Expert Analysis

• DOJ Directive Gives Contractors A Fraud Risk Road Map

  

  For government contractors, the 10 factors described in the U.S. Department of Justice's recent corporate fraud enforcement directive function as a de facto scoring rubric for internal audits that mirrors what prosecutors will prioritize, say attorneys at Spencer Fane.

• Key Risk Assessment Gaps To Note From NY Cyber Guidance

  

  Covered entities should take a fresh look at the compliance gaps flagged in recent New York State Department of Financial Services guidance on "deficient cybersecurity programs," particularly around scope, asset inventories and documentation, say attorneys at Mayer Brown.

• Where SEC's Transfer Agent Plan Would Change Compliance

  

  The U.S. Securities and Exchange Commission’s recent proposal to update the federal regulatory framework for transfer agents would comprehensively modernize the old task-specific regime by centering speed, operational resilience, compliance governance and technology-neutral recordkeeping, say attorneys at Morgan Lewis.

• Open Issues After 2nd Circ.'s Airport Phone Search Ruling

  

  While the Second Circuit’s recent U.S. v. Alisigwe decision confirms border agents' broad authority to conduct routine manual cellphone searches at ports of entry, significant questions remain about more wide-ranging forensic searches at the border, say attorneys at Baker Botts.

• FTC's Changing Model Raises Questions About Its Mission

  

  Federal Trade Commission leaders have recently sketched a vision of an agency that continues an enforcement role distinct from the U.S. Department of Justice's, even as a shift toward greater presidential control makes enforcement more responsive to changes in administrations, say attorneys at Wiley.

• 2nd Circ. EFAA Ruling Shifts Employer Litigation Strategy

  

  In Diaz-Roa v. Hermes Law, the Second Circuit recently held that, under the Ending Forced Arbitration of Sexual Assault and Sexual Harassment Act, employers can't carve out nonharassment claims and send them to arbitration, which has implications for discovery, litigation costs and resolution strategy in EFAA-covered disputes, say attorneys at Krevolin Horst.

• The Future Of PCAOB Enforcement After Post-Jarkesy Win

  

  While the Public Company Accounting Oversight Board recently defeated procedural and structural challenges to its enforcement program in D.C. federal court, it's unclear what claims and sanctions the PCAOB can bring against respondents — and whether it's interested in instituting disciplinary proceedings generally, says Mike Plotnick at King & Spalding.

• DC Circ. Ruling Clarifies Standards For Buy America Waivers

  

  The D.C. Circuit's recent decision to uphold a Federal Railroad Administration Buy America waiver offers clarifying guidance about assessing domestic availability, distinguishing manufacturing capabilities from future production plans and creating a well-supported administrative record, says Todd Overman at Bass Berry.

• Uniting BSA, Sanctions Compliance As Treasury Targets Iran

  

  The past 18 months of Treasury Department policies demonstrate expectations that financial institutions not merely obey sanctions against Iran, but also help expose how it moves money, making it essential that banks eliminate silos between their Bank Secrecy Act and sanctions compliance teams for an integrated response, says Jonathan Harrington at Bradley Arant.

• Digging Into Dems' Letter On Subpoena Secrecy Demands

  

  Lawmakers’ recent letter arguing that federal agencies’ use of boilerplate nondisclosure language in subpoenas pressures recipients into silence may lead to a significant overhaul of the current framework, but in the meantime, companies should review their rights and options, say attorneys at Crowell & Moring.

• How Bank Lobby's Suit Tests OCC's Crypto Charter Powers

  

  The Independent Community Bankers of America’s recent lawsuit challenging the Office of the Comptroller of the Currency’s ability to charter cryptocurrency companies marks another chapter in the struggle over the appropriate regulatory framework for digital assets, while raising a classic administrative law question at its most basic level, say attorneys at Ballard Spahr.

• Bribery Verdict Offers Guide To Post-Pause FCPA Priorities

  

  A former Goldman Sachs investment banker's recent Foreign Corrupt Practices Act conviction offers insights into how the U.S. Department of Justice is applying its FCPA guidelines following the Trump administration's 2025 pause on enforcement, and illustrates the importance of a company’s escalation procedures and follow-through, say attorneys at Debevoise.

• 3 Steps To Mitigate The Cyber Risks From Employee AI Use

  

  Recent data showing a doubling in breaches tied to employee use of unapproved AI tools demonstrates a convergence of cybersecurity risk, data privacy exposure and legal liability that workplace policies don't often address, but business leaders can get ahead of these risks, say attorneys at Ogletree.

• New Calif. Law Ties Finance Contracts To State Licensing

  

  Under a California law taking effect in 2028, commercial financing licensing requirements have been substantially expanded — meaning that fintechs relying on limited regulatory enforcement will face risk from their own borrowers, who could use licensing failures to resist repayment, say attorneys at Husch Blackwell.

• How Viral Accusations Can Test Employers' Discipline Policies

  

  The employment fallout that appears to have followed a former Cornell University student's sexual assault lawsuit against seven fraternity members underscores that although employers often have freedom to fire employees over accusations, they must still make a defensible decision, says Michael Elkins at MLE Law.