Kusserow on Compliance: 2020 DOJ compliance program guidelines on continuous improvement and use of data

The DOJ released an update to its Compliance Guidance, intended to assist prosecutors in making informed decisions about whether a company’s compliance program was effective at the time of an offense. It emphasizes the importance of using data and technology to support compliance efforts, including assisting with continuous updates of a compliance program and assessing the adequacy and effectiveness of it at the time of the offense, charging decision, and case resolution. Many of the changes involve adding questions about a company’s ability to learn from its own experience through, among other things, the use of data and technology. The guidance asks whether companies:

  1. Engage in periodic reviews limited to a “snapshot” in time, or one based on continuous access to operational data across functions?
  2. Incorporated “lessons learned” through a “process for tracking and incorporating into its periodic risk assessment” information acquired both internally and from other similarly situated companies?
  3. Update policies/procedures and if they provide enough data to allow for effective monitoring and testing their effectiveness?
  4. Publish policy documents in a searchable format for easy reference and access?
  5. Can track access to specific policies/procedures to understand which are attracting the most attention from employees?
  6. Have means for employees to ask questions arising out of training?
  7. Have evaluated extent to which training has had an impact on employee behavior or operations?
  8. Engage in continuous ongoing monitoring and improving reporting mechanisms?
  9. Periodically test[s] hotline effectiveness, and track reports from inception to conclusion?
  10. Effectively communicate compliance requirements to employees during compliance education and training?

Richard P. Kusserow served as DHHS Inspector General for 11 years. He currently is CEO of Strategic Management Services, LLC (SM), a firm that has assisted more than 3,000 organizations and entities with compliance related matters. The SM sister company, CRC, provides a wide range of compliance tools including sanction-screening.

Connect with Richard Kusserow on LinkedIn.

Subscribe to the Kusserow on Compliance Newsletter

Copyright © 2020 Strategic Management Services, LLC. Published with permission.