Deferred Prosecution Agreement

A deferred prosecution agreement (DPA) is a settlement arrangement in which prosecutors agree to suspend or dismiss criminal charges against a firm in exchange for payment of penalties, internal compliance reforms, and ongoing third-party monitoring. The firm avoids a criminal conviction but must meet strict conditions for a defined period, typically two to three years.

Why prosecutors use them instead of indictment

A DPA occupies a pragmatic middle ground between full prosecution and a mere fine. Securing a criminal conviction requires proving intent and overcoming robust corporate defences; a trial consumes prosecutorial resources and creates months of uncertainty. Meanwhile, a fine alone—without institutional change—may feel insufficient for serious systemic failures like anti-money-laundering breaches or securities fraud. A DPA delivers three things at once: immediate financial restitution, credible enforcement of behavioural change, and the threat of prosecution to concentrate the firm’s attention on compliance. For regulators, it also forestalls the reputational and operational damage that a major bank or broker might suffer if convicted.

The monitor: judge, advisor, and enforcer

The heart of any DPA is the independent compliance monitor, usually a former regulator or senior compliance executive hired jointly by prosecutors and the firm. The monitor conducts onsite audits, reviews the firm’s compliance architecture, attends board meetings, and reports back to prosecutors. If the firm drags its feet on remediation or hides violations, the monitor flags it; prosecutors can then resurrect charges. This structure means the firm cannot simply pay a fine and resume old habits—institutional culture and controls are under constant scrutiny. Many firms find the monitor experience sobering: a three-year embedded inspector forces discipline that voluntary compliance efforts might never achieve.

Financial and operational costs

A DPA rarely costs only the headline fine. A firm must appoint senior leadership to oversee compliance overhaul, hire external consultants, conduct firm-wide audits, and retrain staff. In high-profile cases—such as major FCPA or sanctions violations—the compliance spend can exceed the fine itself. The firm’s share price often suffers, not just from the penalties but from perceived reputational damage and operational disruption. Smaller financial firms may be unable to sustain a DPA’s demands and may fold or seek acquisition.

Common violation triggers

DPAs cluster around a handful of regulatory failures. Foreign Corrupt Practices Act violations—bribing foreign officials—account for a large share of bank and oil-company DPAs. Money-laundering and sanctions failures follow, especially post-2008, when regulators tightened anti-money-laundering expectations. Securities-related DPAs cover instances of internal controls failures that allowed fraud to occur. Tax evasion and market-manipulation schemes also trigger DPA investigations. In nearly every case, the pattern is the same: a serious violation, weak detection systems, and failure of management oversight.

Does it work?

The effectiveness of DPAs is contested. Prosecutors point to lower recidivism rates and argue that firms with monitors are less likely to breach again. Yet critics note that some firms have entered multiple DPAs—sometimes with different regulators—suggesting that the threat alone does not permanently fix behaviour. A DPA works best when senior leadership is genuinely committed to change and when the monitor has authority and credibility. It fails when boards resent the intrusion and treat compliance as a grudging expense rather than a business imperative. Evidence also suggests that DPA compliance is tightest during the monitor’s tenure and may relax once the agreement expires.

The collateral-consequences question

A lingering controversy surrounds whether a firm can avoid criminal conviction—and thus the automatic collateral consequences—through a DPA, especially when individuals within that firm may have engaged in reckless or knowing misconduct. Prosecutors sometimes resolve this by negotiating DPAs for the firm while pursuing criminal cases against executives or traders directly. But critics argue that DPAs, by shielding the corporation itself, undermine deterrence and let shareholders bear the cost while decision-makers escape personal jeopardy. This tension has led some regulators to attach more aggressive individual-liability conditions to modern DPAs.

See also