

Compliance into the Weeds
Tom Fox
What happens when two compliance aficionados get together to talk all things compliance, risk management and ERM? You get Tom Fox, the Voice of Compliance and Matt Kelly, the Coolest Guy in Compliance, going into the weeds of a topic each week. Each week, you can take a deep dive with two of the top writers, thinkers and prognosticators in compliance.
Episodes
Mentioned books

Jan 10, 2024 • 24min
FTC and Rite-Aid: Compliance Issues with AI Facial Recognition
The award-winning Compliance into the Weeds is the only weekly podcast that takes a deep dive into a compliance-related topic, literally going into the weeds to more fully explore a subject. Looking for some hard-hitting insights on sanctions compliance? Look no further than Compliance into the Weeds! In this episode, Tom and Matt take a deep dive into the recent FTC enforcement action involving Rite-Aid and its inappropriate use of AI-generated facial recognition.The adoption of AI technologies, as demonstrated by the Rite Aid case, underscores the critical need for robust compliance oversight. This case, involving the use of AI-driven facial recognition technology, resulted in compliance risks and a high rate of false positives, highlighting the potential pitfalls of AI technologies when not properly managed. Tom emphasized the importance of a comprehensive process to assess, manage, and monitor the risks associated with new technologies. He believes that collaboration among different stakeholders is key to understanding and mitigating potential risks. Matt stressed the need for careful consideration of how new technologies will impact business processes and the importance of correct governance from both a technical and human perspective. Join Tom Fox and Matt Kelly in this episode of the Compliance into the Weeds podcast as they delve deeper into the importance of robust governance in adopting AI technologies.Key Highlights:
The Impact of AI Facial Recognition Technology
Concerns of AI Facial Recognition and Racial Profiling
Issues with AI Facial Recognition Training
Collaborative Risk Management for AI Implementation
Resources:Matt Kelly on LinkedInMatt on Radical Compliance Tom InstagramFacebookYouTubeTwitterLinkedIn Learn more about your ad choices. Visit megaphone.fm/adchoices

Jan 3, 2024 • 38min
Key Compliance Issues for 2024
The award-winning Compliance into the Weeds is the only weekly podcast that takes a deep dive into a compliance-related topic, literally going into the weeds to more fully explore a subject. Looking for some hard-hitting insights on sanctions compliance? Look no further than Compliance into the Weeds! In this episode, Tom and Matt take a deep dive into issues Matt has on his radar for compliance professionals in 2024.Matt Kelly is well known for zigging when everyone else is zagging. At the start of each year, he publishes a column that looks at key issues for compliance professionals in the year ahead. This podcast takes a deep dive into these issues. The rapidly evolving landscape of AI, cybersecurity, and governance is increasingly shaped by regulatory and compliance trends. In this context, industry experts Tom Fox and Matt Kelly offer insightful perspectives. We consider governmental oversight of AI, with more specific AI regulations in 2024, while also highlighting the potential of AI integration into compliance products and platforms. We also look at issues with the SEC, PCAOB, and DOJ. Join Tom Fox and Matt Kelly as they delve deeper into these topics in this episode of the award-winning Compliance into the Weeds.Key Highlights:
FEPA and its enforcement
NOCLAR and the PCAOB
SEC v. Solar Winds and its CISO
AI-Regulation and Business Use
SEC right to disgorgement
Resources:Matt Kelly on LinkedInMatt on Radical ComplianceTom InstagramFacebookYouTubeTwitterLinkedIn Learn more about your ad choices. Visit megaphone.fm/adchoices

Dec 20, 2023 • 23min
Congress Fills a Gap - FEPA
The award-winning Compliance into the Weeds is the only weekly podcast that takes a deep dive into a compliance-related topic, literally going into the weeds to more fully explore a subject. Looking for some hard-hitting insights on sanctions compliance? Look no further than Compliance into the Weeds! In this episode, Tom and Matt take a deep dive into the Foreign Extortion Prevention Act (FEPA), a groundbreaking law that aims to combat corruption by criminalizing foreign government officials who solicit or accept bribes from US entities.This law complements the Foreign Corrupt Practices Act (FCPA), which penalizes companies for offering bribes, and introduces new challenges and implications for anti-corruption measures. Tom views FEPA as a long-overdue measure that fills a gap in anti-corruption efforts. He agrees with Matt emphasizes that FEPA addresses a long-standing concern of anti-corruption advocates. Both Fox and Kelly anticipate further guidance from the Department of Justice on how this new law will interact with existing measures under the FCPA. Join Tom Fox and Matt Kelly as they delve deeper into this topic in the latest episode of the Compliance into the Weeds podcast. Key Highlights:
Combating Foreign Corruption: FIFA's Powerful Impact
Implications of FIFA Cooperation on FCPA Prosecution
Extradition Challenges in FIFA Corruption Cases
The Impact of the Name and Shame List
Resources:Matt Kelly on LinkedInTom InstagramFacebookYouTubeTwitterLinkedIn Learn more about your ad choices. Visit megaphone.fm/adchoices

Dec 13, 2023 • 24min
The Importance of Empathy and Moral Clarity in Campus Anti-Discrimination
The award-winning, Compliance into the Weeds is the only weekly podcast that takes a deep dive into a compliance-related topic, literally going into the weeds to more fully explore a subject. Looking for some hard-hitting insights on sanctions compliance? Look no further than Compliance into the Weeds! In this episode, Tom and Matt take a deep dive into data analytics and highlight the Bank Of America CFPB enforcement action for failures in a data analytics program.The recent congressional testimonies of university presidents from Harvard, MIT, and the University of Pennsylvania have ignited a heated debate over their handling of anti-Semitism and discrimination on campuses. Tom criticizes the presidents for their lack of moral clarity and empathy in their responses to questions about anti-Semitism on campus. He emphasizes the crucial role of chief compliance officers in guiding ethical leadership and decision-making in such sensitive situations. Matt echoes Fox's sentiments, stressing the importance of empathy, moral clarity, and ethical values in addressing and preventing campus discrimination. He criticizes the presidents for their inability to effectively express these qualities in their responses to questions about discrimination policies. Join Tom Fox and Matt Kelly as they delve deeper into this issue on this episode of Compliance into the Weeds.Key Highlights
Fallout from Private College Testimony on Anti-Semitism
Navigating Multiple Stakeholders in Universities
The Power of Wealthy Donors and Alumni
The Role of Empathy in Ethical Leadership
Resources:Matt Kelly on LinkedInTom InstagramFacebookYouTubeTwitterLinkedIn Learn more about your ad choices. Visit megaphone.fm/adchoices

Dec 6, 2023 • 25min
Data Analytics, BoA and DOJ Pronouncements
The award-winning, Compliance into the Weeds is the only weekly podcast that takes a deep dive into a compliance-related topic, literally going into the weeds to more fully explore a subject. Looking for some hard-hitting insights on sanctions compliance? Look no further than Compliance into the Weeds! In this episode, Tom and Matt take a deep dive into data analytics and highlight the Bank Of America CFPB enforcement action for failures in a data analytics program.Data analytics is a powerful tool in the realm of compliance and risk management, providing invaluable insights that can help organizations identify potential risks and assess the effectiveness of their compliance programs. Tom emphasizes the importance of continuous monitoring using data analytics, citing a case where Bank of America was fined $12 million due to poor use of data analytics. He advocates for the use of analytics algorithms as ongoing monitoring tools and encourages business units to take an active role in managing their risks. Matt underscores the significance of data analytics in identifying and managing compliance risks. He echoes Fox's sentiments on the need for continuous monitoring and the involvement of business units in risk management.They also note that both the DOJ and SEC are ramping up their focus on data analytics for corporate compliance, setting higher expectations, especially for larger corporations. This shift is not only transforming the landscape of corporate compliance but also reshaping the way companies approach self-disclosure of misconduct. Join Fox and Kelly on this episode of the Compliance into the Weeds podcast as they delve deeper into the implications of the DOJ and SEC's increasing focus on data analytics for corporate compliance.Key Highlights
The Importance of Continuous Data Analytics
Bank of America's Compliance Risk Management
Effective Monitoring and Surveillance in Financial Services
DOJ's Expectations for Corporate Data Analytics
Uncovering Fraud Through Data Analytics
Resources:Matt’s blog posts in Radical ComplianceA $12M Lesson on Data AnalyticsSome Vague Hints on Analytics, FCPA Tom InstagramFacebookYouTubeTwitterLinkedIn Learn more about your ad choices. Visit megaphone.fm/adchoices

Nov 29, 2023 • 24min
Binance Pays $4+ Billion for Criminal Acts
The award-winning, Compliance into the Weeds is the only weekly podcast that takes a deep dive into a compliance-related topic, literally going into the weeds to more fully explore a subject. Looking for some hard-hitting insights on sanctions compliance? Look no further than Compliance into the Weeds! In this episode, Tom and Matt take a deep dive into the Binance enforcement action brought by the DOJ, OFAC, FinCEN, and the CFTC.In a landmark case that has sent shockwaves through the cryptocurrency industry, Binance, the world's largest cryptocurrency trading platform, has been slapped with a staggering $4.3 billion fine for intentionally violating anti-money laundering laws and other financial regulations. Tom views this as a significant turning point, marking the end of the libertarian experiment around cryptocurrency and alternative financial systems. He believes that the hefty penalties imposed on Binance, along with other smaller enforcement actions in the crypto world, are a clear message from regulators that the crypto sector must comply with US laws and regulations.Matt echoes Fox's sentiments, emphasizing that the enforcement actions against Binance and other cryptocurrency ventures signify the end of the libertarian experiment around cryptocurrency. He underscores the deliberate and intentional nature of Binance's violations, stating that they knowingly deceived and evaded compliance regulations. Join Tom Fox and Matt Kelly on this episode of the Compliance into the Weeds podcast as they delve deeper into this case and its implications for the cryptocurrency industry. Key Highlights
Binance's $4.3 Billion AML Violation
Deceptive Evasion of Regulations in Cryptocurrency
Extensive Monitorship to Address Compliance Deficiencies
Binance's Non-Compliance Leads to Legal Consequences
Personal Liability of the CCO
End of Crypto?
Resources:Matt’s blog post in Radical ComplianceTom InstagramFacebookYouTubeTwitterLinkedIn Learn more about your ad choices. Visit megaphone.fm/adchoices

Nov 15, 2023 • 20min
OIG Says CCO Should be Independent
The award-winning, Compliance into the Weeds is the only weekly podcast that takes a deep dive into a compliance-related topic, literally going into the weeds to explore a subject more fully. Looking for some hard-hitting insights on sanctions compliance? Look no further than Compliance into the Weeds! In this episode, Tom and Matt take a deep dive into the recent OIG guidance for healthcare compliance professionals and healthcare compliance programs which notes that CCOs should be independent from the General Counsel’s Office.The Office of Inspector General (OIG) has recently released guidelines that underscore the importance of independence for compliance officers in the healthcare sector. These guidelines, seen as a significant development in the field, stipulate that compliance should be separate from legal and finance departments, and outline the responsibilities of healthcare compliance officers.Tom views this as a clear call for compliance officers to be independent and report directly to the CEO and the board. He suggests that this trend towards independence may extend beyond healthcare. Matt echoes this sentiment, highlighting the OIG's strong endorsement of the independence of compliance officers. He believes this aligns with the emphasis on independence and autonomy that leading voices in the regulatory world have been advocating for. Join Tom Fox and Matt Kelly as they delve deeper into this topic in this episode of the Compliance into the Weeds podcast. Key Highlights:
The Importance of CCO Independence in Compliance Programs
The role of a healthcare CCO
Do you need a Law Degree to be a CCO in Healthcare Compliance
The Growing Significance of CCO Independence
Resources:Matt’s blog post in Radical ComplianceTom InstagramFacebookYouTubeTwitterLinkedIn Learn more about your ad choices. Visit megaphone.fm/adchoices

Nov 8, 2023 • 21min
Remediation During an Enforcement Action
The award-winning, Compliance into the Weeds is the only weekly podcast that takes a deep dive into a compliance-related topic, literally going into the weeds to more fully explore a subject. Looking for some hard-hitting insights on compliance? Look no further than Compliance into the Weeds! In this episode, Tom and Matt take a deep dive into the issue of how and whether you should remediate during an enforcement action.The importance of early and continuous remediation of compliance issues cannot be overstated. It is a critical aspect of maintaining a healthy relationship with regulators and ensuring effective strategies are in place to address any uncovered issues. Tom firmly believes in the necessity of initiating the remediation process as early as possible, even during the investigation phase. He emphasizes the importance of regular communication with regulators and the potential risks of delaying remediation.Matt echoes Fox's sentiments. He highlights the confidence that early remediation brings to compliance officers and the increased likelihood of successful resolution. Join Tom Fox and Matt Kelly as they delve deeper into this topic in this episode of the Compliance into the Weeds podcast. Key Highlights:
Proactive Remediation for Effective Compliance Management
Navigating Personnel Matters During Remediation
Logical and Consistent Employee Discipline Compliance
Remediation Strategies for Confident Compliance Officers
ResourcesMatt on Radical ComplianceTom InstagramFacebookYouTubeTwitterLinkedIn Learn more about your ad choices. Visit megaphone.fm/adchoices

Nov 1, 2023 • 28min
SEC Sues Solar Winds and CISO
The award-winning Compliance into the Weeds is the only weekly podcast that takes a deep dive into a compliance-related topic, literally going into the weeds to explore a subject more thoroughly, looking for some hard-hitting insights on sanctions compliance. Look no further than Compliance into the Weeds! In this episode, Tom and Matt take a deep dive into the recent SEC Civil Complaint against Solar Winds and its CISO, Timothy Brown, for undisclosed failures in the company’s cybersecurity compliance program disclosures prior to, during, and after the infamous Solar Winds data hack.The recent SEC lawsuit against SolarWinds Corp and its CISO, Tim Brown, following the 2020 data breach has sparked a critical conversation about executive liability in cybersecurity disclosures. Matt views this lawsuit as a significant development that raises essential questions about the personal liability of senior executives for inaccurate or misleading disclosures about cybersecurity risks. He emphasizes the potential implications this case could have for other executives in charge of trouble, such as compliance officers.Tom underscores the concerns regarding the accuracy and transparency of SolarWinds' cybersecurity disclosures. He highlights the evidence of a culture of deception within the company and the need to hold executives accountable for inaccurate disclosures. Join Tom Fox and Matt Kelly as they delve deeper into this topic in the latest episode of the Compliance into the Weeds podcast. Key Highlights:
Liability of Senior Executives in Cybersecurity
SolarWinds' Orion Software: Russian Government Cyberattack
Personal Liability for Misleading Cybersecurity Disclosures
Implementing Relevant Controls for Cybersecurity
Resources:Tom InstagramFacebookYouTubeTwitterLinkedIn Learn more about your ad choices. Visit megaphone.fm/adchoices

Oct 25, 2023 • 23min
Szabolcs Fekete and the Consequences of Ethical Breaches
The award-winning Compliance into the Weeds is the only weekly podcast that takes a deep dive into a compliance-related topic, literally going into the weeds to explore a subject more thoroughly, looking for some hard-hitting insights on sanctions compliance. Look no further than Compliance into the Weeds! In this episode, Tom and Matt deeply dive into the termination of Citibank employee Szabolcs Fekete over cheating on his expense account, then lying about it and drawing out broad lessons for the compliance professional.The importance of trust, accountability, and ethics in the workplace cannot be overstated. These elements are the bedrock of a healthy corporate culture and are crucial for maintaining a positive and productive work environment. Tom believes that a broader conversation about these topics is necessary within corporations. He emphasizes the need for employees to understand the importance of trust, accountability, and adherence to policies and procedures.Matt echoes these sentiments. He shares a poignant story about a CEO who had to fire a cleaner for embezzlement and dishonesty, underlining the critical role of trust in upholding ethical standards. Both Fox and Kelly acknowledge the cynicism among the public and the workforce regarding ethical enforcement, and they advocate for a commitment to doing the right thing, even when it is difficult. Join Tom Fox and Matt Kelly on this episode of the Compliance into the Weeds podcast as they delve deeper into this crucial topic.Key Highlights:
Expense Report Dishonesty and Wrongful Termination
Citibank’s Expense Report Policy and Trust
The Consequences of Ethical Breaches
The importance of trust and ethical enforcement
ResourcesMatt in Radical ComplianceJane Croft in the FTPilita Clark in the FTTom ThreadsInstagramFacebookYouTubeTwitter Learn more about your ad choices. Visit megaphone.fm/adchoices