Compliance Tip of the Day: Rethinking Corporate AI Governance Through Design Intelligence
Compliance Tip of the Day: COSO Governance Framework: Part 4, Culture
Compliance Tip of the Day: COSO Governance Framework: Part 1, Introduction
Compliance Tip of the Day: Internal Control Deficiencies
FCPA Compliance Report: Stay the Course: Ellen Lafferty on Navigating Anti-Corruption Compliance in 2025
Adventures in Compliance: The Novels – The Hound of the Baskervilles, Introduction and Compliance Lessons Learned
Compliance Tip of the Day: Assessing Internal Controls
Key Discovery Points: BYOD Case Law Covering Subpoenas and Employee Handbooks
Compliance Tip of the Day: COSO Objective 5 – Monitoring Activities
Compliance Tip of the Day: COSO Objective 4 - Control Information and Communication
Hospice Insights Podcast - Election Inspection: Be Proactive to Avoid Costly Election Statement Denials
Compliance Tip of the Day: COSO Objective 3 – Control Activities
Compliance Tip of the Day – COSO Objective 1 – Control Environment
Compliance Tip of the Day: Code of Conduct as an Internal Control
Rethinking Records Retention
Compliance Tip of the Day: Internal Controls for GTE
FCPA Compliance Report: Revolutionizing Speak Up: Ariel D. Weindling on Enhancing Whistleblower Systems
Compliance Tip of the Day: Implementing Internal Controls
Podcast: Addressing Patient Complaints About Privacy Violations
Compliance Amidst a Global Consensus Breakdown
I didn’t plan on working in cybersecurity. My path wasn’t exactly traditional, but every job I had taught me how systems break—technical or operational, it didn’t matter. ...more
Last month, Paul Hastings sponsored the Cybersecurity Law Workshop at the Spring Privacy & Security Forum held at George Washington University in Washington, D.C. The Cybersecurity Law Workshop featured three panels of...more
An organization’s code of conduct often serves as the foundation upon which other elements of the compliance program—such as employee training and communications—are built. More than just a tool for establishing baseline...more
High rates of violent acts against heath care workers pose a serious risk to the safety and wellbeing of the medical and support professionals on the front lines of patient care. Studies show that health care workers are five...more
The Bottomline: Five Practical Steps for Generative AI Risk Management - As the first line of defense, employees within business operations must own and manage risks related to the business, including risks resulting from...more
So, for those of you who missed last year’s “The Grinch Who Stole Compliance,” never fear: We have an endless supply of compliance-related holiday mirth. After all, who doesn’t like a bit of eggnog and the traditional singing...more
On October 2, 2024, New York adopted new regulations requiring general hospitals to implement heightened cybersecurity safeguards. General hospitals, as defined in Article 28 of the NY Public Health Law, generally must begin...more
On August 28, the Financial Crimes Enforcement Network (FinCEN) issued a final rule establishing anti-money laundering and countering the financing of terrorism (AML/CFT) compliance obligations for US Securities and Exchange...more
On September 23, 2024, the U.S. Department of Justice (“DOJ”) released updates to its Evaluation of Corporate Compliance Programs (“ECCP”) guidance. In a move that surprised no one (especially if companies have been reading...more
When corporations use Artificial Intelligence (AI) programs, they should be sure to use them in a manner that doesn’t result in the Department of Justice knocking on their door. The DOJ just released an updated version of its...more
On February 13, 2024, the U.S. Treasury Department’s Financial Crimes Enforcement Network (“FinCEN”) issued a notice of proposed rulemaking (the “Proposed Rule”) that would subject registered investment advisers (“RIAs”) and...more
ACI’s Mexico Summit on Anti-Corruption & Compliance Programs returns on March 13-14, 2024 in Mexico City! Given the uncertainty with the looming Presidential election, as well as increased U.S. enforcement focus on Mexico...more
The Jersey Financial Services Commission ("JFSC") recently announced that its first area of focus for its 2024 thematic examination programme will be politically exposed persons ("PEPs") (the "Examination"). The Examination...more
The Jersey Financial Services Commission (the "JFSC") recently published feedback from its 2022 thematic examination on the extent to which supervised persons complied with their regulatory obligations with respect to...more
Cybersecurity attacks, such as malware, phishing emails, and password attacks, are a growing threat to patients and medical practices. Cyber attacks can significantly disrupt patient care, including by exposing confidential...more
While the global pandemic has highlighted the perils of remote work, decades of collective experience undertaking internal investigations for corporations and their advisors in connection with the misappropriation of...more
Compliance Program Guidelines - On December 5, 2022, the U.S. Department of State Directorate of Defense Trade Controls (“DDTC”) issued new Compliance Program Guidelines (“the Guidelines”) intended to provide an overview...more
I managed not to lose my temper when a training skeptic informed me that he wasn’t a fan of compliance training because “it’s not going to make a dishonest person do the right thing.” Indeed, I doubt anyone who previously had...more
On Friday, May 6, the Tennessee Bar Association held its first in-person Labor & Employment Law Forum since 2019. Among the presenters were John Bode of Miller & Martin PLLC and Paul Merritt of Fortress Consulting, LLC, who...more
The global food and beverage e-commerce market is expected to grow to $22.4 billion in 2020, possibly reaching $36.4 billion in 2023. That’s up from $14.9 billion in 2019. Food and beverage e-commerce revenue in the United...more
The coronavirus crisis is far from over, and compliance professionals still need every scrap of guidance that regulators can provide about how to run compliance programs in these difficult times. So when the Securities and...more
Given the choice between credit card data and digital health records, cybercriminals prefer the latter. A stolen credit card can be canceled. Electronic protected health information (ePHI) with its treasure-trove of...more
Organizational trust may seem like one of the fuzzy concepts in corporate ethics and compliance, something nice to have when times are flush, but nowhere near as important as the command-and-control that companies must have...more
Our Regional Compliance Conferences provide attendees with a forum to interact with local compliance professionals, share information about your compliance successes and challenges, and create educational opportunities for...more
OFAC (Oficina de Control de Activos Extranjeros) es un departamento del Tesoro de los Estados Unidos que administra y aplica sanciones económicas y comerciales basadas en la política exterior de los Estados Unidos y los...more