Mexico | Blockchain, artificial intelligence and compliance

Mexico | Blockchain, artificial intelligence and compliance

In October 2021, the INAI hosted the most important event on privacy and data protection in the world: the Global Privacy Assembly (GPA), which in its 43rd session included experts from various nations, who concluded that information technologies Information and communication (ICTs) are a transcendental factor for the life and future of humanity, crucial in the processing of personal data.

Within the new technologies, the blockchain  and artificial intelligence (AI) stood out in particular  , as well as a scheme to follow for public and private entities; the so-called “compliance” that monopolized the debate and discussion tables.

 Blockchain technology  is a system that allows a community to share, collect or distribute digital information or transaction data from multiple sources, without these being able to be copied or altered, except with the permission of each of the members or participants. . The data or information is divided into shared blocks that are chained with unique identifiers, which gives it integrity as it is a single source of truth, thus eliminating duplication and increasing security, preventing fraud and manipulation of the data since it is impossible to alter them without the permission of the group.

Initially designed to guarantee digital currency or cryptocurrencies such as “bitcoin”, technological developers are finding other potential uses, since by allowing any digital information to be distributed, but without being copied, it makes it possible to carry out thousands of operations safely, with which, the personal data required to carry them out will be protected in the same way.

Needless to say about the AI; we are waiting for the great discoveries that will change our world; movies and series present a futuristic scenario in which intelligent robots surpass us and have practically taken over our planet. Although a machine with autonomous consciousness, totally self-sufficient from any human interference, has not yet been developed, AI, understood as systems or machines that imitate human intelligence to perform tasks and that can improve them based on the information they collect. , is a reality.

The engines of our smartphones, computers or televisions show us specific recommendations based on our searches and consumption habits: applications that simulate conversations and provide automatic responses ” chatbots ” use AI to understand user problems and provide more effective responses; intelligent assistants use it to analyze large amounts of information and improve programming. In essence, AI works off of the personal data it collects.

Regarding the ” compliance“we must understand it as the set of procedures and good practices adopted by organizations in order to identify, alert and report operational and legal risks that they face, such as sanctions, financial losses and risks due to loss of reputation, as a result of non-compliance of laws, regulations and codes of conduct, as well as to provide advice and establish internal mechanisms for prevention, management, control and reaction against them. This regulatory compliance has in the right to the protection of personal data one of its most sensitive areas; The applicable laws and regulations on the matter establish a series of obligations and duties for those responsible for the treatment, which if not observed could lead to serious consequences, including large fines.

Blockchain technology  , artificial intelligence and  compliance  converge in terms of personal data; They find in these an essential element for their functioning and operation, without which it is simply impossible for them to function.

Source: The Financial

For more information contact:

Juan José López de Silanes  | Partner Basham, Ringe and Correa | lopez_de_silanes@basham.com.mx

Compartir:
Uruguay | On the way to regulating private corruption

Uruguay | On the way to regulating private corruption

Uruguay does not regulate corruption in the private sector. When we talk about corruption in our country, we associate it with public officials. Today, the same behaviors committed by public officials if committed by individuals, fall under other criminal figures different from corruption crimes. Private bribery is not a crime under Uruguayan law.

However, Uruguay ratified the United Nations Convention Against Corruption (UNCAC) in 2006 (Law No. 18,056), which deals with private corruption, urging States to adopt measures to prevent corruption and improve accounting standards and auditing in the private sector. However, to date corruption in the private sector has not been regulated.

Draft bill in charge of the JUTEP

Law No. 19,797, in force since March 1, 2020, commissioned the Board of Transparency and Public Ethics (JUTEP) to prepare a bill that analyzes and provides for measures to prevent corruption in the private sector.

Technical advice from UNODC and participation of the business sector in the preparation of a policy on private corruption

The United Nations Office against Drugs and Corruption (UNODC) is technically advising the JUTEP, in the elaboration of the aforementioned bill.

Within the framework of this advice, an event organized by the Global Compact, UNODC and Ferrere Abogados was held on December 7, with the purpose of having the Uruguayan business sector work on the co-design of this anti-corruption policy for the private sector. .

The event was attended by experts from the aforementioned offices, as well as the highest authorities of the JUTEP, Chamber of Commerce and Services of Uruguay, Union of Exporters, National Association of Micro and Small Companies (ANMYPE), National Secretariat for the fight Against Money Laundering and the Financing of Terrorism (SENACLAFT) and representatives of both national and multinational companies.

In the event, the current regulations were reviewed, opinions were exchanged and feedback was provided to the design of the anti-corruption public policy on which the JUTEP is working.

Conclusions of the event on private anti-corruption policy

The event concluded that a policy on corruption in the private sector should include the following elements:

  • Apply to: (i) sectors that are contractually linked to the State (pharmaceutical, energy, construction, logistics), (ii) companies that exceed a certain level of income or assets, and (iii) companies that can exercise a dominant position in the local market.
  • Provide a system of administrative responsibility – not criminal – of legal persons. Criminal responsibility would continue to fall solely on individuals.
  • Impose a gradual regime of sanctions (warning, observation, fine, temporary or permanent suspension, temporary or permanent ban on contracting with the State, loss of eventual benefits granted by the State, cancellation of legal status with the possibility of redeeming the company) .
  • Public regime of defaulters.
  • Criminalize new crimes in the private sector such as local and transnational bribery, influence peddling (including regulation of lobbying or pressure groups), collusion, embezzlement or embezzlement of assets, money laundering (including private corruption as a predicate offense), and behaviors that violate the transparency of accounting records.
  • The JUTEP could be the body in charge of monitoring compliance with a possible regulation, in relation to the administrative responsibility of legal persons, while the specialized Prosecutor’s Offices would be for crimes that are established related to private corruption.
  • System of credits and reduction of sanctions in favor of companies that have effective corruption prevention programs, and the eventual granting of certain benefits when competing in contracting systems with the State.

Effective anti-corruption compliance programs in the private sector

Although Uruguay does not have specific regulations on private corruption, to date several of the local companies and, above all, multinationals with activity in Uruguay, have their own anti-corruption programs, including both corruption in the public sector and in the private sector. private.

These programs are of varied scope, made according to the values ​​and principles of each company, and sometimes respond to internal policies of foreign parent companies. In general these programs include:

  • Risk analysis and preparation of risk matrices.
  • Codes of ethics or conduct.
  • Integrity policies and procedures.
  • Governance rules that indicate the obligations and responsibilities of the different participants in the company (shareholders, board of directors, audit committee, compliance officer, heads and managers, etc.).
  • Regular and differentiated training.
  • Support from senior management and management.
  • Internal reporting channels, open to company members and also to third parties, therefore their adequate dissemination is important.
  • Whistleblower protection policy.
  • Complaint investigation protocol.
  • Due diligence of third parties, business partners, including suppliers, distributors, service providers.
  • Due diligence in mergers and acquisitions processes.
  • Monitoring, auditing and continuous evaluation of the effectiveness of the anti-corruption compliance program.
  • Appointment of an internal manager with a focus on “corruption”.

Having effective integrity programs benefits companies, not only because of the proper management of their risks (operations, reputational, etc.), but also because they generate an important business opportunity, either because they do not have these tools , are not taken into account as suppliers; or because by having them, they become more attractive companies for shareholders and investors.

For more information contact:

Carla Arellano  | Counselor Ferrere | carellano@ferrere.com

Compartir:
Chile | Four myths about reporting channels

Chile | Four myths about reporting channels

Complaint channels are   a key tool for companies that wish to implement a corporate culture of integrity and have  safer work spaces .

In this context, the az Compliance team   invites you to review  four myths about reporting channels  that organizations should consider during their implementation to obtain better results and avoid situations that may affect their collaborators.

 

  1. Not receiving complaints is synonymous with doing things right

This is perhaps one of the biggest myths surrounding reporting channels. Many companies welcome the fact that no accusations or reports have been received, but the truth is that this may be linked to other factors such as:

  • Lack of knowledge of the existence of a whistleblowing channel where irregular situations can be reported.
  • Lack of confidence that whistleblowers will not be retaliated against.
  • Lack of knowledge about how the channel works and what it is for.

This can be detrimental to a company, since many times irregularities cannot be detected unless someone raises their voice and reports it.

 

  1. The reporting channels are for internal use only.

The truth is that there is no single way to implement a complaints channel. However, many times it is believed that this is only for the use of workers who are part of the company or organization, since there are circumstances in which it may be open to other interest groups.

In this way, companies can open up to receive information, reports or complaints from external people such as suppliers, customers and neighbors. The foregoing is relevant since those who interact with the company are not only its workers. For example, a supplier may be the subject of an illegal requirement, a client a witness of how fraud is committed, and a neighbor of non-compliance with regulations that could affect the community where the business is located. Thus, it is relevant to be able to enable a mechanism through which external parties can inform and alert the company of what happens when it interacts with them.

 

  1. It is enough to launch a complaints channel for it to start working

Although the adoption and launch of a whistleblowing channel is a big step, it is not enough just to have a platform, email or telephone line for it to work. The work to implement this resource must necessarily be accompanied by a series of actions that must last over time so that workers are aware of its existence and begin to use it, such as:

  • Communication actions that report on the existence, use and access to the channel.
  • Training on what can be reported and the procedure that the company will adopt when receiving one.
  • Facilitate access by various means for workers who are located in relocated sites or whose positions do not have access to corporate computers for personal use. This can be done by setting up a mailbox to receive written complaints, making a device that has access to the channel available to workers and/or setting up a telephone line.

Likewise, the organizations must in turn prepare an investigation protocol that details the process and stages that will be triggered in the event of receiving a complaint, which must contain deadlines, responsible parties, measures that can be adopted, etc.

 

  1. It is not necessary to process or respond to all reports

Although an organization may receive information that is not of interest to it or whose treatment does not correspond to that of a complaint as such, it is important that a response is always delivered to those who resort to this tool.

The foregoing, since if no response is received, both workers and interest groups may lose confidence that the use of the channel is useful for something, and thus, not use it in the event of witnessing an irregularity in the future.

Thus, it is recommended that companies and organizations prepare a response protocol in which, even when the information received does not correspond to that which should trigger an investigation, there is some communication in which, for example, the owner of the report is informed that that must be processed through another mechanism or addressed in another way.

For more information on these issues, you can contact our  Compliance group:

Francesca Franzani  | Compliance Group Director | ffranzani@az.cl

Florence Fuentealba  | Compliance Group Associate | ffuentealba@az.cl

Compartir:
Paraguay | The Secretary of Defense of the Consumer and the User (SEDECO) typified three abusive commercial practices

Paraguay | The Secretary of Defense of the Consumer and the User (SEDECO) typified three abusive commercial practices

By SDCU Resolution No. 1733/2022, published in the Official Gazette last November, the Consumer and User Defense Secretariat (SEDECO) regulated subsections d) and e) of article 6, and subsections c) and f) of article 14 of Law No. 1334/98 “Consumer and User Defense”, typifying the following abusive commercial practices:

  • Telephone calls and other commercial communications made by any other means, outside of 08:00 a.m. to 06:00 p.m. Monday through Friday, and from 08:00 a.m. to 12:00 p.m. on Saturdays;
  • Claims for debts made through telephone calls and communications by any other means, to third parties other than the consumer, such as personal references, family members or their place of work and others;
  • The collection of sums of money – set arbitrarily by the suppliers – for claims made through telephone calls or other means used regularly in the market.

Additionally, it is established that those providers that incur in this type of practices will be liable to be penalized for violation of Law No. 1334/98 of “Defense of the Consumer and the User”, its modifications and regulations.

For more information contact:

Carla Arellano | Counselor Ferrere | carellano@ferrere.com

Compartir:
Uruguay | On the way to regulating private corruption

Guatemala | New alliances and products to continue promoting ethics and integrity

The Guatemalan Chamber of Industry (CIG), through its GuateÍntegra program, which was born in 2017 with the aim of educating and training a generation of citizens who become actors and not just spectators in the construction of a transparent Guatemala , announces new strategic alliances to continue promoting ethics and integrity in companies, and three new products:

  1. Seal of integrity for young people : it was officially launched on August 23, 2022, through which young people will be instructed in business ethics issues and will be taught, in five sessions, by experts from different organizations. To date, there are more than 600 young people registered.
  2. Complaint channel:  service made available to companies that wish to implement and have this mechanism, which will be provided in conjunction with Be Compliance, endorsed by the World Compliance Association (WCA).
  3. Training platform on professional ethics issues:  aimed at worker collaborators and people interested in learning about professional ethics, through which many more professionals committed to building a more transparent Guatemala are being trained.

Likewise, GuateÍntegra made two new strategic alliances of great value: 1. Hagámoslo Bien –civil association that promotes the culture of legality in the City of Monterrey, Mexico– through which opportunities, actions and tools that promote ethics and integrity within companies and different sectors of society. 2. E Compliance (ECOM) – a firm specialized in consulting and training in corporate ethics and compliance matters – with the purpose of contributing to companies and organizations to promote tools that help them work against corruption.

Achievements of GuateIntegra

GuateÍntegra has partnered with large associations that share the purpose of promoting a culture of legality in the country: Center for the Action of Corporate Social Responsibility in Guatemala (CentraRSE), Foundation for the Development of Guatemala (FUNDESA), Junior Achievement, Dentons Muñoz, World Compliance Association, Global Compact, Crime Stoppers, United Way, Prensa Libre, Valorum Ethics, ECOM and Hagámoslo Bien México. In addition to having the essential support of large companies such as AMBEV, to execute its work plan.

At the moment, through the Anti-Corruption Certification and the Transparency, Compliance and Anti-Corruption Training program, which were launched in January of this year, more than 900 employees from more than 60 companies have been trained and 11 organizations are in the certification process, which is based on ISO 37001:2016, Anti-Bribery Management System.

Source: Industry Magazine

For more information contact:

Uri Weinstock  | BLP Partner | uweinstok@blplegal.com

Compartir:
Peru | Fines after modifications to labor outsourcing

Peru | Fines after modifications to labor outsourcing

Around 2022, the 180-day period that Supreme Decree No. 001-22-TR established for Peruvian companies to end their labor outsourcing schemes for activities related to the core of the business came to an end. The National Superintendence of Labor Inspection (Sunafil) began the inspections in order to verify the adequacy of the companies to the guidelines of the decree issued in February of this year.

In this regard, the agency has new guidelines on offenses and sanctions issued through Supreme Decree No. 015-2022-TR, which modifies the Regulations of the General Labor Inspection Law.

New sanctions:

  • Outsource core business activities. Very serious offence.
  • Use outsourcing for non-main activities. Very serious offence.
  • Terminate outsourced workers due to adaptation to the new outsourcing rules. Very serious offence.
  • Use outsourcing as a mere supply of labor. Very serious offence.
  • Failure to comply with the formalities in the contracts of posted workers or breaching the duty of information. Serious offense.

The amount of the fines is determined by the number of workers affected.

For more information contact:

Mario Pinatte  | CPB Partner | mpinatte@cpb-abogados.com.pe

Compartir: