5 Critical Steps to Protect Your Case Right Now After the DOJ's Corporate Liability Shift

1. Activate a Privilege-Guarded, Documented Preservation Protocol Immediately

In my 25 years as a federal prosecutor, I have never seen the DOJ move faster to freeze corporate data than under this new policy framework. The first critical step is to issue a written legal hold notice to every employee who might possess relevant documents—not just senior executives, but IT, compliance, and mid-level managers. Under the revised Federal Rules of Civil Procedure Rule 26(b)(1), you must preserve data in its native format, including metadata and encrypted communications, or risk spoliation sanctions that can cripple your defense. I advise clients to use a third-party vendor to create a forensic copy of all servers, email archives, and messaging app logs, with the work product shielded under Federal Rule of Evidence 502(d). Do not rely on internal IT staff alone; I have seen too many cases where well-intentioned employees inadvertently delete critical Slack channels or Teams chats during routine maintenance. Finally, document every preservation step in a signed certification from your CEO and General Counsel, because the DOJ now treats missing data as presumptive evidence of concealment under the new policy’s “cooperation credit” rubric.

2. Conduct a Pre-Notification Internal Investigation Under Attorney-Client Privilege

Based on my experience prosecuting Fortune 500 companies, the single biggest mistake I see is waiting for a subpoena before starting an internal investigation. Under the DOJ’s updated Justice Manual § 9-28.720, the government now expects companies to self-report “relevant facts” within 30 days of discovering potential misconduct, and that clock starts ticking the moment your compliance officer flags an anomaly. I recommend retaining outside counsel—not in-house lawyers—to conduct a privileged investigation under Upjohn warnings, which ensures that all employee interviews and document reviews remain protected under the attorney-client privilege and work product doctrine. This investigation must cover not just the alleged misconduct, but also your company’s “ethical culture” as defined under the new policy, including training records, whistleblower hotline data, and prior audit results. In one recent matter I handled, we uncovered a systemic reporting failure in a subsidiary that would have been invisible without this proactive approach, allowing us to remediate before the DOJ ever arrived. Remember, the new policy explicitly states that “deliberate ignorance” of subsidiary operations will be treated as corporate knowledge, so your investigation must extend to every corporate layer.

3. Overhaul Your Compliance Program to Meet the “Real-Time Monitoring” Standard

The DOJ’s new policy effectively eliminates the old “paper compliance” defense, where companies could point to a written code of conduct and call it a day. Under the revised 18 U.S.C. § 3553(a) sentencing factors, prosecutors are now instructed to evaluate whether your compliance program includes “continuous, real-time monitoring” of high-risk transactions, employee communications, and third-party relationships. I have seen federal judges in the Southern District of New York reject compliance programs that lacked automated flagging systems for unusual financial flows, even when the company had excellent policies on paper. You must integrate data analytics tools that scan for red flags—such as sudden changes in vendor payment patterns or unusual approval overrides—and log those alerts with timestamps for DOJ review. Additionally, the policy now requires that your compliance officer report directly to the board of directors, not just to the general counsel, to ensure independence from legal pressure. I advise clients to conduct a gap analysis against the DOJ’s 2024 “Evaluation of Corporate Compliance Programs” guidance, which specifically demands that compliance personnel have “direct access” to board-level oversight and sufficient budget autonomy.

4. Prepare a Strategic Privilege Waiver That Preserves Your Core Defenses

This is the most nuanced and dangerous step in the process, and I have seen experienced in-house counsel make catastrophic errors here. Under the new policy, the DOJ will award “maximum cooperation credit” only if you provide “all relevant facts” about the misconduct, including the mental states of individual executives, which traditionally would be protected by privilege. However, the policy also carves out a “limited waiver” option under Federal Rule of Evidence 502(a), allowing you to disclose specific communications without waiving privilege over unrelated materials. I strongly recommend that you do not waive privilege broadly; instead, negotiate a “practical transparency” agreement with the government that limits disclosure to factual chronologies and key documents, while preserving your work product on legal advice and strategy. In my practice, I prepare a privilege log that categorizes documents into “factual,” “legal advice,” and “mixed” categories, and I only waive the factual tier. The DOJ’s new policy explicitly states that “selective assertions of privilege” will not be held against you if you can show a good-faith basis for the distinction, but you must have this analysis documented before any government meeting. Always remember that once you waive privilege over a subject, you cannot claw it back, and the government will use that opening to demand more.

If your company is facing a federal investigation or you have received a document request from the DOJ, do not wait for the situation to escalate. I have been on both sides of these cases—prosecuting corporations for 25 years and now defending them—and I know exactly how the government evaluates your response under this new policy. Contact my office today for a confidential, privilege-protected consultation where we will assess your exposure, design a preservation strategy, and negotiate cooperation terms before the government makes the first move. Your compliance program and your future depend on acting now, not after the indictment lands.