How to Respond to a Corporate Criminal Investigation in France, Step‑by‑step (2026)

Understanding how to respond to a corporate criminal investigation in France is now a frontline priority for every company with operations, subsidiaries, or financial exposure in the country. Intensified enforcement activity by the Parquet National Financier (PNF) and the Autorité des marchés financiers (AMF) under France’s 2025–2029 National Multi‑Year Anti‑Corruption Plan means that more companies, and more senior executives, face the prospect of a dawn raid, summons, or formal judicial probe than at any point in the past decade. This guide sets out the complete procedural sequence from the moment a company first learns it may be under investigation through to resolution, whether by negotiated Convention Judiciaire d’Intérêt Public (CJIP), dismissal, or trial.

It includes the documents you must preserve, the timeline you should plan against, the costs you should budget for, and the pitfalls that derail even well‑resourced companies.

Overview of the Corporate Criminal Investigation Process in France

A corporate criminal investigation in France typically targets offences such as bribery of domestic and foreign public officials, money laundering, accounting fraud, tax fraud, insider trading, and sanctions breaches. Under French law, a legal entity can bear criminal liability in its own right, distinct from the individuals who acted on its behalf, which means the company itself may be investigated, charged, and sanctioned.

Investigations proceed through two broad phases. The first is the preliminary police inquiry (enquête préliminaire), directed by a prosecutor (either a local procureur de la République or the PNF for complex financial and corruption cases). During this phase, police and gendarmerie officers gather evidence, conduct searches, and interview witnesses under prosecutorial supervision. The second phase, which applies in the most complex cases, is the judicial inquiry (information judiciaire), led by an independent investigating judge known as a juge d’instruction. This judge has sweeping powers to order searches, seize assets, place individuals under formal investigation (mise en examen), and compel testimony.

Cases may conclude through several routes: a negotiated settlement via the CJIP mechanism (a deferred‑prosecution‑style agreement available for certain economic offences); a decision not to prosecute (classement sans suite); or a full trial before the tribunal correctionnel. In 2026, industry observers expect negotiated outcomes to continue to gain prominence as both the PNF and the Agence Française Anticorruption (AFA) actively encourage companies to self‑report and cooperate.

Who Is Typically Targeted and When to Treat an Incident as Criminal

The companies most commonly drawn into a corporate criminal investigation in France include large corporates subject to the anti‑corruption compliance obligations of Loi Sapin II, financial institutions supervised by the AMF, and entities caught in cross‑border mutual legal assistance (MLA) requests from foreign prosecutors. Common triggers include whistleblower reports filed under France’s whistleblower protection framework, regulatory referrals from the AFA or AMF, media exposés, and information shared through international cooperation channels.

When to treat an incident as a criminal matter

Not every internal compliance finding warrants a criminal‑defence posture, but the threshold for escalation is lower than many companies assume. An incident should be treated as a potential criminal matter whenever it involves deliberate misconduct (rather than a process failure), significant financial harm to third parties or the state, conduct that could attract imprisonment for individuals, or any contact, however informal, from the PNF, police, or a juge d’instruction. Early classification determines how privilege, document preservation, and communications are managed from the outset.

How to Respond to a Corporate Criminal Investigation in France, Step‑by‑Step Procedure

The following numbered steps trace the process from the first moment a company learns of an investigation through to judicial resolution. Each step identifies the responsible actors, the immediate timeframe, and the tactical decisions involved.

Step 1, Take immediate action on notification or dawn raid

When investigators arrive, or when the company first receives notice that it is under investigation, every hour counts. The actions taken in the first 24 hours set the tone for the entire proceeding.

• Verify credentials. Request identification from all attending officers and a copy of the search warrant or authorisation (commission rogatoire if issued by a juge d’instruction). Record names, badge numbers, and the scope of the authorised search.
• Notify in‑house counsel immediately. The general counsel or legal director should be the first internal contact. They should in turn instruct external criminal‑defence counsel without delay.
• Do not obstruct, but do not volunteer. Staff should cooperate politely with investigators but should not volunteer documents or commentary beyond what is legally required. Obstruction of a search is a criminal offence; voluntary disclosure without legal advice can be equally damaging.
• Instruct all personnel to stop deleting, moving, or altering any data. Issue an oral instruction immediately, followed by a written legal‑hold notice within hours.
• Assign a shadow team. Designate one or two employees to accompany investigators at all times, recording which rooms are entered, which documents and devices are copied or seized, and any statements made.
• Obtain the procès‑verbal de saisie. At the end of any search or seizure, request a copy of the official inventory of seized items.

Dawn raid checklist (printable):

• Request and photocopy officer credentials and warrant
• Call external criminal‑defence counsel
• Issue oral preservation instruction to all staff on site
• Assign shadow team to accompany officers
• Log all rooms entered, devices inspected, and documents copied
• Do not permit interviews of employees without counsel present
• Obtain copy of procès‑verbal de saisie before officers depart
• Secure a contemporaneous written record of events (timestamped)

Step 2, Institute a legal hold and preserve all relevant documents

Within hours of notification, the company must issue a formal legal‑hold notice to every custodian who may possess relevant data. This notice, typically prepared by external counsel to maximise the prospect of privilege, should instruct recipients to preserve all emails, instant messages (including WhatsApp, Signal, Slack, and Teams), calendar entries, electronic files, paper documents, and voicemails. IT must immediately suspend any auto‑deletion policies, backup rotation schedules, and data‑retention purges that could destroy relevant material.

Forensic imaging of key servers, laptops, and mobile devices should begin within 24–72 hours, conducted by a specialist vendor who can produce hash‑verified images and maintain a documented chain of custody. Cloud‑hosted data (SaaS platforms, shared drives, collaboration tools) should be snapshotted and export‑locked. The full scope of documents to preserve is set out in the required documents table below.

Step 3, Assemble an internal response team and set a communications plan

The company should constitute a small, senior response team with clear roles: the CEO or a delegated board member for strategic decisions; the general counsel for legal coordination; the compliance officer for internal‑control review; the CFO for financial‑records access; the IT director for forensic preservation; HR for employee‑interview logistics; and the communications or PR lead for external messaging. External criminal‑defence counsel should sit at the centre of this team.

Confidentiality is critical. Communications within the response team should be channelled through counsel to preserve legal professional privilege where possible. Information about the investigation should be shared internally only on a strict need‑to‑know basis, and public statements should be cleared by counsel before release.

Step 4, Decide whether to self‑report or cooperate proactively

One of the most consequential decisions a company faces is whether to make a voluntary disclosure to prosecutors or the AFA. Self‑reporting can unlock access to a CJIP, the French equivalent of a deferred prosecution agreement, and may result in a significantly lower financial penalty and reduced reputational damage. However, self‑reporting also accelerates the investigation timeline and requires the company to present a credible, well‑documented internal investigation.

Key factors in this decision include the strength and breadth of the evidence already in the company’s possession, the likelihood that investigators will discover the conduct independently, any cross‑border exposure (where parallel investigations in another jurisdiction favour cooperation), and the company’s appetite for a negotiated resolution versus the risk of a contested trial. This decision should never be taken without specialist counsel.

Step 5, Conduct a controlled internal investigation

If the company decides to cooperate, or if it needs to understand its own exposure before engaging with prosecutors, a structured internal investigation is essential. The AFA’s published internal investigation guide sets out recommended best practices: appoint external counsel to lead the investigation; use forensic specialists to collect and review data; conduct witness interviews under protocols that protect both the company’s interests and employees’ rights; and document every step.

Privilege considerations are paramount. In France, legal professional privilege (secret professionnel de l’avocat) protects communications between a lawyer and their client where the lawyer is acting in a legal advisory capacity. However, internal investigation materials prepared primarily for business or administrative purposes, rather than in contemplation of litigation or for legal advice, may not benefit from privilege protection. Using external counsel to direct the investigation and hold the work product is the most reliable way to protect privilege.

Where conflicts of interest exist between the company and individual executives or employees, separate counsel should be appointed for each party.

Step 6, Manage interactions with investigators

Throughout the preliminary and judicial inquiry phases, the company and its personnel will interact with police, the prosecutor’s office, or the juge d’instruction. All substantive communications, responses to subpoenas, interview attendance, production of documents, should be coordinated through external counsel. Executives and employees should not attend investigative interviews (auditions) without their own lawyer present. Witness statements should be prepared and reviewed by counsel in advance, and employees should be reminded of their right not to self‑incriminate.

If the investigation reaches the judicial inquiry stage, the juge d’instruction may issue a commission rogatoire to police, request additional searches, or summon individuals for questioning. The company’s legal team must track each procedural step, respond within any deadlines set by the judge, and preserve a complete record of all interactions.

Step 7, Navigate the judicial stages: mise en examen, CJIP, or trial

The mise en examen is a formal step in the judicial inquiry in which the juge d’instruction places a person (or a legal entity) under formal investigation. It is not a conviction, it signifies that there are serious or corroborating indications (indices graves ou concordants) that the person may have participated in the offence. A company placed under mise en examen gains full access to the case file and the right to make submissions, but also faces restrictions and heightened reputational scrutiny.

At any stage before trial, the prosecutor may propose a CJIP, a negotiated agreement under which the company accepts a financial penalty and typically commits to a compliance remediation programme monitored by the AFA, without entering a guilty plea. The CJIP must be validated by a judge in a public hearing. If no CJIP is reached, the case proceeds to trial before the tribunal correctionnel, which can impose fines, order disgorgement, and ban the company from public procurement.

Investigation timeline, France

Required Documents and Information to Preserve for a Criminal Probe in France

Preserving the right documents, in the right format and with a documented chain of custody, is one of the most important steps to take during a corporate criminal investigation. Failure to preserve evidence can constitute the separate offence of obstruction of justice and may fatally undermine any defence or mitigation strategy. The table below lists the documents to preserve for a criminal probe in France and includes practical notes on format, source, and retention.

Privilege and data protection considerations

Legal professional privilege in France (secret professionnel de l’avocat) protects confidential communications between a lawyer and their client where the lawyer is acting in a legal advisory or defence capacity. However, this privilege is narrower than in some common‑law jurisdictions: documents prepared for primarily commercial or administrative purposes, even if a lawyer was involved, may not be protected. Companies should ensure that internal investigation reports and interview memoranda are produced under the direction of external counsel and clearly marked as privileged.

Cross‑border data transfers during an investigation must comply with the GDPR. Where personal data needs to be shared with counsel, forensic vendors, or regulators in other jurisdictions, the company should document the legal basis for the transfer and, where necessary, conduct a data‑protection impact assessment (DPIA). Coordination with the company’s data‑protection officer is essential.

Timeline and Key Deadlines for a Corporate Criminal Investigation in France

The investigation timeline in France is unpredictable, complex cases involving multiple suspects and cross‑border elements can run for years, but the critical early windows are fixed. The table below sets out the priority actions companies should complete within 24 hours, 72 hours, and 7 days of learning they are under investigation.

Beyond the first week, the pace of the investigation depends on the prosecuting authority and the complexity of the case. Preliminary police inquiries (enquêtes préliminaires) typically last between two and six months but can extend significantly. If a juge d’instruction opens a judicial inquiry, the investigation may continue for one to several years. Companies should preserve all relevant documents for at least the duration of the applicable statute of limitations, which varies by offence, a point that should be confirmed with counsel at the outset.

For companies considering self‑reporting or seeking a CJIP, early voluntary disclosure, ideally within the first weeks of learning of the conduct, is widely considered to produce the most favourable outcomes. Delayed cooperation diminishes the credit available.

Costs of a Criminal Investigation in France, Fees and Tax Considerations

The costs of a corporate criminal investigation in France vary enormously depending on the scale of the probe, the volume of data, the number of jurisdictions involved, and whether the case resolves through a CJIP or proceeds to trial. The following table provides indicative cost ranges. All figures are estimates and should be discussed with counsel in the context of the specific case.

Companies should budget for investigation costs as a separate line item and revisit the budget as the scope of the probe becomes clearer. Where a CJIP is under negotiation, the AFA may also require the company to fund an independent compliance monitor, an additional cost that can run to hundreds of thousands of euros over a multi‑year monitoring period.

What Changes in 2026, Enforcement Trends Affecting the Investigation Process

France’s 2025–2029 National Multi‑Year Anti‑Corruption Plan has placed additional enforcement resources at the disposal of the PNF and the AFA, with a stated priority on detecting and prosecuting complex economic offences more rapidly. The practical effect for companies responding to a corporate criminal investigation in France in 2026 is threefold.

First, the PNF is conducting more proactive investigations, initiating inquiries based on open‑source intelligence, whistleblower reports, and inter‑agency referrals, rather than waiting for complaints. Second, the AMF has sharpened its focus on market‑conduct failures and financial‑reporting irregularities, increasing the likelihood that regulatory and criminal proceedings will run in parallel. Third, the AFA’s updated guidance on internal investigations places stronger emphasis on the quality and independence of the internal probe: companies that present a credible, AFA‑aligned internal investigation when self‑reporting are expected to receive greater credit in CJIP negotiations.

The tactical implication is clear: companies must preserve evidence faster, initiate internal investigations earlier, and be prepared to engage with prosecutors on cooperation terms sooner than in previous years.

Common Pitfalls and How to Avoid Them

• Spoliation or failure to preserve evidence. Deleting messages, shredding documents, or allowing auto‑deletion policies to run after notification is the single most damaging error. It can constitute a separate criminal offence and destroys any credibility with prosecutors. Mitigation: issue a legal hold within hours and confirm compliance in writing.
• Uncoordinated executive interviews. Allowing employees or executives to speak with investigators without counsel present produces inconsistent statements that can be used against the company. Mitigation: establish a clear protocol that no substantive interviews take place without a lawyer.
• Premature public disclosure. Issuing press statements or regulatory filings that characterise the investigation before the facts are understood can create binding admissions. Mitigation: clear all external communications through criminal‑defence counsel.
• Mishandling privilege. Sharing privileged materials with non‑lawyers, producing investigation reports in the company’s name rather than counsel’s, or failing to mark documents as privileged can waive protection. Mitigation: route all investigation work product through external counsel.
• Inconsistent internal narratives. Different departments providing conflicting accounts to investigators or regulators undermines the company’s position. Mitigation: centralise all information flow through the response team and external counsel.
• Delayed retention of specialist counsel. Using general commercial lawyers, or delaying the appointment of criminal‑defence specialists, costs critical time and strategic advantage. Mitigation: engage experienced white‑collar crime counsel at the earliest sign of a criminal probe.

Sources

1. Agence française anticorruption (AFA), Internal Investigation Guide
2. Global Investigations Review, France 2026 Overview
3. Cleary Gottlieb, France Revises Internal Investigation and Corporate Enforcement Guidelines
4. Linklaters, Corporate Criminal Liability: France
5. Skadden, France Further Aligns Corporate Crime Guidance
6. French Code of Criminal Procedure (Code de procédure pénale), Legifrance
7. Parquet National Financier (PNF), Official Site
8. Autorité des marchés financiers (AMF), Enforcement Pages
9. Clifford Chance, Internal Investigation Guide