Bribery Update: are your procedures adequate?

Background

In 2013, a director of Skansen Interiors Limited ("Skansen") bribed a project manager during a tender process to secure Skansen two refurbishment contracts, worth a total of £6 million. Skansen made payments of £10,000 to the project manager, with a further £29,000 promised upon completion.

Upon learning of the transactions, in early 2014, Skansen's newly-appointed CEO immediately commenced an internal investigation, implemented an anti-bribery & corruption policy, dismissed the managing director and reported the activity to the National Crime Agency and the City of London Police.

Despite self-reporting the incident and fully cooperating with the police investigation, Skansen was charged with failing to prevent bribery taking place within their organisation.

Why did Skansen's defence fail?

Skansen argued they had 'adequate procedures' in place on the basis of that fact that they were a small company, operating out of a single office with a few employees, such that they did not need a stand-alone anti-bribery and corruption policy or more sophisticated procedures.

Skansen argued they had a culture of compliance and provided their employees with general guidance, encouraging them to act with integrity and transparency in business dealings. They also had a series of financial controls within the company designed to prevent improper payments and clauses in their standard terms with suppliers explicitly prohibiting bribery.

Despite this, the jury found against Skansen.

It was noted that, since the Act came into force, Skansen had not taken action to reconsider their approach of how to minimise instances of bribery. Accordingly, they lacked several components that the Ministry of Justice guidance refers to, such as effective communication of bribery risk and procedures to employees, revising and monitoring procedures regularly, undertaking appropriate risk assessments and having a detailed stand-alone policy.

The CPS has drawn some criticism for opting to fully prosecute as opposed to considering a Deferred Prosecution Order, especially given the cooperation and self-reporting of Skansen. In response, the CPS has been clear that a message needed to be sent that companies must ensure their procedures are consistently reviewed and adequate.

What lessons can be learnt?

This is the first case of its kind which involves a company using the section 7 defence unsuccessfully.

This case is notable given that the bribes were not substantial in value, the company self-reported and that it is a small organisation which operates in jurisdictions known to be low-risk for bribery and corruption.

Organisations would be prudent to re-consider their anti-bribery policies and procedures to ensure, as a minimum, they are complying the guidance set out by the Ministry of Justice.

In particular, records should be kept of risk assessments, training and continual monitoring activities. The lack of a 'paper trail' evidencing these activities will significantly weaken your position.

This case also highlights the need for adequate reporting procedures and the appointment of a compliance officer or equivalent.

Despite the fact that Skansen was a small company, the CPS was clear that in its view a separate, bespoke policy should have been in place.