1. Home
  2. |Insights
  3. |Department Of Justice Issues Updated Guidelines For Corporate Prosecution

Department Of Justice Issues Updated Guidelines For Corporate Prosecution

Client Alert | less than 1 min read | 12.27.06

U.S. Deputy Attorney General Paul J. McNulty announced yesterday that the Department of Justice has superseded the recently embattled “Thompson Memo” setting forth “Principles of Federal Prosecution of Business Organizations.” The new guidelines, embodied in a document already branded the “McNulty Memo,” depart from the Thompson Memo in two important areas: (i) waivers of attorney-client privilege and work-product protections; and (ii) advancement of legal fees to employees under investigation and indictment."

Insights

Client Alert | 13 min read | 06.12.26

EU Cyber Resilience Act Countdown: 11 September 2026 Incident/Vulnerability Reporting Deadline Less Than 100 Days Away

The EU Cyber Resilience Act (CRA) is an EU product cybersecurity law for connected products (formally, “products with digital elements” under the CRA) commercialized in the EU; it entered into force on 10 December 2024, with direct application across the EU. Full application begins 11 December 2027, but one of its most operationally demanding provisions takes effect in just under 100 days, on 11 September 2026: the mandatory vulnerability and incident reporting under Article 14 CRA....