Australia

General context and principles

1 Identify the highest-profile corporate investigation under way in your country, describing and commenting on its most noteworthy aspects as it relates to your country.

The Banking Royal Commission is conducting a high-profile inquiry into misconduct in the banking, superannuation and financial services industry. Its terms of reference are broad and include examining culture, governance and whether conduct falls below community standards. The Commissioner’s interim findings were published on 28 September 2018. A final report is due on 1 February 2019, which is expected to recommend regulatory enforcement action against banks, corporates and individuals (including possible criminal proceedings) and widespread reforms.

The Australian Federal Police (AFP) is currently investigating one of the most significant tax fraud cases in Australian history, which is an alleged 10-person conspiracy involving hundreds of millions of dollars, allegedly achieved by misdirecting funds from the Australian Taxation Office (ATO) via a payroll system to subcontracted companies that failed to pay all tax legitimately required. The unpaid tax was allegedly diverted to certain individuals for their personal gain. The case has been given heightened attention owing to the alleged ringleader involving two of the ATO Deputy Commissioner’s children in the conspiracy.

2 Outline the legal framework for corporate liability in your country.

Under Australian law, offences committed by ‘a person’ will, unless specifically excluded, include a corporation (including those offences punishable by imprisonment). Criminal liability is generally established if both a physical and fault element is proven. Fault elements include intention, knowledge, recklessness and negligence. In the case of strict or absolute liability offences, there are exceptions to the proof of fault elements. These offences are more commonly pursued against a corporation.

If a fault element is required to be proved against a corporation, it may be shown in a variety of statutorily defined ways, including by proof that a corporation failed to maintain a corporate culture of compliance.

3 In your country, what law enforcement authorities regulate corporations? How is jurisdiction between the authorities allocated? Do the authorities have policies relating to the prosecution of corporations?

Regulation of Australian companies is principally done at a federal level, with some limited involvement by state or territory regulators. There is a broad range of law enforcement agencies that have authority to investigate corporations, including but not limited to the following:

• Australian Securities and Investments Commission (ASIC), an independent statutory body that enforces and administers the Corporations Act, which is the main corporations legislation in Australia;
• Australian Prudential Regulatory Authority (APRA), a statutory body that supervises the banking, insurance and superannuation bodies;
• Australian Competition and Consumer Commission (ACCC), which regulates the interaction between consumers and businesses;
• Australian Criminal Intelligence Commission, which investigates national serious and organised crime such as cybercrime;
• the AFP, which investigates and enforces cross-border compliance, including fraud, drug trafficking, organised crime, money laundering and people smuggling;
• the ATO, which enforces compliance with Australia’s taxation legislation;
• Australian Transaction Reports and Analysis Centre (AUSTRAC), which regulates and enforces cross-border financial transactions; and
• Commonwealth Director of Public Prosecutions, which prosecutes criminal misconduct based on referrals from investigatory bodies.

Regulatory bodies coordinate efforts in order to share information and intelligence-gathering powers (subject to certain restrictions). In the event of serious criminal allegations, it is common to have two or more regulatory authorities involved. Joint task forces, such as the Serious Financial Crime Taskforce, have been established to streamline and consolidate the investigating and reporting lines in Australia.

4 What grounds must the authorities in your country have to initiate an investigation? Is a certain threshold of suspicion necessary to trigger an investigation?

Regulators have wide-ranging statutory investigatory powers. The trigger point is generally suspicion of a breach of a company’s obligations. For example, an investigation under section 13 of the ASIC Act 2001 will be triggered if ASIC thinks it expedient for the due administration of the corporations legislation and where it has reason to suspect that a contravention may have been committed. The degree of suspicion is not defined but the threshold is low.

5 Does double jeopardy, or a similar concept, apply to prevent a corporation from facing criminal exposure in your country after it resolves charges on the same core set of facts in another country?

A person or corporation cannot be tried twice for the same alleged breach of Australian legislation. However, this does not apply internationally. Accordingly, if offending has traversed multiple jurisdictions, a corporation can be charged with an offence under Australian legislation despite having concluded proceedings of a similar nature in another country. A guilty plea or a negotiated outcome in another jurisdiction may affect the investigation or charges in Australia.

6 Does criminal law have general extraterritorial effect in your country? To the extent that extraterritorial effect is limited to specific offences, describe those which have extraterritorial effect, the statutory basis and any conditions that must be met for extraterritoriality to apply.

Criminal law has extraterritorial effect, provided there is an appropriate nexus to Australia. Conduct must have been either wholly or partly undertaken within Australia. Foreign entities with Australian subsidiaries or associated entities will fall within Australian laws for conduct in Australia. For example, if a foreign entity is conducting business in Australia through a subsidiary and the subsidiary breaches Australia’s laws, both may be charged – the subsidiary for a breach of domestic laws and the foreign entity for directly breaching domestic laws or aiding and abetting the breach.

7 Describe the principal challenges in your country that arise in cross-border investigations, and explain whether and how such challenges are dependent on other countries involved.

Australia has entered into mutual assistance treaties with numerous countries in a bid to facilitate information sharing and to expedite investigations. There are also information-sharing arrangements with certain jurisdictions, and therefore a formal request for mutual assistance is not always required. However, challenges arise when there are inconsistent approaches to the investigation by regulators. Legislative requirements as to the gathering of evidence, the integrity of investigators and the reliance on compulsory powers can present issues in cross-border matters.

8 What bearing do the decisions of foreign authorities have on an investigation of the same matter in your country?

Given the co-operation mechanisms available to Australian regulators (such as mutual assistance agreements), it is possible to conduct concurrent investigations in multiple jurisdictions regarding the same factual matters. It is usual for one or more Australian investigatory bodies to coordinate domestically and with international investigatory bodies. A coordinated effort will usually result in one regulator taking the lead in an investigation and other jurisdictions supporting its efforts to round out the information gathering.

9 Do your country’s law enforcement authorities have regard to corporate culture in assessing a company’s liability for misconduct?

Corporate culture is specifically defined in Australia’s Criminal Code as the ‘attitude, policy, rule, course of conduct or practice existing within the body corporate generally or in the part of the body corporate in which the relevant activities takes place’. If intention, knowledge or recklessness is an element of the offence, a corporation can contravene the provision if it expressly, tacitly or impliedly authorised or permitted a corporate culture of non-compliance (see section 12.3 of the Criminal Code Act 1995 (Cth)).

Both ASIC and the ACCC have brought proceedings against corporations for misconduct relating to an entity’s corporate culture.

Corporate culture is a key area of focus in Australia. The Banking Royal Commission has brought to light allegations of widespread misconduct driven by poor culture, including placing profits ahead of customers’ interests and lack of individual accountability.

The Corporate Governance Council of Australia’s stock exchange (ASX) is contemplating amendments to the Corporate Governance Principles and Recommendations (which public companies would report against) to specifically require the installation and reinforcement of good corporate culture.

10 What are the top priorities for your country’s law enforcement authorities?

Top priorities presently include misconduct in the financial services industry, financial crimes and corporate culture, including executive accountability. Cross-border business and transactions are also an area of focus, as are money laundering and tax evasion.

11 How are internal investigations viewed by local enforcement bodies in your country?

An efficiently run internal investigation is welcomed by the regulator, particularly if it leads to self-reporting. In some circumstances, a regulator may ask the corporate to undertake the first stage of the investigation. If an internal investigation is running concurrently with a regulator’s investigation, co-operation in expediting the process and ultimate outcome is encouraged.

Before an internal investigation

12 How do allegations of misconduct most often come to light in companies in your country?

There are a number of ways in which misconduct can be brought to the attention of a company, which include the following:

• ASIC conducts a preliminary investigation into every allegation of misconduct to assess whether further action is required. ASIC may be made aware of suspected contraventions by shareholders, media reports or whistleblowers.
• Whistleblower legislation requires that companies have avenues available to employees to report suspected misconduct. Whistleblowers may trigger internal investigations or investigations by ASIC.
• AUSTRAC monitors international transactions and transactions of (or more than) A$10,000 and will investigate any suspect transactions under anti-money laundering and counter-terrorism legislation.
• The ASX monitors share trading in publicly listed companies and can enquire into suspicious activities, including spikes in trading volume or share price. The ASX can refer suspected contraventions (such as insider trading) to ASIC for further investigation.

13 Does your country have a data protection regime?

The Privacy Act 1988 (Cth) regulates the handling of personal information and the Australian Privacy Principles (APPs) provide guidelines for dealing with such information. The Notifiable Data Breaches scheme, established through the Privacy Act, obliges entities to notify individuals whose personal information is the subject of a data breach, as well as the Australian Information Commissioner, when it is likely the breach will result in serious harm.

14 How is the data protection regime enforced?

The data protection regime is enforced through the Office of the Australian Information Commissioner (OAIC). The Privacy Act confers powers on the Commissioner to facilitate compliance with best practice. The OAIC’s preferred regulatory approach is to facilitate compliance and prevent breaches although it also has investigative and enforcement powers.

15 Are there any data protection issues that cause particular concern in internal investigations in your country?

The APPs regulate how personal information is collected and used. If an entity investigates the actions of an employee, it must be careful that any personal data is collected in accordance with these principles. A heightened level of protection attaches to sensitive information. Entities must comply with their legal obligations, particularly those that require an employee to be notified that personal data has been collected.

16 Are search warrants or dawn raids on companies a feature of law enforcement in your country? Describe any legal limitations on authorities executing search warrants or dawn raids, and what redress the company has if those limits are exceeded.

Generally, the AFP executes search warrants on behalf of Commonwealth agencies. If an investigation is being conducted by another regulatory body, AFP officers may attend with officers of that regulatory body. Warrants contain information as to the restrictions on entry time, dates and the evidence that can be gathered during the execution of the search warrant, which may include hard copies of documents as well as stored communications (such as computer hard drives or mobile phones). Companies are entitled to have legal representatives present during the execution of search warrants and to request an itemised list of the property seized.

17 How can privileged material be lawfully protected from seizure during a dawn raid or in response to a search warrant in your country?

Companies may claim legal professional privilege (LPP) over materials seized during a legitimate search. Practically, this may mean the materials are sealed and delivered to the relevant court registry to await resolution of any disputed privilege claim by litigation or negotiation. The mere seizure of material without it being read does not constitute a waiver of privilege.

18 Are there any privileges in your country that would prevent an individual or company from providing testimony? Under what circumstances may an individual’s testimony be compelled in your country? What consequences flow in your country from such compelled testimony?

During an investigation by a regulator, an individual can be compelled to give evidence in an examination. The individual cannot refuse to answer questions on the basis that those answers may tend to incriminate him or her. However, the individual can claim privilege against self-incrimination, meaning that the investigatory body cannot use the evidence gathered as an admission by the individual. There are some regulatory bodies that can derivatively use the information gathered during these types of examinations.

In a litigation context, an accused person has a right to claim privilege against self-incrimination or self-exposure to penalty, which means that they cannot be required to give evidence during proceedings against them. A witness may object to the giving of evidence in proceedings if the response would tend to prove that the witness had committed an offence under Australian or foreign laws or make them liable to a civil penalty. In those circumstances, the witness may be issued with a certificate (under section 128 of the Evidence Act 1995 (Cth)), which enables the witness to give evidence under protection against prosecution.

19 What legal protections are in place for whistleblowers in your country?

Corporate whistleblowers who provide information to ASIC about contraventions of the Corporations Act 2001 (Cth) are granted three main legal protections:

• Their identity and information given cannot be disclosed unless authorised by law.
• They are protected against civil or criminal liability for making the disclosure (e.g., for defamation).
• They are protected against being victimised for making their disclosure.

Protection will only be given to persons who meet certain criteria, including being an existing employee or officer of the company. In the financial sector, whistleblowers who provide information to APRA are given similar protections.

20 What rights do employees possess under local employment law that determine how they are treated within a company if their conduct is within the scope of an investigation? What employment rights would attach if they are deemed to have engaged in misconduct? Does it differ for officers and directors of the company?

Under the Fair Work Act 2009 (Cth), employees are protected against unfair dismissal. In the event of an internal investigation, certain omissions by the employer may violate the right against unfair dismissal, including failing to provide the employee with a support person. The employee has a right to be given information relating to the allegations against him or her and adequate time to respond. If an employee has engaged in misconduct, his or her rights will depend on the precise nature of the misconduct. For example, an internal finding of serious misconduct may constitute valid grounds for dismissal. However, a finding of serious misconduct by law enforcement may constitute an offence, and the employee’s rights would depend on the associated laws.

Under the Corporations Act 2001 (Cth), officers and directors are subject to significantly higher standards of conduct. Contravention of these duties may attract significant penalties, disqualification or imprisonment.

21 Are there disciplinary or other steps that a company must take in your country when an employee is implicated or suspected of misconduct, such as suspension or in relation to compensation? Can an employee be dismissed for refusing to participate in an internal investigation?

There are no express requirements for employers to impose disciplinary or other steps if an employee is suspected of misconduct.

If ‘serious misconduct’ is established, the employee’s contract of employment may be immediately terminated. The Fair Work Regulations define ‘serious misconduct’ as including wilful or deliberate behaviour that causes serious or imminent risk to the health or safety of employees or reputation to business. Examples include theft, fraud, assault, being intoxicated at work or refusing to carry out lawful and reasonable instructions. Mere refusal to participate in an internal investigation is unlikely to constitute valid grounds for dismissal.

Commencing an internal investigation

22 Is it common practice in your country to prepare a document setting out terms of reference or investigatory scope before commencing an internal investigation? What issues would it cover?

It is common to set out the scope of an investigation before it commences, although this is not mandatory. Consideration should be given to any regulatory compliance obligations, including reporting obligations. It is common for a board of directors to refer an internal investigation to an external adviser, such as a law firm, particularly if the board has concerns about litigation and risk management.

The terms of reference should outline the key allegations or concerns, define the sources of information that it is proposed should be gathered during the investigation, and identify who will report on the findings or recommendations of the investigation and the recipient of the report.

23 If an issue comes to light prior to the authorities in your country becoming aware or engaged, what internal steps should a company take? Are there internal steps that a company is legally or ethically required to take?

When a company becomes aware of potential issues, an investigation should be undertaken to identify the nature and extent of any misconduct. Care should be taken in setting up the investigation, including to ensure that communications are confidential and privileged to the extent possible. A company may be obliged to report to regulators in relation to certain breaches, or may elect to self-report or seek immunity. Legal advice should be sought prior to making such decisions as the consequences may be serious. A company should work towards containing the breaches and, as far as possible, secure complete cessation of the offending behaviour. Evidence of the suspected breaches should not be destroyed and document preservation notices should be issued in appropriate circumstances. Any dismissal or discipline of individuals suspected to have participated in the misconduct should be carefully managed and based on legal advice.

24 At what point must a company in your country publicly disclose the existence of an internal investigation or contact from law enforcement?

If the internal investigation is confidential, there is no requirement for a company to disclose its existence publicly. Disclosure may be required if it is not possible for the conduct to be contained or if media or market speculation needs to be addressed. If the company is being investigated by regulators, disclosure will often depend on the preferred approach of that regulator. It is usual for regulators to ask that disclosure of the fact of their investigation not be made public unless mutually agreed.

Private companies have no legislative obligation to disclose the existence of an internal investigation or contact from law enforcement.

25 When would management typically brief the board of a company in your country about an internal investigation or contact from law enforcement officials?

Directors are responsible for governance, monitoring and oversight. Accordingly, management should promptly brief the board in relation to any significant internal investigations or contact from law enforcement officials and should be routinely updated on the progress of the investigation.

26 What internal steps should a company in your country take if it receives a notice or subpoena from a law enforcement authority seeking the production or preservation of documents or data?

Compulsory document production notices must be strictly complied with as it is a criminal offence not to do so without a reasonable excuse. The notice may be addressed to an individual or the ‘appropriate officer’ within the company. The named individual does not have to coordinate the response but they should be kept informed as they may be held personally liable for any non-compliance.

It is necessary to make ‘reasonable endeavours’ to respond to a notice. A structured approach to the collation and production of materials should be taken, including where data will be sourced, relevant individuals or custodians of data, document preservation, and how the documents will be collated and stored to preserve original documents and metadata.

27 How can the lawfulness or scope of a notice or subpoena from a law enforcement authority be challenged in your country?

A company should carefully consider the scope of the notice and any grounds for objecting to it, including that it has been properly issued, the information sought is clearly defined and relevant (i.e., not ‘fishing’), and the request is not oppressive or unreasonable. Any concerns should be raised with the law enforcement authority before making an application to set aside the notice.

Attorney–client privilege

28 May attorney–client privilege be claimed over any aspects of internal investigations in your country? What steps should a company take in your country to protect the privilege or confidentiality of an internal investigation?

Communications made for the dominant purpose of giving or receiving legal advice, or existing or contemplated litigation, can be subject to a legitimate claim for legal professional privilege. If the dominant purpose relates to a factual investigation, it is unlikely that the communication will be privileged.

Lawyers’ notes regarding internal investigations are usually protected by legal professional privilege. To protect the privilege, all communications should be marked as confidential and privileged and should not be distributed outside the lawyer–client communication lines unless necessary.

29 Set out the key principles or elements of the attorney–client privilege in your country as it relates to corporations. Who is the holder of the privilege? Are there any differences when the client is an individual?

Legal professional privilege is held by the client (company or individual), not the legal adviser. Employees of the company may have grounds to assert common interest privilege, if the employee reasonably believed the lawyer was giving them legal advice and their interests were not adverse to the company. In circumstances where a company seeks to maintain control over the privileged information, lawyers will ordinarily be instructed to communicate that distinction, adopting the US-style Upjohn or corporate Miranda warnings.

30 Does the attorney–client privilege apply equally to in-house and external counsel in your country?

Yes. The dominant purpose test applies, irrespective of whether the lawyer is internal or external to the company. Best practice is for in-house counsel to hold a current practising certificate and be independent. Privilege claims of advice from in-house counsel generally will be scrutinised, particularly if they hold another non-legal position within the company, or if they are accustomed to providing commercial advice (which will not be privileged).

31 To what extent is waiver of the attorney­–client privilege regarded as a co-operative step in your country? Are there any contexts where privilege waiver is mandatory or required?

It is normal for companies and individuals to maintain claims of LPP. Waivers are generally restricted to circumstances where the entity is essentially opening their doors on a no-restrictions basis. A court may compel an entity to produce documents if it has determined that the claims for privilege cannot be maintained.

32 Does the concept of limited waiver of privilege exist as a concept in your jurisdiction? What is its scope?

Yes. For instance, a party responding to a compulsory notice to produce documents to ASIC may enter into a voluntary confidential LPP disclosure agreement, which allows production of the documents to ASIC, while protecting their disclosure to third parties. ASIC will undertake to treat the information as confidential and will defer to the privilege holder if ASIC is compelled to produce the documents. These agreements have not been tested by the courts as to whether they will withstand a challenge.

33 If privilege has been waived on a limited basis in another country, can privilege be maintained in your own country?

Possibly. Relevant considerations will include the context in which the waiver was made (under compulsion or voluntarily), the use of the information subsequent to the waiver and whether, in Australia, privilege would still properly apply to the information.

34 Do common interest privileges exist as concepts in your country? What are the requirements and scope?

Common interest privilege does exist. The interest of the parties claiming the privilege must be the same, or almost the same (such that the parties could use the same lawyer), and it will not be available if they are potentially adverse. There is no requirement for a formal agreement between parties to establish this privilege, nor to identify an intention to claim the privilege at the time of communication, although it is advisable to do so to establish the extent of the common interest.

35 Can privilege be claimed over the assistance given by third parties to lawyers?

It is not uncommon for lawyers to brief third-party experts to assist on matters relevant to the giving of legal advice. Communications with the third party will be covered by LPP if they fall within the dominant purpose test.

If a party serves a report or advice prepared by a third party during litigation, all materials (including briefing materials) used by the third party in informing an opinion generally become discoverable. There are limited circumstances in which a party can resist production of communications underpinning a report.

Witness interviews

36 Does your country permit the interviewing of witnesses as part of an internal investigation?

Organisations are permitted to conduct fact-finding interviews during an internal investigation. Consideration ought to be given to ensuring that the individual is afforded the appropriate amount of time to prepare and respond to questions. Whistleblowers, who may be among the first interviewed, are afforded additional legislative protections that must be adhered to.

37 Can the attorney–client privilege be claimed over internal witness interviews or attorney reports in your country?

LPP can be claimed over witness interviews and reports prepared by legal advisers for the dominant purpose of giving or receiving legal advice or in the preparation of legal proceedings.

38 When conducting a witness interview of an employee in your country, what legal or ethical requirements or guidance must be adhered to? Are there different requirements when interviewing third parties?

Corporate Miranda or Upjohn warnings are not required to be given, although they are common in cross-border investigations. It is prudent to outline the scope of the lawyer’s engagement at the time of the interview, to avoid any misconception as to whether the parties intend privilege to apply. The same approach applies to both current employees or third parties, although there is less scope for privilege to apply to third parties.

39 How is an internal interview typically conducted in your country? Are documents put to the witness? May or must employees in your country have their own legal representation at the interview?

The style of interview will depend on the seriousness of the allegations being investigated. Notes of interviews should be kept confidential and a record of any materials discussed during the interview should be retained for future reference. Generally, a witness will be asked for an independent recollection of events before being presented with any documents. Documents put to a witness should be restricted to those about which the witness has first-hand knowledge. If the allegations are serious and directed to the interviewee, then it is not unusual to provide the interviewee with the option of having their own legal representation at the interview.

Reporting to the authorities

40 Are there circumstances under which reporting misconduct to law enforcement authorities is mandatory in your country?

It is mandatory under anti-money laundering and counter-terrorism financing legislation to report suspicious financial transactions to AUSTRAC. The company must have formed a suspicion that the dealings may be related to an offence (such as money laundering, terrorism financing or operating under a false identity, tax evasion or proceeds of crime) and must report within 24 hours if it relates to terrorism, or otherwise three business days.

State legislation may also apply (for instance, in New South Wales).

41 In what circumstances might you advise a company to self-report to law enforcement even if it has no legal obligation to do so? In what circumstances would that advice to self-report extend to countries beyond your country?

If an internal investigation has led to findings of misconduct, a decision will need to be made whether to self-report. Self-reporting may be advisable if the findings are likely to affect the company’s ability to conduct its business or trading of the company’s shares.

Disclosure to regulators outside Australia may depend on whether the conduct has occurred outside the jurisdiction and the reporting obligations in those other jurisdictions.

42 What are the practical steps you need to take to self-report to law enforcement in your country?

In self-reporting, the company should be prepared to co-operate honestly and completely with authorities and assist regulators’ investigations, which may go beyond internal investigation. This will involve providing to authorities any information gathered during the internal investigation at the time of self-reporting.

The company should be prepared to plead guilty to any offence identified and may be required to assist in the prosecution of related parties. Public disclosure will need to be considered for listed companies, consistent with disclosure obligations.

In certain circumstances, immunity for being first-in-time can be sought when reporting to the ACCC.

Legislation allowing deferred prosecution agreements (DPAs) is proceeding through the Australian Parliament. It has been the subject of extensive consultation and is expected to be introduced in late 2019. Once passed, it is anticipated that this legislation will provide benefits to corporates who self-report relevant offences (see question 55).

Responding to the authorities

43 In practice, how does a company in your country respond to a notice or subpoena from a law enforcement authority? Is it possible to enter into dialogue with the authorities to address their concerns before or even after charges are brought? How?

Companies take seriously their obligation to comply with notices from regulators. It is possible to enter into a dialogue with a regulator in relation to a notice or subpoena, particularly if there are concerns about scope or time for production. This would be done by speaking or writing to a representative of the regulator in the first instance.

44 Are ongoing authority investigations subject to challenge before the courts?

A company may challenge an investigation if the investigation is an abuse of process or harassment.

45 In the event that authorities in your country and one or more other countries issue separate notices or subpoenas regarding the same facts or allegations, how should the company approach this?

Consistency is key when a company is facing allegations of wrongdoing regarding the same facts in multiple jurisdictions. A company should ensure responses are coordinated and that production of documents or information is strictly responsive to the notice. There is no requirement to go beyond the strict terms of the notice and doing so may amount to voluntary disclosure and not be afforded protections (such as confidentiality and privilege) that would otherwise be available.

46 If a notice or subpoena from the authorities in your country seeks production of material relating to a particular matter that crosses borders, must the company search for and produce material in other countries to satisfy the request? What are the difficulties in that regard?

Materials must be produced if they are in the possession, custody or control of the company in Australia (irrespective of the location where they are held). It may be possible to resist production of materials outside Australia if to do so would be oppressive.

47 Does law enforcement in your country routinely share information or investigative materials with law enforcement in other countries? What framework is in place in your country for co-operation with foreign authorities?

Australian regulators make use of mutual recognition agreements with regulators from other jurisdictions, such as the International Organisation of Securities Commissions. Less formal arrangements exist between some regulators, such as the AFP’s arrangements with other police agencies globally. Mutual assistance requests are a formal mechanism by which authorities can obtain information from overseas regulators for use in criminal proceedings.

48 Do law enforcement authorities in your country have any confidentiality obligations in relation to information received during an investigation or onward disclosure and use of that information by third parties?

Information produced under compulsion can only be used for the purpose for which it was obtained. Materials can be shared between regulators, subject to satisfying legislative requirements, and can be disclosed to third parties during an investigation if it is deemed necessary.

49 How would you advise a company that has received a request from a law enforcement authority in your country seeking documents from another country, where production would violate the laws of that other country?

Refusing to produce a document that is disclosable under the notice will be a breach and may give rise to legal action by the regulator. Open dialogue with the regulator is encouraged at an early stage to attempt to negotiate an amendment to the notice to exclude production of documents that give rise to a breach of laws in another jurisdiction. Otherwise, the company should look at avenues to challenge the notice.

50 Does your country have blocking statutes? What related issues are implicated by complying with a notice or subpoena?

Australian data privacy laws prevent the disclosure of certain personal and sensitive information. The APPs apply to government agencies, private sector and not-for-profit organisations (with an annual turnover of more than A$3 million), private health providers and small businesses.

Disclosure is permitted if compelled (such as by a document production notice or subpoena) or reasonably necessary for one or more enforcement-related activities by an enforcement body. In defending allegations of misconduct, data may also be transferred for the purposes of or in connection with legal proceedings (including prospective legal proceedings) or for the purposes of establishing, exercising or defending legal rights.

51 What are the risks in voluntary production versus compelled production of material to authorities in your country? Is this material discoverable by third parties? Is there any confidentiality attached to productions to law enforcement in your country?

It is common for companies to request that a regulator issue a notice to compel the production of materials to preserve claims of confidentiality and privilege. Such a claim may be waived by voluntary production. Regulators can be compelled to produce documents to third parties by court order, but may segregate documents that are subject to claims of privilege (including LPP and public interest immunity) and confidentiality, and leave it to the court to rule on such claims.

Global settlements

52 Prior to any settlement with a law enforcement authority in your country, what considerations should companies be aware of?

Considerations relevant to settlement include an assessment of the facts and allegations made against the company, the strength of the evidence, the terms on which the regulator is willing to settle and the potential consequences of any settlement (including on business operations, investigations in other jurisdictions and the risk of collateral civil litigation).

53 What types of penalties may companies or their directors, officers or employees face for misconduct in your country?

Companies can face financial penalties, which can be up to 10 times what is imposed on an individual.

Penalties against an individual will vary depending on the offence. Criminal wrongdoing may result in imprisonment or financial penalties, or both. Civil penalty proceedings can result in fines, compensation orders and disqualification from managing corporations.

54 What do the authorities in your country take into account when fixing penalties?

Courts will consider a range of factors, including the seriousness of the offence, the number of contraventions and the period during which they occurred, the need for general deterrence, remorse, retribution, co-operation and any relevant personal circumstances.

55 Are non-prosecution agreements or deferred prosecution agreements available in your jurisdiction for corporations?

DPAs are not currently available but are likely to be introduced in the future (see question 42). Based on the current proposal, DPAs will allow companies to negotiate terms of settlement for allegations of serious corporate crime, which include the setting of a penalty for contravention but will require approval by an ‘approving officer’ before they can be finalised. Not all corporate crimes are covered in the proposed legislation and DPAs will not be available to individuals.

56 Is there a regime for suspension and debarment from government contracts in your country? Where there is a risk of suspension or debarment or other restrictions on continuing business in your country, what are the options available to a corporate wanting to settle in another country?

The Commonwealth government does not automatically suspend or disbar a company for any conduct, although it does have discretion to preclude a company from public procurement contracts.

57 Are ‘global’ settlements common in your country? What are the practical considerations?

Global settlements are not common, per se. Ordinarily, the consideration regarding settlement in Australia will be influenced by settlements in other jurisdictions. Practically, what may occur is that an overseas agency will settle with a company, which then will make a submission to the Australian regulator as to there being no benefit in proceeding with the investigation in Australia.

58 Are parallel private actions allowed? May private plaintiffs gain access to the authorities’ files?

Private actions are permitted to run in parallel to criminal or regulatory proceedings, provided they do not prejudice the accused’s right to a fair trial, the right to maintain privilege against self-incrimination or exposure to penalty, or interfere with the criminal proceedings. It is common for private or civil actions to be stayed pending the outcome of criminal proceedings.

Private plaintiffs are entitled to apply to regulators to access files through various mechanisms, including Freedom of Information requests and subpoenas. In addition, ASIC has the power to provide information to private litigants in certain circumstances. The disclosure by regulatory bodies of information is subject to overriding considerations of public interest, the risk of prejudice to an ongoing investigation or proceeding, and statutory restrictions.

Publicity and reputational issues

59 Outline the law in your country surrounding publicity of criminal cases at the investigatory stage and once a case is before a court.

Criminal investigations are generally confidential. An accused has the right to a fair trial and a presumption of innocence. Investigatory bodies, such as the AFP, have media policies that restrict the publication of information that may prejudice an ongoing investigation or affect an accused’s right to a fair trial, particularly in tainting the jury pool.

Criminal court proceedings are a matter of public record. There are limited situations in which a corporation or individual can restrict access to and publication of the court proceedings. Although the media are entitled to report on public hearings, they are required to follow orders from the judge relating to non-publication of certain information. Jury deliberations are confidential. It is an offence to publish anything regarding the identity of a juror or the discussions that take place in the jury room.

60 What steps do you take to manage corporate communications in your country? Is it common for companies to use a public relations firm to manage a corporate crisis in your country?

It is common for public relations (PR) firms to be hired, particularly in high-profile matters. Lawyers will generally work with a PR firm to ensure accuracy of reporting and in making any public statements during an investigation or proceeding.

61 How is publicity managed when there are ongoing, related proceedings?

Corporations need to carefully manage the release of information regarding ongoing proceedings to avoid (1) being in contempt of the proceedings, (2) prejudicing the proceedings, especially any criminal proceedings before a jury and (3) meet any relevant continuous disclosure obligations. Regulators will announce commencement of proceedings and may provide procedural updates but generally will not comment on substantive matters for the duration of the proceeding.

Duty to the market

62 Is disclosure to the market in circumstances where a settlement has been agreed but not yet made public mandatory?

If the settlement is likely to have a material effect on the price or value of the company’s securities and does not fall within an exception (such as the information being confidential), it is required to be disclosed to the market by a public company. Confidentiality alone is not grounds for non-disclosure of the fact of settlement. It is often the case that parties agree the terms of disclosure of a settlement as part of the settlement negotiations.

Footnotes

Ben Luscombe, Jenni Hill and Angela Pearsall are partners, Kirsten Scott is a counsel and Lara Gotti is a senior associate at Clifford Chance.