On March 10, 2026, the Department of Justice (DOJ) released its first-ever department-wide Corporate Enforcement and Voluntary Self-Disclosure Policy (CEP).  The CEP supersedes all existing enforcement policies at DOJ, including the Criminal Division’s policy that it closely resembles.  The CEP applies to corporate criminal cases except those relating to antitrust.

“Incentivizing corporate self-disclosures — while still permitting prosecutions in appropriate circumstances — allows the Department to quickly pursue culpable individuals, secure justice for victims, and deter white-collar crime, all while not unduly burdening American businesses,” DOJ stated in a press release.

Part I: Declination Path

Under the CEP, DOJ will decline to prosecute a company for criminal conduct if all of the following criteria are met:

Even where aggravating circumstances exist, prosecutors retain discretion to recommend a declination.  In all cases, the company must pay all disgorgement, forfeiture, restitution, and victim compensation.  All declinations will be made public.

Part II: “Near Miss” Path

Companies that do not qualify for the Part I Declination Path—because their self-report falls short of a qualifying voluntary disclosure or because aggravating circumstances warrant a criminal resolution—may still be eligible for eased enforcement under Part II, provided they fully cooperated and timely remediated.  Under Part II, DOJ shall:

Part III: All Other Cases

All remaining cases proceed under Part III, which grants prosecutors discretion to determine the appropriate resolution but caps any fine reduction at 50% under the Sentencing Guidelines.

How the CEP Differs from Existing Policy

The CEP’s three-part structure and criteria are largely identical to the DOJ Criminal Division’s enforcement policy, released in May 2025.  However, there are a few differences:

The CEP also aligns with EPA’s new “Compliance First” enforcement policy, memorialized in December 2025, further signaling a broader regulatory shift toward industry self-policing and voluntary disclosure.  While a disclosure made solely to a regulatory agency generally does not qualify under the CEP, “good faith disclosures…may qualify if appropriate under the circumstances.”