Adequate procedures in the private sector Formulation and ... · liability, there is no legal...

11
Formulation and implementation of adequate procedures – International Best Practice and Lessons Learnt Adequate procedures in the private sector Wilson Ang Partner, Norton Rose Fulbright (Asia) LLP

Transcript of Adequate procedures in the private sector Formulation and ... · liability, there is no legal...

Page 1: Adequate procedures in the private sector Formulation and ... · liability, there is no legal significance for compliance programs or adequate procedures. ... 9.2 Internal audit Targets

Formulationandimplementationofadequateprocedures– InternationalBestPracticeandLessonsLearnt

Adequateproceduresintheprivatesector

WilsonAngPartner,NortonRoseFulbright(Asia)LLP

Page 2: Adequate procedures in the private sector Formulation and ... · liability, there is no legal significance for compliance programs or adequate procedures. ... 9.2 Internal audit Targets

Corporatecriminalliability

• Withoutaclearandviabletestforcorporatecriminalliability,thereisnolegalsignificanceforcomplianceprogramsoradequateprocedures.

Page 3: Adequate procedures in the private sector Formulation and ... · liability, there is no legal significance for compliance programs or adequate procedures. ... 9.2 Internal audit Targets

Attributionofliability

• Corporatecriminalliabilitycanbeestablishedvia:– Identificationprinciple:“directingmindandwill”– Respondentsuperior:“Letthemasteranswer”– Failuretoprevent:Crimeofomission,strictliability

Page 4: Adequate procedures in the private sector Formulation and ... · liability, there is no legal significance for compliance programs or adequate procedures. ... 9.2 Internal audit Targets

Indonesianapproach

• SupremeCourtRegulationPerma No.13/2016• Corporatecriminalliabilityif:

– Criminalactcommittedbyanyperson– Basedonemploymentorotherrelationshipwiththecompany– Actsforandonbehalfofcompany– Withinoroutsidecompany’sbusinessenvironment

Page 5: Adequate procedures in the private sector Formulation and ... · liability, there is no legal significance for compliance programs or adequate procedures. ... 9.2 Internal audit Targets

Indonesianapproach

• Indeterminingcorporateliability,courttoconsiderifabusinessisfoundtohave:– materiallybenefittedfromacrime;– acquiescedtothecommissionofacrime;or– failedtotakeclearstepstowardthepreventionofacrimeormitigationofitsimpact,

itmayfacefines,haveassetsseizedorpersonneljailed.

Page 6: Adequate procedures in the private sector Formulation and ... · liability, there is no legal significance for compliance programs or adequate procedures. ... 9.2 Internal audit Targets

Adequateprocedures

• Legalsignificanceofadequateprocedures:– Completecorporatedefence– Sentencingleniency– Prosecutorialdiscretion

Page 7: Adequate procedures in the private sector Formulation and ... · liability, there is no legal significance for compliance programs or adequate procedures. ... 9.2 Internal audit Targets

Clearsteps– InternationalpracticeUKMOJ SixPrinciples USFCPA TenHallmarks ISO37001:20161.Top-levelcommitment 1.Commitmentfromsenior

managementandaclearlyarticulatedpolicyagainstcorruption2.Oversight,autonomy,andresources

5.1Leadershipandcommitment5.3Organisationalroles,responsibilitiesandauthorities

2.Proportionateprocedures

3.Codeofconductandcompliancepoliciesandprocedures

5.2Anti-briberypolicy8.6Anti-briberycommitments

3.Riskassessment 4.Riskassessment 4.5Briberyriskassessment4.Communication(includingtraining)

5.Trainingandcontinuingadvice6.Incentivesanddisciplinarymeasures

7.3Awarenessandtraining7.4Communication

Page 8: Adequate procedures in the private sector Formulation and ... · liability, there is no legal significance for compliance programs or adequate procedures. ... 9.2 Internal audit Targets

Clearsteps– InternationalpracticeUKMOJ SixPrinciples USFCPA TenHallmarks ISO37001:20165.Duediligence 7.Thirdpartyduediligence

andpayments8.M&A,pre-acquisitionduediligenceandpost-acquisitionintegration

7.2Duediligenceonemployees8.2Duediligenceonbusinessassociates

6.Monitoringandreview 9.Confidentialreportingandinternalinvestigations10.Continuousimprovement:periodictestingandreview

8.4Financialcontrol8.5Non-financialcontrol8.9Raiseconcerns8.10Investigatebribery9.1Monitor,measure,analyseandevaluate9.2Internalaudit

Targetsgiving ofbribesingeneral

Targetsgiving ofbribestogovernmentofficials

Targetsgivingandreceivingofbribesingeneral

Page 9: Adequate procedures in the private sector Formulation and ... · liability, there is no legal significance for compliance programs or adequate procedures. ... 9.2 Internal audit Targets

Challenges

• Misplacednationalisticpushbackagainstforeigncorruptionlaws• Blindacceptanceofanti-corruptionundertakingswithout

complianceinfrastructureinplace• Overuseofcertificationinplaceofactualverification• Abuseofculturalguiseandcommunityself-helpascoverfor

corruptionandconflictofinterest• Misconceptionthatcomplianceisthejobofcomplianceofficers• Insufficientresourcesandauthorityforcompliancefunction• Whistleblowinghotlinewithoutinvestigativefollow-upaction

Page 10: Adequate procedures in the private sector Formulation and ... · liability, there is no legal significance for compliance programs or adequate procedures. ... 9.2 Internal audit Targets

Recommendations• Adoptjurisdictionallyneutral,broad-basedstandards• Activelypromoteimplementationofcomplianceprograms• Clarifylegalsignificanceofcomplianceprogramsinshowingthat

“clearsteps”weretakentopreventcrime• Empowercomplianceofficersthroughprofessionaltrainingand

ensuringclearaccesstotheboardandseniormanagement• Spreadmessagethatcomplianceiseverybody’sresponsibility• Focusonneedforcompanytoconductinternalenquiryon

allegationssoastoreducedamageandpreventrecurrence• Maintainlawenforcementbalancebetweenprivateandpublic,

givingandreceiving,aspectsofbribery

Page 11: Adequate procedures in the private sector Formulation and ... · liability, there is no legal significance for compliance programs or adequate procedures. ... 9.2 Internal audit Targets