Skip to main content
Integrity Path
Category: Compliance Program Frameworks

DOJ Criminal Division Guidance

Also known as: Criminal Division Corporate Enforcement Guidance, DOJ Criminal Division Policy Materials
Simply put

DOJ Criminal Division Guidance refers to the policies, memoranda, and policy materials issued by the U.S. Department of Justice's Criminal Division to explain how it approaches the investigation and prosecution of corporate and white-collar misconduct. These documents describe the Division's enforcement priorities and the principles that guide its prosecutorial decisions. They are educational and jurisdiction-specific to the United States, and they are not a substitute for advice from qualified legal counsel.

Formal definition

DOJ Criminal Division Guidance is a body of enforcement policies, memoranda, and published policy materials issued by the Criminal Division of the U.S. Department of Justice that articulate its corporate and white-collar criminal enforcement priorities and prosecutorial approach. Per the Division's stated framework, corporate enforcement is guided by three core tenets described as focus, [and two additional tenets not fully specified in the available evidence]; practitioners should confirm the complete tenets against the primary source. This guidance addresses how prosecutorial discretion is exercised in U.S. federal criminal matters and is distinct from binding statutory law, from certifiable standards, and from an organization's internal compliance program; it informs, but does not by itself constitute, an effective compliance program. Specific documents referenced in the evidence include a May 12, 2025 memorandum outlining the Criminal Division's corporate and white-collar enforcement priorities and policies, and a Department-wide corporate enforcement policy described in a March 10, 2026 release intended to promote uniformity across criminal matters; exact scope, effective dates, and provisions should be verified against the primary DOJ sources. This entry is educational and not legal advice; application depends on jurisdiction, facts, and implementation.

Why it matters

For organizations operating under U.S. federal jurisdiction, DOJ Criminal Division Guidance shapes the environment in which corporate and white-collar misconduct is investigated and prosecuted. Because these materials describe how the Division exercises prosecutorial discretion, they signal what enforcement authorities expect to see from a company both before misconduct occurs and in how a company responds once an issue surfaces. Compliance and legal teams read this guidance closely because it influences practical decisions about self-disclosure, cooperation, and remediation, even though the guidance itself is not binding statutory law and does not by itself define an adequate compliance program.

The guidance is also significant because it evolves. The evidence references a May 12, 2025 memorandum outlining the Criminal Division's corporate and white-collar enforcement priorities and policies, and a March 10, 2026 release describing what is characterized as the first-ever Department-wide corporate enforcement policy for criminal matters, intended to promote uniformity across criminal cases. Shifts of this kind can change how prosecutors weigh factors in charging and resolution decisions, so programs that were designed against an earlier version of the guidance may need review. Exact scope, effective dates, and provisions should be confirmed against the primary DOJ sources.

It is important not to overstate what this guidance provides. It does not guarantee any particular outcome, and following it does not immunize a company from prosecution or ensure a favorable resolution. Its influence depends on the specific facts, the jurisdiction, and how faithfully a company implements its own controls. This entry is educational and not a substitute for advice from qualified legal counsel, which is essential when these matters bear on an organization's specific circumstances.

Who it's relevant to

Compliance Officers and Ethics Program Managers
These practitioners use the guidance as a reference when designing and benchmarking program elements such as controls, monitoring, and remediation. It is important to treat the guidance as one input that informs program design rather than as a checklist that, once followed, establishes an adequate program or guarantees any enforcement outcome.
Legal and Investigations Teams
In-house counsel and investigations staff draw on the guidance to understand how the Criminal Division approaches charging, cooperation, and resolution in U.S. federal criminal matters. Because the guidance is jurisdiction-specific and non-binding, and because decisions turn on specific facts, these teams should verify current provisions against primary DOJ sources and rely on qualified legal counsel for advice.
Audit and Monitoring Functions
Those responsible for monitoring and auditing may reference enforcement priorities to help focus their work on areas the Division emphasizes. The guidance informs where attention may be warranted but does not define audit scope, and it should be paired with the organization's own risk assessment.
Learning and Development Staff
Training designers may reference the guidance to give context on why certain conduct and reporting expectations matter within U.S. federal enforcement. Materials should make clear that guidance is educational and evolving, for example, the May 12, 2025 memorandum and the March 10, 2026 Department-wide policy release noted in the evidence, and that training is one component of a broader program, not a substitute for it.

Inside DOJ Criminal Division Guidance

Evaluation of Corporate Compliance Programs (ECCP)
A document issued by the U.S. Department of Justice Criminal Division that sets out the questions and considerations prosecutors use when assessing the design, implementation, and effectiveness of a corporate compliance program. It is guidance for prosecutorial decision-making, not a binding statute or regulation, and applies within the U.S. federal enforcement context.
Three fundamental questions
The ECCP is organized around whether a compliance program is well designed, whether it is applied earnestly and in good faith (that is, adequately resourced and empowered to function effectively), and whether it works in practice. These framing questions guide how prosecutors evaluate a program at the time of the conduct and at the time of a charging or resolution decision.
Risk assessment orientation
The guidance emphasizes that a program should be tailored to the organization's specific risk profile rather than adopting a generic template. This is one component of an overall program, distinct from training modules, the code of conduct, or the whistleblower channel.
Program dynamism and testing
The guidance reflects an expectation that programs are periodically reviewed, tested, and updated based on lessons learned, and that companies can demonstrate how the program has evolved. Exact wording and current emphases should be confirmed against the latest primary source, as the ECCP has been revised over time.
Relationship to the Federal Sentencing Guidelines
The ECCP addresses similar effectiveness themes as the U.S. Federal Sentencing Guidelines' criteria for an effective compliance and ethics program, but it is a separate Criminal Division resource focused on prosecutorial evaluation rather than sentencing calculation. Both are U.S.-specific.

Common questions

Answers to the questions practitioners most commonly ask about DOJ Criminal Division Guidance.

Does the DOJ Criminal Division Guidance function as a binding law that companies must comply with?
No. The guidance is not a statute or regulation and does not itself impose binding legal obligations. It is a set of considerations the Criminal Division uses when evaluating corporate compliance programs, primarily in the context of charging decisions, resolutions, and penalty determinations. Its force is practical rather than statutory: prosecutors apply it as an evaluative lens. Companies should treat it as an authoritative indicator of what the Department looks for, but its application is jurisdiction-specific to U.S. federal enforcement and its interpretation in any given matter requires qualified legal counsel. This entry is educational and not a substitute for professional advice.
If we build our program to match the DOJ guidance, does that guarantee we avoid prosecution or protect us legally?
No. Aligning a program with the guidance may support a company's position when prosecutors assess whether a compliance program was well designed, adequately resourced, and working in practice, but it does not guarantee any particular charging outcome or provide legal protection. The guidance is generally regarded as reflecting how the Criminal Division evaluates programs, yet outcomes depend on the facts of the conduct, the quality and sincerity of implementation, remediation, cooperation, and prosecutorial discretion. No design choice or documentation alone prevents misconduct or ensures a favorable result.
How does the DOJ guidance fit alongside our code of conduct, training, and monitoring functions?
The guidance is an evaluative framework, not a program component itself. It informs how each element of a compliance program, such as a code of conduct, training modules, risk assessment, whistleblower channels, and monitoring and auditing, may be assessed for design, resourcing, and operation in practice. Meeting the guidance is not accomplished by any single element; for example, delivering training does not by itself satisfy the broader program considerations the guidance addresses. Use it to review how your components work together rather than as a checklist for any one function.
What kinds of evidence tend to demonstrate that a program is working in practice rather than existing only on paper?
The guidance is generally understood to distinguish a well-designed program from one that operates effectively. Practitioners commonly gather evidence such as records of risk assessments and how they informed program updates, documentation of resourcing and authority for the compliance function, metrics on training completion and comprehension, records of how reports through whistleblower channels were handled, and results of monitoring, auditing, and testing. The specific evidence that matters varies by organization and context, and its sufficiency in an enforcement setting is a legal judgment for qualified counsel.
How often should we revisit our program against the DOJ guidance?
The guidance reflects an expectation that programs evolve rather than remain static, so periodic review is generally advisable. Many organizations align reviews with their risk assessment cycle, significant business changes such as acquisitions or entry into new markets, incidents or investigations that reveal gaps, and updates to the guidance itself. The appropriate cadence depends on the organization's risk profile and resources; there is no universal required frequency. Confirm any interpretation of current expectations against the primary source and with qualified legal counsel.
Who within an organization typically owns the work of aligning a program with the DOJ guidance?
Alignment is generally a cross-functional effort rather than the responsibility of a single role. The compliance function usually coordinates it, with involvement from legal counsel on enforcement interpretation, audit and monitoring teams on testing and evidence, and learning and development staff on training design and measurement. Senior leadership and the board are relevant because the guidance addresses commitment, resourcing, and autonomy of the compliance function. Because interpretation touches U.S. federal enforcement matters that vary by facts and law, qualified legal counsel should be engaged for decisions with legal consequences.

Common misconceptions

Following the DOJ guidance guarantees a company will avoid prosecution or penalties.
The guidance is intended to inform prosecutorial discretion and may support more favorable treatment, but it does not guarantee any particular charging outcome or legal protection. Outcomes depend on the facts, the conduct, and how the program was implemented in practice. Decisions in this area require qualified legal counsel.
The guidance is a binding regulation that imposes legally mandatory requirements on all companies.
The ECCP is non-binding guidance describing how Criminal Division prosecutors evaluate programs; it is not a statute or regulation and does not itself create enforceable obligations. Its scope is the U.S. federal enforcement context and it is not a universal global standard.
Having strong compliance training satisfies the DOJ's expectations for an effective program.
Training is only one component. The guidance evaluates the whole program, including risk assessment, resourcing and autonomy, the code of conduct, reporting channels, and monitoring and auditing. Training alone does not demonstrate an effective program under the guidance.

Best practices

Map your compliance program against the three fundamental questions in the ECCP (well designed, earnestly applied, working in practice) and document supporting evidence for each, while confirming the current text against the primary DOJ source.
Ground program design in a documented, organization-specific risk assessment rather than a generic template, and record how identified risks drive controls and training priorities.
Retain evidence that the program is periodically tested, reviewed, and updated, including how lessons learned and changes to the risk profile have shaped revisions over time.
Treat the guidance as one input alongside related U.S. frameworks such as the Federal Sentencing Guidelines criteria, and involve qualified legal counsel when interpreting how it applies to your situation.
Demonstrate that the program is adequately resourced and empowered, keeping training, code of conduct, reporting channels, and monitoring and auditing as distinct, documented functions rather than conflating them.
Verify all citations, effective dates, and current wording against the latest published version of the ECCP before relying on them, since the guidance has been revised over time.