Accessing Data for Compliance Moving from Best Practice to Expected Standard in 2024 ECCP

One of the most notable aspects of the Department of Justice’s (DOJ’s) 2024 update to its Evaluation of Corporate Compliance Programs (ECCP) is its focus on data access for compliance professionals. As discussed in a recent Compliance Podcast Network article, DOJ has made it clear that if you do not have sufficient access to data, you cannot adequately monitor compliance, detect issues, or remediate problems.

The Compliance Evangelist piece lists six broad questions DOJ is asking under the new guidance:

• Does Compliance have sufficient access to data?
• Are there impediments to accessing data?
• Does compliance have the tools to analyze data?
• Is data maintained properly?
• Is the company leveraging data and analysis to improve compliance?
• How precise is your data?

As with other updated items in DOJ’s 2024 ECCP update, what was once best practice is now essentially a requirement.

Read more of the details in the article here.