When a subsidiary employee is arrested for bribery

An employee’s arrest for bribery can place a company under pressure from several directions at once. Police may seek evidence, regulators may examine the subsidiary’s controls, customers may suspend contracts, and staff may fear that routine business activity will be misinterpreted. The arrest is an allegation against an individual, not proof that the company or its parent entity is liable. It is, however, a serious compliance event requiring a controlled and well-documented response.

For an Australian company, the situation can involve local criminal law, foreign bribery rules, employment obligations, securities or procurement requirements, and the laws of the country where the subsidiary operates. Directors and senior managers must protect evidence, avoid obstructing an investigation, preserve fair treatment for the employee, and establish whether the suspected conduct reflects a wider control failure.

What the arrest changes for the company

The first obligation is to understand the legal status of the matter. An arrest may arise from a domestic bribery investigation, an allegation involving a foreign public official, or a broader case concerning fraud, money laundering, procurement manipulation or false accounting. The subsidiary should identify the investigating authority, alleged offences, relevant jurisdictions, court conditions and any restrictions placed on the employee.

The company should avoid treating the arrest as a final finding. Removing the person from duties may be appropriate where there is a risk of evidence tampering, influence over witnesses or further improper payments, but any suspension should comply with applicable employment law and the employment contract. Access restrictions should be based on risk rather than assumptions about guilt.

A parent company usually needs to establish whether the employee acted for the subsidiary, another group entity, an agent or a joint venture. It should examine reporting lines, delegated authority, payment approval, interactions with public bodies and the extent to which senior management knew or should have known about the conduct. Corporate exposure can arise from participation, authorisation, benefit, inadequate controls or failure to prevent bribery, depending on the relevant law.

The response should be coordinated through a small decision-making group. Legal counsel, compliance, internal audit, human resources, information security and senior management may each have a role, while communications staff should ensure that public statements do not prejudice proceedings. Local counsel in the subsidiary’s country may be essential because rules on interviews, searches, privacy and employee representation vary significantly.

Immediate response and internal controls

The company should issue a targeted legal hold as soon as it becomes aware of the arrest or credible allegations. This may cover emails, messaging applications, expense claims, invoices, tender documents, travel records, gifts and hospitality registers, accounting entries, supplier files, access logs and recordings held under lawful retention systems. Automatic deletion policies should be paused where legally permitted, and staff should receive clear instructions about preserving information without conducting informal searches or discussing the case on social media.

An independent investigation is generally preferable to an informal management review. The investigator should define the allegations, identify relevant people and entities, establish a chronology, test financial transactions and consider whether the suspected payments were disguised as commissions, consulting fees, donations, rebates or facilitation expenses. Interviews should be planned carefully, recorded in accordance with local rules and conducted with appropriate support for employees who may be witnesses rather than suspects.

First-day priorities

• Secure documents, devices, financial records and relevant communications
• Restrict risky systems access while preserving necessary business continuity
• Appoint legal and investigative leads with clear decision authority
• Record every preservation, interview and escalation decision

The company should also review whether the alleged conduct is continuing. A supplier, intermediary or manager may still be able to approve payments, communicate with officials or alter records. Temporary controls can include dual approval for high-risk transactions, payment holds, enhanced review of third parties and removal of discretionary authority. These measures should be narrow enough to avoid disrupting legitimate operations without reason.

Evidence that deserves protection

• Tender files, public-sector contracts and procurement correspondence
• Expense claims, commissions, gifts, hospitality and charitable payments
• Messages involving agents, consultants, distributors and government contacts
• Compliance training, approvals, audit findings and previous complaints

Investigators must distinguish between relevant evidence and privileged legal advice. Employees should not be encouraged to delete, edit or “tidy up” files. A well-intentioned attempt to correct records after an arrest can create allegations of obstruction or concealment. In Australia, the company should obtain advice before collecting personal data from employee devices, particularly where information is stored across borders or includes unrelated private material.

Legal reporting and cooperation in Australia

There is no universal rule that every bribery allegation must immediately be reported to an Australian authority. The correct approach depends on the conduct, the parties involved, applicable legislation, contractual terms, insurance arrangements, listing obligations and the laws of the country where the subsidiary operates. A company should obtain legal advice before making a report, while recognising that delay, destruction of evidence or a misleading statement can create additional liability.

The Australian Criminal Code contains offences relating to bribing a foreign public official, and the Australian Federal Police can investigate conduct with an Australian connection. Domestic bribery may also involve state or territory offences, Commonwealth fraud provisions, proceeds-of-crime laws and offences concerning false or misleading accounting records. If the company is listed on the ASX, directors should consider whether the matter could become market-sensitive and whether disclosure or engagement with advisers is required.

Some industries carry additional reporting and licensing expectations. A government supplier may need to notify a contracting agency under its procurement terms. A financial services business may have obligations involving suspicious matters, corporate governance or regulator cooperation. A company holding licences in mining, health, defence, transport or infrastructure may face sector-specific consequences if bribery affected a tender, approval or inspection.

Cooperation should be genuine, organised and proportionate. The company should preserve relevant material, respond accurately to lawful requests and avoid making unsupported claims about the employee or the subsidiary. It should establish a single channel for communications with investigators and keep a record of production decisions. Where the matter spans countries, counsel should coordinate advice on privacy, privilege, document transfer, self-reporting and the risk that a statement in one jurisdiction will affect proceedings elsewhere.

Australian businesses operating in London, Singapore, Jakarta or other commercial centres may also face foreign enforcement. The adequate procedures guide is useful when assessing how prevention controls may be scrutinised under the UK Bribery Act, especially if the group has a UK connection, uses UK intermediaries or conducts relevant business through a UK entity.

Assessing the wider subsidiary risk

An arrest should trigger a risk assessment beyond the individual’s conduct. The company should map the subsidiary’s dealings with government departments, state-owned enterprises, customs officials, regulators, hospitals, public universities and political or community figures. It should assess whether sales targets, tender incentives or local customs created pressure to make improper payments. Country and sector risk should be reviewed alongside the actual controls operating at the subsidiary.

The Business Anti-Corruption Portal’s country risk profiles can help structure that assessment across jurisdictions. They should be used as a starting point rather than a substitute for transaction-specific analysis. A low-risk country profile does not make a particular intermediary safe, while a high-risk environment does not prove that every payment or public interaction is improper.

Healthcare and pharmaceutical operations require particular care. Payments described as speaker fees, advisory services, travel support, clinical research expenses or educational sponsorship may be legitimate, but they can also conceal inducements. The Portal’s analysis of pharmaceutical interactions highlights why dealings with government doctors and public hospitals deserve close review. Similar scrutiny may apply to medical procurement in Australia, where state health departments and public hospitals are significant market participants.

Australian commercial customs can complicate the assessment. A modest meal after a meeting in Sydney or Melbourne may be ordinary hospitality, whereas repeated entertainment for a tender panel, expensive travel to a sporting event or benefits directed to a decision-maker may create a different risk. In mining regions near Perth, Brisbane or Darwin, relationships with government agencies, traditional owner organisations, contractors and local communities require clear approval rules and careful records. Cultural respect and relationship building should never be used to excuse hidden benefits or payments.

The review should test whether controls worked in practice. Relevant questions include whether due diligence was completed before appointing agents, whether beneficial ownership was verified, whether commissions matched market value, whether invoices described genuine services and whether employees could report concerns without retaliation. Internal audit findings, hotline reports and previous disciplinary cases may show that management had earlier warnings.

Discipline, remediation and stakeholder management

Employment action should follow a fair and evidence-based process. The company may need to suspend the employee, commence disciplinary proceedings or terminate employment, but the decision should account for the allegations, available evidence, procedural fairness, contractual rights and local law. A company should not pressure the employee to waive legal rights or provide information without understanding whether the person is a witness, suspect or defendant.

The company should separately assess the conduct of supervisors, approvers, finance staff, third parties and directors. A bribery payment often involves more than one control point, even when a single employee made the transfer. Disciplinary action that focuses only on the arrested employee can conceal incentive failures, weak oversight or management tolerance of unusual transactions.

Remediation may include enhanced due diligence, revised approval thresholds, separation of sales and payment functions, targeted training, independent testing and a review of incentive plans. Training should use realistic examples for the subsidiary’s industry and location. A generic annual module will be less effective than practical guidance on agents, facilitation payments, gifts, government touchpoints, expense descriptions and escalation channels.

Stakeholders should receive information appropriate to their role. The board may need a privileged investigation update and a timetable for decisions. Lenders, insurers, joint-venture partners and major customers may have notification rights. Employees need a factual message that protects confidentiality and prohibits retaliation. Public statements should be brief, accurate and limited to information the company is entitled to disclose.

The final investigation report should explain the scope, methodology, evidence, findings, control weaknesses and remediation plan. It should identify unresolved issues and set dates for follow-up testing. The company should retain a defensible record of why it reported or did not report, why access was restricted, how employees were treated and how it evaluated potential corporate liability. A careful record supports accountability and demonstrates that the organisation responded seriously rather than waiting for the matter to disappear.

When a subsidiary employee is arrested for bribery, the practical priority is disciplined control of the first response: preserve evidence, protect fair process, obtain jurisdiction-specific advice, assess the wider business and document every material decision. For an Australian company, that approach is the clearest path to managing legal exposure while maintaining operational integrity.