DOJ Shifts Corporate Crime Policy: What the New Deferred Prosecution Rules Mean

The New Presumption: Deferred Prosecution Agreements as the Default Resolution

In my 25 years as a federal prosecutor, I have witnessed numerous policy shifts, but the Department of Justice's September 2024 revisions to the Justice Manual, specifically Section 9-28.000, represent the most significant recalibration of corporate criminal enforcement since the 1999 Holder Memo. The new policy creates a formal presumption that any corporation meeting the voluntary self-disclosure criteria will receive a deferred prosecution agreement rather than a guilty plea, effectively codifying what was once a discretionary prosecutorial tool into a near-entitlement for compliant companies. This presumption applies only when the corporation has engaged in "full, proactive, and timely cooperation" as defined under the revised Yates Memo standards, meaning that any hesitation or incomplete disclosure immediately reverts the presumption back toward a guilty plea. The practical effect is that federal prosecutors must now justify in writing any decision to decline a DPA in favor of a guilty plea, creating a paper trail that defense counsel can leverage during negotiations. I have already seen this shift alter the dynamics in three separate corporate investigations this year, where prosecutors are far more willing to entertain DPA terms that would have been unthinkable under the prior administration's policy. The critical nuance, however, is that this presumption does not apply to companies with a history of repeated misconduct, which the DOJ now defines as any criminal or civil enforcement action within the preceding ten years.

Personal Certifications and the New Compliance Officer Liability Framework

The most alarming provision for corporate executives is the new requirement that chief compliance officers and at least one senior executive must submit a signed certification attesting to the accuracy and completeness of every voluntary self-disclosure submitted to the DOJ under the revised policy. This certification, codified in the new Section 9-28.730, carries the force of a sworn statement subject to 18 U.S.C. § 1001, meaning that any material omission or misrepresentation exposes those signatories to individual criminal liability for false statements. In my experience prosecuting white-collar cases, this represents a dramatic shift because it transforms the compliance officer from an internal advisor into a potential target, creating an inherent conflict between corporate loyalty and personal legal exposure. The policy explicitly states that the DOJ will evaluate the certification as part of any subsequent prosecution of individuals, meaning that a compliance officer who signs a disclosure that later proves incomplete could face charges even if the corporation receives a DPA. I advise every client to conduct a shadow investigation parallel to the company's official probe, with separate counsel, precisely because the certification requirement creates liability that cannot be indemnified under most corporate bylaws. The practical reality is that we are now seeing compliance officers demand independent legal representation before signing these certifications, which has dramatically slowed the disclosure process and created tension between legal departments and executive leadership.

Compensation Clawback and Real-Time Remediation Mandates

The revised policy introduces mandatory compensation clawback provisions as a non-negotiable component of any deferred prosecution agreement, requiring corporations to recoup bonuses, stock options, and other incentive compensation from any employee who engaged in or had supervisory responsibility over the misconduct. This requirement, grounded in the DOJ's expanded interpretation of the 2002 Sarbanes-Oxley Act's clawback provisions under Section 304, now applies not only to CEOs and CFOs but to any executive who "knew or should have known" about the misconduct, creating a sweeping net that captures middle managers and regional directors. The policy further mandates that companies demonstrate "real-time remediation" within 90 days of discovering misconduct, including the termination of involved employees, the implementation of new internal controls, and the retention of an independent compliance monitor approved by the Fraud Section. I have seen this provision create extraordinary pressure on corporate boards to act swiftly, often before the full scope of the misconduct is even understood, because the 90-day clock starts ticking from the date of discovery rather than the date of the formal investigation. The compensation clawback requirement has proven particularly contentious because it forces companies to litigate against former employees who have already left the organization, creating expensive and distracting civil litigation that runs parallel to the criminal investigation. From a defense perspective, the key strategic consideration is that the DOJ now expects to see documentation of these clawback efforts before any DPA is finalized, meaning that companies must initiate these collection actions even when the legal basis for clawback is uncertain under state contract law.

Accelerated Disclosure Timeline and the 90-Day Investigation Window

The most operationally challenging aspect of the new policy is the compression of the voluntary self-disclosure window from the previous 120-day standard to just 90 days from the date the corporation first learns of the potential misconduct, as defined under the revised Section 9-28.400 of the Justice Manual. This timeline applies regardless of the complexity of the underlying conduct, meaning that a multinational corporation with operations across 30 countries must complete its internal investigation, prepare a comprehensive disclosure, and negotiate the terms of a DPA in the same time it would previously have taken just to conduct preliminary interviews. The policy does provide for a single 30-day extension upon a showing of "extraordinary circumstances," but the DOJ has made clear that routine logistical challenges such as document collection delays or witness availability issues do not qualify. In my practice, I have already advised two Fortune 500 clients to begin preparing voluntary disclosure templates before any misconduct is even suspected, simply because the 90-day window is too short to conduct a thorough investigation from scratch. The acceleration also creates significant discovery management challenges, particularly when dealing with foreign data privacy laws such as the GDPR or China's Personal Information Protection Law, which can delay document collection by months. I anticipate that this timeline pressure will lead to more incomplete disclosures and, paradoxically, more prosecutions of individuals whose misconduct is identified only after the disclosure deadline has passed, as companies rush to meet the deadline and miss critical evidence.

If your corporation is facing a potential criminal investigation or has recently discovered misconduct that may trigger disclosure obligations under the new DOJ policy, immediate action is critical. The 90-day window does not wait for board meetings or internal deliberations, and the personal certification requirements create individual liability that demands independent legal advice. Contact my office today for a confidential consultation to evaluate your disclosure timeline, assess your exposure under the new certification rules, and develop a strategy that protects both your corporation and your executives from the accelerated enforcement environment we now face.