Is the CEO always accountable for any crime and fraud committed within the company? If a CEO was largely or completely unaware of the situation within a firm and some financial crimes were committed, is the CEO held accountable, or does it have to be a major financial crime or several of them within the company? I am wondering if the CEO is always held accountable for the financial crimes committed within an organization if one he's largely or completely unaware of the crimes committed, or if the CEO is only held accountable in a Enron-type situation. What does the law say? And what is the name of the law that's relevant here? Assume it's in the United States.
No. There is no such thing as vicarious criminal liability. Anyone convicted of a crime needs to be personally involved and have knowledge of the relevant facts for co-conspirator or solicitation liability. There isn't really a single law that says it. It is rooted in the overall structure of the criminal codes at the state and the federal level, and in the elements of each of the possible crimes. Section 302 of the Sarbanes-Oxley Act of 2002 (15 U.S.C. 7241), requires a CEO to certify that its financial statements are materially correct to the best of the knowledge of the CEO, and also that certain internal controls are, or are not, in place, to the best of the knowledge of the CEO. Regulations address whom the CEO is entitled to rely upon in acquiring the knowledge that the CEO has when certifying the disclosures that are made under the Act. And, Sarbanes-Oxley imposes duties on lawyers and others to inform he CEO of irregularities. But the CEO is not subject to criminal or civil liability without having knowledge of errors or omissions in these statements that are contrary to the certification.
What do I do? Contact the police, and henceforth make sure that all your interactions with the business owner are in writing. That evidence will facilitate the police investigation in this fact-intensive matter. Can I actually be arrested? Yes, you are at risk of getting arrested regardless of whether you eventually prove the business owner is the one who broke the law. Hence the importance of contacting the police before it proceeds on the basis of his fraudulent accusations. The business owner has committed crimes including --but not limited to-- forgery, larceny, and attempted extortion (People v. Ramos, 34 Misc.3d 914, 920 (2012) and Matter of Spargo, 68 A.D.3d 1242 (2009) reflect that also the attempt of extortion leads to being charges and convicted, respectively). The timing of events could be indicative of the extent to which the business owner's criminal conduct was premeditated. For instance, it is unclear whose idea was keep the vehicle in his company's name notwithstanding that you had not acquired the company yet. If it was his idea, this will tend to weaken his denials of mens rea (given his subsequent course of action). Likewise, it is unclear what dissuaded you from purchasing the business. You need to assess whether he lured you in order to get your money for the car, and thereafter cause you to change your mind about the business.
They can't simply keep the money; that's against the law. But in a situation like this, it's easy to get lost in the bureaucracy. The company may be in violation of different laws, re: For Your Information | United States Department of Labor, so you can try pointing this out in another email or letter. The threat of the Feds or other enforcement agency looking into the matter may make something happen. Or, try this: find the CEO (or a similarly high-ranked executive) on LinkedIn; many have open messaging in interest of good PR. Message/email them and carefully (and nicely) explain the situation. (A CEO will likely have an assistant monitoring their LinkedIn account. But, there are many stories of Steve Jobs, Bill Gates and Jeff Bezos personally responding to emails.) Someone will make it happen and the employees who have not been helpful will be in hot water.
Not all illegal things are crimes. Lack of evidence. They are asked to testify, and they say "what I said in my book was a lie". There is no general law against lying, except when under oath. Statute of limitations. Saying "10 years ago I did smoke drugs" means that any offence is no longer prosecutable. Lack of details. Which jurisdiction were they in? When did they commit the act, how many acts? You cannot be arrested for being a "bank robber" or a "murderer". You are charged with "robbing Bank X on 123 Fake Street the Thursday 25 April 2018" or "murdering Jim Thio in January 2017". Otherwise the defendant would have a hard time defending himself (how to prove that you have not killed anyone at any time?) All of the above combined with prosecutorial discretion in the form that any possible prosecutor will most likely determine that bringing charges would be just a waste of time and resources. UPDATE February 2018: Just for the sake of completeness, a reference to the situation of Jacques Cassandri, who did boast about a serious crime(a robbery in a Societe Generale vault in 1976) in a book. Unfortunately for him, he made some kind of mistake/miscalculation and the crime had not yet expired, so he has become an example of someone being prosecuted by confessing a crime in a book.
As in most of the world, there is a BIG difference between a person running a business and a person owning a company which runs a business. In the first case, the person is liable for all the debts of the business, in the second case, providing they have fulfilled the legal duties as am owner/director (as applicable) they are not liable for the debts of the company. One of those legal duties is to stop racking up debts you can't pay. In either case, your friend needs professional advice (legal and/or accounting) NOW! A person who is insolvent (cannot pay their debts as and when they fall due) can seek protection from their creditors through bankruptcy. German bankruptcy law, by most standards, is brutal but not so brutal as to take away parenting rights or put the person in jail.
The CEO wants to "fool" users You are essentially admitting that the company you are working for is about to deceit its customers and asking whether that is legal. The relevant set of laws is rather sparse and does not give direct answers in regards to oAuth tokens or other details of that level (which is probably making your CEO think he can "handle" the arising questions). Probably the most relevant bit of legislation that applies here is The Federal Trade Commission Act (15 U.S.C. §§41-58) which prohibits unfair or deceptive practices and has been applied to online privacy and data security policies. I am pretty sure that, in practice, if the users take your company to court, it will be held liable because: users are allowing us to read their CRM data and once we get the data, the data become ours, and we can do whatever we want with it. Is this true? While the users are still allowing you to read their data it is completely up to the Terms/EULA what you can do with it. However, once you have made the users think that they have withdrawn your access (e.g. they "deleted" oAuth tokens), you are no longer authorized to read the current data (although the Terms may still allow you to use the old data you obtained when you had access). Silently continuing to access their data without their knowledge/approval is definitely a deceit. The CEO wants us to download all of their emails and store them in our database There would be nothing wrong with that if it was in the Terms. But if it is not, that would be a blatant (and easily punishable) breach of privacy. Note that you may also be held personally liable for this wrongdoing (if/when proved so). "Just doing your job" claim will not work.
@Rick aptly answers your first question (and I totally agree with his answer including his conclusion that the cited provisions apply to single member LLCs). So, I'll touch on issues associated with your second one. Would there be anything legally wrong with my intentionally wasting the company's money or doing something similarly pointless and harmful to the business, considering I'm the only actual person (as in human, not legal person) who is harmed in any way? If the way you use the money wastefully is considered by a court to be a de facto distribution by the LLC to you, its sole member, and this renders it insolvent (as defined in ORS 63.229 (Limitations on distributions), you could have personal liability for the distribution to the company. See ORS 53.235. Creditors of the company could then garnish that obligation to collect their debts owed to the company from you (a garnishment is technically a right to obtain money or property from someone who owes a debt to a judgment debtor, usually a bank or employer, but not always as in this case). Intentionally wasting the company's money would probably constitute a &quot;fraudulent transfer&quot; on the part of the LLC which could expose you to liability to third-party creditors if those actions left the company unable to pay its debts as they came due, or with assets with a fair market value that was lower than the fair market value of its current and currently anticipated liabilities. This parallel liability would arise under the Oregon Fraudulent Transfers Act and related provisions of Oregon law found at ORS 95.200 to 95.310. If you were anticipating or in the process of divorcing, it could constitute economic waste that could be held against you (treating the wasted assets as if they still existed and were allocated to your in a property division). Likewise, if the waste reduced your income for child support purposes, a court would seriously consider imputing the income you could have had if you had not acting in that matter to the income you actually had, in order to calculate your child support obligation. And, you might be disallowed a deduction for the waste of the company's money, rather than having it treated as an expense, which could increase your income tax and self-employment tax liability. But, to the extent that you are the sole owner of the company, no creditor, spouse or child has rights impaired by your actions, and you don't claim the wasted assets as income tax deductions, there would be no one with standing to complain about your conduct in court.
I am not a lawyer either, though I have been through Pennsylvania a few times. The relevant law is 18 Pa.C.S. 5703, which prohibits recording without consent of all parties (Penna is a "two-party consent" state, like Florida and Washington). Unfortunately, violation of that law is a third degree felony, which has a maximum of 7 year prison. A specific instance of someone getting in trouble for recording their boss is Commonwealth v. Smith (Smith used a cell phone to record his boss, then argued that a cell phone isn't a "device"; the court determined that it is, and that was Feb 16 2016 so who knows the final outcome). An attorney in Pennsylvania might be able to tell you how often people actually serve time for violating the law. You should call one.