Articles on compliance training, ethics culture, whistleblowing, anti-corruption, and more — written for the teams doing the work.
Compliance Program FrameworksThe European Union has simplified its sustainability regulations, offering compliance teams a chance to rethink their strategies. These changes, finalized in December 2024, reduce complexity, extend d
Compliance Program FrameworksThe Decision You re Facing Your compliance program was built to address your organization s known risks, but the False Claims Act (FCA) is expanding into areas you might not have anticipated. The Civi
Whistleblowing & ReportingWhen operations freeze, your Speak-Up Program can t. Whether you re managing a federal agency hotline or a multinational corporation s speak-up channels, disruptions test whether your program runs on
Compliance Program FrameworksMany healthcare compliance teams operate under outdated assumptions about handling Fraud, Waste, and Abuse (FWA). These myths don t just slow down your response; they create legal risks and erode the
Get weekly security insights and compliance updates delivered to your inbox.
Compliance Program FrameworksQuestions about the New York LLC Transparency Act started pouring in right after New Year s Day, when the Act went live. Many inquiries came from in-house counsel at multinational companies with New Y
Records & RecordkeepingScope - What This Guide Covers This guide helps you and your team implement automated, defensible records retention controls to reduce compliance risk and cut eDiscovery costs. You ll find requirement
Harassment & DiscriminationThe question at hand The EEOC rescinded its 2024 Enforcement Guidance on Harassment in the Workplace on January 22, 2026. The underlying law didn t change. Title VII still prohibits harassment based o
Privacy & Data GovernanceYou ve probably heard the pitch: treat GDPR compliance as a competitive differentiator. Turn your data protection program into a trust-building engine. Transform regulatory burden into strategic oppor
Privacy & Data GovernanceThe Spanish Data Protection Authority issued a formal notice on January 13, 2026, about the risks of using AI tools with images. The European Commission published its first draft Code of Practice on T
Privacy & Data GovernanceThe Indiana Consumer Data Protection Act (CDPA) took effect on January 1, 2026, and compliance teams are finding that good intentions alone don t prevent costly mistakes. The Indiana Attorney General
Whistleblowing & ReportingWhat the Data Shows Recent polling data from 778 compliance and risk professionals highlights a significant gap between having anti-retaliation policies and effectively implementing them. While nearly
Privacy & Data GovernanceIf your company processes data about people in the EU, you might be wondering how to handle GDPR compliance. Whether you re a U.S. software vendor with European customers or an Australian retailer shi
Antitrust & CompetitionYour compliance team might be wondering about the implications of sharing industry data. The Justice Department s settlement with Agri Stats Inc. clarifies the boundary between legitimate benchmarking
Privacy & Data GovernanceThe Challenge A Virginia-based data broker was fined $36,400 by the California Privacy Protection Agency for not registering as required by state law. Beyond the fine, the company must now honor consu
Whistleblowing & ReportingNavigating Ethical Boundaries in Whistleblower Cases A recent New York ethics opinion has raised a critical question: How far can an attorney go in helping a False Claims Act whistleblower gather evid
Privacy & Data GovernanceThe Cyber Incident Reporting for Critical Infrastructure Act of 2022 regulations are expected to be finalized this fall. If your organization qualifies as critical infrastructure, you ll face new mand
Training & MonitoringThe question at hand Your organization just secured a GSA contract that involves handling Controlled Unclassified Information (CUI). A colleague at a defense contractor mentions they re holding off on
Antitrust & CompetitionThe U.S. Department of Justice is expanding its investigation into potential anticompetitive conduct in the American beef industry, now including major grocers like The Kroger Co., Walmart, and Costco
Privacy & Data GovernanceMany organizations treat HIPAA training as a simple compliance task: cover the rules, define violations, and get employees to sign off. This might satisfy an auditor, but it won t prevent a phishing e
Anti-Corruption & AMLYou ve built an anti-corruption training program. You ve rolled out policies, run workshops, and sent reminders. Now someone asks: Is it working? If your answer relies on asking employees whether they
