DOJ’s New Corporate Enforcement Policy – Key Takeaways for Companies at Every Growth Stage

DOJ has unveiled its first-ever department-wide CEP, a move that consolidates decades of subject matter-specific guidance into one unified framework for how prosecutors handle all corporate criminal cases regardless of subject matter. While this sounds like bureaucratic housekeeping, it has real implications for companies at every stage, from pre-seed startups navigating growing pains to public companies managing enterprise risk.

Why This Matters for Tech and Life Sciences Companies

The DOJ’s new CEP establishes a standard set of incentives for companies that:

• Voluntarily self-disclose misconduct before the government learns of it
• Fully cooperate with DOJ investigations
• Timely and appropriately remediate the underlying issues

If a company meets those criteria and lacks certain aggravating factors like pervasive misconduct or repeat offenses, prosecutors are directed to decline prosecution altogether. Even where aggravating factors are present, self-disclosure and cooperation may yield substantial benefits, including non-prosecution agreements and significant penalty reductions. Prior to the new CEP, such treatment depended on the nature of the corporate criminal conduct and statute at issue, with matters like violations of the Foreign Corrupt Practices Act falling under specific policy guidance and other matters like securities fraud violations falling under the general principles for corporate prosecutions found in the Justice Manual. Now, prosecutors are directed to give corporations a declination for every federal criminal violation if they meet the above criteria.

For tech and life sciences companies, where corporate growth often outpaces compliance infrastructure, this policy gives clearer visibility into how voluntary disclosures of corporate misconduct and internal investigations will be treated across all DOJ divisions for all federal crimes. It also signals increased expectations that companies will proactively detect and report potential misconduct instead of waiting for regulators or whistleblowers to surface issues.

The DOJ’s Message: ‘You’ll Be Rewarded for Coming Forward’

Under the new CEP, DOJ prosecutors must transparently articulate when and why companies receive leniency. For those that self-report, cooperate, and remediate, the benefits may include:

• Declination of prosecution and public disclosure of the decision
• Penalties reduced by up to 75% off the low end of the sentencing guidelines’ fine range
• Avoidance of a corporate monitor
• Shorter compliance reporting terms (less than three years)

Conversely, companies that fail to act on known misconduct, or that delay investigation and remediation, risk losing the chance for those benefits entirely.

Implications for Companies Throughout the Corporate Growth Cycle

• Startups and venture-backed growth companies often defer formal compliance programs until they scale. The CEP underscores the importance of at least a foundational ethics and compliance structure early on, to be able to demonstrate “timely and appropriate remediation” if issues arise.
• Public companies with more mature governance must ensure that compliance programs meet DOJ expectations, including root cause analysis, discipline accountability, and controls over communication channels (e.g., ephemeral messaging apps, which DOJ flags as potential record-keeping risks).
• Cross-border operations must plan for evidence management and document retention in jurisdictions with privacy or blocking statutes. Under the CEP, companies claiming foreign law restrictions bear the burden of proving them and proposing alternatives to enable DOJ access.

Key Takeaway: A Compliance Investment with Strategic Value

DOJ is indicating that companies investing in credible compliance programs and conducting meaningful internal investigations, even before issues surface externally, will be rewarded. “Voluntary disclosure” does not just mean calling the DOJ blindly; it requires a well-documented, good-faith process supported by an internal investigation capable of demonstrating cooperation and remediation.

To comply with the CEP, companies should consider taking the following steps:

• Reassess internal compliance programs and escalation pathways.
• Evaluate whistleblower reporting mechanisms in light of DOJ’s 120-day Corporate Whistleblower Pilot Program window.
• Establish investigation protocols that preserve privilege while aligning with DOJ’s cooperation expectations.
• Engage counsel early to navigate disclosure decisions strategically, before any contact with law enforcement.

Taking proactive action in the form of conducting efficient internal reviews; developing strong compliance frameworks; and understanding how to balance transparency, shareholder obligations, and reputational risk may help companies at all growth stages navigate and comply with this new DOJ policy.

Learn more about Fenwick’s white collar defense and investigations capabilities.