FCPA, CCPA, and AI Training for Professional Services Teams.

Professional services firms face overlapping compliance obligations depending on their activities and location. Firms with international clients or operations face FCPA training requirements — and the DOJ treats inadequate training as a liability factor. Firms handling California residents' personal data must train relevant employees on CCPA and, where applicable, FTC Safeguards Rule obligations. Law firms in California must additionally meet California Bar Association CLE requirements. Most professional services firms are out of compliance on at least one of these — often FCPA documentation or CCPA training — without realizing it.

Yes, for firms that qualify as "financial institutions" under the Gramm-Leach-Bliley Act — which includes accounting firms, tax preparation services, financial advisors, mortgage brokers, and some law firms that handle client financial transactions. The FTC Safeguards Rule requires these organizations to implement and document an information security program, including employee training. Firms that fall under the Safeguards Rule must train relevant staff on their security policies and document that training for FTC examiner review.

DOJ FCPA Resource Guide guidance identifies employee training as a core element of an adequate procedures defense. The training must be role-appropriate — covering anti-bribery provisions, gifts-and-entertainment policies, third-party due diligence, and red-flag recognition for employees in relevant roles. Documentation must show who was trained, on what content, and when — with records available for DOJ and SEC auditor review. Self-paced completion certificates alone are treated as weak evidence by DOJ; live or live-virtual delivery with individual completion records is the standard that satisfies DOJ adequacy expectations.

FCPA applies to any US company or person making payments to foreign government officials to obtain or retain business — regardless of which country or how indirectly. Professional services firms that advise clients on international transactions, work with government-adjacent clients in any jurisdiction, or engage international subcontractors face FCPA exposure even without direct operations in high-risk countries. The DOJ's adequate procedures defense requires documented training for all employees in roles with FCPA exposure — and many professional services firms have more of those roles than they realize.

Most Relatones professional services programs are live within two to three weeks of first contact. If you have a DOJ FCPA inquiry, California AG investigation, or FTC Safeguards audit deadline, contact us immediately — we have an accelerated deployment process for firms facing imminent regulatory deadlines. Note: training completed after an inquiry is opened is treated differently by DOJ and the California AG than training completed proactively — but documented training still strengthens your position significantly compared to no training at all.

Yes — and for professional services firms adopting AI tools, this combination is particularly important. AI tools create new CCPA exposure when employees input client personal data into AI systems without policy guidance. Our integrated program covers CCPA data handling obligations and AI governance training simultaneously — with a documented AI usage policy that addresses CCPA compliance for AI-assisted client work specifically. One program closes both gaps with documentation for each.

Yes. California professional services firms face simultaneous obligations under the California Consumer Privacy Act (CCPA/CPRA) for client personal data and the FTC Safeguards Rule for firms qualifying as financial institutions. Our programs address both — with CCPA training covering data subject rights, breach notification timelines, and data minimization, and cybersecurity awareness covering the phishing, BEC, and credential attacks most common in professional services environments. Each program produces documentation formatted for California AG and FTC examiner review separately.