Anti-Bribery and Corruption Compliance: A Practical Guide for Organisations

A single bribery conviction can end more than a business relationship. It can trigger criminal liability for individual executives, multi-hundred-million-dollar corporate penalties, debarment from public contracts, and years of costly independent compliance monitoring imposed by regulators who no longer trust the organisation to police itself. Anti-bribery and corruption compliance exists to prevent exactly this outcome, and the organisations that treat it as a genuine operational discipline rather than a policy document consistently avoid the catastrophic consequences that poorly managed corruption risk creates.

This guide explains the international legal framework governing bribery and corruption, the practical compliance programme elements every organisation needs, and the due diligence disciplines that reduce third-party corruption risk before it becomes a genuine liability.

---

Key Takeaways

46 Parties To the OECD Anti-Bribery Convention, the only international instrument specifically criminalising the bribery of foreign public officials in international business transactions

Supply Side The OECD Convention uniquely targets the party offering or paying bribes, complementing domestic laws that criminalise officials receiving them

500+ Individuals and companies sanctioned for foreign bribery offences since the Convention entered into force, according to OECD data

Third Parties Agents, distributors, and intermediaries represent the single largest source of corruption liability exposure for most multinational organisations

• The OECD Anti-Bribery Convention, in force since 1999 and ratified by 46 countries, is the leading international instrument criminalising the bribery of foreign public officials, focusing specifically on the supply side of bribery transactions.
• National laws implementing anti-bribery obligations, including the US Foreign Corrupt Practices Act and the UK Bribery Act, extend corporate liability extraterritorially, meaning organisations can face prosecution for conduct occurring entirely outside their home jurisdiction.
• Third-party intermediaries, agents, distributors, and joint venture partners, represent the largest source of corruption risk exposure for most organisations, since bribes are frequently paid through intermediaries rather than directly by the company.
• Effective compliance programmes require risk-based due diligence, clear policies, employee training, and genuine enforcement, not merely a written anti-corruption policy that exists without operational teeth.

---

The International Legal Framework

The OECD Anti-Bribery Convention, in force since 1999 and now ratified by 46 countries representing over two-thirds of global exports and nearly 90% of outward foreign direct investment, is the leading international instrument specifically targeting the bribery of foreign public officials. Unlike domestic anti-corruption laws that criminalise officials receiving bribes, the Convention uniquely focuses on the supply side, the companies and individuals offering, promising, or paying bribes in international business transactions, requiring signatory countries to criminalise this conduct and actively investigate, prosecute, and sanction offenders.

National implementing legislation, most prominently the US Foreign Corrupt Practices Act (FCPA) and the UK Bribery Act, extends corporate liability well beyond an organisation’s home jurisdiction. Both laws apply extraterritorially, meaning a company can face prosecution for bribery conduct occurring entirely in a third country, and the UK Bribery Act’s strict liability corporate offence for failing to prevent bribery places a genuine legal burden on organisations to demonstrate they had adequate anti-bribery procedures in place, not merely that they were unaware of the conduct.

---

---

Why Third Parties Are Where Corruption Risk Concentrates

Direct bribery by company employees is comparatively rare in well-documented enforcement cases. The far more common pattern involves payments channelled through agents, distributors, consultants, or joint venture partners, intermediaries who provide the company a degree of deniability while the underlying corrupt payment reaches its intended recipient. This is why third-party due diligence has become the central pillar of modern anti-corruption compliance programmes: understanding who an organisation’s intermediaries are, their ownership structure, their history, and their relationships to government officials in markets where the organisation operates.

Risk-based due diligence scales the depth of investigation to the level of risk a specific relationship presents, considering factors including the country’s corruption risk profile, the intermediary’s role and proximity to government decision-making, the value of the relationship, and any red flags such as requests for unusual payment structures, excessive commissions, or resistance to standard compliance terms. This risk-based approach, rather than uniform due diligence applied identically to every relationship, allows compliance resources to concentrate where genuine exposure exists rather than being spread thinly across low-risk relationships.

Building a Genuine Compliance Programme

An effective anti-bribery compliance programme requires more than a written policy. It needs visible senior leadership commitment communicating that corruption will not be tolerated regardless of the business opportunity at stake, clear and specific policies covering gifts, hospitality, facilitation payments, and political contributions, regular training tailored to the specific corruption risks employees in different roles and markets actually face, a confidential reporting channel for raising concerns without fear of retaliation, and genuine consequences for violations applied consistently regardless of the violator’s seniority or commercial value to the organisation.

The governance disciplines that underpin an effective compliance programme connect directly to the broader corporate governance principles covered in our article on corporate governance explained: principles, structures, and best practice, since anti-corruption compliance ultimately depends on the same board oversight, independent audit function, and genuine accountability culture that effective governance requires more broadly.

Facilitation Payments and the Gifts and Hospitality Grey Zone

Facilitation payments, small payments made to expedite routine government action an official is already obligated to perform, such as processing a permit or clearing customs, occupy a genuinely contested area of anti-bribery law. Some jurisdictions, including the United States under the FCPA, historically permitted narrowly defined facilitation payment exceptions, while others, including the UK Bribery Act, prohibit them entirely with no exception. Organisations operating across multiple jurisdictions increasingly adopt a single, more conservative global standard, prohibiting facilitation payments everywhere regardless of what any individual jurisdiction technically permits, since managing genuinely different rules by market creates significant compliance complexity and risk of inconsistent application.

Gifts and hospitality present a similar practical challenge: reasonable, transparent business courtesies are a normal part of commercial relationship-building, but the line between acceptable hospitality and an improper inducement is genuinely difficult to define in the abstract. Effective policies set clear monetary thresholds requiring approval or disclosure, prohibit cash or cash-equivalent gifts entirely, and apply particular scrutiny to any gift or hospitality involving government officials, where the corruption risk and regulatory scrutiny are both significantly higher than in purely commercial relationships.

---

---

Frequently Asked Questions

What is the OECD Anti-Bribery Convention?

The OECD Anti-Bribery Convention is a legally binding international agreement, in force since 1999, requiring signatory countries to criminalise the bribery of foreign public officials in international business transactions, focusing specifically on the party offering or paying the bribe.

Why do third parties represent the biggest corruption risk?

Bribes are more commonly paid through agents, distributors, or intermediaries than directly by company employees, providing a degree of deniability while the payment still reaches its intended recipient, making third-party due diligence the central pillar of effective anti-corruption compliance.

What makes an anti-bribery compliance programme genuinely effective rather than just a policy document?

Genuine effectiveness requires visible leadership commitment, specific and practical policies, role-relevant training, a confidential reporting channel, risk-based due diligence on third parties, and consistent enforcement regardless of the violator’s seniority or commercial value.

---

Conclusion: Prevention as the Only Reliable Defence

Anti-bribery and corruption compliance is one of the clearest examples in corporate governance where the cost of genuine prevention is dramatically lower than the cost of remediation after a violation occurs. Building a compliance programme with real operational substance, risk-based third-party due diligence, practical training, and consistent enforcement, is the only reliable defence against the severe legal, financial, and reputational consequences that corruption violations carry.

Related reading: Anti-corruption compliance operates within the broader corporate governance system. Our article on corporate governance explained: principles, structures, and best practice covers the board oversight and accountability structures that support effective compliance more broadly.

---