The Department of Justice has now unified and revised its approach to corporate enforcement in a way that deserves close attention from corporate boards, general counsel, compliance officers, and white collar defense counsel. With its issuance of the Criminal Division Corporate Enforcement and Voluntary Self-Disclosure Policy, DOJ has attempted to bring greater transparency and consistency to a subject that has too often depended on discretionary, opaque, and uneven decision-making. The new policy is a significant statement of prosecutorial expectations, incentives, and consequences.

At its core, the new policy reinforces a familiar message: companies that voluntarily self-disclose, fully cooperate, and timely remediate stand to receive substantial benefits. Companies that fail to do so face greater risks of criminal resolution, harsher penalties, and the possibility that prosecutors will view their conduct through a far less forgiving lens. In that sense, DOJ is not breaking entirely new ground. Rather, it is formalizing and consolidating themes that have emerged over the last several years into a more unified framework.

That matters. One of the recurring criticisms of DOJ corporate enforcement policy has been that companies often struggle to predict outcomes. Even where DOJ has articulated standards, the practical question has always remained the same: what actually happens when a company comes in early, discloses a problem, investigates aggressively, and fixes the mess? The Criminal Division Corporate Enforcement and Voluntary Self-Disclosure Policy is designed to answer that question with greater specificity.

The policy tries to clarify the benefits available when a company voluntarily self-discloses misconduct before an imminent threat of disclosure or government investigation, provides extraordinary cooperation, and undertakes timely and appropriate remediation. In those circumstances, DOJ indicates that a company may receive a declination, or at least a resolution with materially reduced penalties. The point is obvious but important. DOJ wants to influence corporate behavior before prosecutors appear with subpoenas, search warrants, or cooperating witnesses. The policy is intended to make early disclosure a rational, measurable option rather than a blind gamble.

At the same time, the policy preserves DOJ’s ability to distinguish among different levels of corporate behavior. Not every company that cooperates will receive identical treatment, and not every failure to self-disclose will be fatal. The policy builds around gradations of conduct—self-disclosure, cooperation, remediation, aggravating circumstances, and recidivism. This is where the practical stakes become real. Companies are now on clearer notice that DOJ expects a disciplined response to misconduct and will evaluate whether the company’s actions reflect true institutional accountability or merely tactical damage control.

The revised policy also signals DOJ’s continuing emphasis on individual accountability. Corporate cooperation is not measured simply by producing documents or summarizing facts in presentations to prosecutors. DOJ continues to expect companies to identify responsible individuals, preserve and produce key evidence, facilitate access to overseas materials where possible, and avoid gamesmanship in internal investigations. In this respect, the policy fits squarely within DOJ’s broader enforcement philosophy: corporations earn credit by helping the government build cases against culpable individuals and by demonstrating that the organization itself is serious about reform.

There is also a broader institutional message here. DOJ is trying to make corporate enforcement more coherent across matters and across prosecutorial teams. Consistency has been an ongoing concern, especially when companies compare outcomes across cases that appear factually similar but produce very different resolutions. By issuing the Criminal Division Corporate Enforcement and Voluntary Self-Disclosure Policy as a more unified statement, DOJ is attempting to reduce uncertainty and strengthen the credibility of its incentive structure.

For companies and counsel, the lesson is not merely that self-disclosure may be rewarded. The more important lesson is that DOJ has become more explicit about the architecture of credit. The decision whether to disclose remains difficult and highly fact-dependent. But the old complaint that the rules are too fuzzy to evaluate is becoming harder to sustain. DOJ has put more cards on the table.

That does not mean all ambiguity has disappeared. Prosecutorial discretion remains central. Terms such as “extraordinary cooperation,” “timely remediation,” and “aggravating circumstances” still leave room for judgment. But the revised policy narrows the zone of uncertainty and gives counsel a stronger framework for advising boards and executives in the early stages of a crisis. That alone is a meaningful development.

The practical consequence is that companies should revisit their escalation, investigation, and disclosure protocols now, before the next problem arises. A disclosure decision made in the first days or weeks of a crisis will depend heavily on whether the company can quickly identify the facts, preserve the evidence, assess the legal risk, and present a credible remediation plan. Those capabilities cannot be improvised under pressure. They must be built in advance.

In that sense, DOJ’s new policy is not simply an enforcement document. It is also a governance document. It tells companies what DOJ expects to see when misconduct emerges and, just as importantly, what kinds of institutional preparation separate a company that can earn credibility from one that cannot. The companies that study the policy only after the government comes knocking will already be behind.