Criminal Law and Investigations

Assess customer identity, beneficial ownership, the purpose of the relationship and relevant risk factors under the applicable regime. A regulated business should also address ongoing monitoring and recordkeeping. The measures required depend on its activities, customer profile and supervisory requirements.

Both the entity's position and the conduct of relevant individuals should be examined. Liability depends on the alleged offence, applicable law and facts. An internal review should preserve evidence, identify decision-making authority and obtain advice before communicating conclusions or accepting responsibility.

Counsel can review the applicable obligations, onboarding documents, beneficial ownership assessment and escalation procedures. Coordinate with compliance personnel on practical implementation. The scope should identify the regulator and activities involved, because due diligence requirements differ between regulated business models.

Preserve relevant records, restrict unnecessary access and define the suspected conduct without treating allegations as established facts. Obtain advice on evidence handling, interviews and possible reporting obligations. Agree who will direct the investigation and receive its findings.

Counsel can help define the investigation scope, review documents, plan interviews and assess legal exposure. Management should identify conflicts and preserve relevant evidence. Any decisions about reporting, disciplinary action or proceedings should be based on the findings and applicable requirements.

The scope should reflect the proposed relationship and can cover legal identity, ownership, authority, licenses and material disputes. Specify the available records and verification limits. A counterparty's registration certificate alone does not establish every aspect of its suitability or financial condition.

They can include evidence review, interview planning, legal analysis and advice on responses to identified misconduct. Define the investigation's scope, reporting line and confidentiality arrangements. Consider employment, contractual and reporting issues before taking action against individuals or communicating findings externally.

Assess lawful access to records, evidence preservation, interview arrangements and any reporting or employment obligations. The procedure should reflect the facts and the people involved. Do not assume that legal privilege, confidentiality or admissibility follows automatically from calling the exercise an investigation.

Report the counterparty's identified legal status, ownership information, authority and material issues within the agreed scope. Explain the sources reviewed and limits of verification. Recommend additional checks where missing information could affect the proposed appointment, contract or investment.

They can help document the applicable obligations, onboarding information, beneficial ownership assessment and escalation criteria. Coordinate legal analysis with compliance procedures and system controls. The scope should identify the regulated activities and customer categories to which the procedures will apply.

Identify the regulated activities and relevant customer, transaction and geographic risks. Review onboarding, beneficial ownership, monitoring, escalation and records as applicable. Policies should reflect actual systems and responsibilities, and should not be treated as effective controls without implementation, training and periodic review.

Map interactions with officials, intermediaries, procurement teams and third-party service providers. Review approval processes, payments, gifts, records and escalation routes against applicable law. A policy should be supported by due diligence and practical controls rather than used as evidence that questionable payments are acceptable.

Identify the regulated activities and relevant customer, transaction and geographic risks. Review onboarding, beneficial ownership, monitoring, escalation and records as applicable. Policies should reflect actual systems and responsibilities, and should not be treated as effective controls without implementation, training and periodic review.

Define the allegation, scope, reporting line and evidence-preservation plan. Identify conflicts, lawful access and relevant employment or reporting issues. Interview and document review should follow a consistent process, with findings distinguished from assumptions and legal conclusions assessed before external communications or disciplinary action.

Map interactions with officials, intermediaries, procurement teams and third-party service providers. Review approval processes, payments, gifts, records and escalation routes against applicable law. A policy should be supported by due diligence and practical controls rather than used as evidence that questionable payments are acceptable.

Define the allegation, scope, reporting line and evidence-preservation plan. Identify conflicts, lawful access and relevant employment or reporting issues. Interview and document review should follow a consistent process, with findings distinguished from assumptions and legal conclusions assessed before external communications or disciplinary action.

Define reporting channels, responsibility for receiving concerns, confidentiality and the investigation process. Assess employment, privacy and reporting obligations before promising protections or anonymity. The procedure should explain how concerns are assessed and escalated without treating allegations as established facts.

Map interactions with officials, intermediaries, procurement teams and third-party service providers. Review approval processes, payments, gifts, records and escalation routes against applicable law. A policy should be supported by due diligence and practical controls rather than used as evidence that questionable payments are acceptable.

Define the allegation, scope, reporting line and evidence-preservation plan. Identify conflicts, lawful access and relevant employment or reporting issues. Interview and document review should follow a consistent process, with findings distinguished from assumptions and legal conclusions assessed before external communications or disciplinary action.

Define reporting channels, responsibility for receiving concerns, confidentiality and the investigation process. Assess employment, privacy and reporting obligations before promising protections or anonymity. The procedure should explain how concerns are assessed and escalated without treating allegations as established facts.

Identify the regulated activities and relevant customer, transaction and geographic risks. Review onboarding, beneficial ownership, monitoring, escalation and records as applicable. Policies should reflect actual systems and responsibilities, and should not be treated as effective controls without implementation, training and periodic review.

Identify the regulated activities and relevant customer, transaction and geographic risks. Review onboarding, beneficial ownership, monitoring, escalation and records as applicable. Policies should reflect actual systems and responsibilities, and should not be treated as effective controls without implementation, training and periodic review.

Provide the available complaint, summons, detention or court documents promptly and preserve relevant evidence. Identify procedural deadlines and the person's status in the case. Advice should address the specific allegation and stage of proceedings rather than promise a result before the record is reviewed.

Provide the available complaint, summons, detention or court documents promptly and preserve relevant evidence. Identify procedural deadlines and the person's status in the case. Advice should address the specific allegation and stage of proceedings rather than promise a result before the record is reviewed.

Map interactions with officials, intermediaries, procurement teams and third-party service providers. Review approval processes, payments, gifts, records and escalation routes against applicable law. A policy should be supported by due diligence and practical controls rather than used as evidence that questionable payments are acceptable.

Identify the regulated activities and relevant customer, transaction and geographic risks. Review onboarding, beneficial ownership, monitoring, escalation and records as applicable. Policies should reflect actual systems and responsibilities, and should not be treated as effective controls without implementation, training and periodic review.

Define the allegation, scope, reporting line and evidence-preservation plan. Identify conflicts, lawful access and relevant employment or reporting issues. Interview and document review should follow a consistent process, with findings distinguished from assumptions and legal conclusions assessed before external communications or disciplinary action.

Identify the regulated activities and relevant customer, transaction and geographic risks. Review onboarding, beneficial ownership, monitoring, escalation and records as applicable. Policies should reflect actual systems and responsibilities, and should not be treated as effective controls without implementation, training and periodic review.

Provide the available complaint, summons, detention or court documents promptly and preserve relevant evidence. Identify procedural deadlines and the person's status in the case. Advice should address the specific allegation and stage of proceedings rather than promise a result before the record is reviewed.

Provide the available complaint, summons, detention or court documents promptly and preserve relevant evidence. Identify procedural deadlines and the person's status in the case. Advice should address the specific allegation and stage of proceedings rather than promise a result before the record is reviewed. Confirm the applicable Kurdistan Region rules and responsible authority for the particular activity or relationship.

Provide the available complaint, summons, detention or court documents promptly and preserve relevant evidence. Identify procedural deadlines and the person's status in the case. Advice should address the specific allegation and stage of proceedings rather than promise a result before the record is reviewed.

Provide the available complaint, summons, detention or court documents promptly and preserve relevant evidence. Identify procedural deadlines and the person's status in the case. Advice should address the specific allegation and stage of proceedings rather than promise a result before the record is reviewed. Confirm the applicable Kurdistan Region rules and responsible authority for the particular activity or relationship.

Map interactions with officials, intermediaries, procurement teams and third-party service providers. Review approval processes, payments, gifts, records and escalation routes against applicable law. A policy should be supported by due diligence and practical controls rather than used as evidence that questionable payments are acceptable. For Chinese businesses, align the Iraqi workstream with home-country approvals and any translation or authentication needed for foreign corporate documents.

Map interactions with officials, intermediaries, procurement teams and third-party service providers. Review approval processes, payments, gifts, records and escalation routes against applicable law. A policy should be supported by due diligence and practical controls rather than used as evidence that questionable payments are acceptable. For China-based businesses, align the Iraqi workstream with home-country approvals and any translation or authentication needed for foreign corporate documents.

Map interactions with officials, intermediaries, procurement teams and third-party service providers. Review approval processes, payments, gifts, records and escalation routes against applicable law. A policy should be supported by due diligence and practical controls rather than used as evidence that questionable payments are acceptable. For Turkish businesses, align the Iraqi workstream with home-country approvals and any translation or authentication needed for foreign corporate documents.

Map interactions with officials, intermediaries, procurement teams and third-party service providers. Review approval processes, payments, gifts, records and escalation routes against applicable law. A policy should be supported by due diligence and practical controls rather than used as evidence that questionable payments are acceptable. For Turkey-based businesses, align the Iraqi workstream with home-country approvals and any translation or authentication needed for foreign corporate documents.

Map interactions with officials, intermediaries, procurement teams and third-party service providers. Review approval processes, payments, gifts, records and escalation routes against applicable law. A policy should be supported by due diligence and practical controls rather than used as evidence that questionable payments are acceptable. For German businesses, align the Iraqi workstream with home-country approvals and any translation or authentication needed for foreign corporate documents.

Map interactions with officials, intermediaries, procurement teams and third-party service providers. Review approval processes, payments, gifts, records and escalation routes against applicable law. A policy should be supported by due diligence and practical controls rather than used as evidence that questionable payments are acceptable. For Germany-based businesses, align the Iraqi workstream with home-country approvals and any translation or authentication needed for foreign corporate documents.

Map interactions with officials, intermediaries, procurement teams and third-party service providers. Review approval processes, payments, gifts, records and escalation routes against applicable law. A policy should be supported by due diligence and practical controls rather than used as evidence that questionable payments are acceptable. For Spanish businesses, align the Iraqi workstream with home-country approvals and any translation or authentication needed for foreign corporate documents.

Map interactions with officials, intermediaries, procurement teams and third-party service providers. Review approval processes, payments, gifts, records and escalation routes against applicable law. A policy should be supported by due diligence and practical controls rather than used as evidence that questionable payments are acceptable. For Spain-based businesses, align the Iraqi workstream with home-country approvals and any translation or authentication needed for foreign corporate documents.

Map interactions with officials, intermediaries, procurement teams and third-party service providers. Review approval processes, payments, gifts, records and escalation routes against applicable law. A policy should be supported by due diligence and practical controls rather than used as evidence that questionable payments are acceptable. For American businesses, align the Iraqi workstream with home-country approvals and any translation or authentication needed for foreign corporate documents.

Map interactions with officials, intermediaries, procurement teams and third-party service providers. Review approval processes, payments, gifts, records and escalation routes against applicable law. A policy should be supported by due diligence and practical controls rather than used as evidence that questionable payments are acceptable. For US-based businesses, align the Iraqi workstream with home-country approvals and any translation or authentication needed for foreign corporate documents.

Map interactions with officials, intermediaries, procurement teams and third-party service providers. Review approval processes, payments, gifts, records and escalation routes against applicable law. A policy should be supported by due diligence and practical controls rather than used as evidence that questionable payments are acceptable. For British businesses, align the Iraqi workstream with home-country approvals and any translation or authentication needed for foreign corporate documents.

Map interactions with officials, intermediaries, procurement teams and third-party service providers. Review approval processes, payments, gifts, records and escalation routes against applicable law. A policy should be supported by due diligence and practical controls rather than used as evidence that questionable payments are acceptable. For UAE-based businesses, align the Iraqi workstream with home-country approvals and any translation or authentication needed for foreign corporate documents.

Obtain the decision and evidence of notification, identify the available challenge route and confirm its deadline promptly. Preserve earlier submissions and the factual grounds for the challenge. Counsel can assist the client in dealings with the Integrity Commission; this does not imply appointment as that body’s own adviser or a guarantee of approval.

Identify the request, relevant file and outcome sought. Prepare an authorised submission with indexed supporting records and retain evidence of delivery and the formal response. Counsel can assist the client in dealings with the Integrity Commission; this does not imply appointment as that body’s own adviser or a guarantee of approval.

Identify the client, relevant file, proposed transaction or administrative issue and the outcome sought. Review the authority documents and correspondence and agree the required representation, submissions and follow-up. Counsel can assist the client in dealings with the Integrity Commission; this does not imply appointment as that body’s own adviser or a guarantee of approval.

Map the client’s activities and relevant decisions or conditions. Reconcile the corporate, contractual and technical records and identify outstanding requirements, responsible persons and follow-up actions. Counsel can assist the client in dealings with the Integrity Commission; this does not imply appointment as that body’s own adviser or a guarantee of approval.

Map interactions with officials, intermediaries, procurement teams and third-party service providers. Review approval processes, payments, gifts, records and escalation routes against applicable law. A policy should be supported by due diligence and practical controls rather than used as evidence that questionable payments are acceptable.

Identify the regulated activities and relevant customer, transaction and geographic risks. Review onboarding, beneficial ownership, monitoring, escalation and records as applicable. Policies should reflect actual systems and responsibilities, and should not be treated as effective controls without implementation, training and periodic review.

Identify the regulated activities and relevant customer, transaction and geographic risks. Review onboarding, beneficial ownership, monitoring, escalation and records as applicable. Policies should reflect actual systems and responsibilities, and should not be treated as effective controls without implementation, training and periodic review.

Identify the regulated activities and relevant customer, transaction and geographic risks. Review onboarding, beneficial ownership, monitoring, escalation and records as applicable. Policies should reflect actual systems and responsibilities, and should not be treated as effective controls without implementation, training and periodic review.

Identify the regulated activities and relevant customer, transaction and geographic risks. Review onboarding, beneficial ownership, monitoring, escalation and records as applicable. Policies should reflect actual systems and responsibilities, and should not be treated as effective controls without implementation, training and periodic review.

Map the business's activities, customers, counterparties, payment flows and applicable regulated roles. Assess the controls needed for due diligence, escalation, records and any reporting obligations. Investigate identified concerns through a documented process with appropriate access controls. Overseas sanctions exposure and Iraqi requirements should be analysed separately rather than treated as one universal prohibition list.

Define the allegation, scope, reporting line and evidence-preservation plan. Identify conflicts, lawful access and relevant employment or reporting issues. Interview and document review should follow a consistent process, with findings distinguished from assumptions and legal conclusions assessed before external communications or disciplinary action.

Identify the regulated activities and relevant customer, transaction and geographic risks. Review onboarding, beneficial ownership, monitoring, escalation and records as applicable. Policies should reflect actual systems and responsibilities, and should not be treated as effective controls without implementation, training and periodic review.

Map the business's activities, customers, counterparties, payment flows and applicable regulated roles. Assess the controls needed for due diligence, escalation, records and any reporting obligations. Investigate identified concerns through a documented process with appropriate access controls. Overseas sanctions exposure and Iraqi requirements should be analysed separately rather than treated as one universal prohibition list.

Define reporting channels, responsibility for receiving concerns, confidentiality and the investigation process. Assess employment, privacy and reporting obligations before promising protections or anonymity. The procedure should explain how concerns are assessed and escalated without treating allegations as established facts.

Map the business's activities, customers, counterparties, payment flows and applicable regulated roles. Assess the controls needed for due diligence, escalation, records and any reporting obligations. Investigate identified concerns through a documented process with appropriate access controls. Overseas sanctions exposure and Iraqi requirements should be analysed separately rather than treated as one universal prohibition list.

Define reporting channels, responsibility for receiving concerns, confidentiality and the investigation process. Assess employment, privacy and reporting obligations before promising protections or anonymity. The procedure should explain how concerns are assessed and escalated without treating allegations as established facts.

Map the business's activities, customers, counterparties, payment flows and applicable regulated roles. Assess the controls needed for due diligence, escalation, records and any reporting obligations. Investigate identified concerns through a documented process with appropriate access controls. Overseas sanctions exposure and Iraqi requirements should be analysed separately rather than treated as one universal prohibition list.

Map the business's activities, customers, counterparties, payment flows and applicable regulated roles. Assess the controls needed for due diligence, escalation, records and any reporting obligations. Investigate identified concerns through a documented process with appropriate access controls. Overseas sanctions exposure and Iraqi requirements should be analysed separately rather than treated as one universal prohibition list.

Map interactions with officials, intermediaries, procurement teams and third-party service providers. Review approval processes, payments, gifts, records and escalation routes against applicable law. A policy should be supported by due diligence and practical controls rather than used as evidence that questionable payments are acceptable.

Identify the allegation, affected persons, notices and procedural stage, and preserve relevant evidence lawfully. Arrange advice on representation, responses and the applicable investigation or court process promptly. Keep factual findings distinct from allegations and assess civil or employment consequences separately. Internal inquiries and a criminal complaint can involve different powers, safeguards and objectives.

Identify the allegation, persons involved, transactions and procedural stage. Preserve contracts, financial records and communications lawfully and obtain advice before preparing responses or interviews. Distinguish internal factual review from the criminal process and assess any parallel civil or regulatory exposure. Commercial loss alone does not establish the legal elements of a criminal offence.

Identify the allegation, affected persons, notices and procedural stage, and preserve relevant evidence lawfully. Arrange advice on representation, responses and the applicable investigation or court process promptly. Keep factual findings distinct from allegations and assess civil or employment consequences separately. Internal inquiries and a criminal complaint can involve different powers, safeguards and objectives.

Identify the allegation, affected persons, notices and procedural stage, and preserve relevant evidence lawfully. Arrange advice on representation, responses and the applicable investigation or court process promptly. Keep factual findings distinct from allegations and assess civil or employment consequences separately. Internal inquiries and a criminal complaint can involve different powers, safeguards and objectives.

Identify the allegation, affected persons, notices and procedural stage, and preserve relevant evidence lawfully. Arrange advice on representation, responses and the applicable investigation or court process promptly. Keep factual findings distinct from allegations and assess civil or employment consequences separately. Internal inquiries and a criminal complaint can involve different powers, safeguards and objectives.

Identify the allegation, affected persons, notices and procedural stage, and preserve relevant evidence lawfully. Arrange advice on representation, responses and the applicable investigation or court process promptly. Keep factual findings distinct from allegations and assess civil or employment consequences separately. Internal inquiries and a criminal complaint can involve different powers, safeguards and objectives.

Identify the allegation, affected persons, notices and procedural stage, and preserve relevant evidence lawfully. Arrange advice on representation, responses and the applicable investigation or court process promptly. Keep factual findings distinct from allegations and assess civil or employment consequences separately. Internal inquiries and a criminal complaint can involve different powers, safeguards and objectives.

Map interactions with officials, intermediaries, procurement teams and third-party service providers. Review approval processes, payments, gifts, records and escalation routes against applicable law. A policy should be supported by due diligence and practical controls rather than used as evidence that questionable payments are acceptable.

Define the allegation, scope, reporting line and evidence-preservation plan. Identify conflicts, lawful access and relevant employment or reporting issues. Interview and document review should follow a consistent process, with findings distinguished from assumptions and legal conclusions assessed before external communications or disciplinary action.

Map the business's activities, customers, counterparties, payment flows and applicable regulated roles. Assess the controls needed for due diligence, escalation, records and any reporting obligations. Investigate identified concerns through a documented process with appropriate access controls. Overseas sanctions exposure and Iraqi requirements should be analysed separately rather than treated as one universal prohibition list.

Identify the regulated activities and relevant customer, transaction and geographic risks. Review onboarding, beneficial ownership, monitoring, escalation and records as applicable. Policies should reflect actual systems and responsibilities, and should not be treated as effective controls without implementation, training and periodic review.

Map the business's activities, customers, counterparties, payment flows and applicable regulated roles. Assess the controls needed for due diligence, escalation, records and any reporting obligations. Investigate identified concerns through a documented process with appropriate access controls. Overseas sanctions exposure and Iraqi requirements should be analysed separately rather than treated as one universal prohibition list.

Identify the allegation, affected persons, notices and procedural stage, and preserve relevant evidence lawfully. Arrange advice on representation, responses and the applicable investigation or court process promptly. Keep factual findings distinct from allegations and assess civil or employment consequences separately. Internal inquiries and a criminal complaint can involve different powers, safeguards and objectives.

Identify the allegation, affected persons, notices and procedural stage, and preserve relevant evidence lawfully. Arrange advice on representation, responses and the applicable investigation or court process promptly. Keep factual findings distinct from allegations and assess civil or employment consequences separately. Internal inquiries and a criminal complaint can involve different powers, safeguards and objectives.

Identify the allegation, affected persons, notices and procedural stage, and preserve relevant evidence lawfully. Arrange advice on representation, responses and the applicable investigation or court process promptly. Keep factual findings distinct from allegations and assess civil or employment consequences separately. Internal inquiries and a criminal complaint can involve different powers, safeguards and objectives.

Identify the allegation, affected persons, notices and procedural stage, and preserve relevant evidence lawfully. Arrange advice on representation, responses and the applicable investigation or court process promptly. Keep factual findings distinct from allegations and assess civil or employment consequences separately. Internal inquiries and a criminal complaint can involve different powers, safeguards and objectives.

Identify the allegation, affected persons, notices and procedural stage, and preserve relevant evidence lawfully. Arrange advice on representation, responses and the applicable investigation or court process promptly. Keep factual findings distinct from allegations and assess civil or employment consequences separately. Internal inquiries and a criminal complaint can involve different powers, safeguards and objectives.

Preserve the summons and note the named person, issuing authority, reference number, receipt date and required attendance details. Arrange prompt advice from Iraqi counsel on the individual's position and the company's response. Keep relevant records intact and distinguish assistance with the company file from any separate representation the individual may need.

Document the alleged conduct, chronology, available evidence and issues that remain unverified. Counsel should assess the facts against the relevant legal framework rather than treating non-payment or poor performance alone as proof of an offence. The investigation record should distinguish witness accounts, documentary findings and assumptions, and preserve material that may contradict the initial allegation.

Verify the parties, recipient ownership, commercial reason and supporting contract or payment instruction. Assess the request under the business's applicable AML obligations and internal escalation procedures. Preserve the evidence and obtain advice before proceeding; a short email asking for a different account does not, by itself, explain the relationship or justify the payment route.