United States: Handling Internal Investigations
This is an Insight article, written by a selected partner as part of GIR's co-published content. Read more on Insight
Goals of the internal investigation
Always begin with the end in mind. This chapter walks through the nuts and bolts of conducting an internal investigation in the United States, but there are many different ways to conduct an investigation. The company must decide, among many other things, how much to rely on internal resources like internal legal, audit, compliance or finance; should it retain external counsel; and how should it document the investigation? The classic lawyer answer to all these questions is that it depends on the facts. And though it is a frustrating answer, it happens to be true: there is no one-size-fits-all plan for conducting internal investigations. So our best advice is to take time at the beginning of any internal investigation and think comprehensively about where you need to be at the conclusion of the investigation. In short, what information do you need to know (or determine is not possible to know), and how can you best position the company when the investigation is concluded? Beginning with the end in mind provides a structure to making each decision in conducting an internal investigation.
Not all internal investigations will result in government investigations or litigation, but it is helpful to know how the US regulators – who see many such investigations and often are called upon to assess the adequacy of an internal investigation – describe an effective internal investigation. We reviewed public statements of Department of Justice (DOJ) and Securities and Exchange Commission (SEC) officials (several of which are quoted in the footnotes) to identify what they believe are the hallmarks of an effective internal investigation. They focus on the results: namely, did the investigation identify the individuals responsible for the wrongdoing.  This is of obvious importance to the government – there have been many public statements about the government’s desire to prosecute individuals in addition to companies  – but it is also important to companies. If the company understands the scope of individual wrongdoing, it has necessarily conducted a thorough investigation. And, if it does not, it is difficult to implement remediation designed to avoid the same mistake in the future. Not surprisingly, the government has also emphasised remediation. As a best practice, an internal investigation should focus on thoroughly assessing the veracity of allegations of wrongdoing, including reviewing all relevant documents and interviewing all employees who possess relevant information, whether located at home or abroad. 
In many, if not most cases, the company will have the best and most direct access to the facts through documentary evidence and witnesses. Designing an effective internal investigation will often put the company in the position of getting the first and clearest view into the relevant issues, and can sometimes allow it to make decisions (eg, in litigation) based on a better understanding of the strengths and weaknesses of the company’s position. Further, if a company is approached by a US enforcement agency to explain an allegation of potential wrongdoing, the best response from the company is that it was already aware of the potential issue and has conducted a thorough investigation, including, if appropriate, effective remediation. Appropriately addressing allegations of wrongdoing (whether potential violations of law or company policy) is a hallmark of an effective compliance programme, and being able to show the government how that works in your company builds trust with the enforcement agency and sends a message that the company is serious about compliance.
The aspects of an internal investigation reviewed below are meant to identify and remind companies of the key issues as they navigate the many decision points of an internal investigation.
Structuring the investigation
There are initial decision-points that will shape any internal investigation. Of primary importance is identifying the client. Is the client the entire company, a subsidiary of the company, the board of directors or a committee of the board? Different clients have different needs and different mandates, goals and duties. For example, if a company’s board of directors establishes a special committee to handle the investigation, and outside counsel is retained by the special committee, both the special committee and outside counsel need to be careful to preserve privilege. The company and the special committee may have a common interest that will protect privileged communications between the two, but it is not necessarily so. 
The company must also decide who will conduct the internal investigation. Many internal reviews can be handled in-house. When considering whether to hire outside counsel, companies typically consider the capability and availability of inside resources, the potential scope of legal liability or public embarrassment, and the need for independence.
Finally, the origin of an internal investigation is a touchstone for scoping the review. An internal investigation can be triggered in many ways, including by an internal whistleblower, a news report, a government settlement or public disclosure by a competitor, or an inquiry from the government. No matter how it arises, though, the key initial question is: what is the actual allegation of wrongdoing or issue? Focusing on the actual allegation or issue both helps to ensure the company will have the information it needs at the conclusion of the review, and it helps guard against the temptation to conduct an overly broad review. 
Document preservation and collection
An initial step in conducting any investigation is to identify, obtain control over and implement measures designed to prevent the destruction or loss of relevant documents and information. Absent appropriate measures, investigators may lose the ability to accurately determine the facts. Where litigation is reasonably foreseeable, failure to preserve documents may subject the company to discovery sanctions for spoliation of evidence.  Further, where criminal investigation is possible, preserving evidence is critical to protect the company and its personnel against allegations of obstruction of evidence. The government can, and does, bring criminal obstruction of justice charges against companies and individuals based on deletion of even just a relevant email or text message. 
The means to preserve documents may vary based on the scale and complexity of the investigation. Typically, counsel will issue a preservation notice to those persons who may have relevant information.  This notice will instruct employees to preserve and not destroy information related to the matter under investigation, and employees will be asked to confirm their receipt and agreement to comply with the notice. As the investigation proceeds, it may become necessary to modify the scope of the notice or to expand the number of persons to whom it is issued.  As part of the preservation measures, the company should consider whether it is necessary to modify its document retention policy to the extent it provides for relevant electronically stored information to be automatically deleted or electronic back-up tapes to be recycled.
Depending on the investigation’s scale and what documents are needed, it may also be necessary to conduct privileged collection interviews. Collection interviews are thorough interviews with document custodians to determine, based on their responsibilities, roles within the organisation, and document practices, what relevant paper documents and electronic records the custodian may have; and to identify, locate and collect the information. Collection interviews are also customary where the investigation is being conducted in parallel with a document request or subpoena from an enforcement agency. It can be helpful to conduct collection interviews while a third-party e-discovery vendor is on-site to collect forensically the identified electronic records and image any hard copy documents.
Once relevant documents are identified, the investigators must review and analyse the documents, which often includes critical evidence needed to create a factual understanding and chronology of events, and to prepare for witness interviews. Proper organisation of the documents is critical to ensure they are useful and retrievable for investigatory purposes and, if later necessary, to produce to enforcement authorities or in litigation. Often an e-discovery platform is helpful in organising and conducting the review.
In conducting large-volume document reviews, it may be possible for reasons of economy and speed for junior attorneys, contract attorneys or paralegals to conduct the first-line or initial review, though they should always act under the direction of more seasoned attorneys. The review may include classifying documents based on legal privilege status or particular issues. In addition, reviewers should mark key documents for review by the lead attorneys. In many cases, it is possible to narrow the initial universe of documents to review by applying keywords or data analytics techniques. (Again, think carefully about what questions you actually need to answer to guard against an overly expansive and expensive review.)
Counsel must also be sensitive to foreign data privacy rules and regulations. While US law imposes few restrictions on processing, reviewing and producing documents from company employees resident in the United States, many US investigations involve overseas custodians or business operations. In those instances, US counsel should consult with the company’s data privacy officer and, as necessary, data privacy counsel before collecting or reviewing data.  Chinese law, for example, requires that documents undergo state secrets review before transfer from China. Under the General Data Protection Regulation, European Union member states also have significant restrictions on the processing and transfer of personal data, a term that can be broadly understood. These and similar restrictions might require document review to be conducted outside the United States.
Interviews of fact witnesses
Interviewing fact witnesses is nearly always an essential component of any investigation. Witness interviews conducted by counsel develop the facts by filling gaps in knowledge that cannot be understood through documents. In addition, a properly documented interview memorialises the witness’s recollection, which can be disclosed as necessary, or later be used to impeach or challenge the witness should the witness’s account change. The sequencing and timing of witness interviews must be decided strategically after careful consideration. In the best case, relevant documents are reviewed prior to interviews; however, urgency may dictate that initial interviews be conducted before documents are fully reviewed or exhibits assembled. Privilege, commercial considerations and related issues may be significant when considering interviews of former employees or third-party witnesses.
In conducting an interview of company employees, counsel must identify themselves and their role as counsel for the company. The essential aspects of the so-called 2 warning  or 2 include advising the employee witness that:
- counsel represents the company and does not represent the witness;
- the interview is privileged and should be kept confidential; and
- the company owns and may elect to waive the privilege.
Failure to properly admonish the witness can lead to the disqualification of counsel if the witness later claims to have believed that the attorney represented the witness or that the company would keep the interview confidential. Skilled counsel can generally provide the requisite 2 warning while maintaining a productive relationship with the witness. DOJ policy requires that a company seeking cooperation credit must disclose all relevant facts relating to misconduct by individual employees who were substantially involved in or responsible for the misconduct, and it is not uncommon that facts gleaned during interviews are disclosed to enforcement authorities. 
Effective use of experts in internal investigations
Experts can often provide valuable assistance to the legal team conducting an internal corporate investigation. Retaining an expert early in an investigation can assist counsel in developing the investigative work plan, the investigative strategy, the potential facts and the strategic objectives. Targeted experts can lead to more streamlined and effective document collection and review and more targeted witness interviews.
Cases involving potential financial reporting, books and records, internal controls or compliance violations often benefit from the expertise of a forensic accountant. Economists are also frequently hired to assist with complex corporate investigations because they can assist in determining the financial impact of the company’s activities. Depending on the nature of the issues involved in the investigation, counsel may also consider retaining subject matter experts with knowledge about particular industries, technologies or fields of study.
Before retaining an expert, counsel should consider how they intend to use the expert and whether they want to shield the expert’s opinions and work product from production. Answering these questions will guide the structure of the expert engagement.
There are two types of expert witnesses – consulting experts and testifying experts. Consulting experts are typically hired by counsel to assist behind the scenes with an investigation or subsequent litigation, not to provide testimony during discovery or trial. Except in unusual circumstances, if a consulting expert is retained by counsel, the client is not required to disclose the existence of consulting expert, the substance of counsel’s communications with the expert or the expert’s opinions.  Because communications with consulting experts are ordinarily protected from disclosure, counsel often use consulting experts to have candid communications about facts, investigative theories and strategies without fear that the communications may later end up in the hands of the opposition.
In contrast, counsel are required to disclose the identity, qualifications and opinions of experts who may be called to testify in pretrial discovery or at trial; the facts or data considered by the expert; and a list of other cases in which the expert testified during the previous four years.  Communications between a party’s counsel and a potential testifying expert may also be subject to disclosure if they:
- ‘relate to compensation for the expert’s study or testimony’;
- reveal facts or data that counsel provided to the expert and that the expert considered in forming their opinions, or
- they reveal assumptions counsel provided to the expert that the expert relied on in forming their opinions. 
Documenting the results of an investigation
Before drafting a written report summarising the results of a corporate internal investigation, counsel should consider and carefully review with the client the pros and cons of committing the results to writing.
In a written report, counsel can document the investigative steps, key facts uncovered during the investigation, findings, conclusions and recommendations for remediation. Not only can the report serve as evidence of the actions the company took to examine the matter, but it can also serve as a record that the company can use in subsequent litigation and government investigations. The DOJ and SEC have stated that they will consider whether a company has conducted and produced the results of an internal investigation when deciding whether to give the company cooperation credit. 
Written reports also have potential drawbacks. When an investigation uncovers improper conduct, a written report serves as a clear record of that conduct. Committing a report to writing increases the risk of disclosure to the government, legislative bodies, or to litigants in private suits.  If disclosed, statements in a written report may be used as ‘admissions’ by the company in subsequent litigation.  To mitigate these risks, if a written report is prepared, counsel should be careful to mark a written report privileged and confidential, limit the report’s distribution, and avoid including unnecessary information or conclusions in the report.
In lieu of a complete written report of the investigation, counsel may choose to draft a limited written report or provide company officials with an oral report. Limited written reports typically contain a discussion of the investigative steps and a high-level summary of the facts and issues investigated. Oral reports allow counsel to provide a detailed account of the investigative process and results while minimising disclosure risks. Counsel may also choose to take a hybrid approach by drafting a limited written report supplemented by a verbal reporting of sensitive facts, findings and conclusions.
Whatever means of documentation chosen, it is important to recognise that using the results of the internal investigation (discussed below) often does not happen until years after the conduct, and sometimes years after the internal investigation is complete. Employees turn over and memories fade. Without some record of the investigation, its scope and, importantly, the remediation, the company will lose the full value of an effective internal investigation if important details are lost to the passage of time or retirement.
Using the internal investigation
Internal investigations allow companies to identify problems and implement remediation recommendations. Counsel should inform the company if they uncover ongoing legal violations, misconduct or compliance deficiencies during the course of an investigation so the company can implement corrective action.
At the conclusion of an investigation, counsel should carefully review the findings, legal conclusions and recommendations with the company to determine the appropriate next steps. In some instances, a company may be legally required to report certain findings to the public or a third party regulator. Public companies, for example, are obligated to report material information to investors that may require disclosure of information uncovered during an internal investigation.  Environmental, health and safety regulations and permits often require self-reporting to the government. 
Even when disclosure is not legally required, a company may choose to voluntarily disclose the results of an internal investigation. Voluntary disclosure provides the company with an opportunity to control the timing and the messaging around the release of the information, which may assist in mitigating reputational risk. Some law enforcement and regulatory agencies, including the DOJ and the SEC, have policies to encourage self-disclosure by awarding extra cooperation credit for entities that voluntarily self-report.  On the other hand, voluntary disclosure can lead to unwanted enforcement attention.
Voluntary disclosure runs the risk of waiving the attorney-client privilege or work product protection of the investigative record.  Counsel should take steps to attempt to preserve the privilege, including obtaining a signed confidentiality agreement from the government that makes clear that the company intends to preserve all privileges and that the government is precluded from unilaterally disclosing the contents of the report to third parties.  Other techniques, including attorney proffers and ‘hypothetical’ discussions, are available as well to minimise privilege waiver risks while disclosing information, if the decision is made that disclosure serves the company’s interest.
Through careful consideration of the goal of the investigation, and then planning and execution, internal investigations can help mitigate legal risk, reputational harm, business interruption and expense. Achieving these goals requires close collaboration between counsel and client to maximise benefits and avoid negative consequences.
 See generally US Dep’t of Justice, Justice Manual § 9-28.700 (2018), available at https://www.justice.gov/jm/jm-9-28000-principles-federal-prosecution-business-organizations#9-28.700 (‘In order for a company to receive any consideration for cooperation . . . the company must identify all individuals substantially involved in or responsible for the misconduct at issue, regardless of their position, status or seniority, and provide to the Department all relevant facts relating to that misconduct.’) See also Rod J Rosenstein, Deputy Attorney Gen., Remarks at the American Conference Institute’s 35th International Conference on the Foreign Corrupt Practices Act (29 November 2018), available at https://www.justice.gov/opa/speech/deputy-attorney-general-rod-j-rosenstein-delivers-remarks-american-conference-institute-0, (‘Our revised policy also makes clear that any company seeking cooperation credit In criminal cases must identify every individual who was substantially involved in or responsible for the criminal conduct. In response to concerns raised about the inefficiency of requiring companies to identify every employee involved regardless of relative culpability, however, we now make clear that investigations should not be delayed merely to collect information about individuals whose involvement was not substantial, and who are not likely to be prosecuted. We want to focus on the individuals who play significant roles in setting a company on a course of criminal conduct.’) See id. (‘[In] [c]ivil cases . . . a company must identify all wrongdoing by senior officials, including members of senior management or the board of directors, if it wants to earn any credit for cooperating in a civil case. If a corporation wants to earn maximum credit, it must identify every individual person who was substantially involved in or responsible for the misconduct.’)
 See, eg, FCPA Corporate Enforcement Policy, US Dep’t of Justice, Justice Manual § 9-47.120 (2019), available at https://www.justice.gov/jm/jm-9-47000-foreign-corrupt-practices-act-1977.
 See Caldwell NYU, supra note 2 (‘[W]e expect companies to conduct appropriately tailored investigations designed to root out misconduct, identify wrongdoers and provide all available facts. To the extent a company decides to conduct a broader survey of its operations, that decision, and any attendant delay and cost, are the result of the company’s choices, not the department’s requirement.’).
 See generally Matthew D LaBrie, The Common Interest Privilege, Am. Bar Ass’n Section of Litig., Trial Evidence (30 September 2014), https://apps.americanbar.org/litigation/committees/trialevidence/articles/fall2014-0914-common-interest-privilege.html (‘[T]he recognition and scope of a common interest privilege vary greatly from jurisdiction to jurisdiction. Recognition of the privilege ranges from a broad privilege in Massachusetts, to nonexistent in Illinois, to a case-by-case determination in California.’).
 See Caldwell NYU, above note 2 (‘Although we expect internal investigations to be thorough, we do not expect companies to aimlessly boil the ocean. Indeed, there have been some instances in which companies have, in our view, conducted overly broad and needlessly costly investigations, in some cases delaying our ability to resolve matters in a timely fashion.’).
 See, eg, 2, 667 F.3d 746, 753 (6th Cir. 2012) (holding the criminal obstruction statute ‘does not allow a defendant to escape liability for shredding documents with intent to obstruct a foreseeable investigation of a matter within the jurisdiction of a federal agency just because the investigation has not yet commenced’) (quoting 2, 657 F.3d 688, 711 (3d Cir. 2011)).
 See, eg, Indictment, 2, 12-CR-171 (ED La. 2 May 2012), ECF No. 7 (charging former BP engineer Kurt Mix with felony obstruction of justice for deleting text messages related to the Macondo Oil Spill of 2010); but see 2, 800 F.3d 1017 (9th Cir. 2015) (affirming district court’s post-verdict judgment of acquittal for email-deletion-based obstruction of justice charge because defendant did not ‘double delete’ emails still available in his email client’s deleted items folder).
 See 2, 2015 WL 2251005, at *2 (ND Cal 13 May 2015) (holding preservation duty triggered by receipt of ‘written document preservation and litigation hold notice’); see also 2, No. 07-CV-1358 (SDNY 25 July 2014) (failure to issue litigation hold for emails, based on mistaken assumption that all emails were saved forever, constituted sanctionable negligence).
 See generally The Sedona Conference, Commentary on Legal Holds: The Trigger & The Process, 11 Sedona Conf. J 265, 270–71 (2010) (‘Compliance with a legal hold should be regularly monitored . . . [E]vents may trigger a duty to preserve only when considered in the context of the entity’s history and experience, or the particular facts of the case.’)
 See 2, Cour de cassation [Cass.] [Supreme Court for Judicial Matters] Paris, crim., 12 December 2007, No. 07-83228 (prosecuting French attorney under France’s Blocking Statute for contacting a witness to elicit information to be used in a case in the United States).
 2, 449 US 383, 394–95 (1981).
 See US Dep’t of Justice, Justice Manual § 9-28.700 (2018), above note 1.
 See Fed. R Civ. P 26(b)(4)(D)(ii) ); see also, eg, 2, 633 F3d 153, 164 n.17 (3d Cir. 2011) (‘We agree with the District Court that the non-testifying expert privilege, see Fed. R Civ. P 26(b)(4), is not applicable here because, “[b]y providing consulting expert reports to a testifying expert, the privilege is lost.’’’ (citation omitted).).
 See Fed. R Civ. P 26(a)(2)(B).
 See Fed. R Civ. P 26(b)(4)(C). While counsel are permitted to convert a consulting expert to a testifying expert, they should keep in mind that once the expert is converted, the disclosure rules for testifying experts will apply to all of the counsel’s prior communications with the expert.
 See US Dep’t of Justice, Frequently Asked Questions: Corporate Cooperation and the Individual Accountability Policy, available at https://www.justice.gov/file/913911/download; Report of Investigation Pursuant to Section 21(a) of the Securities Exchange Act of 1934 and Commission Statement on the Relationship of Cooperation to Agency Enforcement Decisions, Release No. 34-44969 (23 October 2001) (commonly referred to as the Seaboard Report).
 Disclosure of the report to third parties, including the government, can waive the privileged nature of the subject matter contained in the report.
 See Fed. R Evid. 801(d)(2).
 See Securities Exchange Act of 1934 Section 10(b), 12b-20, Pub. L No. 73-291, 48 Stat. 881 (codified at 15 USC § 78j(b)); Exchange Act Rule 12b-20, 17 CFR 240.12b-20; Regulation S-K, 17 CFR 229.303(a)(3)(ii).
 US Envtl Prot. Agency, EPA’s Audit Policy (9 December 2015), available at www.epa.gov/compliance/epas-audit-policy; Occupational Safety & Health Admin, Small Business Handbook, OSHA 2209-02R (2005), available at www.osha.gov/Publications/smallbusiness/small-business.pdf.
 See supra notes 17 and 21. See also Deputy Attorney General Rosenstein Delivers Remarks at the 34th International Conference on the Foreign Corrupt Practices Act (29 November 2017), https://www.justice.gov/opa/speech/deputy-attorney-general-rosenstein-delivers-remarks-34th-international-conference-foreign (announcing the formal Incorporation of FCPA Corporate Enforcement Policy Into the United States Attorneys’ Manual, encouraging voluntary disclosure and providing guidance for cooperation credit to be applied to all criminal enforcement actions).
 See, eg, 2, 951 F.2d 1414 (3d Cir. 1991) (holding disclosure to the SEC and DOJ, even though pursuant to a confidentiality agreement, constituted a waiver).
 The Eighth Circuit has upheld the concept of selective waiver. See 2, 572 F.2d 596 (8th Cir. 1978) (en banc) (holding a corporation may selectively waive the privilege to an agency such as the SEC without impliedly effecting a broader waiver). Other circuits to consider the issue have rejected the concept of selective waiver. See generally 2, 293 F.3d 289, 302 (6th Cir. 2002) (characterising the Eighth Circuit’s Diversified Industries holding as an ‘uninhibited approach adopted out of wholecloth’ and deciding to ‘reject the concept of selective waiver, in any of its various forms’); see also 2, 679 F.3d 1121, 1129–30 (9th Cir. 2012); 2, 450 F.3d 1179, 1197 (10th Cir. 2006); 2, 319 F.3d 897, 899 (7th Cir. 2003); 2., 129 F.3d 681, 686 (1st Cir. 1997); 2, 122 F.3d 1409, 1416–18 (Fed. Cir. 1997); 2, LP, 9 F.3d 230, 236 (2d Cir. 1993); 2, 951 F2d at 1425; 2, 856 F.2d 619, 623–24 (4th Cir 1988); 2, 665 F.2d 1214, 1221 (DC Cir. 1981).