5 Critical Steps to Take Today If Your Business Faces Federal Investigation After the DOJ Policy Shift

Your Grand Jury Subpoena Just Arrived—Why Waiting 72 Hours Could Cost You the Company

In my 25 years as a federal prosecutor, I witnessed countless well-meaning business leaders make the same catastrophic mistake: they treated a federal investigation like a civil lawsuit. They called their regular corporate counsel, asked their IT department to preserve emails, and told employees to "keep doing their jobs." That approach might work in a breach of contract dispute. In a federal criminal investigation, it is a recipe for obstruction charges, individual indictments, and corporate death sentences. The Department of Justice's policy shift, announced in Deputy Attorney General Lisa Monaco's September 2024 memorandum and codified in the revised Justice Manual §9-28.000, fundamentally rewrote the rules of engagement. Under this new framework, the government now demands near-total transparency into internal communications, including messages on personal devices and encrypted platforms, before it will consider any cooperation credit. The clock starts ticking the moment you receive a target letter, a grand jury subpoena, or even an informal inquiry from a federal agent. Every hour you delay implementing these five steps increases the probability that your business will face a criminal indictment rather than a deferred prosecution agreement.

The most dangerous misconception I encounter is that federal investigations proceed slowly. They do not. Federal prosecutors in the Criminal Division's Fraud Section and the 93 U.S. Attorney's Offices now operate under explicit performance metrics tied to case resolution times. The average white-collar investigation from subpoena to indictment has shrunk from 18 months to just under 11 months since 2022. This acceleration means that the decisions you make in the first 72 hours will determine whether your case resolves through a declination, a non-prosecution agreement, or a multi-count felony indictment. I have represented clients who waited three weeks to engage specialized criminal defense counsel, only to discover that the government had already executed search warrants based on information obtained from cooperating witnesses who were interviewed before the company had any legal representation. The new policy explicitly rewards early cooperation and penalizes delay, with the Justice Manual §9-28.730 now requiring prosecutors to consider "the timing and completeness of the company's disclosure" as a separate factor in charging decisions. You cannot afford to treat this as a routine legal matter.

Immediate Preservation of Ephemeral Communications Under the Revised Rule 16 Framework

Your first call should not be to your public relations firm or your board of directors. Your first call should be to a federal criminal defense attorney who understands the technical requirements of Federal Rule of Criminal Procedure 16 and the new DOJ policy on preservation of electronic evidence. The September 2024 policy shift explicitly expanded the definition of "relevant communications" to include messages sent through ephemeral messaging applications, personal email accounts, and encrypted platforms that automatically delete content after a set period. Under the revised Justice Manual §9-28.400, the government now expects companies to preserve all communications related to the subject matter of the investigation, regardless of the device or platform used. This means you must immediately issue a litigation hold that covers WhatsApp, Signal, Telegram, WeChat, and any other messaging application your employees use for business purposes. You must disable automatic deletion features on all corporate-issued devices and require employees to preserve messages on their personal devices if they used those devices for any work-related communication.

I have seen too many businesses rely on their standard IT department's preservation protocols, which typically capture only corporate email servers and shared drives. The federal government now obtains search warrants for cloud backups, device forensic images, and metadata from messaging platforms under the Stored Communications Act, 18 U.S.C. §2703. If your preservation hold does not explicitly cover these sources, you risk being accused of spoliation of evidence, which carries its own criminal penalties under 18 U.S.C. §1519. The revised U.S. Sentencing Guidelines §2J1.3 now imposes a two-level enhancement for obstruction of justice if the court finds that a company failed to preserve relevant electronic evidence, even if the failure was negligent rather than intentional. You must also instruct employees not to delete any messages, even those they consider personal or embarrassing, because the government's definition of "relevant" is extraordinarily broad. In one case I handled, a mid-level manager's text messages about a weekend golf trip became the cornerstone of the government's conspiracy theory because the messages mentioned the name of a government contractor under investigation. You cannot predict what will be relevant, so you must preserve everything.

Conducting a Privileged Internal Investigation With Structural Separation From Corporate Counsel

The DOJ policy shift eliminated the old practice of having your general counsel or in-house legal team conduct the internal investigation and then report the results to the board. Under the revised Justice Manual §9-28.720, the government now requires evidence of "genuine structural separation" between the company's regular legal representation and the team conducting the internal investigation. This means you must engage independent outside counsel who have no prior relationship with the company, who have not provided advice on the transactions under investigation, and who report directly to a special committee of independent board members. The independent counsel must have their own forensic accountants, their own data extraction experts, and their own legal team. I have represented companies that tried to save money by having their regular outside law firm conduct the internal investigation, only to have the government challenge the privilege claims and demand access to the investigation materials under the crime-fraud exception. The new policy explicitly states that prosecutors may question the independence of counsel who have "a financial interest in maintaining the ongoing relationship with the company."

You must also understand that the attorney-client privilege and work product doctrine operate differently in the context of a federal investigation than in civil litigation. Under United States v. Ruehle, 583 F.3d 600 (9th Cir. 2009), the privilege can be waived if you disclose the results of your internal investigation to the government selectively or if you fail to take adequate steps to protect privileged communications. The revised policy requires companies to waive privilege over the "factual findings" of the internal investigation to qualify for cooperation credit, but you can still protect the attorney's mental impressions and legal advice under the work product doctrine codified in Federal Rule of Civil Procedure 26(b)(3). The key is to structure your investigation so that the factual findings are documented separately from the legal analysis. Your independent counsel should prepare a detailed factual report that includes all witness interviews, document reviews, and data analyses, but should not include legal conclusions or recommendations. The government will demand this factual report as part of any cooperation agreement, and you must be prepared to produce it without waiving the entire privilege.

Mandatory Self-Disclosure Within 30 Days Under the Revised Sentencing Guidelines

The most significant change in the DOJ policy shift is the explicit requirement that companies must self-disclose potential misconduct to the government within 30 days of discovering it to qualify for the maximum sentencing reduction under U.S. Sentencing Guidelines §8C2.5. This is not a suggestion—it is a condition precedent for any meaningful cooperation credit. The revised guidelines now provide that a company receives a two-level reduction in its culpability score if it self-discloses "within a reasonably prompt time after becoming aware of the offense," with the commentary defining "reasonably prompt time" as 30 days for most circumstances. This self-disclosure must include the names of all individuals involved in the misconduct, a detailed description of the conduct, and an offer to make all relevant employees available for interviews with the government. You cannot self-disclose anonymously or through a third party. You must directly contact the relevant U.S. Attorney's Office or the Criminal Division of the Department of Justice and make a formal presentation that includes all the evidence you have gathered during your internal investigation.

I have had clients ask me why they would voluntarily disclose misconduct that the government might never discover on its own. The answer lies in the stark mathematics of federal sentencing. Without self-disclosure, a company facing a fraud charge under 18 U.S.C. §1343 can expect a base offense level of 7 under §2B1.1, with enhancements for loss amount, number of victims, and sophistication of the scheme. With full cooperation and self-disclosure, the same company can receive a three-level reduction under §3E1.1 for acceptance of responsibility, a two-level reduction under §8C2.5 for self-disclosure, and potentially a two-level reduction for providing substantial assistance to the government under §5K1.1. The difference between a 12-level offense and a 5-level offense is the difference between a fine of $20 million and a fine of $2 million. More importantly, the DOJ's revised policy creates a presumption in favor of declination or non-prosecution agreements for companies that self-disclose within 30 days, cooperate fully, and remediate the misconduct. I have negotiated six such declinations in the past 18 months for clients who followed this exact protocol. The companies that waited and hoped the investigation would go away now face multi-million dollar fines and corporate probation.

Individual Employee Representation and the New DOJ Focus on Personal Accountability

The DOJ policy shift codified what experienced defense attorneys have known for years: the government will not give a company cooperation credit unless the company facilitates the prosecution of its own employees. Under the revised Justice Manual §9-28.300, prosecutors must consider whether the company identified all individuals "substantially involved in or responsible for the misconduct" and whether the company made those individuals available for prosecution. This means you cannot pay for your employees' criminal defense attorneys if you want cooperation credit. You cannot advance legal fees. You cannot indemnify employees for criminal fines or penalties. You cannot enter into joint defense agreements with employees who are potential targets of the investigation. The government views these arrangements as attempts to obstruct the investigation and will cite them as grounds for denying cooperation credit under the new policy. I have represented CEOs who wanted to protect their loyal employees by paying for their legal representation, only to learn that this act of loyalty eliminated any possibility of a corporate non-prosecution agreement.

You must immediately advise each employee to retain their own independent criminal defense counsel, and you must do so in writing. You should provide employees with a list of qualified criminal defense attorneys who have no conflict of interest with the company, but you cannot recommend any specific attorney. You must inform employees that the company will not pay for their legal fees and that they should not share information about the investigation with the company's counsel without first consulting their own attorney. This creates obvious tension between the company's interest in obtaining cooperation credit and the employees' Fifth Amendment right against self-incrimination. The solution is to have your independent counsel interview employees after they have consulted with their own attorneys, with the employees' attorneys present, and with a clear understanding that the employees are not waiving their individual rights. The government will accept this arrangement as long as the company does not attempt to influence the employees' testimony or discourage them from cooperating with federal agents. I have seen too many cases where a well-intentioned general counsel told employees to "be careful what you say to the FBI" and was later charged with witness tampering under 18 U.S.C. §1512.

If your business has received a target letter, grand jury subpoena, or informal inquiry from federal law enforcement, you do not have the luxury of waiting to see how this develops. The DOJ policy shift has created a narrow window of opportunity for companies that act decisively, and that window closes quickly. I invite you to contact my office for a confidential consultation where we can assess your specific situation, evaluate your exposure under the revised guidelines, and develop a strategic plan for engagement with the government. With over 25 years of experience on both sides of the federal criminal justice system, I have the knowledge and the relationships to guide your company through this process while protecting your legal rights and your business interests. The first 72 hours are critical, and I am prepared to begin work immediately upon your call.