Anti-Bribery and Corruption

U.S. Foreign Corrupt Practices Act of 1977, as amended (15 U.S.C. §§ 78dd-1, et seq.) with the DOJ/SEC Resource Guide, Second Edition (2020)

FCPA framework badge
Summarize with
ClaudeChatGPTPerplexityGoogle AI Mode
In this article
At a Glance
U.S. Foreign Corrupt Practices Act of 1977, as amended (15 U.S.C. §§ 78dd-1, et seq.) with the DOJ/SEC Resource Guide, Second Edition (2020)
  • Classification
    Category
    Anti-Bribery and Corruption
    Domain
    Risk Management
    Framework Family
    Other
  • Regulatory Context
    Type
    Regulation
    Legal Instrument
    Act
    Sector
    Cross-Sector
    Industry
    Cross-Industry
  • Region / Publisher
    Region
    North America
    Region Detail
    United States
    Publisher
    U.S. Congress; enforced by the Department of Justice and the Securities and Exchange Commission
  • Versioning
    Version
    15 U.S.C. §§ 78dd-1 to 78dd-3 and 78m(b), as amended 1988 and 1998; DOJ enforcement guidelines of June 9, 2025
    Effective Date
    December 19, 1977
    Issue Date
    December 19, 1977 (Pub. L. 95-213)
  • Adoption
    Adoption Model
    Regulatory Compliance
    Implementation Complexity
    High
  • Official Reference
License Information

License included / downloadable: Yes

The statute, the Resource Guide, Executive Order 14209 and the June 9, 2025 guidelines are U.S. Government publications available free of charge from the Department of Justice and the Federal Register; the provisions and hallmarks are included with the platform as a requirement set.

Framework text is licensed by its publisher and is included only where stated above.

Official Resources
DOJ: Foreign Corrupt Practices Act
The Criminal Division's FCPA page describing the anti-bribery and accounting provisions, covered persons, and the 1998 amendments.
DOJ: FCPA Resource Guide
The page for A Resource Guide to the U.S. Foreign Corrupt Practices Act, Second Edition (July 2020), with the Spanish edition and the December 2024 addendum.
A Resource Guide to the U.S. FCPA, Second Edition (PDF)
The joint DOJ and SEC guide covering the statute, enforcement principles, compliance program hallmarks, penalties, and the opinion procedure.
DOJ: FCPA statutes and regulations
The Criminal Division's page linking the statutory text of the FCPA and related regulations.
Key takeaways
  • The FCPA prohibits issuers, domestic concerns, and persons in U.S. territory from corruptly paying foreign officials to obtain or retain business.
  • Enacted December 19, 1977 and amended in 1988 and 1998, it also requires issuers to keep accurate books and adequate internal accounting controls.
  • The DOJ enforces it criminally through the Criminal Division's FCPA Unit, and the SEC enforces it civilly against issuers.
  • Exceptions cover facilitating payments for routine governmental action, payments lawful under foreign written law, and bona fide expenditures.
  • The DOJ's June 9, 2025 guidelines narrowed enforcement focus toward cartels, transnational criminal organizations, and harm to U.S. companies.

Overview

The Foreign Corrupt Practices Act of 1977 (FCPA), 15 U.S.C. §§ 78dd-1 to 78dd-3 and 78m(b), is the U.S. federal law that prohibits corrupt payments to foreign officials. It bars issuers, domestic concerns and persons acting in U.S. territory from corruptly paying or offering anything of value to a foreign official to obtain or retain business. It also requires issuers to keep accurate books and records and adequate internal accounting controls. It was enacted on December 19, 1977 (Pub. L. 95-213) and amended in 1988 (Pub. L. 100-418) and 1998 (Pub. L. 105-366).

The anti-bribery provisions sit in three parallel sections: § 78dd-1 for issuers, § 78dd-2 for domestic concerns and § 78dd-3 for other persons acting within the United States. Each contains an exception for facilitating payments for routine governmental action (§ 78dd-1(b)) and two affirmative defenses: payments lawful under the foreign country's written law, and reasonable and bona fide expenditures such as travel and lodging (§ 78dd-1(c)). The accounting provisions in § 78m(b)(2) require every issuer to keep books and records that accurately and fairly reflect its transactions and to maintain internal accounting controls. The Department of Justice enforces the Act criminally through the Criminal Division's FCPA Unit; the SEC enforces it civilly against issuers.

Enforcement policy changed in 2025 while the statute did not. Executive Order 14209 of February 10, 2025 directed the Attorney General, for 180 days, to cease initiating new FCPA investigations and enforcement actions absent an individual exception, review existing matters and issue updated guidelines. The Deputy Attorney General's memorandum of June 9, 2025, Guidelines for Investigations and Enforcement of the FCPA, now governs: every new investigation or enforcement action must be authorized by the Assistant Attorney General for the Criminal Division or a more senior official, and prosecutors weigh four factors described below. The Foreign Extortion Prevention Act, 18 U.S.C. § 1352 (added July 30, 2024), criminalizes the demand side, a foreign official's corrupt demand or receipt of a bribe.

Why does it matter?

FCPA liability reaches a parent company for payments made through subsidiaries, agents and joint venture partners, and the accounting provisions apply to every issuer whether or not a bribe is ever paid, so an inaccurate ledger entry or a missing control can itself be a violation of § 78m(b)(2). The June 9, 2025 guidelines narrow where the Department looks, toward cartels and transnational criminal organizations, harm to identifiable U.S. companies, national security sectors and serious misconduct with strong indicia of corrupt intent, but they leave the statute, the SEC's civil authority and the books-and-records duties untouched. A company's program is judged under the Resource Guide's hallmarks and the DOJ Evaluation of Corporate Compliance Programs.

Key benefits include:

  • Clear statutory lines

The anti-bribery elements, the routine governmental action exception in § 78dd-1(b) and the affirmative defenses in § 78dd-1(c) give the program concrete tests for gifts, hospitality and third-party payments.

  • Accounting discipline

§ 78m(b)(2)(A) and (B) require books and records in reasonable detail and internal accounting controls that give reasonable assurances, the same controls that serve financial reporting.

  • Third-party coverage

Payments made indirectly through intermediaries fall within § 78dd-1(a)(3) when the company knows that all or part of the value will go to a foreign official.

  • A documented program as evidence

The Resource Guide's Hallmarks of Effective Compliance Programs and the DOJ ECCP are the benchmarks prosecutors and the SEC apply to a program.

  • Enforcement focus known in advance

The 2025 guidelines name the factors and the authorization rule, so a company can see which conduct the Department prioritizes.

How does it work?

The anti-bribery provisions make it unlawful for an issuer, a domestic concern or a person acting within U.S. territory to use the mails or any means of interstate commerce corruptly in furtherance of an offer, payment, promise or authorization of anything of value to a foreign official, party or candidate, to influence an official act, induce a breach of lawful duty or secure an improper advantage in order to obtain or retain business (§ 78dd-1(a)). § 78dd-1(f) defines foreign official to include officers and employees of a foreign government, agency or instrumentality and of a public international organization. The 1998 amendments added § 78dd-1(g) for acts abroad by U.S. issuers and added § 78dd-3.

The accounting provisions apply to every issuer with securities registered under § 78l or reporting under § 78o(d). § 78m(b)(2)(A) requires books, records and accounts that in reasonable detail accurately and fairly reflect transactions and dispositions of assets; § 78m(b)(2)(B) requires internal accounting controls sufficient to provide reasonable assurances that transactions are executed as authorized and recorded to permit proper financial statements and accountability for assets. § 78m(b)(7) sets reasonable assurances and reasonable detail at the level that would satisfy prudent officials in the conduct of their own affairs.

The DOJ and SEC Resource Guide, Second Edition (July 2020), explains the provisions and lists the Hallmarks of Effective Compliance Programs: commitment from senior management and a clearly articulated policy against corruption; code of conduct and compliance policies and procedures; oversight, autonomy and resources; risk assessment; training and continuing advice; incentives and disciplinary measures; third-party due diligence and payments; confidential reporting and internal investigation; continuous improvement through periodic testing and review; pre-acquisition due diligence and post-acquisition integration; and investigation, analysis and remediation of misconduct.

The Deputy Attorney General's memorandum of June 9, 2025 directs prosecutors to focus on individuals who engaged in criminal misconduct, to proceed expeditiously and to consider collateral consequences throughout an investigation. Part I sets four factors: (A) association with cartels or transnational criminal organizations, their money launderers or officials they have bribed; (B) deprivation of identifiable U.S. entities of fair access to compete, or economic injury to them; (C) harm to U.S. national security through bribery involving key infrastructure or assets; and (D) serious misconduct with strong indicia of corrupt intent rather than routine business practices or low-dollar courtesies. Part II preserves the Principles of Federal Prosecution; Part III applies the guidelines to all current and future matters.

Key Elements

  • Anti-bribery provisions (§§ 78dd-1 to 78dd-3)

Prohibit corrupt offers, payments, promises or authorizations of anything of value to a foreign official to obtain or retain business, with § 78dd-1 for issuers, § 78dd-2 for domestic concerns and § 78dd-3 for persons acting in U.S. territory.

  • Exception and affirmative defenses (§ 78dd-1(b) and (c))

Facilitating or expediting payments for routine governmental action are excepted; payments lawful under the foreign country's written law and reasonable and bona fide expenditures are affirmative defenses.

  • Books and records (§ 78m(b)(2)(A))

Issuers keep books, records and accounts that in reasonable detail accurately and fairly reflect transactions and dispositions of assets.

  • Internal accounting controls (§ 78m(b)(2)(B))

A system sufficient to provide reasonable assurances over authorization of transactions, recording, access to assets and periodic reconciliation.

  • 2025 enforcement guidelines

Authorization of new matters by the Assistant Attorney General for the Criminal Division or a more senior official, and the four factors in Part I.A to I.D of the June 9, 2025 memorandum.

  • Demand side: FEPA (18 U.S.C. § 1352)

Makes it unlawful for a foreign official to corruptly demand, seek, receive or accept anything of value from an issuer, domestic concern or person covered by the FCPA; enforced by the DOJ only.

  • Resource Guide hallmarks

The DOJ and SEC description of an effective compliance program, from senior management commitment to investigation, analysis and remediation of misconduct.

What does it cover?

The anti-bribery provisions apply to issuers with securities registered in the United States or reporting to the SEC, including foreign issuers, to domestic concerns, meaning U.S. citizens, nationals and residents and businesses organized under U.S. law or with a principal place of business in the United States, and to any other person who acts in furtherance of a corrupt payment while in U.S. territory, together with their officers, directors, employees, agents and stockholders acting on their behalf. The accounting provisions apply to issuers (§ 78m(b)(2)). Compliance, legal, finance, internal audit and procurement functions implement the Act wherever the business deals with government customers, licenses, permits or state-owned enterprises abroad.

What are its objectives?

Congress enacted the FCPA to make the bribery of foreign officials unlawful and to require issuers to keep accurate books and adequate internal accounting controls; the 2025 guidelines restate how the Department pursues those aims.

Prohibit corrupt payments to foreign officials by issuers, domestic concerns and persons acting within U.S. territory (§§ 78dd-1 to 78dd-3).

Require issuers to keep accurate books and records and adequate internal accounting controls that operate in tandem with the anti-bribery provisions (§ 78m(b)(2)).

Reach conduct carried out through subsidiaries, agents and other third parties where the company knows the value will reach a foreign official.

Permit facilitating payments for routine governmental action and recognize the written-law and bona fide expenditure defenses (§ 78dd-1(b) and (c)).

Focus enforcement, under the June 9, 2025 guidelines, on individual misconduct and on the four factors concerning cartels, fair competition, national security and serious misconduct.

Address the demand side of foreign bribery through the Foreign Extortion Prevention Act (18 U.S.C. § 1352).

Framework in Context

The FCPA and the UK Bribery Act 2010 are the two principal extraterritorial anti-bribery laws, and the Resource Guide incorporates the Sentencing Guidelines' § 8B2.1 and the DOJ Evaluation of Corporate Compliance Programs in describing effective programs. Its accounting provisions overlap with SOX internal control over financial reporting and COSO, and multinational programs map it to ISO 37001:2016 and ISO 37301:2021 and to the national laws implementing the OECD Anti-Bribery Convention. FEPA (18 U.S.C. § 1352) complements it on the demand side, and the 2025 guidelines direct prosecutors to consider whether an appropriate foreign authority is willing and able to prosecute the same conduct.

Common Framework Mappings

Companies map the FCPA's anti-bribery and accounting provisions and the Resource Guide hallmarks to the compliance benchmarks, control frameworks and other anti-corruption laws they must satisfy so one program and one evidence base serve them all.

Mapped frameworks include:

UK Bribery Act 2010

DOJ ECCP

USSG §8B2.1

SOX

COSO IC 2013

COSO ERM 2017

ISO 31000:2018

OCEG Red Book 3.5

IIA Three Lines Model

ISO 37001:2016

ISO 37301:2021

OECD Anti-Bribery Convention

SMARTSUITE

How SmartSuite Supports the FCPA

SmartSuite provides the system for managing controls, evidence, mappings, assessments, and reporting.

Use Compliance Management to hold §§ 78dd-1 to 78dd-3, § 78m(b)(2)(A) and (B) and the Resource Guide hallmarks as requirements, each linked to the corruption risk assessment, the gifts and hospitality approvals, the third-party due diligence files, the payment controls and the training records that evidence them, with the June 9, 2025 factors recorded against open matters.

FCPA Provisions and Hallmarks Library

Load the anti-bribery provisions, the § 78dd-1(b) exception and (c) defenses, the § 78m(b)(2) accounting provisions and the eleven Resource Guide hallmarks as requirements with owners and evidence.

Gifts, Hospitality and Payment Approvals

Route gifts, travel, entertainment, donations and facilitating-payment requests through approvals that test the § 78dd-1(b) and (c) conditions and record the decision.

Third-Party and Intermediary Due Diligence

Use Third Party Risk Management to assess agents, distributors, consultants and joint venture partners, record red flags and renewals, and link contracts with anti-corruption terms and audit rights.

Books and Records Control Testing

Plan tests of the § 78m(b)(2)(B) internal accounting controls with Internal Audit Management, attach results and track remediation of recording and authorization failures.

Investigations and Self-Disclosure Decisions

Manage allegations, investigation scope, findings and the 2025 guideline factors for each matter, with the record counsel needs for disclosure decisions.

Board and Regulator Reporting

Report by provision, region and third-party tier on program status, open investigations and remediation for the board, auditors and counsel.

Related frameworks

SOX

The Sarbanes-Oxley Act of 2002 (Public Law 107-204) requires SEC-reporting companies to certify reports, assess internal control over financial reporting and use PCAOB-registered auditors.

COSO IC 2013

COSO Internal Control (2013) defines five components and 17 principles of internal control. Public companies commonly use it as the ICFR framework for SOX section 404.

COSO ERM 2017

COSO ERM (2017) sets five components and 20 principles for integrating risk management with strategy and performance. It is voluntary guidance from COSO, not a regulation.

ISO 31000:2018

ISO 31000:2018 gives guidelines on managing risk through eight principles, a framework and a process for any organization. It is not certifiable. ISO published it on February 14, 2018.

GLBA Safeguards Rule (16 CFR Part 314)

The GLBA Safeguards Rule (16 CFR Part 314) requires non-bank financial institutions under FTC jurisdiction to run a written information security program and report large breaches to the FTC.

NYDFS 23 NYCRR 500

23 NYCRR Part 500 is the NYDFS cybersecurity regulation for covered entities: risk-based program, CISO report, MFA, asset inventory, 72-hour incident notice and the April 15 certification.

UK Bribery Act 2010

The UK Bribery Act 2010 creates the offenses of bribing, being bribed, bribing a foreign public official and failing to prevent bribery, with adequate procedures as the corporate defense.

DOJ ECCP

The DOJ Criminal Division's Evaluation of Corporate Compliance Programs (Updated September 2024) sets out the questions prosecutors ask about a program's design, resources and effectiveness.

FAQ

Frequently Asked Questions For FCPA

Three sections cover three groups: § 78dd-1 applies to issuers, meaning companies with securities registered under § 78l or reporting under § 78o(d), including foreign issuers; § 78dd-2 applies to domestic concerns, meaning U.S. citizens, nationals and residents and businesses organized under U.S. law or with their principal place of business in the United States; and § 78dd-3 applies to any other person who acts in furtherance of a corrupt payment while in U.S. territory. Officers, directors, employees, agents and stockholders acting on behalf of a covered entity are covered too.

Yes. § 78m(b)(2)(A) and (B) require every issuer to keep books, records and accounts that in reasonable detail accurately and fairly reflect its transactions and to maintain internal accounting controls that provide reasonable assurances, independently of the anti-bribery provisions. § 78m(b)(7) sets the standard at the level of detail and assurance that would satisfy prudent officials in the conduct of their own affairs. The SEC enforces these provisions civilly and the DOJ criminally where violations are knowing.

§ 78dd-1(b) excepts facilitating or expediting payments whose purpose is to expedite or secure the performance of a routine governmental action, which § 78dd-1(f)(3) limits to actions ordinarily and commonly performed by an official and never to decisions to award or continue business. § 78dd-1(c) provides two affirmative defenses: the payment was lawful under the written laws and regulations of the foreign official's country, or it was a reasonable and bona fide expenditure, such as travel and lodging, directly related to promoting products or services or to performing a contract.

Executive Order 14209 of February 10, 2025 directed the Attorney General, for 180 days, to cease initiating new FCPA investigations and enforcement actions absent an individual exception, review existing matters and issue updated guidelines. The Deputy Attorney General's memorandum of June 9, 2025 now requires every new FCPA investigation or enforcement action to be authorized by the Assistant Attorney General for the Criminal Division or a more senior official, and directs prosecutors to focus on individual misconduct and on four factors: cartels and transnational criminal organizations, harm to identifiable U.S. companies, national security, and serious misconduct rather than routine business courtesies. The statute itself is unchanged.

FEPA, 18 U.S.C. § 1352, makes it unlawful for a foreign official, or a person selected to be one, to corruptly demand, seek, receive, accept or agree to accept anything of value from an issuer, a domestic concern or a person covered by § 78dd-3, using the mails or interstate commerce, in return for official action or in connection with obtaining or retaining business. The DOJ page describes it as the demand side of foreign bribery that complements the FCPA's supply side; it carries no civil remedy and gives the SEC no enforcement role.

Put this framework to work in SmartSuite

Manage controls, risks, evidence, and audits in one platform designed for modern governance, risk, and compliance.