agreements, deferred prosecution agreements, or non-prosecution agreements. These arrangements typically require the company to admit or acknowledge facts, pay penalties, and implement compliance measures. Counsel negotiates the scope of admissions, the penalty amount, and the duration of monitoring or compliance obligations. The goal is to achieve finality while preserving the company's ability to operate and to manage reputational harm.

Companies must conduct enhanced due diligence on agents, distributors, consultants, and joint venture partners, particularly in high-risk jurisdictions. Due diligence should include background checks, verification of credentials and references, review of the intermediary's prior business practices, and assessment of whether the proposed fees or commissions are commercially reasonable. Red flags include vague descriptions of services, unusually high commissions, requests for payments to third parties, and intermediaries with close ties to government officials.

Documentation is essential. Counsel must ensure that due diligence files contain evidence of the company's inquiry and decision-making. A court or regulator will assess whether the company's investigation was adequate and whether the company's selection of agents was reasonable under the circumstances. Weak due diligence combined with subsequent misconduct suggests knowledge or willful blindness.

Effective compliance programs include mandatory training for employees and agents, regular audits of high-risk transactions, and a mechanism for reporting suspected violations. Counsel often works with compliance officers to develop training curricula, to design monitoring protocols, and to establish escalation procedures for suspected violations. The company must maintain records of training attendance and must periodically update training to address emerging risks and regulatory guidance.

Monitoring should focus on transactions with high-risk characteristics, such as payments to intermediaries in jurisdictions with elevated corruption indices, transactions involving government procurement, and payments authorized by individuals with weak compliance backgrounds. A company that monitors transactions and investigates anomalies demonstrates a culture of compliance and may receive credit from regulators if violations occur despite good-faith efforts.

Maintaining clear audit trails and contemporaneous documentation protects the company in investigations and demonstrates good faith. Counsel should advise on record retention policies, approval workflows, and invoice and contract documentation standards. When disputes arise, the company's contemporaneous records and approval evidence become critical. A company that can produce clear documentation showing that a transaction was reviewed, questioned, and either approved or rejected based on compliance grounds presents a stronger defense posture than one with sparse or incomplete records.

The role of a Foreign Corrupt Practices Act lawyer extends across prevention, investigation, and defense. Counsel works with management to design compliance programs that address the company's specific risks, to structure transactions in ways that minimize exposure, and to respond to investigations with transparency and strategic focus. When violations occur or are discovered, counsel guides the company through investigation, assessment of regulatory risk, and negotiation of resolutions that balance penalty mitigation against operational continuity.

For organizations with international operations, FCPA compliance is not a one-time audit but an ongoing discipline. The company must maintain vigilance over agents, monitor transactions, update training, and adapt controls as the business evolves. Counsel's role is to help the company internalize compliance as part of its culture and decision-making, so that FCPA considerations inform transaction design from the outset. Documentation, transparency, and timely escalation of concerns to compliance counsel and management are the practical foundations of effective risk management in this domain.