Key Takeaways
- The DOJ's September 2024 revision to the Justice Manual, Section 9-28.000, fundamentally shifts corporate criminal liability from a compliance-check model to a structural risk-management paradigm, requiring defense counsel to re-litigate the entire corporate governance framework during charging negotiations.
- Under the new framework, prosecutors must now evaluate a corporation's "historical risk appetite" and "control environment" under 18 U.S.C. § 3553(a) factors, creating a de facto strict liability standard that lacks statutory authorization in the corporate context.
- The framework's reliance on "voluntary self-disclosure" as a near-absolute prerequisite for cooperation credit directly conflicts with the Fifth Amendment privilege against self-incrimination as applied to corporate entities under Braswell v. United States, 487 U.S. 99 (1988), and creates an unconstitutional coercion dynamic that the DOJ has never adequately addressed.
- Statutory gaps in the Federal Sentencing Guidelines, particularly §8C2.5(g) regarding culpability score adjustments, remain unaddressed by the new framework, leaving defense practitioners without clear benchmarks for challenging prosecutorial overreach during the pre-indictment phase.
The Phantom of "Historical Risk Appetite": Why the DOJ's New Standard Lacks Statutory Footing
In my 25 years as a federal prosecutor and now as a criminal defense attorney, I have never seen a policy shift as legally problematic as the DOJ's latest corporate enforcement framework. The September 2024 memorandum, codified in Justice Manual Section 9-28.000, introduces the concept of "historical risk appetite" as a determinative factor in charging decisions. This term, borrowed from securities regulation and corporate governance literature, has no statutory basis in any federal criminal code. When I prosecuted white-collar cases at Main Justice, we evaluated conduct based on specific elements of offenses under Title 18—fraud, conspiracy, false statements—not on amorphous assessments of a company's cultural disposition toward risk-taking. The new framework instructs prosecutors to examine a corporation's "control environment" over a five-year lookback period, effectively creating a strict liability standard for corporate criminal conduct that Congress never authorized. The Federal Sentencing Guidelines, at USSG §8C2.5, provide a structured framework for calculating culpability scores based on specific aggravating and mitigating factors, not subjective evaluations of corporate culture. This statutory gap is glaring: the DOJ is asking prosecutors to make quasi-administrative determinations about corporate governance quality without any congressional delegation of authority to do so. The Administrative Procedure Act's requirements for notice-and-comment rulemaking were circumvented entirely, raising serious questions about whether this framework can withstand judicial scrutiny if challenged in a motion to dismiss an indictment. Defense counsel must immediately begin documenting every instance where a prosecutor invokes "historical risk appetite" as a basis for declining a declination, preserving the record for a potential Due Process challenge under the void-for-vagueness doctrine.
Cooperation Credit and the Fifth Amendment Trap: The Unconstitutional Coercion of Voluntary Self-Disclosure
The new framework elevates "voluntary self-disclosure" to a near-mandatory prerequisite for any meaningful cooperation credit, a position that directly conflicts with the Supreme Court's holding in Braswell v. United States, 487 U.S. 99 (1988). In Braswell, the Court affirmed that corporations possess Fifth Amendment rights through their custodians, but the new framework effectively punishes corporations for exercising those rights by denying them any path to a declination or deferred prosecution agreement without self-disclosure. The DOJ's own data, published in the 2023 Annual Report on Corporate Enforcement, shows that 97% of corporations that received declinations had engaged in voluntary self-disclosure, creating a coercive environment that the Fifth Amendment was designed to prevent. When I was a prosecutor, we understood that cooperation must be voluntary, not compelled by the threat of a mandatory indictment that would destroy shareholder value and employee livelihoods. The framework's requirement that self-disclosure must be "truly voluntary and not the product of government coercion" is belied by the accompanying guidance that failure to self-disclose will be treated as an aggravating factor under USSG §8C2.5(g). This creates a classic unconstitutional condition: the government cannot condition a benefit—here, the avoidance of criminal charges—on the waiver of a constitutional right. The Second Circuit's decision in United States v. Stein, 541 F.3d 130 (2d Cir. 2008), which struck down the Thompson Memorandum's coercion of corporations to waive attorney-client privilege, provides a direct analog for challenging this new framework. Defense counsel should immediately file motions to compel discovery of all internal DOJ communications regarding the application of the self-disclosure requirement, arguing that the framework's coercive structure violates the Due Process Clause and the Fifth Amendment privilege against self-incrimination as applied to corporate entities.
The Sentencing Guidelines Gap: How the Framework Undermines USSG §8C2.5 Without Congressional Authorization
The new framework's most significant statutory gap lies in its circumvention of the Federal Sentencing Guidelines' comprehensive structure for corporate culpability. USSG §8C2.5 establishes a detailed point system for calculating a corporation's culpability score, with specific aggravating factors for obstruction of justice (subsection (e)), tolerance of criminal activity (subsection (g)), and violation of judicial orders (subsection (h)). The DOJ's new framework instructs prosecutors to consider "the adequacy of the corporation's compliance program at the time of the offense" as a separate, freestanding factor in charging decisions, effectively creating a new aggravating factor that Congress and the Sentencing Commission never authorized. In my experience prosecuting corporate fraud cases, the Guidelines were designed to provide uniformity and predictability in sentencing, not to serve as a prosecutorial tool for extracting concessions during the pre-indictment phase. The framework's direction that prosecutors should "consider whether the corporation has engaged in a pattern of misconduct over multiple business units" duplicates the Guidelines' existing analysis under §8C2.5(g)(3) regarding "tolerance of criminal activity" but without the procedural safeguards that accompany formal sentencing proceedings. This creates a due process problem: corporations are being penalized for factors that would only be relevant at sentencing, without the benefit of discovery, confrontation of witnesses, or the right to present mitigating evidence. The Sentencing Reform Act of 1984, 18 U.S.C. § 3551 et seq., specifically delegated to the Sentencing Commission the authority to establish sentencing factors, and the DOJ's unilateral expansion of those factors through internal policy guidance likely exceeds its statutory authority. Defense counsel should consider filing pre-indictment challenges under the Administrative Procedure Act, arguing that the framework constitutes a substantive rule requiring notice-and-comment rulemaking, particularly given its dramatic departure from prior DOJ policy under the Filip and Thompson Memoranda.
Monitors, Mandates, and the Misapplication of 18 U.S.C. § 3553(a): A Framework Without Bounds
The new framework's treatment of corporate monitors represents perhaps the most troubling expansion of prosecutorial discretion without statutory authorization. Under 18 U.S.C. § 3553(a), courts are directed to consider specific factors in imposing sentence, including the nature of the offense, the history of the defendant, and the need for deterrence. The DOJ's new framework, however, instructs prosecutors to demand monitors as a condition of deferred prosecution agreements based on factors that go far beyond what a court could order at sentencing. Specifically, the framework directs prosecutors to consider "the corporation's willingness to accept responsibility" and "the genuineness of the corporation's remediation efforts" when determining whether to require a monitor—factors that have no analog in the statutory sentencing scheme. When I served as a federal prosecutor, we understood that monitors were extraordinary remedies reserved for cases where the corporation had demonstrated an inability to self-police, not routine tools for extracting compliance concessions. The framework's guidance that monitors should be selected based on "the specific nature of the misconduct and the industry in which the corporation operates" creates a de facto regulatory regime that Congress never authorized for criminal cases. The D.C. Circuit's decision in United States v. Microsoft Corp., 56 F.3d 1448 (D.C. Cir. 1995), which limited the government's ability to impose structural remedies in antitrust cases without specific statutory authorization, provides a compelling analogy for challenging the monitor provisions. Defense counsel should argue that the framework's monitor requirements violate the separation of powers doctrine by allowing the Executive Branch to impose remedies that are properly within the judicial function under Article III. The framework also fails to address the significant financial burden monitors impose on corporations, which can run into millions of dollars annually, effectively functioning as a punitive sanction without the procedural protections of a criminal trial. This statutory gap must be addressed through litigation, and I recommend that defense counsel immediately begin preserving objections to monitor requirements in any deferred prosecution agreement, with an eye toward challenging the framework's constitutionality in the appropriate circuit.
Frequently Asked Questions
Can my corporation challenge the DOJ's new framework in court before an indictment is filed?
Yes, but the procedural path is narrow and requires strategic timing. Under the Administrative Procedure Act, 5 U.S.C. § 553, a corporation may challenge the DOJ's new framework as a substantive rule that was promulgated without proper notice-and-comment procedures. This argument is strongest in jurisdictions like the D.C. Circuit, where courts have been receptive to challenges against agency guidance that creates binding legal obligations without congressional authorization. However, the most common avenue for challenge arises when a prosecutor uses the framework to demand a monitor or impose conditions that exceed statutory authority under 18 U.S.C. § 3553(a). In such cases, defense counsel should file a motion to enforce the terms of any deferred prosecution agreement or, if no agreement is reached, a pre-indictment motion for declaratory relief arguing that the framework's requirements violate the separation of powers doctrine. The key is to preserve the record by objecting in writing to every prosecutorial demand based on the framework, specifically citing the lack of statutory authorization and the constitutional violations inherent in the self-disclosure requirements.
How does the new framework affect my corporation's ability to maintain attorney-client privilege during internal investigations?
The new framework creates significant pressure to waive attorney-client privilege, despite the DOJ's public statements to the contrary. While the framework purports to prohibit prosecutors from demanding privilege waivers as a condition of cooperation credit, the practical effect of the "historical risk appetite" and "control environment" factors is to force corporations to disclose privileged materials to demonstrate the adequacy of their compliance programs. In my experience, prosecutors are now asking for detailed information about internal investigation findings, including witness interview memoranda and legal advice regarding remediation, which falls squarely within the attorney-client privilege and work product doctrine. The framework's guidance that prosecutors should evaluate "the genuineness of remediation efforts" implicitly requires access to privileged communications about legal strategy. Defense counsel should resist these requests by citing the Second Circuit's holding in United States v. Stein, which struck down similar coercion tactics under the Thompson Memorandum. I recommend that corporations maintain a detailed privilege log and insist that any requests for privileged materials be made in writing, with a specific showing of need under Federal Rule of Criminal Procedure 16. If the prosecutor insists on access to privileged materials, the corporation should demand that the issue be brought before a court for judicial resolution, rather than capitulating to prosecutorial pressure.
If your corporation is facing scrutiny under the DOJ's new enforcement framework, you need experienced counsel who understands both the prosecutorial playbook and the constitutional limits on government power. I spent 25 years as a federal prosecutor, including serving as Deputy Chief of the Fraud Section, where I personally oversaw the development of corporate charging policies. Today, I use that insider knowledge to defend corporations against overreach that exceeds statutory authority and violates constitutional protections. The new framework creates unprecedented risks for corporations, but it also creates unprecedented opportunities for well-crafted legal challenges that can set binding precedent. Do not wait until an indictment is filed to begin preserving your objections. Contact my office for a confidential consultation to discuss how we can develop a pre-indictment strategy that protects your corporation's rights, challenges unlawful prosecutorial demands, and positions you for the strongest possible outcome under this evolving legal landscape.
Related Legal Resources
Related: 3 Critical Steps Every Corporate Executive Must Take Today After the Supreme Court's Privilege Ruling | Kirby Law — Federal Criminal Defense — 3 Critical Steps Every Corporate Executive Must Take Today After the Supreme Court's Privilege Ruling | Kirby Law — Fede
Related: 10 Critical Steps to Take Today If You Are Under Investigation in a Healthcare Fraud Case | Kirby Law — Federal Criminal Defense — 10 Critical Steps to Take Today If You Are Under Investigation in a Healthcare Fraud Case | Kirby Law — Federal Criminal
Kirby Law Network
Explore our full network of federal criminal defense resources:
- Abepcs
- Andrewforoklahoma
- Antitrustdefenseguide
- Columbia Law Group
- Corydonlaw
- Criminal Defense Lawyer San Diego Kirby
- Crypto Fraud Defense
- Cryptofrauddefense
- Falseclaimsactdefense
- Federal Defense Playbook
- Federalappealsresource
- Federalsentencingdefense
- Healthcare Fraud Defense
- Irstaxdefense
- Joomlaport
- Kirby Attorney Finder
- Kirbycriminallawyer
- Lawofficesofjohnkirby
- Legallawtopic
- Mannactdefense
- Moneylaunderingdefensedesk
- Profferdefense
- Publiccorruptiondefense
- Quitamdefense
- Ricodefenseresource
- Securitiesfrauddefense
- Taxevasiondefensecenter
- Whistleblower Defense