On 24 April 2025, the revised version of UNE 19601 Standard on Management System for Criminal Compliance was published, replacing the previous version from 2017. UNE 19601 is the reference standard in Spain for implementing a criminal compliance management system and it covers the requirements of the Spanish Penal Code as well as international standards in the field.
The general approach of the initial version is maintained, although modifications have been introduced to adapt it to regulatory changes (primarily, those in the Spanish Penal Code and whistleblowing management standards) and international standards of recent years (such as ISO 37301:2021 or ISO 37002:2021).
On 12 November 2024, the US Department of Justice Antitrust Division updated its Evaluation of Corporate Compliance Programs in Criminal Antitrust Investigations (ECCP). The additions include guidance such as using “managers at all levels” to “set the tone from the middle” by “demonstrating to employees the importance of compliance,” establishing policies that account for the use of “ephemeral messaging or non-company methods of communication,” applying “data analytics tools in . . . compliance and monitoring,” and involving compliance personnel in “the deployment of AI and other technologies to assess the risks they may pose.” Additionally, the ECCP now addresses its application to civil investigations.