Regulation Change: DoJ Updates Compliance Protocols for Risk Management

New Compliance Regulations by DoJ

There are now strict new rules CIOs and other senior executives need to adhere to after the US Department of Justice (DoJ) this week released an update to its Evaluation of Corporate Compliance Programs (ECCP) guidance.

Heightened Expectations in Risk Management

According to a Gartner advisory released on Wednesday, compliance leaders are facing heightened expectations to provide clear guidance on the responsible use of AI for their employees.

• Key Areas of Evaluation: The ECCP update emphasizes how companies assess and manage risk related to new technologies.
• Lessons Learned: Companies should learn from both their own past misconduct and cases from others to enhance their compliance programs.

Focus on Technology in Corporate Compliance

As stated by Principal Deputy Assistant Attorney General Nicole M. Argentieri, the updated ECCP evaluates how companies utilize technology for compliance.

• Prosecutors will consider: The technology used, its risk assessment, and mitigation strategies.
• Continuous Improvement: Companies must continually reassess compliance programs in line with risk profiles.

Importance of Ethical Corporate Culture

Argentieri concluded that organizations acknowledging past misconduct convey a powerful message about the significance of strong compliance programs and ethical cultures.