Spying in the Business Context Almost Obsolete in the Digital Age

Clients often call us for advice on investigating their employees and competitors.  They really want the benefit of recorded clandestine conversations, of following employees to catch them in the act of meeting with the competition, of an evening ‘stake-out’ to catch the theft and passing of trade secrets.  Some extremely few times, this is merited; most often it is not.  And the way clients often try to do surveillance can be illegal, and even if successful, can produce evidence barred from use in court.

Electronic public records can in so many instances replace much of what was often discovered by traditional ‘gumshoe’ detective work.  What is available for free on the internet was almost impossible to obtain even ten years ago; what is available through pay services to anyone now is downright scary, considering others can get such information on us.  But this trend has been increasing since the ‘90’s and shows no indication of slowing.  (Indeed, I told Forbes Magazine in 2006 that “there are a lot of ways to obtain information without breaking the law,” [from company owned phone records, recent moves or real estate purchases, other public documents like credit reports and criminal histories, [even an application]…for a fishing license in Alaska.” [1]

More than that, “Big Data” companies have incredible access to electronic information, and the ability to decipher it; recent media investigations have shown how information collected on popular phone apps that should be anonymized can easily reveal individual name, location and, most importantly, spending data. [2]

Just because it can be done is not a reason to or a license for doing it.  In Pennsylvania, it remains illegal to surreptitiously tape someone, including on a telephone call, without each party to the conversation consenting; use of such a recording in court, if obtained, is barred.  A GPS tracker cannot be placed an automobile by anyone but the owner (and a husband can’t track a wife’s whereabouts unless the vehicle is jointly titled in his name!).  And you can’t place a hidden video camera in a home unless it’s yours.

These are just a few of the basic rules for modern-day surveillance within the bounds of the law.  It is complex and specialized; call us before you try this “at home.”

 


 

[1] Clark, “How to Legally Spy on Employees,” Forbes Magazine Oct. 26, 2006, at: <https://www.forbes.com/2006/10/25/leadership-hewlett-packard-spying-lead-manage-cx_hc_html#5b36dd719aa4>.

 

[2] Thompson, Stuart A. and Charlie Warzel, “One Nation, Tracked,” NY Times, Dec. 12, 2019

Tips for Representing Bankers in OCC Investigations

Unlike the financial industry scandals of 2008, bank regulators are now increasingly holding institutions and individuals accountable for financial loss.  On January 23, 2020, the Office of the Comptroller of the Currency (“OCC”) announced it had resolved its administrative action against former Wells Fargo CEO John Stumpf wherein he agreed to a lifetime prohibition from the banking industry and $17.5 million-dollar civil money penalty (“CMP”).  Other former senior bank management agreed to pay CMPs in the millions.  On the same day, the OCC issued a notice of charges against five former senior bank executives seeking similar sanctions.  The OCC’s sanctions against Wells Fargo stem from the bank’s account fraud scandal, the effects of which are still being felt.  Over the last twenty (20) years, Wells employees created millions of fake bank customer accounts, issued unapproved insurance policies, transferred funds between accounts without customer consent, misrepresented that certain financial products were only available in packages with other products, and accessed and falsified personal account holder information.  Bank employees said they took these actions to satisfy unrealistic sales quotas.  They singled out the bank’s deeply-engrained tradition of cross-selling financial products, such as pressuring checking account holders to also take out a mortgage through the bank, or obtaining a bank issued credit card, as the root of the scandal.  The OCC investigated and found that former senior bank executives long knew about sales misconduct and the company culture driving it but failed to address it, despite numerous and repeated complaints from employees and account holders.  The OCC While not well-known, the OCC has expansive enforcement authority.  The bank regulator is an independent bureau within the United States Department of Treasury that charters, regulates, and supervises all national banks.  Some of its employees are tasked with routinely monitoring financial institutions in certain parts of the country.  Its primary objectives are to ensure and maintain the safety and soundness of the national banking system and to investigate misconduct committed by institution-affiliated parties (“IAPs”), which include national bank officers, directors, employees, agents, and independent contractors (including appraisers, attorneys and accountants).[1]  The OCC initiates administrative investigations and actions against IAPs for unsound and unsafe banking behavior, breaching their fiduciary duties, or violating banking laws and regulations or agency orders.  The OCC can enter into a formal agreement, issue a cease and desist order, assess a CMP, or prohibit an IAP from working in the industry for life.  It issues a notice of charge, as is the case with the former senior Wells Fargo executives, when the OCC and the investigated IAP cannot reach a resolution.[2]  The OCC has wide latitude in the remedies it orders, including ordering affirmative actions, like making restitution or correction of problems. A removal or prohibition from banking penalty results from when a banker’s misconduct caused a loss or potential loss or other damage to the bank, financial gain or benefit to the individual, or prejudice to the interests of depositors, and involved personal dishonesty or exhibited willful or continuing disregard for the safety and soundness of the bank.  Tips for Representing Bankers in OCC Investigations With individual liability now at the forefront of regulatory investigations, its necessary that defense counsel be well-equipped to defend against these matters.  The Grail Law has successfully represented banks and bankers in multiple OCC investigations and actions, and believes counsel representing bankers should adhere to the following best practices: Parallel Investigations OCC investigations often parallel a criminal investigation.  Counsel usually encounter an OCC investigation while or after representing a banker in a criminal matter.  Counsel should represent their client’s interests accordingly.  Counsel must portray its client’s conduct in the most favorable possible way that not just avoids criminal but also regulatory penalties.  It is possible for a banker to avoid prosecution but be sanctioned by the OCC.  Proactive Communication with OCC Enforcement Counsel As early as possible, counsel should establish an open line of communication with OCC enforcement counsel.  Counsel should obtain a full understanding of the scope and focus of the regulator’s investigation.  Counsel should also begin framing their client’s conduct in the best light possible.  OCC enforcement counsel usually view your client’s conduct differently from the OCC examiners responsible for routinely overseeing it.  The sooner you can firmly plant a favorable client narrative in regulatory counsel’s mind, the better. Discovery Counsel should oversee and direct all document production to the agency.  Some banks turn over documents to the OCC wholesale without consulting counsel.  Counsel should devote significant time to reviewing OCC’s document requests and produce only responsive information. Counsel also need to sufficiently prepare their client for their sworn statement under oath.  Here, OCC enforcement counsel and examiner staff ask questions of your client.  Aggressive advocacy in this setting can go a long way to successfully resolving the matter.  Counsel must create a clear, complete record that accurately portrays your client’s conduct and its impact.  It is another excellent opportunity to positively frame your client’s behavior. Request an In-person Meeting with Enforcement Counsel After they conclude discovery, OCC enforcement counsel will take some time to decide whether or not to sanction your client.  This provides a small, but important window to make a final argument regarding your client.  An in-person presentation to regulatory counsel is often highly effective at convincing the agency not to sanction your client.  Really, any opportunity to communicate in person with OCC enforcement counsel can be highly beneficial to your client’s case.    With the Wells Fargo scandal leading to calls for increased regulatory sanctions against bankers, it is likely more bank regulators will initiate aggressive administrative investigations and actions against IAPs.  In such a regulatory environment, it is imperative that defense counsel are cognizant of the risks and best practices associated with the legal representation of such individuals.


[1] 12 U.S.C. § 1813(u). [2] An IAP must file an answer to the charges, after which the matter proceeds to a formal administrative hearing.  The rules governing the practice and procedure for these hearings are contained in 12 C.F.R. § 19.1 et seq.

Victims of Business Crimes Aren’t Always Better Off Seeking Prosecution

Pittsburgh White Collar - Grail Law Firm

A week hasn’t gone by since I left my job as a prosecutor in 1995 (yes, 1995:  Bill Clinton was president, the Dow topped 5,000 for the first time ever, O.J. Simpson was acquitted of murder that year and the iPod wouldn’t come out for another six years) when a client hasn’t called asking how to have someone prosecuted and sent to jail. Businesses find local, state and especially federal law enforcement almost uniformly unresponsive to their victimization at the hands of employees and competitors. Companies often feel victimized a second time by “the system,” when all they really want is what almost no victim ever gets in the way of justice: vindication, to make up for the betrayal of trust.

Before calling 911, though, business crime victims should consider the risks and drawbacks of involving themselves in the criminal justice system.  Investigations and court cases are rarely short or cut-and-dried, especially when the target has significant knowledge of your business and its employees or operations. Meeting with police and prosecutors, going to court and even testifying there can be a major distraction to key personnel. It can risk the confidentiality of company processes or trade secrets, and can even provoke investigation of the business victimized in the first place. The decision to “blow the whistle,” then, even when justified, should be made for good business reasons, and not for emotional ones, and be thought through thoroughly at a high level of policy/decision making.

The exception to the “think before you fink” rule is for highly-regulated business, which are likely required to report thefts or other misconduct by employees, directors and competitors: chiefly banks and financial institutions, health care providers which seek reimbursement of federal or insurance funds, environmental permit holders (mandated to regularly report discharges), and industries which handle classified national security data (e.g., defense contractors, advanced software and computing research, etc.).

Simple embezzlements by employees, additionally, should always be reported when the identity of the culprit is certain.  Reporting to the police is almost always a prerequisite to recovering on a dishonest employee provision to the business’s insurance coverage or employee fidelity bond.  (Note: let this be a reminder to check with your company’s broker or risk managers to ensure that there is dishonest employee coverage, in sufficiently high enough dollars to adequately protect the entity against loss.)

But affirmatively pressing for criminal charges (beyond simple reporting) can be counter-productive. Often a company’s best chance of recovering any restitution informally is before a prosecution, through negotiation. This should be done by experienced counsel consistent with lawyers’ professional conduct rules, to prevent accusations against company personnel of committing extortion and themselves becoming a target of an investigation, and also to ensure the company’s duty under a policy of insurance to cooperate with law enforcement is fulfilled, thereby preserving coverage.

Prosecutors and investigators often see businesses’ reports of crime as pressing them into service for a private entity, and not the public safety.  Trade secret theft allegations are most often ignored by law enforcement.  Federal prosecutors are reluctant to become involved in lengthy disputes between private parties, for which there are civil remedies available, such as the private right of action recently provided by the recent enactment of the Defense of Trade Secrets Act.    The exception, again, is for employees and competitors of banks, government contractors (primarily including health care providers,) and businesses in which there is a national security interest.  And state and local police and prosecutors aren’t set up to bring “white collar” cases that exceed simple fraud/theft matters (even those can tax a district attorney’s office, more comfortable with ‘guns and drugs’ case).

Sophisticated theft prosecutions can harm the victim as well.  Prosecutors may not be sufficiently attuned to protecting confidential security or manufacturing/development processes, and courts may not adequately protect against their disclosure to the defense.   While the Justice Department is getting better at handling trade secret misappropriation cases, early prosecution efforts under the Economic Espionage Act of 1996 risked disclosure of the very trade secrets alleged to have been stolen.

And the unfortunate truth is that former employees and competitors  facing criminal prosecution often retaliate by alleging criminal wrongdoing by the complaining business, rightly or not. This is especially true in small businesses, or small units of larger ones. It does no good to accuse an employee whose wages are not being completely reported of theft, when that employee can in turn complain to the IRS about the employer’s tax fraud.  (That case led to convictions of both the business owner and the former controller). Employers need to understand what they risk in publicizing an internal matter, including in the way of adverse publicity, when it is them who have been ripped off.

Seeking redress as the victim of a theft or other crime shouldn’t be difficult, and it shouldn’t require a business seconding-guessing itself.  But the realities of the justice system, the economics and the politics of what drives it, and especially the fact that desperate persons facing the possibility of criminal conviction and jail will often lead desperate people to desperate acts, to your detriment. Economic crime victims shouldn’t shy away from seeking justice and restitution, if for no other reason than to highlight to others that crimes against them will not be tolerated. But how best to be made whole after being victimized requires a well-thought out decision with the help of counsel experienced in the justice system, and not an emotional response to make senior executives feel better. In the long run, it may only make things much worse.