In May 2025 the Department of Justice's Criminal Division revised its corporate enforcement policy. The headline change was a single word. A company that voluntarily self-discloses, fully cooperates and remediates, with no aggravating circumstances, no longer receives a presumption of a declination. It receives a declination.
For a general counsel weighing whether to report something, that is a meaningful shift. Certainty of outcome has always been the missing piece in the disclosure calculation. But the conditions attached to that certainty have not loosened, and the environment around them has become less forgiving.
"Voluntary" has a clock on it
A disclosure only counts as voluntary if it is made promptly, without a pre-existing obligation to report, and before there is an imminent threat of disclosure or a government investigation. It must also be made to the Criminal Division, or at least include it.
The first condition is the one that bites. The DOJ's corporate whistleblower programme pays individuals who bring information forward. Every week spent deciding whether to disclose is a week in which someone else may make the decision for you, and a company that reports second is not reporting voluntarily.
Europe is now in the same calculation
The International Anti-Corruption Prosecutorial Taskforce, formed in March 2025 by the UK Serious Fraud Office, France's Parquet National Financier and the Swiss Attorney General, exists to coordinate cross-border bribery cases. A matter disclosed to one authority is more likely to reach the others, and sooner.
That turns a single disclosure decision into several. Where does the company have exposure? Which authority should hear first? What does each one expect in terms of timing and cooperation? Getting the sequence wrong can cost credit in one jurisdiction while earning it in another.
The disclosure decision is now multi-jurisdictional from the first hour. It needs to be planned before anything surfaces, not after.
What to have ready
- An investigation protocol that establishes privilege at the outset and preserves evidence immediately.
- A disclosure decision framework naming who decides, on what information, within what time.
- A jurisdiction map showing which authorities could claim an interest in conduct in each market where you operate.
- Remediation capacity, because a declination depends on fixing the root cause, not only on reporting it.
None of this is expensive to prepare in advance. All of it is expensive to improvise.