The DOJ ECCP and your hotline: what 'effectiveness' really means in 2026
The Department of Justice's Evaluation of Corporate Compliance Programs (ECCP) is the lens prosecutors use to judge whether a compliance program is real or just on paper. Its recent updates make one thing clear: having a hotline is table stakes. Proving it works is the bar.
From existence to effectiveness
Examiners now ask whether employees actually know about the reporting channel, whether they trust it enough to use it, and whether reports lead somewhere: investigation, remediation, resolution. A channel that no one uses isn't a strength; it's a signal that something is wrong with the culture around it.
- Is there a confidential, anonymous mechanism, and if not, why?
- How is it publicized, and do employees know it exists?
- Has it actually been used? What's the volume and trend?
- Do reports lead to investigation, remediation, and resolution?
- Does the company measure whether people feel safe to speak up?
AI and emerging technology
Recent ECCP guidance also asks how companies manage the risks of new technology, including AI. Used well, AI strengthens a program: better intake, faster triage, consistent structuring. Used carelessly, it introduces risk. The standard is the same one good compliance teams already apply: know what the technology does, govern it, and keep a human accountable.
How to show effectiveness
Effectiveness is a story told with evidence: usage that reflects trust, a defensible audit trail, and a closed loop from report to resolution. The platform should make that story easy to tell: trends, time-to-resolution, and board-ready summaries that show the program working, not just collecting.
The modern question isn't 'do you have a hotline.' It's 'do your people trust it, and can you prove what happened after they used it.'
MyHotline is built around that closed loop: an AI intake that earns engagement, case management that drives every issue to resolution, and the records to show your work.