
Compliance into the Weeds
What happens when two compliance aficionados get together to talk all things compliance, risk management and ERM? You get Tom Fox, the Voice of Compliance and Matt Kelly, the Coolest Guy in Compliance, going into the weeds of a topic each week. Each week, you can take a deep dive with two of the top writers, thinkers and prognosticators in compliance.
Latest episodes

Jan 17, 2024 • 28min
The SAP Foreign Corrupt Practices Act Enforcement Action
The award winning, Compliance into the Weeds is the only weekly podcast which takes a deep dive into a compliance related topic, literally going into the weeds to more fully explore a subject. Looking for some hard-hitting insights on compliance? Look no further than Compliance into the Weeds! In this episode, Tom and Matt take a deep dive into the recent Foreign Corrupt Practices Act (FCPA) enforcement action involving the ERP software giant SAP. The recent $220 million fine imposed on German software giant, SAP, for violations of the FCPA underscores the critical role of internal audits in maintaining corporate compliance. Despite having a comprehensive FCPA compliance program, SAP's lack of control over its subsidiaries led to bribery activities, a situation that Tom and Matt believe could have been prevented with a robust internal audit function. Fox emphasized the need for strong internal audits to identify and address issues within different parts of an organization. Similarly, Kelly, underscored the importance of internal audits in identifying and rectifying control lapses. To delve deeper into this topic and understand the implications of the SAP case, join Tom Fox and Matt Kelly on this episode of the Compliance into the Weeds. Key Highlights· The bribery schemes and geographic scope· What is culture?· Third parties and corruption risks· The fine and penalty· The comeback· Lessons learned for the compliance professionalResourcesMatt on Radical ComplianceTom Tom on the FCPA Compliance and Ethics BlogInstagramFacebookYouTubeTwitterLinkedInFor more information on Ethico and a free White Paper on top compliance issues in 2024, click here. Learn more about your ad choices. Visit megaphone.fm/adchoices

Jan 10, 2024 • 24min
FTC and Rite-Aid: Compliance Issues with AI Facial Recognition
The award-winning Compliance into the Weeds is the only weekly podcast that takes a deep dive into a compliance-related topic, literally going into the weeds to more fully explore a subject. Looking for some hard-hitting insights on sanctions compliance? Look no further than Compliance into the Weeds! In this episode, Tom and Matt take a deep dive into the recent FTC enforcement action involving Rite-Aid and its inappropriate use of AI-generated facial recognition.The adoption of AI technologies, as demonstrated by the Rite Aid case, underscores the critical need for robust compliance oversight. This case, involving the use of AI-driven facial recognition technology, resulted in compliance risks and a high rate of false positives, highlighting the potential pitfalls of AI technologies when not properly managed. Tom emphasized the importance of a comprehensive process to assess, manage, and monitor the risks associated with new technologies. He believes that collaboration among different stakeholders is key to understanding and mitigating potential risks. Matt stressed the need for careful consideration of how new technologies will impact business processes and the importance of correct governance from both a technical and human perspective. Join Tom Fox and Matt Kelly in this episode of the Compliance into the Weeds podcast as they delve deeper into the importance of robust governance in adopting AI technologies.Key Highlights:
The Impact of AI Facial Recognition Technology
Concerns of AI Facial Recognition and Racial Profiling
Issues with AI Facial Recognition Training
Collaborative Risk Management for AI Implementation
Resources:Matt Kelly on LinkedInMatt on Radical Compliance Tom InstagramFacebookYouTubeTwitterLinkedIn Learn more about your ad choices. Visit megaphone.fm/adchoices

Jan 3, 2024 • 38min
Key Compliance Issues for 2024
The award-winning Compliance into the Weeds is the only weekly podcast that takes a deep dive into a compliance-related topic, literally going into the weeds to more fully explore a subject. Looking for some hard-hitting insights on sanctions compliance? Look no further than Compliance into the Weeds! In this episode, Tom and Matt take a deep dive into issues Matt has on his radar for compliance professionals in 2024.Matt Kelly is well known for zigging when everyone else is zagging. At the start of each year, he publishes a column that looks at key issues for compliance professionals in the year ahead. This podcast takes a deep dive into these issues. The rapidly evolving landscape of AI, cybersecurity, and governance is increasingly shaped by regulatory and compliance trends. In this context, industry experts Tom Fox and Matt Kelly offer insightful perspectives. We consider governmental oversight of AI, with more specific AI regulations in 2024, while also highlighting the potential of AI integration into compliance products and platforms. We also look at issues with the SEC, PCAOB, and DOJ. Join Tom Fox and Matt Kelly as they delve deeper into these topics in this episode of the award-winning Compliance into the Weeds.Key Highlights:
FEPA and its enforcement
NOCLAR and the PCAOB
SEC v. Solar Winds and its CISO
AI-Regulation and Business Use
SEC right to disgorgement
Resources:Matt Kelly on LinkedInMatt on Radical ComplianceTom InstagramFacebookYouTubeTwitterLinkedIn Learn more about your ad choices. Visit megaphone.fm/adchoices

Dec 20, 2023 • 23min
Congress Fills a Gap - FEPA
The award-winning Compliance into the Weeds is the only weekly podcast that takes a deep dive into a compliance-related topic, literally going into the weeds to more fully explore a subject. Looking for some hard-hitting insights on sanctions compliance? Look no further than Compliance into the Weeds! In this episode, Tom and Matt take a deep dive into the Foreign Extortion Prevention Act (FEPA), a groundbreaking law that aims to combat corruption by criminalizing foreign government officials who solicit or accept bribes from US entities.This law complements the Foreign Corrupt Practices Act (FCPA), which penalizes companies for offering bribes, and introduces new challenges and implications for anti-corruption measures. Tom views FEPA as a long-overdue measure that fills a gap in anti-corruption efforts. He agrees with Matt emphasizes that FEPA addresses a long-standing concern of anti-corruption advocates. Both Fox and Kelly anticipate further guidance from the Department of Justice on how this new law will interact with existing measures under the FCPA. Join Tom Fox and Matt Kelly as they delve deeper into this topic in the latest episode of the Compliance into the Weeds podcast. Key Highlights:
Combating Foreign Corruption: FIFA's Powerful Impact
Implications of FIFA Cooperation on FCPA Prosecution
Extradition Challenges in FIFA Corruption Cases
The Impact of the Name and Shame List
Resources:Matt Kelly on LinkedInTom InstagramFacebookYouTubeTwitterLinkedIn Learn more about your ad choices. Visit megaphone.fm/adchoices

Dec 13, 2023 • 24min
The Importance of Empathy and Moral Clarity in Campus Anti-Discrimination
The award-winning, Compliance into the Weeds is the only weekly podcast that takes a deep dive into a compliance-related topic, literally going into the weeds to more fully explore a subject. Looking for some hard-hitting insights on sanctions compliance? Look no further than Compliance into the Weeds! In this episode, Tom and Matt take a deep dive into data analytics and highlight the Bank Of America CFPB enforcement action for failures in a data analytics program.The recent congressional testimonies of university presidents from Harvard, MIT, and the University of Pennsylvania have ignited a heated debate over their handling of anti-Semitism and discrimination on campuses. Tom criticizes the presidents for their lack of moral clarity and empathy in their responses to questions about anti-Semitism on campus. He emphasizes the crucial role of chief compliance officers in guiding ethical leadership and decision-making in such sensitive situations. Matt echoes Fox's sentiments, stressing the importance of empathy, moral clarity, and ethical values in addressing and preventing campus discrimination. He criticizes the presidents for their inability to effectively express these qualities in their responses to questions about discrimination policies. Join Tom Fox and Matt Kelly as they delve deeper into this issue on this episode of Compliance into the Weeds.Key Highlights
Fallout from Private College Testimony on Anti-Semitism
Navigating Multiple Stakeholders in Universities
The Power of Wealthy Donors and Alumni
The Role of Empathy in Ethical Leadership
Resources:Matt Kelly on LinkedInTom InstagramFacebookYouTubeTwitterLinkedIn Learn more about your ad choices. Visit megaphone.fm/adchoices

Dec 6, 2023 • 25min
Data Analytics, BoA and DOJ Pronouncements
The award-winning, Compliance into the Weeds is the only weekly podcast that takes a deep dive into a compliance-related topic, literally going into the weeds to more fully explore a subject. Looking for some hard-hitting insights on sanctions compliance? Look no further than Compliance into the Weeds! In this episode, Tom and Matt take a deep dive into data analytics and highlight the Bank Of America CFPB enforcement action for failures in a data analytics program.Data analytics is a powerful tool in the realm of compliance and risk management, providing invaluable insights that can help organizations identify potential risks and assess the effectiveness of their compliance programs. Tom emphasizes the importance of continuous monitoring using data analytics, citing a case where Bank of America was fined $12 million due to poor use of data analytics. He advocates for the use of analytics algorithms as ongoing monitoring tools and encourages business units to take an active role in managing their risks. Matt underscores the significance of data analytics in identifying and managing compliance risks. He echoes Fox's sentiments on the need for continuous monitoring and the involvement of business units in risk management.They also note that both the DOJ and SEC are ramping up their focus on data analytics for corporate compliance, setting higher expectations, especially for larger corporations. This shift is not only transforming the landscape of corporate compliance but also reshaping the way companies approach self-disclosure of misconduct. Join Fox and Kelly on this episode of the Compliance into the Weeds podcast as they delve deeper into the implications of the DOJ and SEC's increasing focus on data analytics for corporate compliance.Key Highlights
The Importance of Continuous Data Analytics
Bank of America's Compliance Risk Management
Effective Monitoring and Surveillance in Financial Services
DOJ's Expectations for Corporate Data Analytics
Uncovering Fraud Through Data Analytics
Resources:Matt’s blog posts in Radical ComplianceA $12M Lesson on Data AnalyticsSome Vague Hints on Analytics, FCPA Tom InstagramFacebookYouTubeTwitterLinkedIn Learn more about your ad choices. Visit megaphone.fm/adchoices

Nov 29, 2023 • 24min
Binance Pays $4+ Billion for Criminal Acts
The award-winning, Compliance into the Weeds is the only weekly podcast that takes a deep dive into a compliance-related topic, literally going into the weeds to more fully explore a subject. Looking for some hard-hitting insights on sanctions compliance? Look no further than Compliance into the Weeds! In this episode, Tom and Matt take a deep dive into the Binance enforcement action brought by the DOJ, OFAC, FinCEN, and the CFTC.In a landmark case that has sent shockwaves through the cryptocurrency industry, Binance, the world's largest cryptocurrency trading platform, has been slapped with a staggering $4.3 billion fine for intentionally violating anti-money laundering laws and other financial regulations. Tom views this as a significant turning point, marking the end of the libertarian experiment around cryptocurrency and alternative financial systems. He believes that the hefty penalties imposed on Binance, along with other smaller enforcement actions in the crypto world, are a clear message from regulators that the crypto sector must comply with US laws and regulations.Matt echoes Fox's sentiments, emphasizing that the enforcement actions against Binance and other cryptocurrency ventures signify the end of the libertarian experiment around cryptocurrency. He underscores the deliberate and intentional nature of Binance's violations, stating that they knowingly deceived and evaded compliance regulations. Join Tom Fox and Matt Kelly on this episode of the Compliance into the Weeds podcast as they delve deeper into this case and its implications for the cryptocurrency industry. Key Highlights
Binance's $4.3 Billion AML Violation
Deceptive Evasion of Regulations in Cryptocurrency
Extensive Monitorship to Address Compliance Deficiencies
Binance's Non-Compliance Leads to Legal Consequences
Personal Liability of the CCO
End of Crypto?
Resources:Matt’s blog post in Radical ComplianceTom InstagramFacebookYouTubeTwitterLinkedIn Learn more about your ad choices. Visit megaphone.fm/adchoices

Nov 15, 2023 • 20min
OIG Says CCO Should be Independent
The award-winning, Compliance into the Weeds is the only weekly podcast that takes a deep dive into a compliance-related topic, literally going into the weeds to explore a subject more fully. Looking for some hard-hitting insights on sanctions compliance? Look no further than Compliance into the Weeds! In this episode, Tom and Matt take a deep dive into the recent OIG guidance for healthcare compliance professionals and healthcare compliance programs which notes that CCOs should be independent from the General Counsel’s Office.The Office of Inspector General (OIG) has recently released guidelines that underscore the importance of independence for compliance officers in the healthcare sector. These guidelines, seen as a significant development in the field, stipulate that compliance should be separate from legal and finance departments, and outline the responsibilities of healthcare compliance officers.Tom views this as a clear call for compliance officers to be independent and report directly to the CEO and the board. He suggests that this trend towards independence may extend beyond healthcare. Matt echoes this sentiment, highlighting the OIG's strong endorsement of the independence of compliance officers. He believes this aligns with the emphasis on independence and autonomy that leading voices in the regulatory world have been advocating for. Join Tom Fox and Matt Kelly as they delve deeper into this topic in this episode of the Compliance into the Weeds podcast. Key Highlights:
The Importance of CCO Independence in Compliance Programs
The role of a healthcare CCO
Do you need a Law Degree to be a CCO in Healthcare Compliance
The Growing Significance of CCO Independence
Resources:Matt’s blog post in Radical ComplianceTom InstagramFacebookYouTubeTwitterLinkedIn Learn more about your ad choices. Visit megaphone.fm/adchoices

Nov 8, 2023 • 22min
Remediation During an Enforcement Action
The award-winning, Compliance into the Weeds is the only weekly podcast that takes a deep dive into a compliance-related topic, literally going into the weeds to more fully explore a subject. Looking for some hard-hitting insights on compliance? Look no further than Compliance into the Weeds! In this episode, Tom and Matt take a deep dive into the issue of how and whether you should remediate during an enforcement action.The importance of early and continuous remediation of compliance issues cannot be overstated. It is a critical aspect of maintaining a healthy relationship with regulators and ensuring effective strategies are in place to address any uncovered issues. Tom firmly believes in the necessity of initiating the remediation process as early as possible, even during the investigation phase. He emphasizes the importance of regular communication with regulators and the potential risks of delaying remediation.Matt echoes Fox's sentiments. He highlights the confidence that early remediation brings to compliance officers and the increased likelihood of successful resolution. Join Tom Fox and Matt Kelly as they delve deeper into this topic in this episode of the Compliance into the Weeds podcast. Key Highlights:
Proactive Remediation for Effective Compliance Management
Navigating Personnel Matters During Remediation
Logical and Consistent Employee Discipline Compliance
Remediation Strategies for Confident Compliance Officers
ResourcesMatt on Radical ComplianceTom InstagramFacebookYouTubeTwitterLinkedIn Learn more about your ad choices. Visit megaphone.fm/adchoices

Nov 1, 2023 • 28min
SEC Sues Solar Winds and CISO
The award-winning Compliance into the Weeds is the only weekly podcast that takes a deep dive into a compliance-related topic, literally going into the weeds to explore a subject more thoroughly, looking for some hard-hitting insights on sanctions compliance. Look no further than Compliance into the Weeds! In this episode, Tom and Matt take a deep dive into the recent SEC Civil Complaint against Solar Winds and its CISO, Timothy Brown, for undisclosed failures in the company’s cybersecurity compliance program disclosures prior to, during, and after the infamous Solar Winds data hack.The recent SEC lawsuit against SolarWinds Corp and its CISO, Tim Brown, following the 2020 data breach has sparked a critical conversation about executive liability in cybersecurity disclosures. Matt views this lawsuit as a significant development that raises essential questions about the personal liability of senior executives for inaccurate or misleading disclosures about cybersecurity risks. He emphasizes the potential implications this case could have for other executives in charge of trouble, such as compliance officers.Tom underscores the concerns regarding the accuracy and transparency of SolarWinds' cybersecurity disclosures. He highlights the evidence of a culture of deception within the company and the need to hold executives accountable for inaccurate disclosures. Join Tom Fox and Matt Kelly as they delve deeper into this topic in the latest episode of the Compliance into the Weeds podcast. Key Highlights:
Liability of Senior Executives in Cybersecurity
SolarWinds' Orion Software: Russian Government Cyberattack
Personal Liability for Misleading Cybersecurity Disclosures
Implementing Relevant Controls for Cybersecurity
Resources:Tom InstagramFacebookYouTubeTwitterLinkedIn Learn more about your ad choices. Visit megaphone.fm/adchoices