In my last post, I made the affirmative case for CCO empowerment — a direct reporting line to the CEO and a dotted line to the audit committee. Today I want to address the disturbing counter-trend: companies moving compliance back under the general counsel, often justified as cost discipline or organizational simplification. Make no mistake about what this movement represents. It is a retreat from compliance as a business value to compliance as a legal chore — and companies will pay for it.

### Two Different Jobs, Two Different Mindsets

Let me be clear at the outset: I have deep respect for general counsels, and the legal and compliance functions must work hand in glove. But they are fundamentally different jobs. The general counsel’s mandate is to advise the company on what the law permits and to defend the company when challenged. It is, by nature and by professional obligation, an advocacy role oriented around legal risk and minimum legal requirements.

The CCO’s mandate is broader and different in kind: to build an ethical culture, to prevent and detect misconduct, to embed integrity into how the business actually operates. A great compliance program does not ask “is this legal?” It asks “is this right, is this consistent with our values, and is this sustainable?” Those are questions about culture and long-term business health — not questions that fit naturally inside a legal-advice framework.

When compliance reports to legal, the legal mindset wins. Compliance priorities get filtered through litigation exposure and legal risk. The program drifts toward doing what the law minimally requires — mere compliance — rather than setting higher standards that build trust with customers, employees, business partners, and regulators.

### The Economic Excuse Doesn’t Hold Up

Companies embracing this backslide often point to economic pressure: tighter budgets, leaner structures, consolidation of “overhead” functions. I understand the pressure. But the premise is wrong. Compliance is not overhead. An empowered compliance function is a proven driver of business performance — companies with strong ethical cultures consistently outperform on employee retention, customer trust, and long-term shareholder value, and they avoid the catastrophic costs of enforcement actions, monitorships, and reputational collapse. Demoting the CCO to save a line item is the corporate equivalent of canceling your insurance to improve quarterly cash flow. It works right up until it doesn’t.

### What Gets Lost in the Demotion

Consider what disappears when compliance retreats into legal. The CCO loses direct visibility into strategic decisions and the ability to shape them. Independence in internal investigations is compromised — particularly when allegations implicate the legal department’s own advice or senior executives the GC serves. The board loses an unfiltered channel of information about culture, misconduct trends, and speak-up activity. And employees receive an unmistakable signal: compliance has been downgraded.

There is a structural safeguard for companies that, for legitimate reasons, maintain a legal-reporting model: a mandatory dotted line from the CCO to the audit committee, with guaranteed executive sessions and unrestricted escalation rights. That safeguard is the floor, not the ceiling. But even it cannot fully substitute for genuine stature within the organization.

### Compliance Action Items

– If your organization is considering moving compliance under legal, insist that the board — not management alone — evaluate and approve the change.

– Preserve, at minimum, a formal dotted-line reporting relationship between the CCO and the audit committee, memorialized in committee charters.

– Guarantee the CCO unrestricted authority to initiate investigations and escalate directly to the board, including matters implicating legal or senior management.

– Measure your compliance program on culture indicators — speak-up rates, retaliation complaints, ethical climate surveys — not just legal risk metrics.

– Ask the hard question: does your structure treat compliance as a driver of business success or a cost of doing business? Your employees already know the answer.

The direction of travel matters. Companies moving compliance up demonstrate confidence in their culture. Companies moving it down are telling you — and eventually the government — exactly how much they value it.