Responding to a US DOJ subpoena in a bribery inquiry

A subpoena from the United States Department of Justice (DOJ) can place an Australian company, executive or intermediary at the centre of a foreign bribery investigation very quickly. The request may concern payments, agents, distributors, joint ventures, customs brokers, consultants or books and records connected to conduct that occurred entirely or partly outside the United States. Learn more about Disclaimer.aspx.

The first response should be organised, legally supervised and evidence-led. A rushed email deletion, informal staff interview or casual “no worries” assurance can create a separate obstruction, retaliation or misleading-conduct problem. The objective is to understand the demand, protect legal rights, preserve relevant material and engage constructively without volunteering an uncontrolled narrative.

What a DOJ subpoena means

A DOJ subpoena is a formal demand for testimony, documents or electronically stored information. In a foreign bribery matter, it may arise from a grand jury investigation, a False Claims Act inquiry, an FCPA investigation or coordination with another US agency. The wording matters: a subpoena may identify a particular transaction, request broad categories of records, require a custodian’s testimony, or set a return date that appears unreasonably short.

The recipient should first verify who issued the document, how it was served and which legal entity or person is named. A subpoena directed to an Australian subsidiary is different from one directed to a US parent, an individual director or a bank holding records. It may be possible to negotiate scope, timing and search terms, or to challenge an excessive request, but ignoring it is rarely a sound strategy.

The Business Anti-Corruption Portal offers useful country risk profiles, compliance materials and training that can help establish the background to the inquiry. Those resources do not replace advice on the subpoena itself, but they can help a company identify where public-sector dealings, licensing, procurement and intermediary relationships create elevated corruption exposure.

Take control during the first 48 hours

Nominate one senior response lead and instruct employees to direct all questions to that person and external counsel. The lead should create a confidential matter file, record deadlines, preserve the original subpoena and limit internal circulation. Staff should not discuss the investigation with customers, agents or colleagues who have no role in the response.

US counsel familiar with DOJ investigations should work with Australian lawyers who understand corporations law, employment obligations, privacy rules and local investigations. Counsel can contact the prosecutor or agent to clarify ambiguities and seek additional time. A short extension is often easier to obtain when the company demonstrates that it is preserving data and taking the request seriously.

Do not conduct an unstructured internal fact-finding exercise before deciding who should lead it. Interviews, search instructions and document reviews can affect privilege and may create discoverable records. Directors and officers should also understand whether the company’s insurance, deed of access or indemnity arrangements cover investigation costs.

A practical early message might tell staff: preserve relevant information, do not delete or alter anything, do not speculate externally, and send potentially responsive material to the designated legal team. That is more useful than asking everyone to “keep quiet,” which can be misunderstood as an instruction to conceal evidence.

Establish privilege without assuming it is absolute

Legal privilege should be planned, not presumed. Communications seeking or giving legal advice may be protected under Australian law, while US privilege and work-product rules may apply to parts of the investigation. The protection can be lost through unnecessary circulation, mixed business and legal emails, careless forwarding, or disclosure to third parties.

Counsel should define the investigation’s purpose and identify the client for communications. A company interview is not a personal legal consultation for the employee giving evidence. Directors, employees and contractors may need separate advice, especially where their interests differ from those of the corporate group.

Use clear labels and disciplined channels, but remember that writing “privileged” on a document does not create privilege. Business advice, compliance recommendations and operational decisions may remain discoverable even when a lawyer is copied into the email. External forensic accountants, e-discovery providers and investigators should be retained through counsel where appropriate, with their role and reporting lines documented.

Grand jury secrecy and confidentiality issues also require care. The recipient should not make public statements about the investigation or speculate about the target. At the same time, an internal legal hold and a controlled disclosure plan should not be used to intimidate whistleblowers or prevent lawful reporting to regulators.

Preserve and collect the right evidence

Issue a written legal hold covering email, messaging platforms, shared drives, laptops, phones, accounting systems, travel records, expense claims and physical files. Identify custodians by role and geography rather than relying only on keywords. In a mining company in Perth, for example, relevant evidence may sit with a project manager, freight provider, local adviser and joint-venture partner rather than in the head office compliance folder.

Suspend routine deletion and auto-purge settings where they may affect responsive material. Preserve original metadata and document the collection process. Personal devices and messaging applications require particular care: the company should set a lawful, proportionate collection method instead of allowing employees to copy material randomly or forward it to personal accounts.

The review should test more than whether a payment was booked as a commission. Look for approval chains, due diligence, beneficial ownership, tender scoring, unusual discounts, cash requests, charitable donations, hospitality, political connections and changes made after questions were raised. Compare invoices against contracts, bank records and delivery evidence.

A defensible response usually requires a disclosure log showing what was collected, what was withheld, the reason for any redaction and the person responsible for each category. If records do not exist, say so accurately. Never create a retrospective explanation that makes an incomplete file appear complete.

Coordinate US demands with Australian duties

An Australian business must assess local exposure at the same time as it responds to the US request. Foreign bribery is an offence under Australia’s Criminal Code, and the corporate failure-to-prevent foreign bribery offence increases the importance of adequate procedures, risk assessment and controls over associates. Depending on the facts, the Australian Federal Police, the Commonwealth Director of Public Prosecutions, ASIC or another regulator may take interest.

Privacy and employment obligations can affect the transfer of employee data from Australia to the United States. The team should consider the Privacy Act, applicable Australian Privacy Principles, sensitive information, cross-border disclosure notices and contractual restrictions. Data minimisation, secure transfer and access controls are preferable to sending an entire mailbox without review.

The company should map possible reporting duties, including suspicious matter obligations that may arise for regulated entities under AUSTRAC rules. It should also consider whistleblower protections, records held by an Australian government contractor and any restrictions in a customer or joint-venture agreement. A response that satisfies the DOJ but breaches an Australian obligation can create a second regulatory problem.

Local commercial context matters. A business selling equipment through state procurement panels in Melbourne may face different risks from a resources contractor dealing with permits and customs officials near Darwin. In Canberra, interactions with Commonwealth officials should be separated clearly from ordinary hospitality. In Australia’s resources market, “facilitation” can be used loosely to describe payments that may require much closer legal analysis.

Manage witnesses, third parties and regulators

Make a witness map showing who approved the relationship, negotiated the contract, processed the payment, performed due diligence and supervised the third party. Preserve reporting lines and departure dates for former employees. Interviews should be planned with a consistent purpose, an appropriate Upjohn-style warning where relevant, and a record of what was asked and answered.

Intermediaries often hold the facts that determine whether a payment was legitimate. Review their ownership, qualifications, appointment process, compensation, services, bank details and links to public officials. A consultant’s vague “government relations” role, success fee, offshore account or refusal to explain deliverables should be escalated rather than normalised.

Where the investigation concerns India or another higher-risk market, country information can help frame questions without substituting for transaction-specific evidence. The Portal’s India country snapshot can provide a starting point for examining public-sector touchpoints, regulatory conditions and common corruption risks.

Do not coach witnesses or align accounts. Employees should be told to answer truthfully, avoid speculation and preserve their own records. If a regulator in Australia, the US or another jurisdiction contacts an employee directly, the company can explain the availability of counsel without obstructing a lawful interview.

Decide how to engage with the DOJ

The company’s response strategy should be based on facts, jurisdiction, cooperation credit, exposure in Australia and the reliability of the evidence. Counsel may negotiate a narrower request, produce documents in stages, provide a factual presentation or discuss remediation. Cooperation is more credible when the company can explain its collection method, disclose uncertainties and identify control failures.

A voluntary disclosure decision should be made carefully. It may affect penalty posture and cooperation credit, but it can also expose additional conduct before the facts are fully understood. Senior management and the board should receive a concise risk report covering known conduct, possible misconduct, affected jurisdictions, involved individuals, preservation status and recommended next steps.

Cross-border proceedings can involve competing court orders, confidentiality rules and requests for interim protection. Lawyers assessing those issues may find a cross-border court analysis useful as comparative background, although it is not a substitute for advice on the particular subpoena or Australian procedure.

The business should also prepare for public and stakeholder communications. A short holding statement should avoid admissions, accusations and details that could prejudice the investigation. Customers, lenders, auditors and insurers may need notification under contract or policy terms, but each disclosure should be reviewed for privilege, accuracy and timing.

Practical response checklist

A disciplined first response helps keep the investigation controlled.

• Preserve the subpoena, envelopes, service records and attachments.
• Appoint Australian and US counsel with clear responsibilities.
• Issue a legal hold across email, messaging, devices and paper files.
• Create a deadline, custodian and production-status register.

The following questions should guide the first internal risk assessment:

• Which entities, executives, agents and transactions are within scope?
• Could Australian foreign bribery, privacy or whistleblower rules apply?
• Are there parallel inquiries, audits, litigation or insurance notifications?
• What remediation can begin without altering evidence or witness accounts?

The response should then move from containment to verification. Review the highest-risk transactions first, especially those involving public officials, permits, customs, procurement, state-owned enterprises, commissions or unexplained charitable payments. Separate confirmed facts from allegations, assumptions and missing records.

Finally, maintain a board-level record of decisions and keep operational teams focused on lawful business continuity. A subpoena is a legal process, not proof of guilt, but it is a signal that informal controls and undocumented explanations will not be enough. The practical takeaway is simple: preserve everything, obtain coordinated cross-border advice, test the facts independently and answer only through a controlled, accurate process.