External Compliance Monitorships

What is an external monitorship?

In Latin America, and particularly in Brazil, external compliance monitorships have become more common in recent years. This could be seen as a result of a surge of corruption-related enforcement in the last decade and a more aggressive approach by authorities against companies that violate domestic and foreign anti-corruption legislation.

An external compliance monitorship is one of many penalties and controls that authorities can impose to ensure that companies not only pay significant monetary fines but, most importantly, adopt effective compliance programmes and commit to lasting cultural changes in the way they conduct business.

Although external compliance monitorships result from enforcement actions, corporations that have undergone such a monitorship ultimately may be perceived as better organised and more prepared to face a competitive business environment. This is because external monitors periodically assess and supervise potential deficiencies, gaps and failures in companies’ internal controls, compliance programmes and other related processes, enabling potential deficiencies to be addressed and procedures to be enhanced in a sustainable way.

General concept

According to the Resource Guide to the US Foreign Corrupt Practices Act (FCPA), the following factors are considered by US authorities when determining the need for an external monitorship:

• nature and seriousness of the offence;
• duration of the misconduct;
• pervasiveness of the misconduct, including whether the conduct cuts across geographic or product lines;
• the risk profile of the company, including its nature, size, geographical reach and business model;
• quality of the company’s compliance programme at the time of the misconduct;
• subsequent remediation efforts and quality of the company’s compliance programme at the time of resolution; and
• whether the company’s current compliance programme has been fully implemented and tested.^[2]

To ensure that companies will not face the same challenges and perhaps commit further violations, authorities may appoint, in certain circumstances, an independent compliance monitor to oversee operations during an agreed period of time. An appointed compliance monitor should conduct a thorough assessment of a company’s internal policies and procedures to identify potential gaps, mitigate risks, strengthen controls, and propose changes to the former business culture of the legal entity and of its executives and employees. The US Securities and Exchange Commission defines an independent monitor as ‘an independent third party who assesses and monitors a company’s adherence to the compliance requirements of an agreement that was designed to reduce the risk of recurrence of the company’s misconduct’.^[3]

To be able to fulfil the mandate, an independent compliance monitor should be provided with full access to the relevant operations of the company and may request to participate in meetings, visit offices, talk to personnel, review books and records, business information and internal documents, and assess the overall structure of the company. To engage in these types of activities, the monitor selects a group (the monitorship team) to assist with the implementation of those activities. The monitorship team may also comprise external advisers, such as forensic consultants and financial experts.

As discussed in this chapter, Brazilian authorities have not enacted, to date, legislation, official directives or guidelines to address the concept, obligations or goals involving an external compliance monitorship. Therefore, usually in Brazil, regulators and companies mirror the monitorship rules established by US regulators, adapting them to local requirements.

Brief history

In the 1990s, it became more common for independent monitors to be appointed by authorities, in particular in the United States, as a reporting mechanism when new violations occurred. During the 2000s, the number of corporate monitorships increased exponentially, and their role expanded to assess companies’ internal policies and controls as well as to provide recommendations for how to strengthen companies’ compliance programmes.

The chart below provides the number of public enforcement actions undertaken by US authorities since 2000 in which the US authorities imposed corporate monitorships or self-reporting obligations as a result of violations of different US laws, including, but not limited to, the FCPA.^[4]

As a consequence of the growing cooperation between authorities around the world, other agencies in different countries, such as Canada^[5] and the United Kingdom,^[6] also included the imposition of a monitor as part of settlement resolutions.

In Brazil, the first external compliance monitorship appointed by Brazilian authorities occurred on 1 December 2016. On this date, Odebrecht SA entered into a leniency agreement in which it accepted the appointment of Otavio Yazbek as an independent monitor reporting to Brazil’s Federal Prosecutors’ Office for an initial period of two years. ^[7]

The monitorship process

On 7 March 2008, the then Acting Deputy Attorney General at the US Department of Justice (US DOJ), Craig S Morford, issued a memorandum on external monitorships – commonly known as the Morford Memorandum – containing certain parameters for the imposition of external monitorships, which included ‘(1) the potential benefits that employing a monitor may have for the corporation and the public, and (2) the cost of a monitor and its impact on the operations of a corporation’.^[8]

The Morford Memorandum was updated on 11 October 2018 by a new document issued by the US DOJ – the Memorandum on Selection of Monitors in Criminal Division Matters^[9] (the Benczkowski Memorandum). This new guidance provided updated standards for selecting independent monitors and clarified when a monitorship would be required.

In 2020 – and as a possible consequence of the Benczkowski Memorandum – US authorities did not impose any external compliance monitorship in connection with FCPA allegations.^[10] In October 2021, DOJ issued a new memorandum – Memorandum on Corporate Crime Advisory Group and Initial Revisions to Corporate Criminal Enforcement Policies (commonly known as the Monaco Memorandum) – updating various corporate enforcement policies, including with respect to monitors.^[11]

Regarding the implementation of external compliance monitorships, the Monaco Memorandum provided the following criteria to be considered:

The Department is committed to imposing monitors where appropriate in corporate criminal matters. Department attorneys should analyze and carefully assess the need for the imposition of a monitor on a case-by-case basis. As explained in prior guidance, two broad considerations should guide prosecutors when assessing the need for and propriety of a monitor: (1) the potential benefits that employing a monitor may have for the corporation and the public, and (2) the cost of a monitor and its impact on the operations of a corporation.
In general, the Department should favor the imposition of a monitor where there is a demonstrated need for, and clear benefit to be derived from, a monitorship. Where a corporation’s compliance program and controls are untested, ineffective, inadequately resourced, or not fully implemented at the time of a resolution, Department attorneys should consider imposing a monitorship. This is particularly true if the investigation reveals that a compliance program is deficient or inadequate in numerous or significant respects. Conversely, where a corporation’ s compliance program and controls are demonstrated to be tested, effective, adequately resourced, and fully implemented at the time of a resolution, a monitor may not be necessary.^[12]

Put simply, the Monaco Memorandum reverses previous guidance issued during President Trump’s administration, making it clear that the use of independent monitors should not be the exception if compliance programmes and internal controls of a company are proved to be inefficient.

If the criteria above are met and authorities understand that it is appropriate to appoint an independent compliance monitor, the agreement between companies and authorities (e.g., deferred prosecution agreements, non-prosecution agreements or plea agreements) would establish the provisions for the external monitorship, such as its duration, scope, roles and responsibilities, and expected deliverables.

The duration of a monitorship is usually between two and four years, but it can be extended for an additional period of one year, at the request of the independent compliance monitor and with the approval of the enforcement agency. The reasons for requesting an extension of a monitorship should be clearly evidenced and duly substantiated by the monitor and accepted by the appropriate authorities. As an example, public news indicate that Odebrecht SA had agreed to extend its monitorship term for an additional nine months as a result of the judicial recovery filing of the company.^[13],^[14]

The scope of an external compliance monitorship is described in the resolution with the responsible authorities and should encompass relevant aspects of the case that led to the settlement terms. For example, in United States of America v. Embraer SA, the deferred prosecution agreement stated the following:

The Monitor’s primary responsibility is to assess and monitor the Company’s compliance with the terms of the Agreement, including the Corporate Compliance Program in Attachment C, so as to specifically address and reduce the risk of any recurrence of the Company’s misconduct. During the Term of the Monitorship, the Monitor will evaluate, in the manner set forth below, the effectiveness of the internal accounting controls, record-keeping, and financial reporting policies and procedures of the Company as they relate to the Company’s current and ongoing compliance with the FCPA and other applicable anti-corruption laws (collectively, the ‘anti-corruption laws’) and take such reasonable steps as, in his or her view, may be necessary to fulfil the foregoing mandate (the Mandate). This Mandate shall include an assessment of the Board of Directors’ and senior management’s commitment to, and effective implementation of, the corporate compliance program described in Attachment C of the Agreement.^[15]

One of the goals of an independent compliance monitor is to ensure that violations from the past do not recur and that appropriate controls are in place. For that purpose, external compliance monitorships are forward-looking and aim to ensure that mistakes from the past are properly remediated and mitigated.

In the United States, an independent compliance monitor is typically appointed by authorities after a proposal is made by the company negotiating a resolution. The company submits a written proposal identifying several monitor candidates as well as their résumés and qualifications. Following an interview process, authorities then select a candidate, based on the individual’s qualifications, credentials, and suitability for the assignment.^[16] Authorities may request that additional names are proposed by the company in case they do not accept the names initially proposed. In Brazil, although there is no legislation or written guidelines on the monitorship process (as further discussed below), Brazilian authorities have adopted a similar process to assess and appoint independent monitors.

After a monitor is selected, he or she should assemble a monitorship team to advise and assist during the monitorship period, considering the scope of the monitor’s mandate and responsibilities.

The independent monitor and the monitorship team will prepare a work plan to guide their work throughout the year, outlining clear specifications and goals they intend to achieve. The plan may describe the activities and tests they intend to perform, documents they intend to review, as well as the sites they intend to visit and interviews to be conducted. The work plan is submitted and has to be approved by authorities.

A company should provide the monitorship team with information as required, ensure that executives and employees are available for interviews, facilitate site visits and make documents available for testing:

The Company shall cooperate fully with the Monitor, and the Monitor shall have the authority to take such reasonable steps as, in his or her view, may be necessary to be fully informed about the Company’s compliance program in accordance with the principles set forth herein and applicable law, including applicable data privacy and national security laws and regulations. To that end, the Company shall: facilitate the Monitor’s access to the Company’s documents and resources; not limit such access, except as provided in Paragraphs 5-6; and provide guidance on applicable local law (such as relevant data privacy and national security laws and regulations). The Company shall provide the Monitor with access to all information, documents, records, facilities, and employees, as reasonably requested by the Monitor, that fall within the scope of the Mandate of the Monitor under the Agreement, subject to applicable local laws, including data privacy and national security laws and regulations. The Company shall use its best efforts to provide the Monitor with access to the Company’s former employees and its third-party vendors, agents, and consultants.^[17]

According to a study released by Pohlmann & Company, the main topics that are of interest to independent monitors are the following:

• analysis and remediation of underlying misconduct;
• senior and mid-level management – tone at the top and tone at the middle;
• autonomy and resources of the compliance function;
• implementation of robust policies and procedures;
• conducting risk assessments to identify risks;
• conducting training and constant communications;
• robust system for reporting and conducting internal investigations;
• well-established system to discipline offenders;
• conducting periodic testing and continuous improvement of the compliance programme;
• third-party management; and
• transactions in mergers and acquisitions.^[18]

Further, improvements in a company’s culture and practices and the full support of its key executives are central to achieving sustainable change in how it conducts its business. Independent compliance monitors are keen to attest that senior management will support and abide by the new culture and procedures and that employees understand the importance of ethical conduct. To assess such factors, independent monitors usually hold a series of interviews with board members, officers and employees to understand their perspectives and experiences, and their commitment to and trust in the company’s culture, compliance and internal controls.

The information collected by the monitorship team is summarised in periodic reports (usually annual) that are submitted to the authorities. The reports not only assess the company’s current practices, according to the work plan, but also provide recommendations for how to improve potential deficiencies that may have been identified during the year. These recommendations may be shared with the monitored company in advance and need to be implemented within an agreed period of time. The recommendations are included within the scope of the review of the monitorship team and should be tested and approved continually by the monitor until the end of the monitorship term.

The perception of monitorships by Latin American courts and agencies

External monitorships in Latin America are still not very common. In recent years, with the surge of anti-corruption enforcement in Brazil, local authorities have imposed monitors on certain companies as part of their settlement terms. There are at least two public cases in which US authorities have imposed external monitorships on companies from Latin America, both headquartered in Chile: Latam SA^[19] and Sociedad Quimica y Minera de Chile SA.^[20]

Latin America is a high-risk market, with a surge in enforcement actions, especially in Brazil. As multi-jurisdictional cooperation continues to expand, local enforcement agencies are likely to implement additional controls, including external monitorships, as part of future settlement resolutions.

External monitorships in Brazil

External monitorships have become more common in Brazil in the past few years, with a sharp increase in relevant investigations led by Brazilian authorities. The reporting of monitors to Brazilian authorities is an independent process, even in cases in which there is also a monitor appointed by US or other foreign authorities.

As mentioned above, Brazilian authorities have not enacted or published specific legislation or guidelines to enforce or even discuss the appointment of external compliance monitors as a result of enforcement actions.

Nevertheless, certain practices adopted by Brazilian authorities are very similar to those in the United States (e.g., how to appoint monitors, and duration and expected scope of the monitorship), as Brazilian and US agencies have been working closely for the last decade on corruption investigations that often touch both jurisdictions.

However, unlike the United States, the terms of external monitorships in Brazil may not be publicly released^[21] and the details of each case ordinarily remain under seal. Moreover, in certain instances, local authorities, such as the Office of the Federal Comptroller General (CGU), may conduct a different type of monitorship.

In some recent cases, the CGU has not appointed an external monitor and, instead, has conducted the monitorship itself. To date, the CGU has disclosed information about 17 leniency agreements entered into with national and foreign companies between July 2017 and December 2021.^[22] Of those, 13 agreements were released in full to the public, 11^[23] of which set forth that the CGU would conduct periodic assessments of companies’ internal controls and compliance programmes.

According to a public statement by Pedro Ruske Freitas, CGU’s Director for the Promotion of Integrity: ‘The CGU understands that the monitorship of corporate compliance programmes of companies that settled with the agency represents a state activity that needs to be conducted by the public administration itself.’ He added: ‘So far, the need for external monitors is not apparent.’^[24]

On the other hand, Brazil’s Federal Prosecutor’s Office (MPF) has appointed external monitors to oversee companies’ operations in at least seven public cases:

• Odebrecht SA: leniency agreement in December 2016;^[25]
• Braskem SA: leniency agreement in December 2016;^[26]
• J&F Investimentos SA: leniency agreement in June 2017;^[27]
• RodoNorte – Concessionária de Rodovias Integradas SA: leniency agreement in March 2019;^[28]
• Ecorodovias Infraestrutura e Logística S/A: leniency agreement in September 2019;^[29]
• J. Malucelli Group (Companhia Paranaense de Construção SA, MLR Locações de Máquinas SA and Televisão Icaraí Ltda): leniency agreement in August 2020;^[30] and
• Philips Medical Systems Ltda: leniency agreement in November 2020.^[31]

Odebrecht and Braskem also had foreign monitors appointed – with reporting obligations to US authorities – as a result of violations of the FCPA, whereas RodoNorte, Ecorodovias, J. Malucelli Group and Philips only had external monitorships imposed by the MPF, as a result of violation of Brazilian laws. J&F also entered into a plea agreement in October 2020 and agreed to self-report annually to the US DOJ for a period of three years.^[32] DOJ’s decision towards an annual self-report was explained within the Plea Agreement as follows:

the fact that the Brazilian Leniency Agreement requires the implementation of an independent commission responsible for monitoring and reporting on internal investigations and compliance audits conducted at the Defendant with ongoing reporting requirements to the Brazilian authorities, and the Defendant’s agreement to report to the Fraud Section and the Office as set forth in Attachment D to this Agreement (Reporting Requirements), the Fraud Section and the Office determined that an independent compliance monitor is unnecessary.^[33]

Other Brazilian companies, such as Embraer SA^[34] and Petróleo Brasileiro SA (Petrobras),^[35] settled with both US and Brazilian authorities. Embraer had a US external monitor reporting to US authorities, and Petrobras did not have a monitor appointed as part of its corporate resolution.

Embraer, in particular, entered into an agreement with the MPF and with Brazil’s Securities and Exchange Commission (CVM), in which an external monitorship was not imposed but, rather, it was agreed that reports and information produced to foreign authorities under the terms of an external monitorship would also be shared with the MPF and the CVM.^[36]

As previously mentioned, the terms of the Brazilian corporate monitorships of Odebrecht, Braskem, RodoNorte, Ecorodovias, J&F Investimentos, J. Malucelli Group and Philips are sealed and have not been released to the public yet. However, there are similarities that can be noted between the US and Brazilian monitorships.

The Brazilian monitors that were appointed by the MPF are well-regarded lawyers with experience in corporate governance and anti-corruption matters. Otavio Yazbek, the external monitor of Odebrecht, mentioned^[37] that the process used by the MPF to appoint a monitor in Brazil is similar to the US process, with companies required to provide to the authorities a list of candidates and the authorities then selecting the candidate they deem to be the more suitable for the role.

Also, although external compliance monitors report directly to the authority that appointed them (e.g., the MPF), monitored companies should bear the costs associated with the monitorship, including all costs incurred by the monitor and the monitorship team (e.g., legal and expert fees, travel, hotels).

Monitorships in Brazil also usually have the same duration as US monitorships, with mandates that may last from one to three years with the possibility of an extension.

Brazilian monitors usually also prepare and present a work plan to local authorities and issue periodic reports (normally annually) describing the scope of their review, areas of improvement, difficulties that a company or a monitor may be facing, proposed next steps and recommendations to be implemented within an agreed period of time to strengthen a company’s systems, processes and controls.

The future of external monitorships in Brazil is developing, though it is still unclear how enforcement authorities will determine the cases in which an external compliance monitorship should be appointed and the requirements of its mandate.

There has been an increase in the number of external monitors imposed by the MPF. However, recent agreements entered into by the CGU and several companies between 2017 and 2021 provide that the CGU itself will be entitled to monitor the compliance programmes implemented by national or foreign companies operating in Brazil.

The results of current monitorships in Brazil may define whether this is a valid resource for authorities or if authorities will adopt other measures to monitor and assess the future activities of sanctioned companies.

What is the impact on companies and how should they adapt?

Companies usually consider having an external monitor to be a difficult and undesirable experience. Besides dealing with enforcement actions, deep scrutiny by the media and authorities, financial constraints resulting from monetary sanctions and other consequences of being sanctioned, an independent monitor scrutinises a company’s operations, verifies the effectiveness of its compliance programme and controls, and recommends related enhancements, all of which require time and resources.

The costs of a monitor are often significant, though are not usually made public. In the case of Zimmer Holdings, public information indicates that the fees varied between US$28 million and US$52 million.^[38] In this context, litigator Robert Anello noted:

These highly qualified monitors, who often bring their own consultants and advisors to a company, frequently come with an equally high price tag that can affect the bottom line. Monitorships often cost more than $30 million and, in one case, a company reportedly spent more than $130 million in monitor-related costs.^[39]

To manage these potentially heavy costs, it is important for companies and their monitors to implement practices that could minimise the financial effects of the monitorship, without diminishing the effectiveness of the monitorship process.

A transparent and open line of communication between the company’s senior management and the monitorship team is the best way to periodically align expectations regarding the monitorship’s strategy and its duration, costs and other practical concerns.

During an external monitorship, it is extremely important that the company remains open and transparent with its employees about the ongoing process. Employees will have to understand – and companies will need to reinforce – that the independent monitor should be an ally and not an enemy of the company and that working with the monitor will certainly result in a much more positive outcome for the company and all its stakeholders. This is also a task for the independent monitor: to provide confidence instead of fear and to work with the company and its employees, which also helps to re-establish the company’s reputation in the marketplace.

For the monitorship to succeed, there must also be an open and transparent line of communication regarding misconduct in the past. Although there may be facts identified in the course of negotiations with authorities that may not have been made public or disclosed to the market, or that remain under seal, monitors need to fully understand the improper conduct from the past to implement an effective plan for their mandates.

External monitorships can be an asset rather than a burden for companies. For example, the fact that a company undergoes such an extensive and thorough assessment should convey to stakeholders a lesser likelihood of misconduct taking place during the monitorship and afterwards (if changes are sustainable), compared to companies that do not undergo such a process. Internal controls and compliance procedures are usually enhanced by the recommendations of monitors, which may also help the company to rebuild trust in the marketplace.

Generally, companies that successfully complete a monitorship process are deemed to have a more robust compliance programme in place, given the scrutiny during the monitorship. Siemens, the German-based corporation that, in 2008, agreed to pay approximately US$1.6 billion to US and German authorities for violations under the FCPA^[40] due to a worldwide bribery scheme, agreed to an external monitorship for four years.^[41] The result is recognised as follows:

Siemens was the archetype for the modern corrupt enterprise. Its growth strategy relied on a willingness to bribe government officials wherever it wanted to do business. And yet, after Siemens narrowly escaped the corporate death sentence in late 2008 and embarked on an epic corporate clean up, it became a world leader in compliance.^[42]

Also, the fact that a respected and well-regarded compliance monitor attests, at the end of the monitorship period, to the effectiveness of the company’s compliance programme should be considered by various stakeholders as a positive outcome.

There are certainly challenges for companies facing a monitorship process, such as the costs, the potential negative effects on the company’s image and low employee morale. However, those challenges can be attenuated by the position that the company adopts towards the monitor. In this context, Olga Pontes, chief compliance officer at Odebrecht during the time of its external compliance monitorship, noted:

We embraced the monitorship as an oxygen to survive. The monitors that are at the company did that with several companies around the world and have experience of what worked and what didn’t work. Why would we ignore this knowledge? Why would we ignore this guidance?^[43]

External monitors should have a positive effect on a company’s culture, controls, compliance programme and overall business strategy, and should help the company in repositioning itself towards more positive results and a more favourable perception by stakeholders.

Facing an external monitorship is far from easy and may pose great challenges, but once companies are willing to make a change and embrace the benefits arising from a monitorship, they become stronger and better prepared to succeed in competitive marketplaces.

Footnotes