CCCP International Compliance Programs 4 — Questions and Answers
Question 1: Which international body evaluates countries' anti-money laundering and counter-terrorist financing frameworks through mutual evaluations?
- The Financial Action Task Force (FATF) (Correct answer)
- The International Monetary Fund (IMF)
- The World Bank Group
- The Bank for International Settlements (BIS)
Correct answer: The Financial Action Task Force (FATF)
FATF is the global standard-setting body for AML/CFT, conducting peer reviews of member countries' compliance with its 40 Recommendations and identifying high-risk jurisdictions.
Question 2: A company's Brazilian subsidiary learns of a local law requiring disclosure of competitor information that would violate U.S. antitrust laws. How should the compliance officer handle this conflict of laws?
- Escalate to senior legal counsel to analyze the conflict and seek appropriate legal relief or exemptions (Correct answer)
- Comply with local law automatically since it is the law of the operating jurisdiction
- Ignore the local law since U.S. law takes precedence globally
- Disclose the information without analysis since it is legally required locally
Correct answer: Escalate to senior legal counsel to analyze the conflict and seek appropriate legal relief or exemptions
Conflicts between local legal requirements and home-country laws require legal analysis to identify possible exemptions, safe harbors, or procedural protections before taking action.
Question 3: Under EU General Data Protection Regulation (GDPR), what is the maximum administrative fine for the most serious violations?
- €20 million or 4% of global annual turnover, whichever is higher (Correct answer)
- €10 million or 2% of global annual turnover, whichever is higher
- €5 million or 1% of global annual turnover, whichever is higher
- €50 million flat fine regardless of company size
Correct answer: €20 million or 4% of global annual turnover, whichever is higher
GDPR's most serious violations (Tier 2) can result in fines up to €20 million or 4% of the company's total global annual turnover from the preceding year, whichever is higher.
Question 4: What is the 'adequate procedures' defense under the UK Bribery Act, and which six principles guide it?
- Proportionate procedures, top-level commitment, risk assessment, due diligence, communication, and monitoring/review (Correct answer)
- Written policies, employee training, hotline, audits, legal review, and board approval
- Zero-tolerance policy, whistleblower protection, gifts policy, code of conduct, contracts, and investigations
- Tone at the top, risk registers, third-party controls, training records, internal audit, and reporting
Correct answer: Proportionate procedures, top-level commitment, risk assessment, due diligence, communication, and monitoring/review
The UK Ministry of Justice guidance identifies six principles for adequate procedures: proportionality, top-level commitment, risk assessment, due diligence, communication/training, and monitoring/review.
Question 5: When assessing country risk for international compliance purposes, which combination of sources provides the most reliable corruption risk assessment?
- Transparency International CPI, TRACE Matrix, FCPA enforcement history, and State Department reports (Correct answer)
- Relying solely on the company's own historical experience in the country
- Using only publicly available news sources and social media
- Consulting only with local law firms in the target country
Correct answer: Transparency International CPI, TRACE Matrix, FCPA enforcement history, and State Department reports
A robust country risk assessment combines multiple authoritative sources including TI's CPI, TRACE risk scores, regulatory enforcement history, and government country reports for a comprehensive view.
Question 6: A U.S. company wants to hire a former foreign government official as a consultant in their home country. What is the primary compliance concern?
- The engagement could constitute an improper benefit to a foreign official in violation of the FCPA if the purpose is to influence official acts (Correct answer)
- Former government officials cannot legally work for private companies under U.S. law
- The company must file a Foreign Agent Registration Act disclosure for any such engagement
- There is no compliance concern since the person is no longer a government official
Correct answer: The engagement could constitute an improper benefit to a foreign official in violation of the FCPA if the purpose is to influence official acts
Hiring former officials can violate the FCPA if the employment is intended to influence decisions by their former employer or colleagues, making purpose and timing critical factors in the analysis.
Question 7: Which international compliance principle requires that subsidiaries of multinational companies be subject to the same compliance standards as the parent, regardless of local legal requirements?
- Group-wide compliance standards (Correct answer)
- Host country compliance principle
- Local law supremacy doctrine
- Territorial compliance limitation
Correct answer: Group-wide compliance standards
Group-wide compliance standards require all entities within a corporate group to meet the parent company's compliance baseline, even when local law is less stringent, to avoid regulatory arbitrage.
Which international body evaluates countries' anti-money laundering and counter-terrorist financing frameworks through mutual evaluations?