The Bottom Line
The Department of Justice’s new National Fraud Enforcement Division (“NFED”) has told the market exactly where it intends to focus: (1) public trust and financial integrity, (2) health care, (3) internal revenue, (4) global trade and commerce, and (5) corporate misconduct. NFED plans to target these five priorities in parallel under one roof with a shared data infrastructure, compounding the risk to companies that operate at the intersection of multiple priorities and raising the stakes for any company considering a voluntary self-disclosure of potential misconduct. This article offers a practical framework for auditing compliance programs and making self-disclosure decisions under the NFED’s new, more centralized enforcement architecture.
A Quick Recap
On August 13, 2026, Assistant Attorney General Colin M. McDonald issued a memorandum to NFED personnel confirming the division’s five enforcement priorities and its rapid build-out toward roughly 500 attorneys and staff by August 24, 2026, with continued growth planned over the next two years. The NFED consolidates what used to be separate pieces of the Criminal Division, including the former Fraud Section, the Tax Section, and the Health Care Fraud Unit, into a single component with shared data analytics, forensic, and asset recovery resources. The substantive priorities are not radically new. What is new is that one division, backed by one data infrastructure, now has visibility across all of them simultaneously.
Where the Real Exposure Lives: Overlapping Priorities
Treating the five priorities as five separate compliance checklists misses the point. Many companies operate at the intersection of two or more, and that intersection is where a single set of facts can generate exposure on multiple fronts at once.
Consider a company that is both a government contractor and a health care provider—a common profile in defense health services, federally funded hospital systems, and VA-adjacent providers. A single billing irregularity in that business can implicate procurement fraud theories under the Public Trust and Financial Integrity priority, Medicare or Medicaid fraud theories under the Health Care priority, potential tax exposure if revenue was misreported, and a parallel civil track through the DOJ-HHS False Claims Act Working Group, which coordinates with DOJ’s criminal health care enforcement. One anomaly, four institutional review paths.
The same dynamic plays out for importers with government contracts (trade and procurement exposure converging), multinationals with federally funded research or grant programs (trade, public trust, and tax exposure converging), and any company already under scrutiny in one priority area, since the NFED’s shared data and forensic resources make it more likely that facts surfaced in one lane will be visible to prosecutors working another. Compliance officers at multi-sector companies should map their own overlap points now, rather than waiting for an investigation to reveal them.
Rethinking the Compliance Audit
Generic compliance reviews are no longer enough. The NFED memo names specific fraud typologies within each priority, and compliance programs should be tested against those typologies directly, not against abstract risk categories. A practical audit should be able to answer, with confidence, questions like these:
Public Trust and Financial Integrity: Can the company substantiate its pricing certifications and subcontracting disclosures on short notice? Are conflict-of-interest and self-dealing controls tested against actual transaction data, not just policy language?
Health Care: Do telemedicine and referral arrangements have current, defensible fair market value documentation? Is billing data reviewed for the same anomaly patterns the government’s own analytics are likely to flag?
Internal Revenue: Does the company have a clear audit trail connecting reported revenue to underlying transactions in priority-adjacent business lines, so a procurement or health care inquiry does not surface an unrelated tax problem?
Global Trade and Commerce: Can the company reconstruct country-of-origin support and customs valuation methodology for its highest-volume imports quickly, and has its supply chain been screened for forced labor risk?
Corporate Misconduct: Does the company have a defined, tested process for escalating a potential violation internally fast enough to preserve the self-disclosure window discussed below?
Running this kind of typology-specific audit, rather than a generic compliance refresh, is what turns the NFED memo from a news item into an actual risk management tool.
The Self-Disclosure Calculus Has Changed
The consolidation of enforcement authority also changes how companies should think about voluntary self-disclosure. Corporate misconduct matters are now handled by a single Corporate Enforcement Section applying the Department-wide Corporate Enforcement and Voluntary Self-Disclosure Policy across every priority area, which brings welcome predictability but also raises the stakes of the initial decision, since a disclosure touching one priority area may surface facts relevant to others through the same shared data infrastructure.
Before disclosing, or deciding not to, companies should work through a short set of threshold questions. Is the conduct plausibly cross-cutting, such as a billing issue with embedded tax exposure? If so, disclosure strategy should account for all of the affected areas from the outset, not just the one initially discovered. Has the anomaly likely already been flagged by the NFED’s data analytics or the National Fraud Detection Center? If detection may have outpaced the company’s own discovery, the window to make a truly voluntary disclosure, a prerequisite for the policy’s strongest benefits, may be closing faster than it once did. Should the disclosure be coordinated through the Corporate Enforcement Section given its cross-priority visibility, rather than treated as a matter for a single line component? And does the company’s internal investigation have enough runway to disclose promptly, fully, and accurately, since the policy rewards early and complete cooperation and penalizes delay.
None of this changes the core incentive structure: self-disclosure, full cooperation, and timely remediation remain the surest path to a declination or favorable resolution. What has changed is the speed and coordination with which a delayed or incomplete disclosure can be overtaken by the government’s own investigative reach.
Looking Ahead
The NFED is still building out its full capacity, and its priorities will keep sharpening as it approaches and exceeds 500 attorneys over the next two years. Companies that wait for the next memorandum before acting will be reacting to a moving target. Those that map their own overlap risk, audit against the specific typologies the NFED has named, and rebuild their self-disclosure playbook around a consolidated enforcement architecture will be in a far stronger position when the NFED’s attention turns their way.
Members of Sheppard’s White Collar Defense practice are closely monitoring the NFED’s development and are available to help clients assess their risk, stress-test compliance programs, and evaluate self-disclosure strategy under the Department’s evolving enforcement architecture.