Companies often face difficult choices when it comes to deciding on whether to disclose corporate misconduct to the government.  Over the years, more counsel have embraced the idea of sitting tight after uncovering and remediating misconduct (unless the company is subject to mandatory disclosure requirements). Admittedly, I have been aware of situations where that strategy was appropriate.  The likelihood of detection was low and the...

The Uyghur Forced Labor Prevention Act (UFLPA) was designed to be one of the toughest trade enforcement statutes ever enacted by Congress. Passed with near-unanimous bipartisan support in late 2021, the law created a rebuttable presumption that goods made wholly or in part in China’s Xinjiang region—or by entities linked to forced labor there—are prohibited from entering the United States. In theory, the statute was...

Healthcare fraud continues to plague providers, managed care, and drug companies.  $5.7 billion of the $6.8 billion recovered by DOJ was generated from the healthcare industry.  There is a bottomless pit of possible targets.  DOJ’s only constraint is its resources assigned to prosecute FCA cases in the healthcare industry.  DOJ focused on three major areas: Managed Care, Prescription Drugs, and Medically Unnecessary Care.  In Managed...

The Justice Department has increased False Claims Act prosecutions, reflecting a continued focus on healthcare fraud and a new initiative on trade fraud.  DOJ announced the largest annual recovery figure in the FCA’s history — $6.8 billion in settlements and recoveries.  FCA whistleblowers filed a record number of new cases — 1,297 lawsuits and the government initiated 401 investigations.  Since 1986, DOJ has recovered a...

Here are the five primary risk areas when a company uses AI in a supportive or assistance-based role as opposed to an algorithmic-based use case. 1. Data Protection and Cybersecurity: Internal AI use cases may involve chatbots, drafting of documents, emails, and other deliverables (e.g. slide decks).  To the extent employees incorporate sensitive data (e.g. confidential, personal or regulated data) into AI vendor tools, such...

From my perspective, hopefully a reasonable one, there is a little too much AI-Risk Hype.  Not to belittle the experts or ignore potential risk concerns but this is getting a little carried away.  The compliance industry appears to be taken over by AI-this and AI-that.  Third party risk bleeds into major AI risks, corporate governance needs to incorporate AI risks, and policies and procedures have...