DOJ Says Its First Priority Is Executives, Not Companies. Your Employer's Best Move Is Now Your Worst.

Most technology executives think about federal enforcement risk the way they think about a cloud outage: an organizational problem, handled by an organizational function, escalated to legal and eventually resolved with a payment and a press release. The company absorbs it. Everyone keeps their badge.

That mental model is out of date, and the Justice Department has been unusually direct about why. Its own written policy states that prosecuting a company is not a substitute for prosecuting the people inside it, and it instructs prosecutors not to let a corporate settlement shield anyone. Once you follow that principle to its logical end, an uncomfortable structural fact emerges: the actions that produce the best outcome for a company are frequently the same actions that produce the worst outcome for its executives. Those interests are not aligned. They are, in the specific ways that matter, opposed.

The Policy Says It Out Loud

The relevant text lives in the Principles of Federal Prosecution of Business Organizations, the section of the Justice Manual that governs how federal prosecutors handle corporate cases.

It is not subtle. The manual states that provable individual charges should be pursued particularly when they implicate high-level corporate officers, and that this holds even where the company has offered a guilty plea, negotiated a deferred prosecution agreement, or settled civilly. Absent extraordinary circumstances, no corporate resolution should provide protection from criminal liability for any individual, and any such release requires personal written sign-off from a senior Justice Department official.

Separate Evaluation Means Separate Exposure

The operative phrase is that regardless of how the corporate matter ends, a separate evaluation must be made for potentially liable individuals. Your name is assessed on its own track. The settlement your employer negotiates does not close your file, and the number the company agrees to pay does not buy your peace.

Sentencing data reflects this in practice rather than aspiration. Among organizations sentenced in federal court in fiscal year 2025, the U.S. Sentencing Commission's figures on organizational offenders show that 62 percent of organizational cases involved at least one related individual who was separately indicted alongside the entity. The corporate case and the personal case are, more often than not, the same case with two defendants.

Cooperation Credit Is Purchased With Names

Here is the mechanism that turns a policy statement into a personal problem.

Companies earn leniency through cooperation, and the manual is explicit about what cooperation means. What the government wants is timely disclosure of relevant facts, and it spells out the facts it cares about: how and when the misconduct occurred, who promoted or approved it, and who was responsible for committing it. Every one of those questions resolves to a person.

The Criminal Division's corporate enforcement policy sharpens the incentive further by offering meaningful benefits, including the possibility of declination, to companies that voluntarily self-disclose, cooperate fully, and remediate. A company weighing that offer is weighing an enormous reduction in institutional risk. The currency it pays in is information about individuals.

Why Speed Works Against You

Self-disclosure rewards being early. That creates a race the company has every reason to run, and you have no way to enter. By the time an executive learns there is an issue, the organization may already have retained outside counsel, begun interviews, and started assembling the factual narrative it intends to hand over.

The Internal Investigation Is Not a Safe Room

The most damaging misunderstanding in enterprise environments concerns the interview conducted by the company's outside counsel.

Those lawyers represent the company. They do not represent you. They will typically say so at the start of the conversation, in a warning delivered quickly and in language that many people interpret as a formality rather than a boundary. The privilege attached to that interview belongs to the corporation, which means the corporation, not you, decides whether to waive it and turn the memorandum of your answers over to the government.

An executive who walks into that room intending to be helpful, candid, and cooperative is often producing the government's cleanest piece of evidence. This is why individuals under scrutiny in matters being handled out of South Florida's federal courts frequently retain their own legal defense counsel in Coral Gables before sitting for an internal interview rather than after, when the transcript already exists.

Two Sets of Interests, One Conference Room

The company's counsel is doing exactly the job they were hired to do. The conflict is structural, not ethical. Their client benefits from a complete account naming responsible individuals. You do not.

What Changes If You Get the Call

The practical takeaway for anyone with signing authority, budget control, or technical ownership of a system now under review is that institutional protection is no longer the default assumption. Indemnification provisions and D&O coverage address civil exposure and legal fees. Neither addresses criminal liability, and neither survives a company deciding that its own resolution is best served by a detailed account of what you approved.

The window where independent advice matters most is also the window where it feels least necessary: before the interview, before the document request is answered, before anyone has been formally accused of anything. That is when the record gets built, and it gets built by people who were told the company was handling it.