22. External Compliance Monitorships
What is an external monitorship?
In Latin America, and particularly in Brazil, external monitorships have become more common in recent years. This could be seen as a result of a recent surge of corruption-related enforcement and a more aggressive approach by authorities against companies that violate domestic and foreign anti-corruption and other relevant legislation.
An external monitorship is one of many penalties and controls that can be imposed by authorities to ensure that companies not only pay significant monetary fines but, most importantly, adopt effective compliance programmes and commit to lasting cultural changes in the way they conduct business.
Although external monitorships are included in the penalties imposed on sanctioned companies, corporations that have undergone an external monitorship ultimately may be perceived as more serious, better organised and more prepared to face the competitive business environment. One of the reasons for that is because external monitors periodically assess and supervise potential deficiencies, gaps and failures within companies’ internal controls, compliance programmes and other related controls, enabling potential deficiencies to be addressed and procedures to be enhanced in a sustainable way.
According to the Resource Guide to the US Foreign Corrupt Practices Act (FCPA), the following factors are considered by US authorities when determining the need for an external monitorship:
- Seriousness of the offense
- Duration of the misconduct
- Pervasiveness of the misconduct, including whether the conduct cuts across geographic and/or product lines
- Nature and size of the company
- Quality of the company’s compliance program at the time of the misconduct
- Subsequent remediation efforts
To ensure that companies will not face the same challenges and perhaps commit further violations, authorities may appoint, in certain circumstances, an independent monitor to oversee operations during an agreed period. An appointed monitor should conduct a thorough assessment of a company’s internal policies and procedures to (1) identify gaps, (2) mitigate risks, (3) strengthen controls, and (4) propose changes to the former business culture of the legal entity and of its executives and employees. The US Securities and Exchange Commission defines an independent monitor as ‘an independent third party who assesses and monitors a company’s adherence to the compliance requirements of an agreement that was designed to reduce the risk of recurrence of the company’s misconduct’.
To be able to fulfil the mandate, an independent monitor should be provided with full access to the relevant operations of the company and may request to participate in meetings, visit offices, talk to personnel, review books and records, business information and internal documents, and assess the overall structure of the company. To develop these types of activities, the monitor selects a group (the monitorship team) to assist with implementing those activities. The monitorship team may be comprised of external advisers, such as forensic consultants and financial experts.
In the 1990s, it became more common for independent monitors to be appointed by authorities, in particular in the United States, as a mechanism of reporting when new violations occurred. During the 2000s, the number of corporate monitorships increased exponentially and their role expanded to assess companies’ internal policies and controls as well as to provide recommendations for how to strength companies’ compliance programmes.
The chart below sets out the number of public enforcement actions undertaken by US authorities since 2000 that have led to the imposition of corporate monitorships.
As a consequence of the growing cooperation between authorities around the world, other agencies in different countries, such as Canada, the United Kingdom and Brazil, began to adopt the practice.
The monitorship process
On 7 March 2008, the then Acting Deputy Attorney General at the US Department of Justice (US DOJ), Craig S Morford, issued a memorandum on external monitorships – commonly known as the Morford Memorandum – containing certain parameters for the imposition of external monitorships, which included ‘(1) the potential benefits that employing a monitor may have for the corporation and the public, and (2) the cost of a monitor and its impact on the operations of a corporation’.
The guidance contained in the Morford Memorandum was updated on 11 October 2018 by a new document issued by the US DOJ – Memorandum on Selection of Monitors in Criminal Division Matters (the Benczkowski Memorandum). This provided updated standards for selecting independent monitors and clarified when a monitorship would be required.
Regarding ‘the potential benefits that employing a monitor may have’, the Benczkowski Memorandum provided more specific criteria to be considered:
In evaluating the ‘potential benefits’ of a monitor, Criminal Division attorneys should consider, among other factors: (a) whether the underlying misconduct involved the manipulation of corporate books and records or the exploitation of an inadequate compliance program or internal control systems; (b) whether the misconduct at issue was pervasive across the business organization or approved or facilitated by senior management; (c) whether the corporation has made significant investments in, and improvements to, its corporate compliance program and internal control systems; and (d) whether remedial improvements to the compliance program and internal controls have been tested to demonstrate that they would prevent or detect similar misconduct in the future.
If the criteria above are met and authorities understand that it is appropriate to appoint an independent monitor, the agreement between companies and authorities (e.g., deferred prosecution agreements, non-prosecution agreements or plea agreements) would establish the criteria for the external monitorship, such as its duration, scope, roles and responsibilities, and expected deliverables.
The duration of a monitorship is usually between two and four years, but it can be extended for an additional period of one year at the request of the independent monitor and with the approval of the enforcement agency. The reasons for requesting an extension of a monitorship should be clearly evidenced and duly substantiated by the monitor and accepted by the appropriate authorities. In this regard, news reports indicate that Odebrecht SA has agreed to extend its monitorship term for an additional nine months.
The scope of external monitorships – or, in other words, the mandate of independent monitors - is determined within the agreement between authorities and companies, and may consider relevant aspects of the case that led to the settlement. For example, in United States of America v. Embraer SA, the deferred prosecution agreement stated the following:
The Monitor’s primary responsibility is to assess and monitor the Company’s compliance with the terms of the Agreement, including the Corporate Compliance Program in Attachment C, so as to specifically address and reduce the risk of any recurrence of the Company’s misconduct. During the Term of the Monitorship, the Monitor will evaluate, in the manner set forth below, the effectiveness of the internal accounting controls, record-keeping, and financial reporting policies and procedures of the Company as they relate to the Company’s current and ongoing compliance with the FCPA and other applicable anti-corruption laws (collectively, the ‘anti-corruption laws’) and take such reasonable steps as, in his or her view, may be necessary to fulfil the foregoing mandate (the Mandate). This Mandate shall include an assessment of the Board of Directors’ and senior management’s commitment to, and effective implementation of, the corporate compliance program described in Attachment C of the Agreement.
One of the goals of an independent monitor is to ensure that violations from the past do not recur and that a company’s culture is reformed in a solid and sustainable manner. For that purpose, external monitorships are forward-looking and aim to ensure that mistakes from the past are properly remediated and mitigated.
In the United States, an independent monitor is typically appointed by authorities after a proposal is made by the investigated company. The company submits a written proposal identifying three monitor candidates as well as their resume and qualifications. Following an interview process, authorities then select the candidate they prefer, based on the individual’s qualifications, credentials and suitability for the assignment. Authorities may request that additional names are proposed by the company, in case they do not accept the names initially proposed. Note that, in Brazil, although there is no legislation or written guidelines on the monitorship process (as discussed below), Brazilian authorities have adopted a similar process to assess and appoint independent monitors.
After being selected, a monitor will be entitled to put together a monitorship team to advise and assist during the monitorship period, considering the broadness of independent monitors’ mandates as well as their responsibilities.
The independent monitor and the monitorship team will prepare a workplan to guide their work throughout the year, outlining clear specifications and goals they intend to achieve. The plan may describe the activities and tests they intend to carry out, documents they intend to review, as well as the sites they intend to visit and interviews to be conducted. The workplan is submitted to the authorities as well as to the monitored company so as to make the necessary arrangements and align all activities as early as possible.
A company should provide the monitorship team with information as required, ensure that executives and employees are available for interviews, facilitate site visits and make documents available for tests relating to internal controls and other related systems:
The Company shall cooperate fully with the Monitor, and the Monitor shall have the authority to take such reasonable steps as, in his or her view, may be necessary to be fully informed about the Company’s compliance program in accordance with the principles set forth herein and applicable law, including applicable data privacy and national security laws and regulations. To that end, the Company shall: facilitate the Monitor’s access to the Company’s documents and resources; not limit such access, except as provided in Paragraphs 5-6; and provide guidance on applicable local law (such as relevant data privacy and national security laws and regulations). The Company shall provide the Monitor with access to all information, documents, records, facilities, and employees, as reasonably requested by the Monitor, that fall within the scope of the Mandate of the Monitor under the Agreement, subject to applicable local laws, including data privacy and national security laws and regulations. The Company shall use its best efforts to provide the Monitor with access to the Company’s former employees and its third-party vendors, agents, and consultants.
According to a study released by Pohlmann & Company, the main topics that are of interest to independent monitors are the following:
- analysis and remediation of underlying misconduct;
- senior and mid-level management – tone at the top and tone at the middle;
- autonomy and resources of the compliance function;
- implementation of robust policies and procedures;
- conducting risk assessments to identify risks;
- conducting training and constant communications;
- robust system for reporting and conducting internal investigations;
- well-established system to discipline offenders;
- conducting periodic testing and continuous improvement of the compliance programme;
- third-party management; and
- transactions in mergers and acquisitions.
Further, improvements in a company’s culture and practices and the full support of its key executives are central to achieving sustainable change in how it conducts its business. Independent monitors are keen to attest that senior management will support and abide by the new culture and procedures and that employees understand the importance of ethical conduct. To assess this, independent monitors usually hold a series of interviews with board members, officers and employees to understand their perspectives and experiences, and their commitment to and trust in the company’s culture, compliance and internal controls.
The information collected by the monitorship team is summarised in periodic reports (usually annually) that are submitted to the authorities. The reports not only assess the company’s current position, according to the assessment described in the workplan, but also provide recommendations for how to improve potential deficiencies that may have been identified during the year. These recommendations may be shared with the monitored company in advance and need to be implemented within an agreed period. The recommendations are included within the scope of the review of the monitorship team and should be tested and approved continually by the monitor until the end of the monitorship term.
How is monitorship perceived by Latin American courts and agencies?
External monitorships in Latin America are still not very common. In recent years, with the surge of anti-corruption enforcement in Brazil, local authorities have imposed monitors on certain companies as part of their settlement terms. There are at least four public cases in which Brazilian enforcement agencies, as part of settlement terms with local companies, have imposed local monitors: Odebrecht SA, Braskem SA, RodoNorte – Concessionária de Rodovias Integradas SA and Ecorodovias Infraestrutura e Logística S/A.
In addition, there are at least two other public cases in which US authorities have imposed external monitorships on companies in Latin America, both headquartered in Chile: Latam SA and Sociedad Quimica y Minera de Chile SA.
Latin America is a high-risk market, with a surge in enforcement actions, especially in Brazil. As multi-jurisdictional cooperation continues to expand, local enforcement agencies are likely to implement additional controls, including external monitorships, as part of future settlement resolutions.
Emergence of external monitorship in Brazil
External monitorships have become more common in Brazil in the past few years, with a sharp increase in relevant investigations led by Brazilian authorities. The reporting of monitors to Brazilian authorities is an independent process, even in cases in which there is also a monitor appointed by the US authorities. Nevertheless, certain practices adopted by Brazilian authorities are similar to those in the United States, as Brazilian enforcement agencies have not yet published regulations or guidelines regarding monitorships (e.g., when they are required, how to appoint monitors, duration and the powers granted).
However, unlike the United States, the terms of external monitorships in Brazil may not be publicly released and the details of each case ordinarily remain under seal. Moreover, in certain instances, local authorities, such as the Office of the Federal Comptroller General (CGU), may conduct a different type of monitorship.
In some recent cases, the CGU has not appointed an external monitor and instead has conducted the monitorship itself. To date, the CGU has disclosed information about 11 leniency agreements entered into with national and foreign companies between July 2017 and November 2019. Of those, nine agreements were released in full to the public, eight of which set forth that the CGU would conduct periodic assessments on companies’ internal controls and compliance programmes.
According to a public statement by Pedro Ruske Freitas, the CGU’s Director for the Promotion of Integrity: ‘The CGU understands that the monitorship of corporate compliance programmes of companies that settled with the agency represents a state activity that needs to be conducted by the public administration itself.’ He added: ‘So far, the need for external monitors is not apparent.’
On the other hand, Brazil’s Federal Prosecutor’s Office (MPF) has appointed external monitors to oversee companies’ operations in at least four public cases:
- Odebrecht SA: leniency agreement in December 2016;
- Braskem SA: leniency agreement in December 2016;
- RodoNorte – Concessionária de Rodovias Integradas SA: leniency agreement in March 2019; and
- Ecorodovias Infraestrutura e Logística S/A: leniency agreement in September 2019.
Odebrecht and Braskem also had monitors appointed, with reporting to US authorities, as a result of violations of the FCPA, whereas RodoNorte and Ecorodovias were prosecuted only in Brazil and, as part of their settlement terms with the MPF, had external monitors imposed as a result of having violated Brazilian laws.
Other Brazilian companies, such as Embraer SA and Petróleo Brasileiro SA (Petrobras) settled with both US and Brazilian authorities but, unlike Odebrecht and Braskem, did not have monitors from both countries. Embraer was appointed a US external monitor, with reporting to US authorities, and Petrobras did not.
Regarding Embraer, in particular, the company entered into an agreement with the MPF and with Brazil’s Securities and Exchange Commission (CVM), in which an external monitorship was not imposed but, rather, it was agreed that reports and information produced to foreign authorities under the terms of an external monitorship would also be shared with the MPF and the CVM.
As previously mentioned, the terms of the Brazilian monitorship of Odebrecht, Braskem, RodoNorte and Ecorodovias are sealed and not yet released to the public. However, there are similarities that can be noted between the US and Brazil situations.
The Brazilian monitors that were appointed by the MPF are well-regarded lawyers with experience in corporate governance and anti-corruption matters. Otavio Yazbek, the external monitor of Odebrecht, mentioned that the process used by the MPF to appoint a monitor in Brazil is similar to the US process, with companies required to provide the authorities with a list of candidates and the authorities then selecting the one they deem to be the more suitable candidate for the role.
Also, although external monitors report directly to the authority that appointed them (e.g., the MPF), monitored companies should bear the costs associated with the monitorship, including all costs incurred by the monitor and the monitorship team.
Monitorships in Brazil also usually have the same duration as US monitorships, with mandates that may last from one to three years with the possibility of an extension.
Brazilian monitors also prepare and present a workplan to local authorities and issue periodic reports (normally annually) describing the scope of their review, areas of improvement, difficulties that a company or a monitor may be facing, proposed next steps and recommendations to be implemented within an agreed period to strengthen a company’s systems and controls.
The future of external monitorships in Brazil is still unclear. On the one hand, there has been an increase in the number of external monitors imposed by the MPF. On the other, recent agreements entered into by the CGU and several companies between 2017 and 2019 provide that the CGU will be entitled to monitor the compliance programmes implemented by the Brazilian companies and their operations. The results of current monitorships in Brazil may define whether this is a valid resource for authorities or if authorities should implement other measures to monitor and assess the future activities of sanctioned companies.
What is the impact on companies and how should they adapt?
Companies usually consider having an external monitor to be a difficult and undesirable experience. Besides dealing with enforcement actions, deep scrutiny by the media and authorities, financial constraints resulting from monetary sanctions and other consequences of being sanctioned, an independent monitor scrutinises a company’s operations, verifies the effectiveness of its compliance programme and controls, and recommends related enhancements, all of which require time and resources.
The costs of a monitor can be significant, though are not usually made public. In the case of Zimmer Holdings, public information indicates that the fees varied between US$28 million and US$52 million. In this context, litigator Robert Anello noted: ‘These highly qualified monitors, who often bring their own consultants and advisors to a company, frequently come with an equally high price tag that can affect the bottom line. Monitorships often cost more than $30 million and, in one case, a company reportedly spent more than $130 million in monitor-related costs.’
The Benczkowski Memorandum clarifies that external monitorships should not be applied in all, or even most cases, but to specific cases in which all conditions are met and an independent monitor is indeed necessary:
In weighing the benefit of a contemplated monitorship against the potential costs, Criminal Division attorneys should consider not only the projected monetary costs to the business organization, but also whether the proposed scope of a monitor’s role is appropriately tailored to avoid unnecessary burdens to the business’s operations.
In general, the Criminal Division should favor the imposition of a monitor only where there is a demonstrated need for, and clear benefit to be derived from, a monitorship relative to the projected costs and burdens. Where a corporation’s compliance program and controls are demonstrated to be effective and appropriately resourced at the time of resolution, a monitor will likely not be necessary.
To manage these heavy costs, it is important for companies and their monitors to implement practices that could minimise the financial effects of the monitorship, without diminishing the effectiveness of the monitorship process.
A transparent and open line of communication between the company’s senior management and the monitorship team is the best way of aligning expectations, from time to time, regarding the monitorship’s strategy and its duration, costs and other practical concerns.
During an external monitorship, it is extremely important that a company remains open and transparent with its employees about the ongoing procedures. Employees will have to understand – and companies need to reinforce - that the independent monitor should be an ally and not an enemy of the company, and working with the monitor certainly will result in a much more positive outcome for the company and all its stakeholders. This is also a task for the independent monitor: to provide confidence instead of fear and to work with a company and its employees, which also helps to re-establish a company’s reputation in the marketplace.
For the monitorship to be successful, there must also be an open and transparent line of communication regarding misconduct in the past. Although there may be facts identified in the course of negotiations with authorities that may not have been made public, or disclosed to the market or that remain under seal, monitors need to fully understand the improper conduct from the past to implement an effective plan for their mandates.
External monitorships can be an asset rather than a burden for companies. For example, the fact that a company passes through such an extensive and thorough assessment should convey to stakeholders a lesser likelihood of misconduct taking place during the monitorship and afterwards (if changes are sustainable), compared to companies not undergoing such a process. Internal controls and compliance procedures are usually enhanced by the recommendations of monitors, which also helps a company to rebuild trust in the marketplace.
Generally, companies that successfully complete a monitorship process are deemed to have a more robust compliance programme in place, given the scrutiny during the monitorship. Siemens, the German-based corporation that, in 2008, agreed to pay approximately US$1.6 billion to US and German authorities for violations under the FCPA due to a worldwide bribery scheme, agreed to an external monitorship for four years. The result is recognised as follows:
Siemens was the archetype for the modern corrupt enterprise. Its growth strategy relied on a willingness to bribe government officials wherever it wanted to do business. And yet, after Siemens narrowly escaped the corporate death sentence in late 2008 and embarked on an epic corporate clean up, it became a world leader in compliance.
Also, the fact that a respected and well-regarded compliance monitor attests at the end of the monitorship period about the effectiveness of the company’s compliance programme should be considered by various stakeholders as a positive outcome.
There are certainly challenges for companies facing a monitorship process, such as the costs, the potential negative effects on the company’s image and low employee morale. However, those challenges can be attenuated by the position that the company adopts towards the monitor. In this context, Olga Pontes, Chief Compliance Officer at Odebrecht, noted:
We embraced the monitorship as an oxygen to survive. The monitors that are at the company did that with several companies around the world and have experience of what worked and what didn’t work. Why would we ignore this knowledge? Why would we ignore this guidance? 
External monitors should have a positive effect on a company’s culture, controls, compliance programme and overall business strategy, and should help the company in repositioning itself towards more positive results and a more favourable perception by stakeholders.
Facing an external monitorship is far from easy and may pose great challenges, but once companies are willing to make a change and embrace the benefits arising from a monitorship, they become stronger and better prepared to compete in competitive marketplaces.
 Erica Sellin Sarubbi is a partner and Tomás Fezas Vital Mesquita is a senior associate at Maeda, Ayres & Sarubbi Advogados.
 The Criminal Division of the US Department of Justice [US DOJ] and the Enforcement Division of the US Securities and Exchange Commission [SEC], ‘A Resource Guide to the U.S. Foreign Corrupt Practices Act’ (2012), at 71.
 Frank, Jonny J; Wilson, Brad, ‘SEC-Imposed Monitors’, SEC Compliance and Enforcement Answer Book (2017), 9-2 and ‘A Resource Guide to the U.S. Foreign Corrupt Practices Act’ (footnote 2, above), at 71.
 Gibson Dunn & Crutcher LLP, 2018 Year-End Update on Corporate Non-Prosecution Agreements and Deferred Prosecution Agreements (2019).
 As an example, on 27 September 2010, The Coca-Cola Company entered into a consent agreement in which it accepted the appointment of Theodore Banks as an independent monitor reporting to the Canadian Competition Bureau for five years. See also IAICM Repository of Agreements (footnote 4, above).
 As an example, on 17 January 2017, Rolls Royce Plc entered into a deferred prosecution agreement, in which it accepted the appointment of Lord David Gold as an independent monitor reporting to the UK Serious Fraud Office for five years. See also IAICM Repository of Agreements (footnote 4, above).
 As an example, on 1 December 2016, Odebrecht SA entered into a leniency agreement in which it accepted the appointment of Otavio Yazbek as an independent monitor reporting to Brazil’s Federal Prosecutors’ Office for two years. See also IAICM Repository of Agreements (footnote 4, above).
 Morford, Craig S (US DOJ’s former Acting Deputy Attorney General), ‘Selection and Use of Monitors in Deferred Prosecution Agreements and Non-Prosecution Agreements with Corporations’ (2008), at 2.
 Benczkowski, Brian A (US DOJ Assistant Attorney General), ‘Selection of Monitors in Criminal Division Matters’ (2018) [The Benczkowski Memorandum], at 2.
 Sun, Mengqi, ‘Brazil’s Odebrecht Agrees to Extend Monitorship for Another Nine Months’, The Wall Street Journal (February 2020) < https://www.wsj.com/articles/brazils-odebrecht-agrees-to-extend-monitorship-for-another-nine-months-11580859505>.
 United States of America v. Embraer S.A., Deferred Prosecution Agreement (2016), at D-1.
 The Benczkowski Memorandum (footnote 10, above), at 4 to 5.
 United States of America v. Telefonaktiebolaget LM Ericsson, Deferred Prosecution Agreement (2019), at D-2.
 Willms, Nicole; Blettgen, Clemens, ‘How to Prepare for a Monitorship’ (2018), International Compliance Update, Pohlmann & Company < https://www.pohlmann-company.com/wp-content/uploads/Publikationen/PC_ICU_Sonderdruck_Monitor_EN_screen.pdf>.
 United States of America v. Latam S.A., Deferred Prosecution Agreement (2016).
 United States of America v. Sociedad Quimica y Minera de Chile S.A., Deferred Prosecution Agreement (2017).
 Within US deferred prosecution agreements, non-prosecution agreements and plea agreements, the terms of monitorships are commonly released under Attachment D.
 UTC Participações SA (July 2017), Bilfinger (August 2017), MullenLowe (April 2018), Odebrecht SA (July 2018), Andrade Gutierrez (December 2018), Braskem SA (May 2019), Technip Brasil (June 2019) and Camargo Côrrea (July 2019).
 Legal Ethics and Compliance, ‘Challenges of Compliance Officers in Companies with Independent Monitorships’ (2019) (in Portuguese) < https://lec.com.br/blog/os-desafios-do-compliance-officer-nas-empresas-de-monitoramento-independente/>.
 United States of America v. Embraer S.A., Deferred Prosecution Agreement (2016).
 United States of America v. Petróleo Brasileiro S.A. - Petrobras, Non-Prosecution Agreement (2018).
 Termo de Compromisso e de Ajustamento de Conduta, Clause 2, Item 3.
 Melo, Luísa, ‘The work is to prevent compliance from being “just on paper”, says Odebrecht monitor’ G1.globo.com (2017) < https://g1.globo.com/economia/negocios/noticia/trabalho-e-evitar-que-compliance-fique-so-no-papel-diz-monitor-da-odebrecht.ghtml> (in Portuguese).
 Walsh, Amy, ‘Is the Opaque World of Corporate Monitorships Becoming More Transparent?’, Bus. Law Today (2015) < https://www.americanbar.org/groups/business_law/publications/blt/2015/12/08_walsh/>.
 Anello, Robert (partner at Morvillo Abramowitz Grand Iason & Anello PC), ‘Rethinking Corporate Monitors: DOJ Tells Business to Mind Their Own Business’ (2018) < https://www.forbes.com/sites/insider/2018/10/15/rethinking-corporate-monitors-doj-tells-companies-to-mind-their-own-business/#6654c8215b41>.
 The Benczkowski Memorandum (footnote 10, above), at 2.
 United States of America v. Siemens Aktiengesellschaft, Plea Agreement (2008).
 id., at 10.
 Cassin, Richard L, ‘Giant corporations are good for compliance’ (FCPA Blog, 2019).
 ‘Challenges of Compliance Officers within Companies with Independent Monitorships’ (footnote 21, above).