Companies have varying degrees of FCPA risks. Generally, at the high-end of the spectrum is a resource extraction company operating in a third-world country with an unstable government. At the low-end of the spectrum, it would seem, is a Utah-based company which got its start as a small family business selling encapsulated cayenne and other herbs to health food stores.
Yet, as evidenced by the SEC's recent FCPA enforcement action against Nature's Sunshine Products, Inc. ("NSP"), even a company with a relatively low FCPA risk profile can run afoul of the FCPA.
As described in the SEC's Litigation Release (see here) NSP, without admitting or denying the allegations in an SEC civil complaint, agreed to pay a $600,000 civil penalty to resolve allegations that it violated (among other securities laws - see below) the FCPA's anti-bribery, books and records, and internal control provisions.
According to the SEC complaint (see here), Brazil was NSP's largest foreign market, but in approximately 2000, the Brazilian governmental agency responsible for regulating nutritional products reclassified certain of NSP's products as medicines, thus requiring a registration process prior to import and sale of the products in Brazil. As alleged in the SEC complaint, NSP's wholly-owned subsidiary in Brazil ("NSP Brazil") circumvented the registration process by making approximately $1 million in cash payments to customs brokers, some of which was later used to pay Brazilian customs officials so that they would allow NSP Brazil to import unregistered product into Brazil. According to the SEC, these payments were booked by NSP Brazil as "importation advances," but without supporting documentation. Thereafter, as alleged by the SEC, NSP Brazil purchased fictitious supporting documentation for the payments.
As suggested above, in addition to the FCPA charges, the SEC complaint also charges other securities laws violations not typically found in an FCPA enforcement action such as fraud in connection with the purchase and sale of securities and false filings with the SEC. These other charges appear to be based on the allegation that NSP, in a prior Form 10-K filing with the SEC, stated that NSP Brazil experienced a significant decline in sales "due to import regulations imposed by the Brazilian government" but which failed to disclose any material information related to the above-mentioned cash payments.
Also charged in the SEC complaint were Douglas Faggioli, the current President and Chief Executive Officer of NSP and a member of its board of directors who during the relevant time period was NSP's Chief Operating Officer, and Craig Huff, NSP's former CFO. The complaint alleges that Faggioli and Huff, as "control persons" of NSP, violated the FCPA's books and records and internal control provisions. In language that is sure to induce a cold sweat for any executive, the SEC generally alleged that both Faggioli and Huff had "supervisory responsibilities" over NSP's senior management and policies, yet as "control persons," "failed to make and keep books, records, and accounts, which in reasonable detail, accurately and fairly reflected the transactions of NSP" and failed to devise and maintain an adequate system of internal accounting controls. Without admitting or denying the SEC's allegations, Faggioli and Huff each agreed to pay a $25,000 civil penalty.
According to an NSP press release (see here) no "current NSP officers, directors, or employees are alleged to have participated in or had knowledge of any of the improper conduct" alleged in the SEC complaint. The press release also notes that NSP voluntarily disclosed the conduct at issue to both the SEC and the DOJ and fully cooperated in the government's investigation. The press release also states that NSP "anticipates no action by the DOJ" as to the disclosed conduct.
The NSP FCPA enforcement action, and other such enforcement actions against traditionally low FCPA risk companies, should serve notice to all that no industry is immune from FCPA scrutiny.