{"id":2523,"date":"2024-11-28T10:09:07","date_gmt":"2024-11-28T08:09:07","guid":{"rendered":"https:\/\/graciacalbet.com\/blog\/the-compliance-program-what-is-it-and-how-is-it-implemented\/"},"modified":"2025-10-07T10:13:16","modified_gmt":"2025-10-07T08:13:16","slug":"the-compliance-program-what-is-it-and-how-is-it-implemented","status":"publish","type":"post","link":"https:\/\/graciacalbet.com\/en\/blog\/the-compliance-program-what-is-it-and-how-is-it-implemented\/","title":{"rendered":"The Compliance Program: What is it and how is it implemented?"},"content":{"rendered":"\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

The Compliance Program: What is it and how is it implemented?<\/h2>\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Thursday, November 28, 2024<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"GR\u00c0CIACALBET\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t\t\t\"Picture\n\t\t\t\t<\/div>\n\t\t\t\n\t\t\t
\n\t\t\t\t\t\t\t\t\t
\n\t\t\t\t\t\t

\n\t\t\t\t\t\t\tGerard Rodr\u00edguez\t\t\t\t\t\t<\/h4>\n\t\t\t\t\t<\/div>\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Organic Law 5\/2010, which amended the Criminal Code, introduced for the first time in Spain the criminal liability of legal entities, and having a Compliance Program can mitigate or exempt such liability.<\/p>

A Compliance Program is the set of organizational and procedural rules adopted by a company to ensure compliance, at all levels, with the regulations that bind it.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t\t

Why implement a Crime Prevention Model?<\/h2>\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

The purpose of having a Program is to prevent, detect, and manage legal, ethical, and financial risks while promoting integrity and good practices within the organization, in order to benefit from exemption or mitigation in the event a crime is committed.<\/p>

The Program acts as:<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t\t\t\t\t\t

Exemption or Mitigation of Criminal Liability of the Legal Entity<\/strong>. The main benefit of implementing a Criminal Compliance Program is the possibility of exonerating or mitigating the company\u2019s criminal liability. In accordance with Article 31 bis of the Criminal Code, having a Compliance Program can prevent the organization from being criminally convicted, provided it demonstrates that it adopted all reasonable measures to prevent the commission of the crime. <\/p>

Mechanism for crime prevention and early detection<\/strong>. The Program must include internal control mechanisms and periodic audits that allow the detection of irregularities or behaviors that are risky or potentially criminal before they materialize. Consequently, it creates a healthy work environment and reduces the likelihood of fraud or unlawful acts. <\/p>

Mitigator of Legal Risks and Financial Penalties<\/strong>. Regulatory non-compliance can lead to sanctions and penalties for organizations and even the ultimate penalty in commercial law, namely, the dissolution of the company. Having a Compliance Program helps reduce, minimize, and mitigate these risks, as it demonstrates a clear intention to comply with regulations and establishes a code of conduct that applies to both employees and management. <\/p>

Stronghold of corporate image and reputation<\/strong>. In a competitive market, reputation is one of the greatest assets of a company or organization. The implementation of a Compliance Program gives clients, business partners, suppliers, and society at large the assurance that the company acts ethically and in accordance with current legislation, which contributes to improving its public image. <\/p>

Necessary element for public tenders and contracts<\/strong>. Many Spanish public administrations require companies to have Compliance Programs in order to participate in tenders or sign contracts with the public sector. <\/p>

Mitigation of Long-Term Costs. Future Project and Business Expansion <\/strong>. The implementation of the Program represents an evident initial investment, but in the long term it can lead to both economic and reputational savings and allows the company to focus on the development of its business.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t\t

Elements of a Compliance Program<\/h2>\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Article 31 bis.5 of the Criminal Code establishes that Compliance Programs must meet the following requirements:<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t\t\t\t\t\t

They must identify the activities that could give rise to the commission of crimes that need to be prevented.<\/p>

They must establish the protocols or procedures that define the process of forming the will of the legal entity, adopting decisions, and executing them in relation to those activities. The code of ethics will serve as the charter from which the rest of the organization\u2019s internal regulations derive. <\/p>

They must have financial resource management models in place that are adequate to prevent the commission of crimes that need to be avoided. It is not enough to simply have a Compliance Program; it must be monitored, with controls carried out, protocols activated, and internal investigations conducted, as well as processes such as Know Your Customer, among others, and the necessary financial resources to implement them. <\/p>

They must impose the obligation to report possible risks and breaches to the body responsible for monitoring the functioning and compliance of the prevention model. This point is of vital importance when assessing the diligence of the legal entity and determining whether criminal liability can be exempted or mitigated. An example of this is the whistleblowing channels established by Law 2\/2023, of February 20, regulating the protection of persons who report regulatory infringements and combating corruption (Whistleblowing Law). <\/p>

They must establish a disciplinary system that sanctions non-compliance with the measures set out in the Program itself.<\/p>

They must carry out periodic verification of the Program and make any necessary modifications when violations occur or when there are changes in the organization, control structure, or activity.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t\t

How is a Compliance Program implemented?<\/h2>\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

The body responsible for designing and implementing the compliance program is the organization\u2019s board of directors, which (i) must appoint a compliance body (compliance officer), either individual or collegiate, and (ii) draft the internal regulations (codes, procedure manuals, policies, etc.). <\/p>

The compliance body is responsible for ensuring the company\u2019s regulatory compliance, training employees on the regulations to be followed, and reviewing the Program and the execution of the company\u2019s procedures. This body may be external, and its functions can be entrusted to advisors, consultants, or lawyers with the necessary technical knowledge for its implementation. <\/p>

In the case of SMEs, the functions of the compliance body may be assumed by the board of directors itself.<\/p>

For the exemption of criminal liability of legal entities, it is not enough to have any Compliance Program in place merely on paper; it must be one that is tailored to the business, operational, and effective, including monitoring and control measures for crime prevention. This will determine the quality with which it has been implemented and may result in anything from mitigation to complete exemption from liability. <\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t\t

What penalties or sanctions can be imposed on legal entities?<\/h2>\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

As we have seen, legal entities can be subjects of a criminal offense. If convicted, some of the penalties provided for are: <\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t\t\t\t