Brian S. Gocial and Stephanie M. Harden


As government contractors know well, a robust compliance program can be critical—both in preventing, detecting, and resolving compliance problems and in working with agencies and/or the Department of Justice (“DOJ”) to resolve compliance issues when they arise. Though DOJ has previously issued guidance on how it evaluates corporate compliance programs, on April 30, 2019, it greatly expanded upon its earlier guidance with a lengthy new guidance document. The document is notable for its emphasis not just on the design of compliance programs, but also on their effectiveness in practice. The document is a useful benchmark for contractors to evaluate their compliance programs, as well as to demonstrate their affirmative responsibility to agencies when facing agency-level investigations.
The guidance document focuses on three central questions:
-
- Is the corporation’s compliance program well designed?
- Is the corporation’s compliance program implemented effectively?
- Does the compliance program actually work in practice?
The following outline provides a summary of the various factors DOJ discusses in connection with each of these questions—and more information on each topic can be found here.
Contractors should assess how their own compliance programs measure up against these factors: Continue reading “What Contractors Should Know about DOJ’s Revised Guidance on Evaluations of Corporate Compliance”





It’s almost here.
As the recent Bright Lights USA case demonstrates, export violations continue to be met by aggressive enforcement actions by U.S. government authorities. In Bright Lights USA, the U.S. State Department’s Directorate of Defense Trade Controls (“DDTC”) charged and fined a small manufacturer $400,000 for violating the International Traffic in Arms Regulations (“ITAR”) by exporting, without obtaining a license, engineering designs and drawings abroad for minor vehicle spare parts (such as rubber seals, gaskets and grommets, etc.) in connection with bids sent to foreign manufacturers to produce the parts for Bright Lights to resell to its commercial and public sector customers. Although the parts were commercial items and many other similar parts in the category in which Bright’s Lights conducted business had transitioned off of the U.S. Munitions List, the company had failed to update its list for parts that were still controlled. The DDTC found that the violations had occurred in large part due to the company’s “significant training and compliance program deficiencies.”
President Trump signed an Executive Order yesterday, marking another step forward in his promotion of “Buy American” and “Hire American” policies. The Executive Order focuses on two areas: cracking down abuse of the H-1B guest worker program and promoting the purchase of American products in federal procurements. We tackle in this post the “Buy American” portion of the Executive Order, which is of particular importance to federal contractors.
Despite recent political shifts away from globalization, international trade remains a bedrock of the U.S. economy, and companies doing business in the United States must be cognizant of the intricate set of export control regulations promulgated by the U.S. government. In today’s rapidly changing economy, it is more important than ever for companies to thoroughly assess their connections to the international marketplace. While the Obama Administration took strides toward simplifying the export control process, U.S. export control regulations remain complex due to the multiple government stakeholders involved, resulting in varying interpretations, policies, and agendas. Export control violations can still carry serious ramifications for a company’s business practices both inside and outside the United States. Accordingly, the first of this three part series begins by identifying whether your business may be subject to the U.S. export controls regime. Our next two installments will then, respectively, address: (Part 2) practical strategies for addressing risk mitigation; and (Part 3) enforcement actions by the government.
There is no question cybersecurity is a critical compliance and risk area for federal contractors. A seemingly endless stream of cyberattacks—on