Compliance & Ethics

Enron maintained a formal compliance and ethics infrastructure that operated across multiple business units, managed by dedicated compliance officers within the Risk Assessment and Control (RAC) group. Donna Lowry served as Senior Director of RAC Compliance for Enron North America and affiliated entities, overseeing Restricted Lists for insider trading prevention, conflict of interest policies, ethical wall procedures, and anonymous reporting channels. The company published a 64-page Code of Ethics handbook – last edition July 2000, signed by Kenneth Lay – and in October 1999 established anonymous reporting facilities for employees to report policy violations and suspected criminal conduct.

The email corpus contains 8,177 compliance-related messages between 1998 and 2003, sent by 975 unique individuals across the organization. Monthly volume rose from roughly 20 emails in 1998-1999 to over 400 by late 2000, peaking at 767 in November 2000 before collapsing to 70 in December 2001 when the company filed for bankruptcy.

Despite this formal apparatus, the compliance function gained its most lasting notoriety for what it failed to catch. When Sherron Watkins used internal channels to raise concerns about accounting practices in August 2001, the response from senior executives exposed the gap between Enron’s stated ethical infrastructure and its actual willingness to investigate misconduct at the top.

Organizational Structure

RAC Compliance

The compliance function was embedded within the Risk Assessment and Control group rather than operating as an independent department or reporting through Legal. “RAC” stood for Risk Assessment and Control, as confirmed by multiple email references and Donna Lowry’s full title: “Sr. Director RAC Compliance.”

Richard Lauer, another compliance officer in the RAC group, described his work in a January 2001 email to Sally Beck:

Lowry’s name appears across 73 emails in the corpus under three name variations, with her role confirmed by both her signature block (“Sr. Director RAC Compliance”) and references from other employees. Sara Shackleton identified her in a January 2000 email as “a compliance officer for ENA and affiliates.”

Relationship with Legal

The compliance function worked in close coordination with the Legal Department. Restricted List announcements specified that trading in restricted securities required “the prior approval of the Compliance Department in consultation with the ECT Legal Department.” This dual-approval structure meant that both RAC Compliance and Legal had to sign off before any employee could trade in a restricted security.

The Legal Department also contributed to compliance policy development. Rob Walls and outside counsel at Vinson & Elkins developed the Foreign Corrupt Practices Act policy, and Richard Sanders worked on document retention policy – both areas that fell within the compliance function’s scope.

Coverage Across Business Units

The compliance function expanded its organizational reach over time. Early Restricted List announcements from 1999 covered ECT/ECM employees (Enron Capital and Trade / Enron Capital Management). By June 2001, the scope had widened to EWS/RAC/EGF employees – Enron Wholesale Services, Risk Assessment and Control, and Enron Global Finance – indicating that compliance oversight had been extended to match Enron’s organizational restructurings.

Key Compliance Programs

Restricted Lists and Insider Trading Controls

The most frequently documented compliance activity in the corpus was the management of Restricted Lists – rosters of securities that employees and their families were prohibited from trading without prior approval. Donna Lowry distributed updated lists regularly, with versions documented in June and August 1999. The standard language set a broad prohibition:

The Restricted List appeared 88 times across the corpus as a conversation topic, making it the most frequently referenced compliance mechanism after general policy announcements.

Anonymous Reporting Facilities

On October 22, 1999, the Office of the Chairman – Ken Lay, Jeff Skilling, and Joe Sutton – issued an all-employee announcement establishing anonymous reporting channels for policy violations and suspected criminal conduct:

The announcement offered three reporting channels: a confidential post office box addressed to the “Enron Compliance Officer,” an email address, and a voicemail system. It appeared in 110 mailboxes across the corpus, confirming broad distribution to the employee population.

No evidence in the corpus documents how many reports were filed through these channels, how they were investigated, or whether the system produced actionable findings. The absence of follow-up correspondence about specific anonymous reports – even in the archives of compliance personnel and senior executives – leaves an open question about whether the system functioned as a genuine investigative tool or primarily as a policy artifact.

Conflict of Interest Policies

In November 1999, Lay and Skilling sent a company-wide announcement that Enron was extending its conflict of interest policies to corporate vendors:

The vendor conflict of interest mailing appeared in 66 mailboxes. It covered vendors across four Enron entities – Corporate, ENA, EES Operations, and Portland General Electric – indicating the compliance function coordinated policy enforcement across both the Houston trading operations and the Portland utility subsidiary. The corpus contains 974 total emails mentioning conflict of interest topics.

Ethical Wall Procedures

When Enron employees had access to confidential information through legal proceedings or sensitive transactions, the compliance function implemented formal information barriers known as “Ethical Wall Procedures.” The most documented case involved the Pacific Gas and Electric bankruptcy in 2001.

In June 2001, Donna Lowry announced that Enron Corp. had joined the Official Unsecured Creditors’ Committee in the PG&E bankruptcy case, requiring information restrictions on specific employees:

The procedure required employees to sign certification forms acknowledging their obligations. Grace Rodriguez, forwarding Lowry’s announcement on June 8, 2001, instructed recipients to “print and sign the Employee Certification” and place it in a confidential envelope for return to Lowry.

Foreign Corrupt Practices Act Compliance

Enron’s international operations created exposure to the Foreign Corrupt Practices Act, and the Legal Department developed formal FCPA guidelines with support from outside counsel. A March 2000 email from Stephen Wallace to General Counsel James Derrick listed the “status of preparation of Enron Corp. legal dept. guidelines on FCPA” as an agenda item for a San Antonio legal department meeting.

The same month, Fiona Lavelle from the London legal office proposed a pointed question for the General Counsel offsite: “Are we facing an increased risk of investigation worldwide e.g. FCPA, other regulatory issues and are we doing enough to deal with these risks?”

The concern was not abstract. A January 1999 email from Scott Sefton described Helsinki oil trading operations involving purchases from Russian refineries and transport through Baltic ports, flagging “FCPA concerns” that needed to be addressed. The actual FCPA policy documents were distributed as attachments and are not preserved in the email corpus.

Code of Ethics Handbook

Enron published a 64-page Code of Ethics handbook, with the last known edition dated July 1, 2000, signed by Chairman and CEO Kenneth Lay. The foreword stated that Enron “enjoys a reputation for fairness and honesty… but no matter [what]… Enron’s reputation… depends on its people, on you and me.”

The handbook covered standards of business conduct, conflicts of interest, compliance with laws and regulations, and reporting obligations. It was intended as the definitive statement of the company’s ethical expectations for all employees.

After the bankruptcy, the FBI Houston Field Office preserved copies of the Code of Ethics as evidence. The document became one of the most widely cited artifacts of the Enron scandal – a tangible symbol of the distance between the company’s stated principles and the conduct of its senior executives. The CFA Institute later called it “a fascinating read” for the contrast between its high-minded language and the fraud it failed to prevent.

The email corpus does not contain the full handbook text (it was distributed as a physical document and likely as email attachments not preserved in PST format), but 780 emails reference “code of ethics” or “code of conduct,” primarily in the context of policy meetings and compliance reminders.

Compliance Activity Patterns

Email volume provides a rough proxy for the intensity of compliance-related activity across the organization:

The November 2000 peak largely reflects the distribution of policy announcements – Restricted Lists, vendor conflict of interest letters, and other compliance communications – to large employee populations. A single announcement could appear in dozens or hundreds of mailboxes, inflating the count. The sustained elevation through mid-2001 coincided with both legitimate compliance expansion (FERC filings, PG&E ethical walls, new business unit coverage) and the period when Enron was most actively engaged in the accounting practices that later proved fraudulent.

The sharp drop in December 2001 to just 70 compliance emails – down from 439 in October – marks the practical end of the compliance function as an operating concern.

The Sherron Watkins Case

The most consequential test of Enron’s compliance infrastructure came when Sherron Watkins sent a memo to Ken Lay in August 2001 warning that the company “might implode in a wave of accounting scandals.” Watkins, a Vice President in the finance group, raised specific concerns about the Raptor hedging vehicles and LJM partnerships structured by Andrew Fastow.

Watkins’ August memo does not appear in the email corpus (Lay’s PST was not included in the FERC release), but her continued use of internal channels is documented in a October 2001 email to Mark Koenig (VP Investor Relations) and Mark Palmer (Public Relations):

Watkins was raising a specific, actionable concern: the press was reporting that Enron had “dissolved the LJM partnerships” when in fact only the Raptor vehicles had been unwound. LJM itself still existed, its remaining transactions were still in place, and Michael Kopper – a former Fastow subordinate – now owned the partnerships. Watkins warned that this gap between press coverage and reality would create another credibility crisis once investors understood the full picture.

Mark Koenig’s response was to forward the email to General Counsel James Derrick and Steven Kean with the comment: “FYI. I am definitely not responding to this.”

The exchange captures the failure of Enron’s compliance and ethics infrastructure in miniature. The company had established anonymous reporting facilities, a confidential post office box, a Code of Ethics signed by the CEO, and formal policies requiring employees to report concerns. When an employee with specific knowledge used those internal channels to flag a material disclosure problem, the response from the head of investor relations was to refuse engagement and route the complaint to legal.

Only 106 emails in the corpus mention Watkins by name, and 151 reference “whistleblower” or “whistle blower,” most from the post-collapse period when her actions became public.

The Compliance Paradox

The email corpus documents a compliance function that was formally robust and operationally narrow. The Restricted Lists, ethical wall procedures, vendor conflict of interest policies, and FCPA guidelines all addressed real compliance needs for a company operating energy trading desks and international projects. These programs appear to have functioned as designed within their intended scope.

What the compliance function did not do – and may not have been structured to do – was detect or prevent the executive-level financial fraud that destroyed the company. Several factors contributed to this gap:

Organizational placement. Compliance sat within the Risk Assessment and Control group, which was itself part of the business management structure rather than an independent oversight function. Rick Buy, who headed RAC, reported to the CEO. This placement gave compliance authority over trading restrictions and operational policies but not over the structured finance transactions approved at the board level.

Scope of coverage. The documented compliance programs focused on insider trading, conflicts of interest, information barriers, and FCPA risk – areas relevant to traders and operational employees. The LJM partnerships, Raptor vehicles, and prepay transactions that constituted the core fraud were structured by senior executives with board approval and reviewed by outside counsel and auditors. These transactions fell outside the compliance function’s operational mandate.

Selective enforcement. The Restricted List prohibitions applied to “employees and family members.” The anonymous reporting facilities invited reports about “any officer, employee, or agent.” But the executive response to Watkins’ concerns – “I am definitely not responding to this” – suggests that when compliance mechanisms encountered executive misconduct, the enforcement apparatus seized up.

Reporting channel failure. The October 1999 anonymous reporting announcement promised that reports would be investigated. When the most consequential internal report in Enron’s history arrived through non-anonymous channels in August 2001, the company engaged Vinson & Elkins to conduct a review that the Powers Report later found inadequate.

Legacy

Enron’s compliance failure became a central case study in the distinction between compliance infrastructure and compliance culture. The company had the policies, the handbook, the reporting channels, and the dedicated personnel. What it lacked was the organizational independence and institutional authority to apply those mechanisms to the people who needed them most.

The Sarbanes-Oxley Act of 2002, passed in direct response to the Enron and WorldCom scandals, addressed several of these structural deficiencies. Section 301 required that audit committees – not management – oversee procedures for receiving and handling complaints about accounting and auditing matters. Section 806 created federal whistleblower protections for employees of publicly traded companies who reported fraud. Section 406 required companies to disclose whether they had adopted a code of ethics for senior financial officers and, if not, to explain why.

The 64-page Code of Ethics handbook, preserved by the FBI, remains in the Bureau’s artifact collection – an exhibit in the case for why formal compliance mechanisms, absent genuine institutional commitment, amount to what later observers termed “compliance theater.”

See Also

• Legal Department – Worked closely with compliance on policy enforcement and Restricted List approvals
• Sherron Watkins – Whistleblower whose August 2001 memo tested and exposed the limits of Enron’s ethics infrastructure
• Rick Buy – Chief Risk Officer who headed the RAC group containing the compliance function
• Sally Beck – VP of Energy Operations with extensive RAC engagement
• Sara Shackleton – Legal attorney who documented Donna Lowry’s compliance role
• Andrew Fastow – CFO whose LJM partnerships were the subject of Watkins’ complaints
• LJM Partnerships – The off-balance-sheet structures that compliance mechanisms failed to catch
• Sarbanes-Oxley Act – Legislation that restructured corporate compliance requirements in response to Enron
• Powers Report – Board investigation that assessed the adequacy of Enron’s internal controls
• Risk Management – The broader RAC function within which compliance operated

References

This article draws on 8,177 compliance-related emails in the Enron corpus spanning 1998-2003, sent by 975 unique individuals. Subsets include 780 emails mentioning “code of ethics” or “code of conduct,” 974 mentioning “conflict of interest,” 106 mentioning Sherron Watkins by name, and 151 referencing “whistleblower.” Key personnel documentation comes from 73 emails associated with Donna Lowry and correspondence in the archives of Sara Shackleton, Sally Beck, and James Derrick. Compliance topic frequency was analyzed using conversation topic metadata across the full corpus.

Secondary sources consulted include:

• FBI Artifact Collection: Enron Code of Ethics (July 2000 edition)
• CFA Institute blog: “The Enron Code of Ethics Handbook From July 2000 is a Fascinating Read” (October 14, 2013)
• Sarbanes-Oxley Act of 2002, Sections 301, 406, and 806