Featured Articles:

Two Sentencings, One Week: What a Failed Bank CEO and a Former Oil Trader Have in Common

DOJ announced two significant executive sentencings within a day of each other this week, and while the underlying conduct is different, a bank CEO’s fraud and sanctions evasion scheme versus an oil trader’s foreign bribery scheme, both cases carry the same underlying message for compliance officers: individual accountability for executive-level misconduct remains a live, active DOJ priority, and prison sentences in the range of four...

Is Your Compliance Budget Ready for 2027?

If you’re planning for 2027 with 2025’s budget in mind, your compliance program is about to fall on its face. KPMG just surveyed 725 chief compliance officers, and the headline is simple: the job has fundamentally expanded, and if your 2027 plan doesn’t reflect that, you’re already behind. 75% of CCOs say cybersecurity and data privacy are top investment priorities. 77% say the same about...

Episode 451 — Two Executives, Two Sentencings, One Week

In this episode of Corruption, Crime and Compliance, Michael Volkov examines two significant executive sentencings handed down within a day of each other: Tomás Niembro Concha, the former CEO of Puerto Rico’s now-defunct Nodus International Bank, sentenced to more than nine years for a multiyear fraud scheme that fleeced his own bank of nearly $25 million and a scheme to evade U.S. sanctions on Venezuela...

Stay Connected: Subscribe to the Blog, Volkov Law TV, the Podcast, and Join Our Upcoming Webinars

If you’ve been reading Corruption, Crime and Compliance for a while, you already know we cover a lot of ground here, enforcement actions, sanctions developments, board governance, AI risk, and everything in between. But if you’re only catching these posts when they cross your feed, you’re missing a lot of the content we put out every week across several different channels. Here’s a quick rundown...

The EU AI Act: The Digital Omnibus, the Current Timeline, and What to Do Now (Part II of II)

Part 1 of this series covered where EU AI Act enforcement genuinely stands today: prohibited practices enforceable since February 2025, general-purpose AI obligations running since August 2025, the Commission’s first formal investigations opened in June 2026 into hiring, credit scoring, and student monitoring AI systems, and full enforcement and fining authority active since August 2026. In Part 2, we look at what the Digital Omnibus...

The EU AI Act: Enforcement Is No Longer Theoretical (Part I of II)

For years, compliance officers could talk about the EU AI Act as a looming, mostly future obligation, something to plan for rather than something actively enforced. That era is over. As of August 2, 2026, the European Commission, acting through its European AI Office, holds formal investigative and enforcement authority over general-purpose AI model providers and over the Act’s prohibited AI practices, and the agency...

When Does Board Oversight Become Bad Faith? (Part 2)

Lo and behold, Boeing gets sued over another safety crisis, and this time Boeing actually won. Want to know why? They kept the receipts. Yesterday I told you about two cases where Delaware let Caremark claims move forward. Today, the case where the board won, and its most important Caremark decision in years. Boeing again. New litigation, this time over the 2024 Alaska Airlines door...

Episode 450 — Your Vendor Contract Template Was Not Built for AI

In this episode of Corruption, Crime and Compliance, Michael Volkov explains why standard software procurement templates fail to protect organizations in AI vendor relationships, and what to do about it. He walks through the structural differences that make AI vendors riskier than traditional software vendors, multi-layered data flows through underlying foundation models, frequent model swaps, and vendors’ commercial incentive to train on customer data, and...

When Does Board Oversight Become Bad Faith? (Part 1)

Hiring someone to investigate misconduct isn’t always going to save your board. The line between bad management and bad faith just got real. Here’s a question every board member should be losing sleep over: when does a board’s failure to catch corporate misconduct cross the line from bad management into an actual breach of fiduciary duty? Delaware just gave us two new answers, and they...

Congress Sends a Major New Russia and Iran Sanctions Bill to the President: What Compliance Teams Need to Know

The House of Representatives voted 262 to 159 on the night of September 16 to approve a sweeping Russia and Iran sanctions bill, sending it to President Trump for his expected signature. The legislation, renamed the Lindsey O. Graham Sanctioning Russia and Iran Act after the late South Carolina senator who championed it for more than a year before his death in July, cleared the...