corporatecomplianceinsights

Of the nine enforcement cases CCI examined where companies received credit for timely disclosure, only two included a measurable time window. In several others, the timeliness clock had effectively run out before the company acted — a whistleblower, a press report or a parallel investigation had already answered the question. CCI editorial director Jennifer Gaskin examine...

Companies that discover potential misconduct can now point to a single DOJ-wide framework governing self-disclosure. Stinson attorneys Bernadette Sargeant, Reginald Harris and Alexandra Stanley explain how the new policy works and why the time to build voluntary disclosure infrastructure is before it’s needed.

In March, the

The DOJ’s new corporate enforcement policy has a headline promise — leniency for companies that self-disclose, cooperate and remediate — but CoreStream GRC’s Paul Cadwallader argues the more important signal is about timing. The policy, read alongside the Balt SAS resolution, suggests companies will increasingly be judged not just on whether they remediate but on how earl...

Regulators won’t simply look at your AI outputs when scrutinizing your organization’s compliance, Jonny Frank, Nathan Gibson, Michael Costa and Kashif Sheikh of StoneTurn write. Your decision-making is being evaluated, and relying on the defense that AI told you to make a certain decision is a recipe for disaster.  

AI is changing the speed and scale...

Organizations have treated new technology as something visible and reviewable. That model is breaking down because of platforms’ built-in AI agents, business advisor Bill Lewis explains. For these agents, compliance teams must be building visibility, assigning ownership, documenting permissions and making sure default settings do not quietly become policy.

Mos...