Is Innovation Key to Compliance Best Practices?
FEBRUARY 28, 2012 BY THOMAS FOX
Can compliance be innovative? Or can innovation inform your compliance program? Can some of the techniques and strategies of the world’s most innovative companies be brought to bear in the field of anti-corruption and anti-bribery?
I thought about those questions, and perhaps some others, while reading the March issue of Fast Company that had a cover title of “The World’s 50 Most Innovative Companies.” In his column, editor Robert Safian wrote about the “The Lessons of Innovation.” He said in reviewing the Top 50 most innovative company, he drew eight key themes. As I read these I thought about them and their relationship to compliance. So with a tip of the hat to Mr. Saflan, here is my compliance spin on his eight key themes of corporate innovation.
1. Compliance should be a strategy, not a tactic. Starbucks recognized that profit alone is a “fairly shallow aspiration, and it’s not enduring.” Most people want to do business with companies that do not engage in bribery and corruption. Indeed the U.K. Bribery Act enshrines this in its Six Principles of an Adequate Procedures by stating that a company should only conduct business with other ethical companies.
2. Big companies need to be as nimble as small companies. Safian notes that the top four companies: Apple, Google, Facebook and Amazon all continue to “drive the agenda across the global economy.” This should also be true of your compliance program. You need to use the tools available to you to update your risk assessment if you move into new business lines, products or geographical areas. Similarly if one of your competitors comes under anti-corruption scrutiny, you should review any similar practices that your company might have, such as its sales model or vendors in the supply chain.
3. Technology is disruptive in unexpected places. Here Safian gives the example ofLegalZoom, which is “challenging the definition of a law practice” by providing useful legal forms and documents to consumers. In the compliance arena, the number of technological innovations is as broad as it is deep. Companies like Catelas and Visual Risk IQ have developed software products that can allow review and assessment of a large number of data points or other quantitative data. You can even get apps for smartphones that allow submission of expense requests directly to your compliance department.
4. Compliance is a competitive advantage. Apple has never been publicly reported as going through a Foreign Corrupt Practices Act (FCPA) investigation. What is their stock price today and is it still undervalued? Even when it recently received negative publicity regarding its manufacturing facilities in China, it responded quickly and brought in an outside monitor to assess and report. Apple also annually assesses its third-party vendors and makes that report public. Do you think that keeps vendors on their collective toes? You bet it does.
5. Use of social media makes compliance better. My former speaking cohort, Stephen Martin, then General Counsel for Corpedia, often spoke about Code of Conduct 3.0, which is a web-based interactive tool that helps guide employees through a code in an interesting and stimulating manner.
The same is true of training. You no longer need to simply have a video conference to deliver compliance training around the world. Companies like Click4Compliance have interactive, web-based solutions that you can utilize. I noted above about the smartphone app that allows employees from around the world to submit expense requests to the compliance department and receive an instant response back from an assigned compliance team member.
6. Data is power. If you don’t document it, you can’t measure it. If you don’t measure it, you can’t assess it. If you don’t assess it, you can’t improve it. That is how an engineer tends to look at things. In the compliance world, if you don’t document it, it never existed (Cue drum roll for: document, document and document). Both are true. You have to document things to prove that you actually did them. But if you do not have data, you cannot determine if your corporate compliance program is successful or improve it.
7. Money is flowing. Here, Safian does not mean necessarily that more funding is available. However, in the compliance world, what I believe that this means is forces, other than legal compliance.
For example: the U.S. Department of Justice (DOJ) or the U.K. Serious Fraud Office (SFO) enforcements are beginning to drive compliance. Insurance companies have developed insurance coverage for FCPA investigations; D&O insurers are requiring companies to have a compliance program to cover directors and officers sued in shareholder derivative actions based upon admitted FCPA violations; and perhaps most interestingly, banks and other financial institutions are reviewing anti-corruption compliance programs to determine if they meet minimum best practices and then writing maintenance of these programs into their loan covenants.
8. Copycats are history. Safian notes that emerging market entrepreneurs aren’t just following the successes of others, they are creating new, distinct models. In the compliance arena I believe that out-of-the-box solutions are no longer best practices. Companies need to assess their specific compliance risks and then design programs to specifically manage those compliance risks.
If your company uses a sales model of agents, one type of compliance management strategy may need to be employed. However, if your company is a manufacturing company that sells through distributors, another compliance management strategy may be required. Do not simply purchase a compliance program off the shelf. Either design it to fit the needs (and realities) of your business model or work with an expert who can do so.
The innovation angle is not one that is usually in the front of the line at compliance conferences or in thinking through compliance programs. But if you listen to Lanny Breuer, Chuck DuRoss or any other DOJ speaker, they continually talk about evolving best practices in anti-corruption compliance. Any reader of deferred prosecution agreements (DPAs) from the past 18 months is well aware of the changes in focus that the DOJ has in these documents. Certainly, many of the compliance techniques are driven by the compliance challenges in the individual companies.
But if your company has engaged in mergers and acquisitions, why would it not follow the “enhanced” compliance guidance found in the Johnson & Johnson DPA and train all high-risk employees within 12 months of acquisition and perform a full compliance audit within 18 months of acquisition? So my conclusion is that innovation in the compliance arena is key. As compliance programs mature and as companies mature in their approach to compliance, innovation will continue to lead best practices.
This publication contains general information only and is based on the experiences and research of the author. The author is not, by means of this publication, rendering business, legal advice, or other professional advice or services. This publication is not a substitute for such legal advice or services, nor should it be used as a basis for any decision or action that may affect your business. Before making any decision or taking any action that may affect your business, you should consult a qualified legal advisor. The author, his affiliates, and related entities shall not be responsible for any loss sustained by any person or entity that relies on this publication. The Author gives his permission to link, post, distribute, or reference this article for any lawful purpose, provided attribution is made to the author. The author can be reached at tfox@tfoxlaw.com. © Thomas R. Fox, 2012