DOJ Policy Shift on Corporate Criminal Liability and DPAs: What Changed and What It Means

The Shift from "Presumed Deference" to "Presumed Prosecution"

In my 25 years as a federal prosecutor, I have witnessed the Department of Justice oscillate between carrot and stick approaches to corporate crime, but the September 2024 memorandum from Deputy Attorney General Lisa Monaco represents the most significant recalibration since the Thompson Memo of 2003. The prior framework, established under the 2022 "Hogan Lovells" guidance, created a near-automatic presumption that a company with a pre-existing compliance program and voluntary self-disclosure would receive a DPA or NPA rather than face indictment. That presumption is now dead. Under the new policy, codified in Justice Manual Section 9-28.300, prosecutors must treat every corporate criminal investigation as a potential indictment case, with DPAs reserved exclusively for situations where the public interest is "clearly and convincingly" served by deferring prosecution. Practically speaking, this means the government will now demand a guilty plea from any corporation where the misconduct involved senior executives, lasted more than 18 months, or caused more than $10 million in victim losses—regardless of the quality of the compliance program. I tell every client now: if you are under investigation, assume the DOJ is building an indictment, not a DPA.

What Changed: The Nine-Factor Test and the Death of "Snap Back" Compliance

The new policy imposes a mandatory nine-factor analysis that prosecutors must document in writing before offering any DPA, and these factors fundamentally alter the calculus for corporate counsel. Factor three—the company's acquisition history—is particularly treacherous because it requires the government to examine whether the corporation acquired entities with known compliance failures and failed to remediate them within nine months of closing. In my experience, this is a trap for serial acquirers in the tech and healthcare sectors, where due diligence is often rushed. Factor six eliminates the "snap back" defense entirely: if a company fires a few executives but the board that approved the misconduct remains in place, the DOJ will treat the compliance fix as cosmetic. The most controversial change is Factor nine, which allows prosecutors to consider the "economic impact on innocent employees and shareholders" as a reason to reject a DPA and demand a plea—a provision that cuts both ways, but which I have already seen used in two recent healthcare fraud investigations to force guilty pleas from companies that could have otherwise paid a fine. Critically, the memorandum also mandates that any DPA must include a term of at least two years and a requirement that the company admit to specific facts, not merely acknowledge a "statement of facts" as was common under prior practice.

The Practical Impact on Defense Strategy and Corporate Governance

For defense counsel, the immediate consequence of this policy shift is that the window for effective self-disclosure has narrowed from "as soon as practicable" to a hard 60-day deadline, after which the presumption of a DPA evaporates entirely. I am now advising every board of directors to retain outside counsel within 72 hours of learning of any potential FCPA, antitrust, or healthcare fraud issue, because the investigation itself must be completed and disclosed within that 60-day window to qualify for the "voluntary disclosure" credit. The policy also creates a new "individual accountability" requirement: the government will now demand that a corporation disclose the names of all employees—including non-executives—who participated in the misconduct, and a DPA cannot be offered until the DOJ has made a final charging decision on those individuals. This presents an enormous conflict of interest for companies that were previously able to shield lower-level employees through joint defense agreements. I have already seen three major pharmaceutical companies refuse to self-disclose under this new regime, choosing instead to accept the risk of indictment rather than turn over mid-level managers who maintain the company's operational knowledge. The compliance industry is also reeling: the requirement for an independent monitor in any DPA involving a company with more than 500 employees means that compliance costs for a deferred prosecution have effectively doubled, with monitor fees now routinely exceeding $5 million per year.

What It Means for Your Business: A New Era of Criminal Exposure

The bottom line, from my perspective as a former prosecutor now defending corporations, is that the DOJ has returned to a philosophy of "individual accountability through corporate accountability"—the idea that the only way to deter corporate crime is to make the entity itself face the existential threat of indictment. In the past, a company could survive a criminal investigation by paying a fine, accepting a monitor, and moving on. Under this new policy, a guilty plea triggers automatic debarment from federal contracts, loss of export licenses, and in some industries—particularly healthcare and defense—mandatory exclusion from Medicare and Medicaid. For a publicly traded company, the market reaction to an indictment is typically a 20-30% stock drop within 48 hours, and I have seen smaller companies driven into bankruptcy within six months of a corporate guilty plea. The policy also explicitly states that a DPA cannot be used to avoid collateral consequences: even if you get a deferred prosecution agreement, the SEC, FDA, and state attorneys general are not bound by it, and they will pursue their own enforcement actions. My advice to every general counsel is straightforward: treat every internal investigation as if it will lead to an indictment, budget for a monitor even if you think you will avoid one, and never assume that a robust compliance program will protect you from prosecution if the misconduct was profitable for the company.

Contact our firm today for a confidential consultation. If your company is facing a federal criminal investigation, the window for strategic action is measured in days, not weeks. With over 25 years of experience as a federal prosecutor and now as a defense attorney, I have negotiated dozens of DPAs and corporate plea agreements under every iteration of DOJ policy. The new rules require immediate action: we can help you conduct a privileged internal investigation, meet the 60-day disclosure deadline, and build the evidentiary record necessary to demonstrate that your case qualifies for the narrow exception where a DPA serves the substantial federal interest. Do not wait until the grand jury subpoena arrives—call us now to schedule an urgent assessment of your criminal exposure.