3 Essential Steps Every Corporate Defendant Must Take Today After the DOJ’s Policy Shift

Step One: Conduct an Urgent “Culpable Employee” Triage Under the New Cooperation Credit Rules

In my 25 years as a federal prosecutor, I have never seen the Department of Justice shift the goalposts as dramatically as it did with the September 2024 Corporate Whistleblower Awards Pilot Program. The most immediate consequence for any corporate defendant is that the old model—where you could provide documents and hope for a deferred prosecution agreement—is dead. Under the revised U.S. Attorneys’ Manual § 9-28.700, the government now requires you to identify every individual who “directed, approved, or knowingly participated in the misconduct” before you will receive any cooperation credit. You cannot wait for the government’s subpoena or civil investigative demand; you must act proactively. Your legal team must immediately conduct a triage using the criteria of “substantial authority personnel” as defined by U.S.S.G. § 8C2.5(b)(4), which includes officers, directors, and any employee with discretion over company policy. I recommend you treat every executive with profit-and-loss responsibility as a high-priority subject for immediate interview. If you fail to identify a culpable senior manager within the first two weeks of the investigation, the government will assume you are obstructing justice under 18 U.S.C. § 1519, which carries a 20-year penalty for document destruction or concealment.

Step Two: Secure a Limited Privilege Waiver and Prepare Individual Proffers Under Fed. R. Crim. P. 11

The second essential step requires your board of directors to authorize a narrow, written “Limited Waiver of Privilege” that explicitly cites Fed. R. Evid. 502(a) to prevent any future claim of subject matter waiver. I have seen too many corporate defendants make the catastrophic mistake of providing a blanket privilege log or a “free narrative” to prosecutors, only to have the government argue that the company waived privilege on every related topic. Under the new policy, you must prepare individual factual proffers for each identified employee, structured under Fed. R. Crim. P. 11(c)(1)(B) so that the government can use those statements as evidence against the individual, not just the entity. The proffer must be in writing, signed by the employee’s personal counsel, and must include a specific acknowledgment that the employee is waiving their Fifth Amendment rights under 18 U.S.C. § 6002. You must also ensure that the proffer does not contain any “immunized” statements that could later be used to impeach the employee if they testify inconsistently under 18 U.S.C. § 1621 (perjury). In my experience, the most common mistake is that companies try to sanitize the proffer—do not do this; full candor is the only currency the DOJ accepts under the 2024 ECCP guidelines.

Step Three: Implement a “Dynamic Compliance Remediation” Protocol Within 14 Days

The third step is the most operationally demanding: you must demonstrate immediate, structural compliance remediation that goes far beyond updating a written policy manual. The DOJ’s 2024 “Evaluation of Corporate Compliance Programs” now requires you to show “dynamic” changes within 14 calendar days of the initial investigation notice. I advise my clients to establish a Compliance Remediation Committee that reports directly to the board, not to the general counsel, to avoid any appearance of legal department interference. You must specifically address the six “Hallmarks of Effective Compliance” from the ECCP: (1) senior management commitment, (2) autonomy and resources for compliance, (3) risk-based policies and procedures, (4) training and communication, (5) confidential reporting and investigation, and (6) incentive and disciplinary structures. For example, if the misconduct involved falsified sales records, you must immediately implement a new “two-person validation” rule for all revenue recognition under the Foreign Corrupt Practices Act (15 U.S.C. § 78dd-1). You must also terminate or suspend the culpable employees within that 14-day window, because the DOJ views any delay as evidence of “entrenchment” under the 2024 guidance. I cannot overstate the importance of this timeline; the government will audit your compliance logs and email timestamps to verify that you acted within the two-week window.

Why This Policy Shift Changes Everything for Corporate Defendants

Many defense attorneys still believe they can negotiate a deferred prosecution agreement (DPA) by simply paying a fine and promising to “do better.” That approach is no longer viable after the DOJ’s policy shift. The new “Presumption of Prosecution” for individual wrongdoers, codified in the revised Justice Manual § 9-27.240, means that your corporate entity will be charged alongside any employee you fail to disclose. The government now uses a “reverse proffer” system where they show you their evidence against your company first, and then demand that you identify the individuals responsible within 30 days. If you cannot produce those individuals, the government will assume that your compliance program is a “paper program” and will seek a guilty plea under 18 U.S.C. § 371 (conspiracy) or 18 U.S.C. § 1343 (wire fraud). The risk of a corporate conviction has never been higher, because the DOJ now considers any failure to self-disclose individuals as “aggravating conduct” under U.S.S.G. § 8C2.5, which can multiply your fine by four times the base offense level. In my practice, I now insist that every corporate client sign a “Crisis Response Protocol” that pre-authorizes the legal team to begin these three steps immediately, without waiting for board approval, because every hour of delay is a gift to the prosecution.

If your company is facing a federal investigation or has received a grand jury subpoena, you cannot afford to wait. The DOJ’s 14-day clock is already running, and every day of delay increases the risk of an indictment that could destroy your business. I have successfully guided corporate clients through these exact steps, securing non-prosecution agreements even in cases involving complex financial fraud and foreign bribery allegations. Contact my office immediately for a confidential, privilege-protected consultation. We will conduct an immediate triage of your exposure, draft the necessary limited waiver, and implement the dynamic compliance remediation protocol before the government makes the first move. Do not let the new policy catch your company unprepared—call today.