In United States v. Chastain, No. 23-7038, 2025 WL 2165839 (2d Cir. July 31, 2025), the United States Court of Appeals for the Second Circuit vacated wire fraud and money laundering convictions in what the government described as its first crypto insider trading case. The case involves a former employee of OpenSea, an online non-fungible token (“NFT”) marketplace, who allegedly used confidential information about which NFTs would be featured on OpenSea’s homepage to purchase those NFTs before they were promoted, then sold them after a post-promotion price bump for a profit. At trial, the United States District Court for the Southern District of New York instructed the jury that property protected by the wire fraud statute need not have commercial value, and the defendant could be convicted of wire fraud by failing to abide by societal mores.Continue Reading Second Circuit Vacates Fraud Conviction in First Crypto “Insider Trading” Case

On July 9, 2025, the U.S. Department of Justice (“DOJ”) announced it sent more than 20 subpoenas to physicians and clinics involved in providing gender-affirming care to minors, and that the subpoenas related to investigations into healthcare fraud, false statements and other misconduct.[i] DOJ’s recent announcement, combined with the other actions described below, signal the government’s interest in pursuing action against providers that bill federal healthcare programs for gender-affirming care for minors, including puberty blockers, hormone therapy and surgeries. Specifically, these actions strongly suggest that the government will investigate not only criminal claims but also civil claims under the False Claims Act[ii] (“FCA”) against gender-affirming care providers that bill federal healthcare programs for services provided to minors, relying on bases related to miscoding/misbilling, lack of informed consent and lack of medical necessity. The FCA provides for treble damages and penalties of up to $28,619 per claim. We discuss each of these theories below and what providers can do to reduce potential exposure under these theories.Continue Reading Potential False Claims Act Liability for Providers of Gender-Affirming Care for Minors

The U.S. Department of Justice (“DOJ”) Data Security Program (“DSP”) 90-day enforcement grace period ended as of July 8, 2025. While the program became effective April 8, 2025, DOJ implemented a 90-day enforcement grace period until July 8, 2025 for good-faith efforts towards compliance (see our previous blog here). With the expiration of the grace period, the majority of the DSP is now effective and will be enforced.Continue Reading DOJ’s 90-Day Data Security Compliance Grace Period is Over: Are You Compliant?

On Tuesday, July 8, the DOJ Antitrust Division announced a first-of-its-kind Antitrust Whistleblower Rewards Program (the “Program”). But the Program’s fine print suggests it may not be as lucrative for whistleblowers as it appears at first blush.Continue Reading New DOJ Antitrust Postal Whistleblower Rewards Program: A Look Under the Shiny Hood

On Monday June 9, 2025, the Deputy Attorney General Todd Blanche released “Guidelines for Investigations and Enforcement of the Foreign Corrupt Practices Act.” This much anticipated update directly responds to Executive Order 14209, signed by President Trump earlier this year, which temporarily paused Foreign Corrupt Practices Act (FCPA) enforcement. The new Guidelines focus FCPA enforcement going forward on protecting U.S. business interests, furthering the Administration’s efforts to stamp out cartels and transnational criminal organizations, and prioritizing prosecution of individuals rather than corporations. Conduct that can be described as “routine business practices” in foreign countries, under the Guidelines, will not be pursued.Continue Reading DOJ Releases Promised Guidelines for Investigation and Enforcement Under the FCPA

A serious step up in civil and criminal enforcement of customs laws, including tariff evasion, is imminent. In a May 12 memorandum, the Department of Justice’s new Chief of the Criminal Division, Matthew Galeotti, counted as one of the “most urgent” threats to the country “[t]rade and customs fraud, including tariff evasion.” Earlier in the Administration, in a February 2025 speech, Michael Granston, Deputy Assistant Attorney General for the DOJ’s Commercial Litigation Branch identified, as a key example of new enforcement activity, efforts to enforce payment of customs duties on imported goods and reiterated that enforcement against “illegal foreign trade practices” would be a priority for the Administration. Continue Reading Department of Justice Tariff Enforcement Likely to Surge After Tariff Increases and the Administration’s Increased Focus on Protecting Domestic Business

On May 12, 2025, the U.S. Department of Justice (DOJ) announced a major overhaul of its corporate enforcement policy, aiming to incentivize companies to voluntarily self-disclose misconduct. Titled “Focus, Fairness, and Efficiency in the Fight Against White-Collar Crime,” the revised policy was introduced by DOJ Criminal Division Chief Matthew R. Galeotti and promises a “clear path to declination” for qualifying companies. This marks a strategic shift that could significantly alter how corporate entities approach disclosures, investigations, and compliance moving forward.Continue Reading DOJ’s Updated Enforcement Policy: A Game-Changer for Corporate America?

The U.S. Department of Justice (DOJ)’s new data security rule went into effect April 8, 2025. The rule creates what are effectively export controls and requires companies to take measures to prevent U.S. sensitive personal and government-related data from falling into the hands of foreign adversaries. The rule targets transactions (including data brokerage, vendor agreements, employment agreements, and investment agreements) involving access to bulk sensitive personal data or government-related data when those transactions involve identified covered persons or countries of concern (China, Russia, Iran, North Korea, Cuba, and Venezuela).Continue Reading DOJ Announces 90-Day Grace Period for Companies to Comply with New Data Security Rules on Foreign Adversary Access to U.S. Sensitive Data

Shortly after her confirmation, and just after her swearing-in by Associate Justice Clarence Thomas, U.S. Attorney General Pamela Bondi issued fourteen memoranda that seek to reform the Department of Justice by rescinding prior guidance, issuing new guidance, and establishing new priorities for the nation’s chief law enforcement and prosecuting agency. We examine below the actions taken by Attorney General Bondi. Continue Reading Attorney General Bondi’s Day One Orders for DOJ

In an address this week to the Society of Corporate Compliance and Ethics, Principal Deputy Assistant Attorney General Nicole M. Argentieri of the Department of Justice’s (“DOJ”) Criminal Division, highlighted several updates relevant to corporate compliance programs, including the DOJ’s new whistleblower programs and incentives.Continue Reading DOJ Announces Changes to Guidance on Corporate Compliance Programs, Updates on Whistleblower Program

On August 22, 2024, the United States Department of Justice (DOJ) filed a Complaint-In-Intervention (the “Complaint”) against the Georgia Institute of Technology (Georgia Tech) and Georgia Tech Research Corp. (GTRC). The 99-page DOJ Complaint alleges the defendants knowingly failed to meet contractual cybersecurity requirements in connection with various Department of Defense (DoD) contracts. The suit raises claims under the False Claims Act and federal common law (including fraud, negligent misrepresentation, breach of contract, unjust enrichment, and payment by mistake). This is the latest DOJ activity relating to its Civil Cyber Fraud Initiative (announced in October 2021), which we previously have written about here, here, and here.Continue Reading DOJ Sues Georgia Tech Entities for Cybersecurity Failures in the Latest Civil Cyber Fraud Initiative (CCFI) Activity