FCPA Enforcement in 2025: A Timeline from the Pause to the New DOJ Guidelines

Key Takeaways

  • FCPA enforcement remains grounded in long-standing statutory requirements.
  • The political tone during the Trump administration created uncertainty in enforcement expectations.
  • Post-2021 DOJ and SEC activity, along with updated compliance guidance, reaffirmed the central principles of the FCPA.
  • International cooperation has resumed.
  • Organizations should expect continued scrutiny of violations of FCPA provisions.

How the Law Shaped Modern Compliance

The Foreign Corrupt Practices Act is nearly half a century old, yet it remains one of the most influential statutes governing corporate conduct abroad. Introduced in the nineteen seventies after investigations revealed widespread use of secret accounts to pay foreign officials, the law created two central requirements. Companies must maintain accurate books and records, and they must design internal controls capable of preventing improper payments. Over time this foreign corrupt practices act policy framework has become a global benchmark for anti-corruption standards.

Inside multinational organizations, the law influences day-to-day work more than most people realize. Sales personnel operating in state-involved sectors, finance teams authorizing reimbursements, and compliance officers reviewing third-party engagements all interact with processes shaped by the statute. A single undocumented payment can trigger multi-year reviews. FCPA enforcement demands documentation, consistency, and predictable oversight, which is why entire teams are dedicated to managing risk in high-exposure markets.

fcpa enforcement

The Trump-Era Slowdown and Its Effects

When Donald Trump took office in 2017, he brought with him well-documented criticism of the FCPA. Before becoming president, he called the law “ridiculous” and argued publicly that it disadvantaged American companies competing abroad. His administration also explored revising corporate enforcement policies, including those related to anti-bribery matters.

Although there was no formal anti corruption EO altering the statute, the enforcement community did observe a real, measurable shift. Corporate resolutions declined. Certain long-running investigations slowed. Law firms tracking year-over-year data noted fluctuations that reflected a less assertive posture.

For compliance teams, the consequence was ambiguity. Some organizations reduced internal review frequency, uncertain how aggressively regulators planned to pursue new violations of FCPA provisions. Others continued business as usual but reported fewer requests from agencies during routine monitoring periods. International partners, particularly in Europe and Latin America, signaled concern that the United States might be recalibrating its role in cross-border corruption enforcement.

This period is sometimes described informally as the “FCPA pause”. It was not a legal suspension, but a perceptible enforcement dip tied to political tone.

The Post-2021 Realignment

Beginning in 2021, the Department of Justice and the Securities and Exchange Commission resumed a more active stance. Enforcement totals increased, and several high-value corporate resolutions reinforced the message that the foundational principles of the statute still applied.

The DOJ also issued updated policies between 2022 and 2024, clarifying expectations on voluntary self-disclosure, cooperation, compensation clawbacks, evaluation of corporate compliance programs, and use of ephemeral messaging. These were the most substantive policy refinements since the publication of the FCPA Resource Guide.

For practitioners, the post-2021 period restored clarity. Compliance teams restarted suspended initiatives, updated training materials, and revisited due diligence programs. Global regulators also reengaged with U.S. authorities on stalled matters, noting a return to predictable coordination.

Early Indicators Heading Into 2025

In the early months of 2025, several operational signs pointed to continued enforcement momentum. Companies began receiving renewed inquiries on matters that had experienced limited activity during prior years. Agencies requested updated records, reopened communication channels, and issued reminders regarding document retention practices.

At the policy level, officials spoke more directly about the importance of consistent anti-corruption enforcement for global economic stability. International bodies, including the OECD Working Group on Bribery, highlighted the need for cooperation among major jurisdictions.

These developments signaled continuity rather than a shift. Enforcement had resumed a steady pace, and the government appeared prepared to maintain it.

New DOJ Guidance: What Changed and What Stayed the Same

In mid-2025, the Department of Justice issued updated guidance to consolidate policy changes introduced over the past several years. While not a dramatic rewrite of prior frameworks, the update clarified several operational expectations:

  • Documentation must reflect actual practice, not only policy design
  • Training and certification records must remain current
  • Third-party oversight must include verifiable due diligence
  • Document production delays may impact cooperation assessments
  • Internal investigations should be well-structured and timely

None of these elements represented departures from established doctrine. Instead, they reinforced a stable trajectory: companies are expected to maintain systems capable of demonstrating how their anti-corruption programs function in real environments.

How Companies Are Responding in 2025

Within organizations, the updated guidance restored operational consistency. Internal audit teams reestablished review cycles. Legal departments recalibrated internal investigation processes to reflect DOJ expectations. Compliance officers in high-risk markets reported increased reliance on standardized workflows rather than discretionary judgment.

Employees involved in contract review, procurement, and third-party onboarding noted clearer direction on when to escalate concerns. For many, the renewed structure reduced uncertainty that had developed during earlier years of fluctuating enforcement intensity.

Cross-functional coordination also increased. Compliance, finance, security, and legal teams began sharing information more systematically, recognizing that corruption risk intersects with cybersecurity, data governance, and vendor management. This integrated approach reflected broader trends in enterprise risk management.

International Coordination Resumes

Foreign enforcement agencies adjusted their approaches accordingly. Jurisdictions with active anti-corruption programs  resumed fuller cooperation with U.S. authorities. Joint investigations that had slowed during periods of uncertainty regained momentum, and evidence-sharing processes stabilized.

For practitioners who work on multinational cases, the return of predictable coordination reduced administrative delays and made investigative timelines more manageable.

Technology’s Expanding Role in FCPA Compliance

As enforcement expectations stabilize, companies are increasingly relying on technology to manage risk. Tools used to track compliance certifications, monitor third-party engagements, record approvals, and map control gaps are becoming standard in multinational environments.

Many teams report that centralized systems help reduce manual errors and support faster responses when regulators request information. The adoption of FCPA compliance software reflects a broader shift toward structured governance systems rather than siloed spreadsheets.

Technology does not replace expertise, but it enables organizations to manage documentation and oversight at a scale the statute now demands.

The Outlook for FCPA Enforcement

As of 2025, FCPA enforcement is steady, predictable, and aligned with long-standing principles. Political criticism did influence enforcement tone in earlier years, but the structural requirements of the law have not changed.

Looking ahead, companies can expect DOJ and SEC evaluations to continue focusing on:

  • accuracy of books and records
  • documented internal controls
  • oversight of third parties
  • remediation speed
  • cooperation quality
  • clarity of audit trails

Violations of FCPA provisions remain costly, both financially and reputationally, and regulators continue to signal that credible programs require continuous operation, not periodic attention.

The DOJ and SEC still rely on the joint FCPA Resource Guide as the core interpretive document. Its emphasis on internal controls, recordkeeping, and effective governance continues to define how compliance programs are evaluated in practice.

Start Getting Value With
Centraleyes for Free

See for yourself how the Centraleyes platform exceeds anything an old GRC
system does and eliminates the need for manual processes and spreadsheets
to give you immediate value and run a full risk assessment in less than 30 days

Start building your risk management program

FAQs

1. Has the DOJ ever formally suspended or paused FCPA enforcement?

No.
There has never been a formal suspension or pause of FCPA enforcement issued by any administration.

However, enforcement levels have varied significantly over time, and several periods, including portions of the Trump administration, saw reduced volumes of corporate resolutions and a shift in public rhetoric around corporate enforcement.

This trend is documented by:

  • Gibson Dunn’s FCPA Year-End Updates (2017–2020)
  • Stanford Law School’s FCPA Clearinghouse data
  • WilmerHale and Debevoise & Plimpton annual enforcement reports

These variations reflected differences in enforcement tone, not changes to the statute itself.

2. What are the primary sources of legal guidance on how the FCPA is interpreted?

The two authoritative sources are:

1. The DOJ/SEC FCPA Resource Guide (2012, updated 2020)

Provides detailed explanations of internal controls, books and records requirements, third-party risk, successor liability, and enforcement principles.

2. The DOJ’s Evaluation of Corporate Compliance Programs (updated 2020, 2023)

Outlines how prosecutors assess compliance program effectiveness, including incentives, training, discipline, and data accessibility.

3. What types of conduct most commonly lead to FCPA investigations?

The DOJ and SEC identify several recurring categories:

  • Improper payments to foreign officials through intermediaries or consultants
  • False or incomplete accounting entries that disguise the purpose of payments
  • Weak internal controls that allow third parties to act without adequate oversight
  • High-risk business models, such as operations involving state-owned enterprises

4. How do enforcement agencies decide whether a company receives cooperation credit?

DOJ evaluates cooperation using criteria published in:

  • DOJ Corporate Enforcement Policy (CEP)
  • DOJ Evaluation of Corporate Compliance Programs

Key elements include:

  1. Voluntary self-disclosure before an imminent threat of detection
  2. Timely and thorough cooperation, including factual presentations and access to documents
  3. Preservation and production of data, including messaging platforms
  4. Remediation, such as disciplinary actions, improved controls, or third-party revisions

5. Does the FCPA apply to conduct that occurs entirely outside the United States?

Yes, if:

  • the company is an issuer (listed or reporting to the SEC),
  • the company is a domestic concern (U.S. entity or individual), or
  • any part of the corrupt scheme touches U.S. territory (bank wires, emails routed through U.S. servers, or use of U.S.-based intermediaries).

This extraterritorial reach is explicitly supported by:

  • FCPA statutory text (15 U.S.C. §§ 78dd-1, 78dd-2, 78dd-3)
  • DOJ/SEC Resource Guide interpretations
  • Multiple enforcement actions involving foreign subsidiaries (e.g., Siemens, Alstom)

6. How does the United States coordinate FCPA cases with foreign regulators?

Cooperation occurs through:

  • Mutual Legal Assistance Treaties (MLATs)
  • Joint investigations with authorities such as the U.K. Serious Fraud Office, Brazilian CGU, and French PNF
  • Coordinated resolutions to avoid duplicative penalties.

Start Getting Value With
Centraleyes for Free

See for yourself how the Centraleyes platform exceeds anything an old GRC
system does and eliminates the need for manual processes and spreadsheets
to give you immediate value and run a full risk assessment in less than 30 days

Start building your risk management program

Skip to content