Top Menu

Questions Abound In IBM Enforcement Action

Last week, the SEC announced (here) a settled FCPA enforcement action against International Business Machines Corporation (“IBM”).

This post summarizes the enforcement action and then addresses the many questions raised by the enforcement action.

Summary of Enforcement Action

According to the SEC complaint (here): “During the period from 1998 through 2009, in violation of the Foreign Corrupt Practices Act of 1977, employees of certain of [IBM’s] subsidiaries and a majority-owned joint venture provided cash payments, improper gifts, as well as improper travel and entertainment to government officials in South Korea and China.”

The conduct at issue focused on:

IBM-Korea, Inc. (“IBM-Korea”), a South Korean corporation “wholly-owned indirectly by IBM International Group B.V, which, in turn is wholly-owned by IBM;”

LG IBM PC Co. Ltd. (“LG-IBM”), a South Korean joint venture formed in 1996 by IBM-Korea (51% owner of the JV) and LG Electronics (“LG”) (49% owners of the JV); and

IBM (China) Investment Company Limited and IBM Global Services (China) Co. Ltd. (collectively “IBM-China”) – entities “owned by IBM China/Hong Kong Limited, a Hong Kong company that is ultimately owned by IBM.”

In summary fashion, the SEC alleged as follows.

“From 1998 to 2003, employees of [IBM-Korea] and [LG-IBM] made payments to various government officials in South Korea. The purpose of these payments was to secure the sale of IBM products through IBM-Korea and LG-IBM’s business partners. During the relevant period, these managers paid approximately KRW 216,832,500 (South Korean Won), or $207,000, in cash bribes to South Korean government officials, including providing improper·gifts and payments of travel and entertainment expenses.”

“From at least 2004 to early 2009, employees of [IBM-China] engaged in a widespread practice of providing overseas trips, entertainment, and improper gifts to Chinese government officials. The misconduct in China involved several key IBM-China employees and more than 100 IBM China employees overall.”

As to IBM, the parent-company issuer, the SEC alleged as follows.

“Despite its extensive international operations, IBM lacked sufficient internal
controls designed to prevent or detect these violations of the FCPA. During the period 1998 to 2009, IBM had corporate policies prohibiting bribery and procedures relating to compliance with the FCPA; however, deficient internal controls allowed employees of IBM’s subsidiaries and joint venture to use local business partners and travel agencies as conduits for bribes or other improper payments to South Korean and Chinese government officials over long periods of time.”

“During the period 1998 to 2009, IBM failed to make and keep books and records that accurately reflected the improper payments made in South Korea and China. Instead, these payments were recorded as legitimate business expenses.”

The body of the SEC’s complaint alleges various “things of value” provided to alleged South Korean “foreign officials” including shopping bags filled with thousands of dollars, cash-filled envelopes exchanged in parking lots and free personal computers, and travel and entertainment expenses.

According to the SEC, such “things of value” were: “in exchange for designating IBM-Korea a preferred supplier of mainframe computers to [an alleged government entity] and for placing orders with IBM-Korea at higher prices;” “in exchange for (1) maintaining IBM-Korea as the supplier of mainframe computers to [an alleged government entity]; and (2) for helping an IBM-Korea business partner win bids to supply mainframe computers and storage equipment to [an alleged government entity] worth more than [$21 million]; “in exchange for [an alleged “foreign official’s] assistance to IBM-Korea in obtaining a contract with [an alleged government entity] worth approximately [$13 million] for the installation of a mainframe computer in 2002;” “to entice [foreign official’s] to purchase IBM products:” “to win a contract to supply 657 (later increased to 825) personal computers valued at [approximately $1.4 million]; “in exchange for providing LG-IBM with certain confidential information regarding the product specifications on [an alleged government entity’s] request for procurement;” “to persuade employees of [an alleged government entity] to purchase IBM products;” and to entice alleged foreign officials “to purchase IBM products or to provide information to assist LG-IBM in the bidding process.”

The body of the SEC’s complaint as to China conduct alleges as follows.

“From at least 2004 to early 2009, IBM-China employees created slush funds at local travel agencies in China that were then used to pay for overseas and other travel expenses incurred by Chinese government officials. In addition, IBM-China employees created slush funds at its business partners to provide a cash payment and improper gifts, such as cameras and laptop computers, to Chinese government officials. IBM failed to record accurately these payments in its books and records.”

Specifically, the SEC alleged as follows:

“Between 2004 and 2009, IBM’s internal controls failed to detect at least 114
instances in which (1) IBM-China employees and its local travel agency worked together to create fake invoices to match approved [Delegation Trip Requests] DTRs; (2) trips were not connected to any DTRs; (3) trips involved unapproved sightseeing itineraries for Chinese government employees; (4) trips had little or no business content; (5) trips involved one or more deviations from the approved DTR; and (6) trips where per diem payments and gifts were provided to Chinese government officials.”

Based on the above allegations, the SEC charged IBM with violating the FCPA’s books and records and internal control provisions. As noted in the SEC release, IBM, without admitting or denying the SEC’s allegations, consented to the entry of a final judgment permanently enjoining the company from future FCPA violations. IBM agreed to pay $10 million (disgorgement of $5.3 million, $2.7 million in prejudgment interest, and a $2 million civil penalty).

Peter Barbur and Evan Chessler (Cravath, Swaine & Moore – here and here) represented IBM.

Questions Abound

For starters, this is not the first time IBM has been the focus of an FCPA enforcement action.

In December 2000 (see here), the SEC found, in a cease and desist proceeding, that IBM violated the FCPA books and records provisions in connection with a $250 million contract to integrate and modernize computer systems in Argentina. As part of the settlement, “IBM consented to the entry of an Order that requires IBM to cease and desist from committing or causing any future violation of [the FCPA’s books and records provisions].

Given that IBM was charged last week with FCPA books and records violations, IBM has clearly violated this 2000 court order.

In my recent “Facade of FCPA Enforcement” article (here), I highlight various pillars that contribute to the facade of FCPA enforcement.

Pillars include, unsupported legal conclusions serving as the foundation for an enforcement action, including as to “foreign official” and disgorgement issues; the tendency of factually similar cases being resolved materially different ways; and bribery, yet no bribery.

These pillars are present in the IBM enforcement action.

For starters, who were the “government officials in South Korea and China.” Were they traditional bona-fide government officials or employees of alleged state-owned or state-controlled enterprises and thus “foreign officials” under the enforcement agencies’ interpretation – an interpretation currently the subject of judicial challenges?

As to the South Korean officials, the complaint merely alleges that the “foreign government officials involved worked for sixteen South Korean government entities.” These officials included the “Chief of Operations for the Electronic Operations Division” of an entity; an employee of the same entity; a “manager of the government-controlled entity”; the “Director of Planning” of another entity; employees of an entity; an employee of a “state-owned agency of the South Korean government;” a “Director of Information Technology” at another entity; employees of another entity; and “key decision makers at ten other” entities.

As to the Chinese officials, the complaint merely alleges that the individuals were associated with “government-owned or controlled customers in China for hardware, software, and other services.”

Based on the descriptions in the complaint, it seems as if the “foreign officials” were all employees of SOE entities. If so, two out of three corporate FCPA enforcement actions in 2011 (IBM and Maxwell Technologies – see here) involve SOE employees.

Why no FCPA anti-bribery charges against IBM or the relevant subsidiaries (accepting of course the SEC’s “foreign official” interpretation)?

According to the SEC, the conduct at issue took place between 1998 and 2009. Further, according to the SEC, “in connection with the conduct described herein, IBM, directly or indirectly, made use of the mails or the means or instrumentalities of interstate commerce in connection with the acts, transactions, practices and courses of business alleged in this Complaint.”

Why no DOJ involvement?

It is very common for the DOJ and SEC to announce FCPA enforcement actions on the same day. Thus, one can assume (perhaps future events will prove otherwise) that the DOJ elected to sit this one out.

Why?

The SEC’s complaint alleges vivid instances of bribery (not always seen in FCPA enforcement actions) in connection with multi-million dollar contracts.

Yet, no bribery – not even civil FCPA anti-bribery charges.

Is this another instance where the U.S. enforcement agencies look first at the corporate offender, its customers, and its products, and then craft a resolution that will hurt the least?

After all, one of IBM’s largest customer segments is the government (federal, state, etc.) see here.

Did this play any role in how the enforcement action was resolved?

The SEC charged IBM only with FCPA books and records and internal controls violations. Yet, as in several other cases, the SEC pursued a disgorgement remedy. As noted in my Facade article (pages 981-984) non-FCPA disgorgement case law clearly holds that disgorgement may not be used punitively. It is difficult to see how mis-recording of a payment (a payment the SEC does not allege violated the FCPA’s anti-bribery provisions) can properly give rise to a disgorgement remedy. See also here from Philip Urofsky and Danforth Newcomb on this issue.

In a transparent legal system, similar facts are supposed to be resolved with similar charges. However, it is questionable whether this fundamental principle (one that inspires trust and confidence in a legal system) is followed in many FCPA enforcement actions.

The China-related charges against IBM regarding excessive travel and entertainment expenses are nearly identical to two previous FCPA enforcement actions – the December 2007 enforcement action against Lucent Technologies and the December 2009 enforcement action against UTStarcom, Inc.

Lucent was resolved via a DOJ non-prosecution agreement (here) and an SEC enforcement action charging only FCPA books and records violations (here).

UTStarcom was resolved via a DOJ non-prosecution agreement (here) and an SEC enforcement action charging FCPA anti-bribery as well as books and records and internal controls violations (here).

IBM, as detailed above, is presumably being resolved without any DOJ involvement and an SEC enforcement action charging only FCPA books and records violations.

Three cases – all involving in whole or in part allegations of providing excessive travel and entertainment expenses to Chinese “foreign officials” – resolved in three different ways.

*****

And now, as one reader put it, the question all FCPA Professor blog readers (at least this particular reader) are dying to know.

Butler or Wisconsin?

I am a born and raised cheesehead and graduate of the University of Wisconsin Law School.

However, my allegiance is to my employer – Butler University. Let’s face it, Butler is an awesome, feel-good story. Student-athletes in every sense of the word, home games at historic Hinkle Fieldhouse, a coach who, a few years ago, left his job selling pharmaceuticals to become a volunteer coach (since promoted), and a small, cozy campus to top it off.

BU-TLE- R U a Bulldog – hell ya!

A Look Back (and Forward)

This week marks not only the end of a year, but also a decade.

So let’s take a look back at FCPA enforcement circa 2000.

In 2000, the FCPA was indeed “on the books” (the statute was enacted in 1977), yet there was little in terms of FCPA news or enforcement actions.

A “U.S. newspapers and wires” search for the FCPA in the 2000 picks up 64 “hits” and among the more noteworthy stories from that year were the following:

(1) BellSouth corporation disclosed that the SEC launched a probe into whether one of its Latin American subsidiaries violated the FCPA and the company also disclosed that its outside counsel had already investigated the conduct and found that no violations had occurred; and

(2) BF Goodrich Company announced that it was using a web-enabled training system to educate its employees about work-related legal issues including the FCPA.

One could even attend a few FCPA training sessions in 2000 as the search picked up programs sponsored by both the City of New York Bar and the Washington DC Bar.

There was even one FCPA enforcement action in 2000!

In December 2000, the SEC announced (here) the filing of a settled cease-and-desist proceeding against International Business Machines Corporation (“IBM”).

According to the SEC order (here), IBM violated the books and records provisions of the FCPA based on the conduct of its indirect, wholly-owned subsidiary, IBM-Argentina, S.A. The conduct involved “presumed illicit payments to foreign officials” in connection with a “$250 million systems integration contract” between Banco de la Nacion Argentina (“BNA”) (an apparent “government-owned commercial bank in Argentina) and IBM-Argentina.

The SEC order finds that, in connection with the contract, IBM-Argentina’s Former Senior Management (without the knowledge or approval of any IBM employee in the U.S.) caused IBM-Argentina to enter into a subcontract with an Argentine corporation (“CCR”) and that “money paid to CCR by IBM-Argentina in connection with the subcontract was apparently subsequently paid by CCR to certain BNA officials.”

According to the Order, IBM-Argentina paid CCR approximately $22 million under the subcontract and “at least $4.5 million was transferred to several BNA directors by CCR.”

According to the Order, the former Senior Management “overrode IBM procurement and contracting procedures, and hid the details of the subcontract from the technical and financial review personnel assigned to the Contract.” The Order finds that IBM-Argentina “recorded the payments to CCR in its books and records as third-party subcontractor expenses” and that IBM-Argentina’s financial results were incorporated into IBM’s financial results filed with the Commission.

Based on the above conduct, the SEC concluded that “IBM violated [the FCPA’s books and records provisions] by failing to ensure that IBM-Argentina maintained books and records which accurately reflected IBM-Argentina’s transactions and dispositions of assets with respect to the Subcontract.” IBM consented to a cease and desist order and consented to entry of a judgment ordering it to pay a $300,000 penalty.

A Washington Post article about the IBM action notes that it “is the SEC’s first in three years involving overseas bribery.”

In 2000, there were no DOJ FCPA prosecutions (against corporations or individuals).

The first DOJ corporate FCPA prosecution of this decade did not occur until 2002.

In that action (here) Syncor Taiwan, Inc. (a wholly-owned, indirect subsidiary of Syncor International Corporation) pleaded guilty to a one-count criminal information charging violations of the FCPA. According to the DOJ release, “[t]he company admitted making improper payments [approximately $344,110] to physicians employed by hospitals owned by the legal authorities in Taiwan for the purpose of obtaining and retaining business from those hospitals and in connection with the purchase and sale of unit dosages of certain radiopharmaceuticals.”

The release further notes that the company “made payments [approximately $113,000] to physicians employed by hospitals owned by the legal authorities in Taiwan in exchange for their referrals of patients to medial imaging centers owned and operated by the defendant.”

Based on this conduct, the release notes that the company agreed to a $2 million criminal fine – “the maximum criminal fine for a corporation under the FCPA” (as noted in the release). The release also notes that “Syncor International has consented to the entry of a judgment requiring it to pay a $500,000 civil penalty, the largest penalty ever obtained by the SEC in an FCPA case.”.

From this retrospective, two issues jump out.

First, as demonstrated by the IBM action, the notion that an issuer may be strictly liable for a subsidiary’s (even if indirect) violations of the FCPA books and records is nothing new. (See here for a prior post on this issue).

Second, as demonstrated by the Syncor action, DOJ’s interpretation of the “foreign official” element to include non-government employees employed by state-owned or state-controlled entities stretches back to earlier this decade. (See here for prior posts on this issue).

This retrospective also highlights just how significantly FCPA enforcement has changed this decade.

For starters, the same “U.S. newspapers and wires” search for the FCPA (year to date) picks up nearly 700 “hits” (a ten-fold increase from ten years ago). In addition, if one wanted to, one could attend (it seems) an FCPA seminar, training session, bar event, etc. every week in a different state.

Further, I bet my Jack LaLanne Power Juicer received this holiday season that if the IBM enforcement action were to have recently occurred, the SEC would have also charged FCPA internal control violations as well as sought a significant disgorgement penalty given that the alleged improper payments in that matter helped secure a $250 million contract.

Moreover, the $2 million “maximum criminal fine for a corporation under the FCPA” (as noted in the Syncor DOJ release) seems laughable when viewed in the context of the $450 million Siemens criminal fine (Dec. 2008) or the $402 million Kellogg Brown & Root criminal fine (Feb. 2009). Also laughable is the $500,000 “largest penalty ever obtained by the SEC in an FCPA case” (as noted in the Syncor release) when viewed in the context of the $350 million Siemens penalty or the $177 million KBR/Halliburton penalty.

Has the conduct become more egregious during this decade or have enforcement theories and strategies simply changed? I doubt it is the former.

Why have enforcement theories and strategies changed? One of the best, candid explanations I’ve heard recently is that FCPA enforcement for the government “is lucrative.” (See here).

One of the great legal “head-scratchers” of this decade is how DOJ and SEC’s enforcement of the FCPA against business entities has taken place almost entirely outside of the normal judicial process due to the fact that corporate FCPA prosecutions are resolved through non-prosecution or deferred prosecution agreements, settled through SEC cease and desist orders, or otherwise resolved informally. The end result is that in many cases, the FCPA means what DOJ and SEC says it means.

My hope for the New Year and decade is that many of the untested and unchallenged legal theories which are now common in FCPA enforcement will actually be subject to judicial scrutiny and interpretation.

Authorizing Improper Payments … You Can’t Do That Either!

The FCPA’s anti-bribery provisions prohibit one from offering to pay, paying, or promising to pay “anything of value” to a “foreign official” to “obtain or retain business.”

As highlighted by the SEC’s recent settled enforcement action against Oscar Meza (the former Director of Asia-Pacific Sales for Faro Technologies, Inc.), the anti-bribery provisions also prohibit one from “authorizing” such payments or offer of payments as well.

According to an SEC complaint (see here), this is exactly what Meza did when the company’s new China Country Manager requested permission to “do business the Chinese way,” a term, the SEC alleges, Meza understood to mean that the Country Manager was requesting permission to pay kickbacks and other things of value to potential Chinese customers in order to obtain sales contracts.

The SEC’s complaint alleges that Meza’s authorizations resulted in Faro-China’s payment of approximately $450,000 in improper payments to … you guessed it …”employees of Chinese state-owned companies.” (see para. 12). According to the complaint, not only did Meza authorize these payments, but he also instructed Faro-China’s staff to alter account entries to conceal the true nature of the payments. (see paras 15-16). Further, in language sure to make any defense lawyer cringe, Meza allegedly sent an e-mail to the Country Manager lamenting that “someone will notice [the payments] one day and we may all be in trouble.” (para 14).

Based on the above conduct, the SEC charged Meza with violating the FCPA’s anti-bribery provisions and books and records and internal control provisions, and aiding and abetting Faro’s violations of these same provisions.

Without admitting or denying the SEC’s allegations, Meza consented to entry of a final judgment enjoining him from violating the FCPA and aiding and abetting such violations. According to the SEC release (see here) Meza was ordered to pay a $30,000 civil penalty as well as approximately $27,000 in disgorgement and pre-judgment interest (a figure no doubt attributed to the fact that Meza received, in addition to a base salary, a sales commission based on the value of sales contracts awarded to Faro-China – including contracts with Chinese government-owned companies).

This is not the first time FCPA followers have heard about Faro Technologies or the above factual scenario. In June 2008, the company (based on the same core set of facts as above) (i) agreed to a DOJ non-prosecution agreement and paid a $1.1 criminal penalty (see here); and (ii) consented to the entry of an SEC cease and desist order and agreed to pay $1.85 million in disgorgement and pre-judgment interest (see here).

Powered by WordPress. Designed by WooThemes