11
Formulation and implementation of adequate procedures – International Best Practice and Lessons Learnt Adequate procedures in the private sector Wilson Ang Partner, Norton Rose Fulbright (Asia) LLP

Adequate procedures in the private sector Formulation and ... · liability, there is no legal significance for compliance programs or adequate procedures. ... 9.2 Internal audit Targets

Embed Size (px)

Citation preview

Page 1: Adequate procedures in the private sector Formulation and ... · liability, there is no legal significance for compliance programs or adequate procedures. ... 9.2 Internal audit Targets

Formulationandimplementationofadequateprocedures– InternationalBestPracticeandLessonsLearnt

Adequateproceduresintheprivatesector

WilsonAngPartner,NortonRoseFulbright(Asia)LLP

Page 2: Adequate procedures in the private sector Formulation and ... · liability, there is no legal significance for compliance programs or adequate procedures. ... 9.2 Internal audit Targets

Corporatecriminalliability

• Withoutaclearandviabletestforcorporatecriminalliability,thereisnolegalsignificanceforcomplianceprogramsoradequateprocedures.

Page 3: Adequate procedures in the private sector Formulation and ... · liability, there is no legal significance for compliance programs or adequate procedures. ... 9.2 Internal audit Targets

Attributionofliability

• Corporatecriminalliabilitycanbeestablishedvia:– Identificationprinciple:“directingmindandwill”– Respondentsuperior:“Letthemasteranswer”– Failuretoprevent:Crimeofomission,strictliability

Page 4: Adequate procedures in the private sector Formulation and ... · liability, there is no legal significance for compliance programs or adequate procedures. ... 9.2 Internal audit Targets

Indonesianapproach

• SupremeCourtRegulationPerma No.13/2016• Corporatecriminalliabilityif:

– Criminalactcommittedbyanyperson– Basedonemploymentorotherrelationshipwiththecompany– Actsforandonbehalfofcompany– Withinoroutsidecompany’sbusinessenvironment

Page 5: Adequate procedures in the private sector Formulation and ... · liability, there is no legal significance for compliance programs or adequate procedures. ... 9.2 Internal audit Targets

Indonesianapproach

• Indeterminingcorporateliability,courttoconsiderifabusinessisfoundtohave:– materiallybenefittedfromacrime;– acquiescedtothecommissionofacrime;or– failedtotakeclearstepstowardthepreventionofacrimeormitigationofitsimpact,

itmayfacefines,haveassetsseizedorpersonneljailed.

Page 6: Adequate procedures in the private sector Formulation and ... · liability, there is no legal significance for compliance programs or adequate procedures. ... 9.2 Internal audit Targets

Adequateprocedures

• Legalsignificanceofadequateprocedures:– Completecorporatedefence– Sentencingleniency– Prosecutorialdiscretion

Page 7: Adequate procedures in the private sector Formulation and ... · liability, there is no legal significance for compliance programs or adequate procedures. ... 9.2 Internal audit Targets

Clearsteps– InternationalpracticeUKMOJ SixPrinciples USFCPA TenHallmarks ISO37001:20161.Top-levelcommitment 1.Commitmentfromsenior

managementandaclearlyarticulatedpolicyagainstcorruption2.Oversight,autonomy,andresources

5.1Leadershipandcommitment5.3Organisationalroles,responsibilitiesandauthorities

2.Proportionateprocedures

3.Codeofconductandcompliancepoliciesandprocedures

5.2Anti-briberypolicy8.6Anti-briberycommitments

3.Riskassessment 4.Riskassessment 4.5Briberyriskassessment4.Communication(includingtraining)

5.Trainingandcontinuingadvice6.Incentivesanddisciplinarymeasures

7.3Awarenessandtraining7.4Communication

Page 8: Adequate procedures in the private sector Formulation and ... · liability, there is no legal significance for compliance programs or adequate procedures. ... 9.2 Internal audit Targets

Clearsteps– InternationalpracticeUKMOJ SixPrinciples USFCPA TenHallmarks ISO37001:20165.Duediligence 7.Thirdpartyduediligence

andpayments8.M&A,pre-acquisitionduediligenceandpost-acquisitionintegration

7.2Duediligenceonemployees8.2Duediligenceonbusinessassociates

6.Monitoringandreview 9.Confidentialreportingandinternalinvestigations10.Continuousimprovement:periodictestingandreview

8.4Financialcontrol8.5Non-financialcontrol8.9Raiseconcerns8.10Investigatebribery9.1Monitor,measure,analyseandevaluate9.2Internalaudit

Targetsgiving ofbribesingeneral

Targetsgiving ofbribestogovernmentofficials

Targetsgivingandreceivingofbribesingeneral

Page 9: Adequate procedures in the private sector Formulation and ... · liability, there is no legal significance for compliance programs or adequate procedures. ... 9.2 Internal audit Targets

Challenges

• Misplacednationalisticpushbackagainstforeigncorruptionlaws• Blindacceptanceofanti-corruptionundertakingswithout

complianceinfrastructureinplace• Overuseofcertificationinplaceofactualverification• Abuseofculturalguiseandcommunityself-helpascoverfor

corruptionandconflictofinterest• Misconceptionthatcomplianceisthejobofcomplianceofficers• Insufficientresourcesandauthorityforcompliancefunction• Whistleblowinghotlinewithoutinvestigativefollow-upaction

Page 10: Adequate procedures in the private sector Formulation and ... · liability, there is no legal significance for compliance programs or adequate procedures. ... 9.2 Internal audit Targets

Recommendations• Adoptjurisdictionallyneutral,broad-basedstandards• Activelypromoteimplementationofcomplianceprograms• Clarifylegalsignificanceofcomplianceprogramsinshowingthat

“clearsteps”weretakentopreventcrime• Empowercomplianceofficersthroughprofessionaltrainingand

ensuringclearaccesstotheboardandseniormanagement• Spreadmessagethatcomplianceiseverybody’sresponsibility• Focusonneedforcompanytoconductinternalenquiryon

allegationssoastoreducedamageandpreventrecurrence• Maintainlawenforcementbalancebetweenprivateandpublic,

givingandreceiving,aspectsofbribery

Page 11: Adequate procedures in the private sector Formulation and ... · liability, there is no legal significance for compliance programs or adequate procedures. ... 9.2 Internal audit Targets