DOJ Corporate Enforcement Policy and Business Compliance

The DOJ Corporate Enforcement Policy (CEP) governs how the Department of Justice evaluates corporate misconduct, rewards voluntary self-disclosure, and structures the resolution of criminal investigations against business entities. This page covers the policy's definition and scope, its operational mechanics, the factors that drive enforcement outcomes, classification boundaries between resolution types, and the tensions that practitioners and compliance officers encounter in practice. The policy sits at the intersection of DOJ charging decisions and prosecutorial discretion and the broader framework described across the DOJ authority index.

• Definition and scope
• Core mechanics or structure
• Causal relationships or drivers
• Classification boundaries
• Tradeoffs and tensions
• Common misconceptions
• Checklist or steps (non-advisory)
• Reference table or matrix

Definition and scope

The DOJ Corporate Enforcement Policy is a formalized statement of prosecutorial priorities applied to corporations under investigation by the DOJ Criminal Division. First introduced as a pilot program in November 2017 under the Foreign Corrupt Practices Act (FCPA) context, the policy was expanded in February 2023 by Deputy Attorney General Lisa Monaco to cover all corporate criminal matters handled by the Criminal Division — not just FCPA cases (DOJ Corporate Enforcement Policy, Criminal Division, Feb. 2023).

The policy establishes a tiered framework: companies that voluntarily self-disclose misconduct, fully cooperate, and timely remediate receive the most favorable treatment, up to and including a declination of prosecution. Companies that do not self-disclose but cooperate and remediate receive reduced penalties. Companies that neither disclose nor cooperate face the full weight of criminal charging and financial penalties.

The policy's geographic scope is national, applying to all U.S. Attorney's Offices that adopt its terms, though individual districts retain independent discretion. The Foreign Corrupt Practices Act enforcement program was the original testing ground for the mechanics now generalized across corporate matters.

Core mechanics or structure

The CEP operates through three primary variables: voluntary self-disclosure (VSD), cooperation, and remediation. Each variable is assessed independently and the combination determines the outcome on a sliding scale.

Voluntary self-disclosure requires that a company report misconduct to the DOJ before the Department has opened an investigation or received a tip from another source, before misconduct is publicly reported, and within a reasonably prompt period after the company's own discovery. The Criminal Division's updated 2023 guidance specifies that disclosure must be made to the relevant DOJ component and not merely to a civil regulator.

Cooperation is evaluated against the nine factors outlined in the 2018 update to the Filip Factors (Justice Manual §9-28.700), which include the corporation's assistance in identifying culpable individuals, production of relevant documents regardless of where they are located, and voluntary witness availability.

Remediation requires demonstration of concrete corrective action: enhancement of the compliance program, discipline of responsible employees, and disgorgement or return of ill-gotten gains. The 2023 guidance added an explicit requirement that companies implement compensation clawback mechanisms — recovering or withholding bonuses from executives involved in misconduct — as part of a qualifying remediation package.

When all three factors are fully satisfied, the CEP creates a presumption — not a guarantee — of a declination. Between 2018 and 2023, the Criminal Division issued over 30 public declinations under the FCPA pilot and its successor policy, though the full count of non-public declinations is not disclosed.

Deferred prosecution agreements and non-prosecution agreements are the primary resolution instruments used when disclosure is absent or incomplete cooperation reduces eligibility for a full declination.

Causal relationships or drivers

The policy's design reflects three documented enforcement dynamics.

Deterrence through incentive differentiation. Prosecutors historically lacked a structured mechanism for rewarding early disclosure in corporate matters. Without a predictable benefit, corporate legal counsel had little basis to advise self-disclosure over strategic concealment. The CEP attempts to alter that calculus by guaranteeing a specific, documentable reduction in penalty exposure — at minimum a 50% reduction below the low end of the applicable U.S. Sentencing Guidelines range for cooperating companies that did not self-disclose, and up to a full declination for those that did.

Recidivism pressure. The 2023 expansion added explicit guidance on aggravating recidivism: a company with a prior resolution within the preceding 10 years receives no presumption of declination regardless of cooperation quality. This 10-year lookback directly responds to enforcement data showing that repeat corporate offenders had used prior DPAs as limited-cost licenses to continue misconduct.

Individual accountability emphasis. The Yates Memo of September 2015 (Deputy Attorney General Sally Yates, DOJ) shifted institutional focus toward individual prosecution as a condition of corporate cooperation credit. The CEP operationalizes this by requiring that corporations not enter into agreements that protect culpable individuals and that they affirmatively identify all responsible employees — not merely the highest-ranking ones — before receiving full cooperation credit.

Classification boundaries

Not all corporate investigations fall cleanly under the CEP framework. Key classification distinctions include:

Criminal Division vs. U.S. Attorney's Office jurisdiction. The CEP is a Criminal Division policy. Individual U.S. Attorney's Offices have adopted portions of the policy through their own written guidance, but adoption is not uniform across all 94 districts. A company under investigation in a district without explicit CEP adoption cannot assume the same framework applies.

Civil vs. criminal exposure. The CEP governs criminal resolution only. Companies facing parallel civil False Claims Act enforcement, civil antitrust investigation by the Antitrust Division, or regulatory proceedings by agencies such as the SEC operate under different standards that are not unified by the CEP.

Aggravated conduct exceptions. The policy carves out cases involving pervasive misconduct, involvement of senior leadership in the scheme, or conduct causing serious harm (including public safety risk or national security impact). In these categories, even complete VSD, cooperation, and remediation do not trigger the declination presumption — prosecutors retain full discretion to charge.

Tradeoffs and tensions

The CEP creates genuine strategic and legal tensions for companies under investigation.

Speed vs. accuracy in disclosure. The policy rewards prompt disclosure, but premature disclosure before an internal investigation has scoped the full misconduct risks disclosing an incomplete picture, which prosecutors may later treat as bad-faith. The tension between moving fast enough to qualify and moving carefully enough to be accurate is not resolved by the policy text.

Attorney-client privilege and cooperation. Full cooperation under the Filip Factors requires producing documents and witnesses in ways that may require waiving privilege over internal investigation materials. Courts have held that privilege waiver in the DOJ context does not automatically waive privilege in civil litigation — but the risk of collateral waiver creates real exposure in parallel civil litigation and regulatory proceedings.

Compensation clawback enforceability. The 2023 requirement that companies implement clawback mechanisms collides with state contract law in jurisdictions such as Delaware, where employment agreements may limit unilateral compensation recovery. DOJ guidance acknowledges that "good faith efforts" to implement clawbacks satisfy the requirement when legal barriers prevent full recovery, but the boundary of "good faith" is undefined.

Monitor selection and cost. Companies receiving a DPA rather than a declination are frequently required to retain an independent compliance monitor. Monitor fees in major matters have ranged from tens of millions to over $100 million over multi-year terms (as documented in academic reviews of FCPA resolutions by the University of Virginia School of Law FCPA Database). Monitor selection processes have faced transparency criticism, leading the DOJ to issue revised monitor selection guidelines in 2021.

Common misconceptions

Misconception: Self-disclosure guarantees a declination.
The CEP establishes a presumption of declination, not an entitlement. Aggravating factors — including the severity of harm, seniority of involved individuals, or prior DOJ history — override the presumption. The written policy language uses the phrase "will receive…absent aggravating factors," which prosecutors read as preserving full charging discretion in the presence of those factors.

Misconception: The CEP applies to all DOJ divisions.
The 2023 expansion covered the Criminal Division and encouraged adoption by U.S. Attorney's Offices. The Antitrust Division, National Security Division, and Tax Division each maintain their own separate corporate resolution policies that are not governed by the CEP (DOJ Antitrust Division; DOJ National Security Division; DOJ Tax Division).

Misconception: Partial cooperation still earns partial credit.
The policy does not operate on a simple sliding scale for partial cooperation. Companies that affirmatively impede investigation — through document destruction, witness coaching, or false statements — receive no cooperation credit regardless of their subsequent conduct, and face additional obstruction exposure.

Misconception: The policy is static.
The CEP has been materially revised at least 4 times since the original 2016 FCPA pilot: in 2017, 2019, 2022, and February 2023. Companies relying on prior versions of the policy may be operating under outdated assumptions about what conduct qualifies or what discounts apply.

Checklist or steps (non-advisory)

The following describes the documented sequence through which a corporate matter moves under the CEP framework — as a structural map, not as legal guidance.

1. Internal discovery of potential misconduct — typically triggers an internal investigation conducted under attorney-client privilege.
2. Scope assessment — determination of whether misconduct is isolated or systemic, which business units are involved, and whether it reaches senior leadership.
3. Disclosure timing evaluation — assessment of whether a government investigation has already begun, whether any regulator has received a tip, and whether public reporting has occurred.
4. Voluntary self-disclosure decision — if proceeding, disclosure is made to the relevant DOJ component (Criminal Division Fraud Section for FCPA matters; relevant U.S. Attorney's Office for other matters).
5. Cooperation commitment — provision of all relevant documents, identification of culpable individuals, and making witnesses available.
6. Remediation implementation — disciplinary action against responsible employees, enhancement of compliance program, implementation of clawback mechanisms.
7. Resolution negotiation — DOJ evaluates the three-factor matrix and proposes resolution instrument: declination, NPA, DPA, or guilty plea.
8. Court filing or declination letter — formal resolution is either filed with a federal court (DPA/guilty plea) or documented in a declination letter.
9. Post-resolution monitoring — if a DPA is entered, a compliance monitor may be appointed; the company files periodic compliance certifications with the DOJ.

Reference table or matrix

Sources: DOJ Criminal Division Corporate Enforcement Policy (Feb. 2023); Justice Manual §9-28.000; U.S. Sentencing Guidelines Manual, Chapter 8.