SOX_SECTION_802_001

rules/regulations/us/sox_section_802.yaml

Citation

18 U.S.C. §1519: Whoever knowingly alters, destroys, mutilates, conceals, covers up, falsifies, or makes a false entry in any record, document, or tangible object with the intent to impede, obstruct, or influence the investigation or proper administration of any matter within the jurisdiction of any department or agency of the United States or any case filed under title 11, or in relation to or contemplation of any such matter or case, shall be fined under this title, imprisoned not more than 20 years, or both. (Added Pub. L. 107-204, title VIII, §802(a), July 30, 2002, 116 Stat. 800.)

Condition

Prohibits knowingly altering, destroying, mutilating, concealing, covering up, falsifying, or making false entries in records or documents with intent to impede, obstruct, or influence a federal investigation or bankruptcy case. Sarbanes-Oxley Act Section 802, codified at 18 U.S.C. §1519.

Layer 1 detects

destroy, delete, shred, wipe, purge or erase (and words that begin with them), then document, record, email, file, evidence or data in the singular, then before, during, or to avoid, hide, prevent, impede or obstruct, then investigation, audit, subpoena, discovery or litigation; alter, modify, change or backdate, or a word beginning with falsif, then document, record, entry, log, ledger or book in the singular, then to hide, conceal, mislead, obstruct or impede, or after investigation, subpoena or inquiry; conceal, hide or cover up (and words that begin with them), then document, record, evidence or information, then from, then investigator, auditor, regulator, SEC, DOJ, FBI or federal agency (and words that begin with them); instruct, tell or order (and words that begin with them), then optionally to, then destroy, delete, shred, wipe or hide, then document, record, file, email or evidence (and words that begin with them); obstruct or obstruction, then optionally of, then justice, federal investigation or agency proceeding; document, record or email destruction, deletion or shredding in anticipation or contemplation of, or to obstruct, impede or avoid; and false entry or a word beginning with falsif, then in or to, then record, book, ledger or document, then to or in order to, then mislead, deceive or obstruct. The words follow each other with nothing in between. It matches wording, not meaning: it misses the practice told in other words ("Delete all emails about the Acme deal before the SEC subpoena arrives next week."), and it fires on text that only names the practice, such as training that calls obstruction of justice a crime. Whether a text does the practice is judged in Layer 2.

Condition type

regex; semantic condition in the file, not run by the engine

Status in the file

approved