Trends - Compliance

The culture of compliance as the key to sustainable corporate governance

Prof Dr Andreas Kark, lawyer and managing director of compliance consultancy
Published in: DiALOG - THE MAGAZINE FOR DIGITAL CHANGE | 2021

Just a few years ago, the term ‘compliance’ was more of a foreign concept for many medium-sized companies, which was associated with large listed corporations, but the picture has changed noticeably in recent years.

It is not only the legislature and the courts that are demanding that companies and their employees comply with our legal system in the context of ever more stringent legislation and stricter judgements. Nevertheless, when reading the press, one comes across a seemingly never-ending number of compliance violations. In Germany, we are now operating on a scale that would hardly have been thought possible twenty years ago. The diesel scandal, the truck cartel and Wirecard AG do not reflect well on ‘Made in Germany’ and the behaviour of some members of parliament in connection with the pandemic leaves us speechless.

Responsive Image

The reactions to this are well known: ever more and ever stricter laws. But also in the business world, the major car manufacturers, for example, are asking their suppliers more and more about their compliance. There is no doubt that suppliers must fulfil certain minimum requirements for a compliance management system if they want to continue working for these companies. In the meantime, the trend has both deepened and broadened. It is no longer sufficient to have a code of conduct and the usual compliance guidelines. Instead, suppliers must also be able to answer questions relating to the company's compliance processes, such as compliance risk management. The tier 1 supplier is also expected to cascade these requirements down to the tier 2 supplier and in turn check whether the tier 2 supplier is adhering to the requirements.

At the same time, social and environmental sustainability issues are increasingly being scrutinised, giving the justified impression that compliance and sustainability are two sides of the same coin. And indeed, these topics have become an integral part of modern corporate management.

Compliance and corona
The question of the one cause or causal relationship that led to the above-mentioned serious compliance breaches cannot be answered by legal means. This has also been evident during this period of seemingly never-ending, difficult living conditions in which we have found ourselves since March 2020 due to the coronavirus pandemic.

There were and are a whole series of relatively simple legislative guidelines that would have made it difficult or even impossible for the virus to spread and, at a later stage, become even more dangerous through mutations. Did everyone follow these few simple rules? We all know the answer... After the appeals failed to have the desired effect, the regulations became more numerous, more detailed and therefore more complicated. People became increasingly desperate and some tried to find loopholes in the maze of regulations for themselves instead of sticking to the spirit of the rules - preventing the virus from spreading by avoiding contact, keeping their distance, wearing masks, etc. The virus is still mercilessly exploiting this misbehaviour.

It is hardly any different in a company. The vast majority of employees, managers and members of management behave in accordance with the rules because they believe it is the right thing to do, because they have understood that the arbitrary violation of rules by individuals means the end of peaceful and orderly coexistence for all, as philosophers such as Thomas Hobbes and John Locke recognised as early as the 17th century.

Breaking the simple coronavirus rules costs human lives, while breaching compliance requirements can not only jeopardise a company's existence, but also drive it into insolvency and destroy values and jobs.

At the end of the day, the natural enemies of violations of the law are an internal attitude and transparency.

A question of culture
At the end of the day, compliance with legal regulations and internal company guidelines is therefore a question of inner attitude, of culture. When we talk about companies, it is therefore a question of corporate culture and thus compliance culture.

It is often a challenge for management to get all employees equally enthusiastic about complying with legal requirements. There is so much to consider and some standards are difficult for individuals to understand. There is also always the argument that others don't follow the rules either; why should you be the only ‘stupid’ one who complies with the law? It is also often argued that generous Christmas gifts have always been sent to customers' private addresses - and that it would therefore give the wrong impression if this established and popular practice were suddenly discontinued.

What is important here is that the management and its executives signal that this is precisely the impression that is desired, namely that we abide by the rules, that we impress with our quality and an excellent price-performance ratio, but not with unauthorised gifts.

Compliance must be lived
US studies on the moral character of people's behaviour have shown that 80% of people align their ethical behaviour with that of the group in which they move. The remaining 20 per cent have such a stable ethical framework that, irrespective of the behaviour of others, their own morally impeccable behaviour is predetermined. If this is transferred to the corporate world, it means that the team in which an employee works has a formative effect on their behaviour. A spokesperson in a group who might be labelled a ‘bad apple’ from a compliance perspective can therefore turn an entire team into a compliance problem.

It is therefore crucial for a management team to ensure that all employees are supported in terms of compliance by setting an example of compliance and sending regular messages through a variety of channels.

Compliance must be lived.

Addressing compliance in meetings, a few sentences in the company magazine to avoid price fixing in the run-up to an important trade fair or rewarding good internal performance in terms of a department's compliance and penalising compliance violations accordingly - all this strengthens efforts to behave in accordance with the rules and weakens those who believe that rules only apply to the poor or are at best to be understood as a suggestion. The end does not justify all means!

Whistleblower hotline
Against this backdrop, it may come as no surprise that the legislator wants to encourage companies' compliance efforts by obliging companies with more than 50 employees to set up a secure reporting channel through which compliance violations or compliance risks can be reported, anonymously if necessary and generally free from sanctions or reprisals. This must be implemented by the end of December 2021.

This gives companies another opportunity to obtain information from their employees about compliance violations that would otherwise have remained hidden from them, as an employee might not have dared to report this to their superiors. This can further improve the company's compliance risk management.

This also sends a signal to the management that abuses must not be tolerated and that the company therefore wants to keep improving its compliance. Any further means of increasing transparency within the company is therefore helpful if the aim is to improve the compliance culture and thus the sustainability of compliance endeavours within the company.

In the end, internal attitudes and transparency are the natural enemies of violations of the law.

Responsive Image

Lawyer Prof. Dr Andreas Kark has been advising medium-sized companies for more than 10 years on the development of customised compliance management systems. Among other things, he conducts compliance risk audits and training sessions. The development of compliance processes, e.g. compliance risk management, as well as the formulation of the code of conduct and compliance guidelines are also part of his consulting services. Prof Dr Kark is the author of various articles and two books on compliance topics (‘Compliance-Risikomanagement’, C.H. Beck, 2nd ed. 2019 and ‘Plötzlich Compliance Officer, Erste Hilfe für den Einstieg in das Compliance Management’, C.H. Beck, 2021).

Responsive Image
Responsive Image
Author

Prof Dr Andreas Kark


More articles