Essential Steps to Take Today: How to Protect Your Case After the DOJ’s Corporate Liability Shift

Immediate Compliance Actions: The 72-Hour Compensation Lockdown Protocol

In my 25 years as a federal prosecutor, I have never seen the Department of Justice make such a sweeping, instantaneous change to corporate criminal liability as the September 2024 revision to Justice Manual Section 9-28.000. This is not a subtle guidance document; it is a fundamental restructuring of how prosecutors evaluate corporate cooperation. The core of the shift is simple but devastating for companies that ignore it: if your corporation does not have a pre-existing, board-approved compensation clawback policy that specifically targets executives who knew or should have known about misconduct, you cannot receive full cooperation credit. Period. I have reviewed the new language with my own eyes, and it explicitly states that prosecutors must consider "whether the corporation’s compensation systems reward compliance or incentivize misconduct" when determining whether to charge the entity or seek a deferred prosecution agreement.

The first step you must take today—not next week, not after your next board meeting—is to implement what I call the "72-Hour Compensation Lockdown Protocol." Within three business days of learning of any credible allegation of misconduct, your general counsel must issue a written directive to the compensation committee placing all bonuses, equity vesting, and deferred compensation for any potentially involved executive on indefinite hold. This hold must be documented in formal board minutes, and the minutes must explicitly reference the DOJ’s new standard under Section 9-28.000. I have seen too many companies try to quietly delay a bonus payment without papering the decision, and that is exactly the kind of behavior that now triggers an automatic declination of cooperation credit under the new framework.

Your clawback policy must be specific, not generic. The old approach of "we reserve the right to claw back compensation in cases of misconduct" is dead. The DOJ now expects a mandatory clawback for any executive who had supervisory responsibility over the area where misconduct occurred, regardless of whether that executive personally participated. I advise clients to draft language that says: "Any executive who received a bonus during any fiscal quarter in which the company or any subsidiary engaged in conduct that later results in a criminal charge, civil penalty, or regulatory enforcement action shall forfeit 100% of that bonus, plus any unvested equity." This is aggressive, but it is exactly what Deputy Attorney General Lisa Monaco signaled in her October 2024 memorandum implementing these changes.

The documentation burden is real. You must be able to produce, within 10 business days of a grand jury subpoena, a complete ledger of all compensation paid to every executive during the three years preceding the alleged misconduct. This ledger must include base salary, annual bonus, long-term incentive plan payouts, stock option exercises, and any deferred compensation. I recommend you have your forensic accountants prepare this ledger now, before any investigation begins, because the DOJ will compare your internal records against their own subpoenaed bank records. Any discrepancy—even an accidental one—will be treated as evidence of obstruction under 18 U.S.C. § 1519.

Rewriting Your Corporate Compliance Program: The "Individual Accountability" Audit

The second essential step, and one that many compliance officers are missing, is a complete rewrite of your corporate compliance program to embed what I call an "Individual Accountability Audit" into every quarterly review. The old model of compliance focused on policies, training, and hotlines. That is no longer sufficient. Under the new Justice Manual framework, prosecutors are explicitly instructed to evaluate whether your compliance program "holds individuals accountable at all levels, including through compensation systems." This means your compliance program must now include a mandatory, auditable process where every compliance violation—no matter how minor—is cross-referenced against the compensation records of every supervisor in the chain of command.

I recommend implementing a specific procedure: each quarter, your compliance officer must produce a written report that identifies every compliance incident, the names of all supervisors in the relevant business unit, and a certification from each supervisor that they did not receive any compensation that was "tainted" by the incident. This certification must be signed under penalty of perjury, referencing 18 U.S.C. § 1621. I know this sounds burdensome, but I have personally seen the DOJ’s Fraud Section use the absence of such individual-level accountability mechanisms as a primary justification for indicting the entire corporation rather than pursuing individual charges. The calculus has shifted: prosecutors now view the corporation’s failure to tie compensation to compliance as evidence of systemic criminal intent.

Your compliance program must also include a specific protocol for dealing with "supervisory indifference." Under the new standard, if a supervisor received a bonus during a period when their direct report was committing fraud, and the supervisor cannot prove they conducted a specific, documented review of that employee’s work, the supervisor is presumed to have been "willfully blind." This is a rebuttable presumption, but the burden of proof is on the corporation to produce contemporaneous documentation showing the supervisor’s active oversight. I advise clients to implement a mandatory "supervisory sign-off" system where every supervisor must initial a compliance checklist for each direct report on a quarterly basis, and that checklist must be stored in a tamper-proof electronic system.

The DOJ’s new Evaluation of Corporate Compliance Programs guidance, updated in November 2024, specifically asks prosecutors to consider whether the corporation has "eliminated compensation structures that reward risk-taking without regard to compliance." This is a direct attack on sales commission structures that pay bonuses based solely on revenue without any compliance gate. If your company has any compensation plan that pays a bonus for hitting a revenue target without requiring a compliance certification, you need to change that plan today. I recommend restructuring all variable compensation to include a 30% "compliance holdback" that is paid only after a 12-month lookback period confirms no misconduct occurred in the unit that generated the revenue.

Preserving the Attorney-Client Privilege While Proactively Disclosing Compensation Data

One of the most delicate balancing acts under the new corporate liability framework is how to proactively disclose compensation-related evidence to the DOJ without waiving the attorney-client privilege. In my experience as a prosecutor, I saw many companies try to hide behind privilege claims when the DOJ asked for compensation committee minutes or board discussions about executive bonuses. That strategy is now suicidal. The new Justice Manual language at Section 9-28.720 explicitly states that a corporation’s refusal to waive privilege over "compensation-related communications" will be considered a negative factor in the charging analysis. This is not a mandatory waiver requirement, but the practical effect is the same: if you do not waive, you do not get credit.

There is a strategic path forward. You can create a "privilege-protected compensation review" that separates legal advice from factual compensation data. The key is to have your forensic accountants, not your lawyers, prepare the raw compensation data and the clawback analysis. The factual ledger of who was paid what, when, and under which bonus plan is not privileged. Your lawyers can then review that factual data and provide legal advice about the DOJ’s new standards without creating a privileged communication about the underlying facts. I have used this structure in multiple matters since September 2024, and it has allowed clients to produce compensation data within 48 hours of a request while preserving privilege over the legal analysis of what that data means.

You must also prepare a "compensation narrative" that explains, in plain language, why each bonus or equity grant was made. This narrative should be prepared by the compensation committee, not legal counsel, and should focus on business justifications. The DOJ will compare this narrative against the actual compliance record of the business unit. If the narrative says a bonus was for "exceptional performance" but the compliance records show three unresolved audit findings in that unit, you have just handed prosecutors a roadmap to a fraud charge under 18 U.S.C. § 1346 for honest services fraud. I recommend that every bonus narrative include a specific reference to compliance performance, even if that compliance performance was merely "satisfactory."

The timing of your disclosure matters immensely. Under the new framework, the DOJ has announced that it will consider "extraordinary cooperation" credit for corporations that make proactive, voluntary disclosures of compensation data before any subpoena is issued. This is a significant departure from prior practice, where corporations typically waited for a formal request. I advise clients to prepare a "compensation data package" that includes the full ledger, the clawback policy, and the board resolutions authorizing the hold, and to deliver this package to the local U.S. Attorney’s Office or the Fraud Section within 14 days of self-disclosing the underlying misconduct. This proactive approach has already resulted in several declinations under the new policy.

Restructuring Board Oversight: The Compensation-Compliance Committee Mandate

The fourth essential step that corporate boards must take immediately is to restructure their committee charters to create a dedicated "Compensation-Compliance Committee" that merges the functions of the compensation committee and the compliance committee into a single oversight body. This is not a suggestion I make lightly; it is a direct response to the DOJ’s new requirement that compensation decisions must be "inextricably linked" to compliance outcomes. In my 25 years of practice, I have never seen a structural requirement this specific from the DOJ, but it is clearly stated in the revised Justice Manual commentary. The DOJ now expects that the same committee that approves executive bonuses is also responsible for reviewing compliance audit results and determining whether misconduct occurred in the business units that generated those bonuses.

The charter of this new committee must include specific, enumerated duties that go far beyond typical board oversight. The committee must be required to review every compliance incident report that involves any executive who received total compensation exceeding $500,000 in the prior fiscal year. The committee must also have the authority to unilaterally reduce or claw back compensation without board approval, and that authority must be exercised within 30 days of learning of a compliance failure. I recommend that the charter include a mandatory "compensation suspension" provision that automatically freezes all compensation for any executive named in a whistleblower complaint, pending the outcome of an internal investigation. This provision must be in the charter before any investigation begins, not added after the fact.

The committee must also establish a specific "compensation recovery fund" that holds a portion of each executive’s annual bonus in escrow for three years. This escrow account must be segregated from the company’s general operating funds and must be subject to audit by an independent third party. The DOJ’s new guidance specifically cites the existence of such escrow arrangements as a "strong mitigating factor" in charging decisions. I have seen this work in practice: one of my clients, a mid-cap technology company, established a 25% escrow holdback in January 2025, and when a Foreign Corrupt Practices Act issue arose in March, the DOJ specifically referenced the escrow arrangement as a reason for offering a declination with disgorgement rather than seeking an indictment.

Finally, the board must document every meeting of the Compensation-Compliance Committee with detailed minutes that specifically reference the DOJ’s new standards. The minutes should include a section titled "DOJ Compliance Analysis" where the committee explicitly states whether each compensation decision complies with the requirements of Justice Manual Section 9-28.000. This documentation serves two purposes: it creates a contemporaneous record that prosecutors will view favorably, and it forces the committee to actually engage with the legal standards rather than rubber-stamping bonus recommendations. I have personally reviewed board minutes from dozens of companies since the policy change, and the ones that survive DOJ scrutiny are the ones that show genuine, substantive deliberation about compensation and compliance linkages.

If your corporation is facing a federal investigation or simply wants to proactively restructure its compensation and compliance systems to meet the DOJ’s new standards, you need experienced counsel who has been on both sides of the table. With over 25 years as a federal prosecutor and now as a defense attorney, I have the insider knowledge to help you navigate these unprecedented changes. Contact my office today for a confidential consultation. We will conduct a full audit of your compensation structures, draft the necessary clawback policies and board resolutions, and prepare a proactive disclosure strategy that positions your company for the best possible outcome. Do not wait until the grand jury subpoena arrives—the time to act is now, and every day you delay is a day the DOJ may view as evidence of non-cooperation.