Conflicts of Interest: How to Manage Declarations and Prevent Risk
A conflict of interest arises when a person has a private interest that could improperly influence the exercise of their professional duties. In law, the obligation to declare and manage conflicts of interest appears in several distinct regimes: Article 17 of the French Sapin II law lists conflict-of-interest management as one of the eight mandatory measures of an anti-bribery programme; Article L. 225-40-1 of the French Commercial Code imposes specific obligations on directors; Directive 2013/36/EU (CRD IV) imposes conflicts-of-interest management obligations on credit institutions; and ISO 37001 on anti-bribery management systems requires a policy covering conflicts of interest that extends to third parties. An undeclared conflict of interest that subsequently becomes known to a regulator, an auditor, or the public creates both legal exposure and reputational damage that is difficult to contain. Optivalue.ai provides the structured process for collecting declarations, assigning reviewers, and archiving the evidence chain that regulators and auditors require.
Who Must Declare and on What: Executives, Elected Officials, Buyers, Consultants
The population required to declare conflicts of interest depends on the regulatory framework and the organisation's own policy, but typically includes: executive directors and supervisory board members, who are covered by company law obligations in most jurisdictions; purchasing and procurement staff, who interact regularly with suppliers and may have financial interests in those suppliers; compliance and internal audit staff, who must be independent of the functions they oversee; external consultants and advisers, who may serve clients with competing interests; and, in public-sector contexts, elected officials and civil servants who are subject to specific ethics legislation. The declaration form must capture, at minimum: the declarant's identity and function, the nature of the interest declared (financial, personal, professional), the counterparty or subject matter involved, and the date of declaration. An anti-bribery programme that requires conflict-of-interest management extends this obligation to third parties in the supply chain.
Declaration Register: Retention, Access, Confidentiality
The declaration register is the central document of the conflict-of-interest management process. It must record every declaration received, the review outcome (acknowledged, managed, referred for decision), the identity of the reviewer, and the date of each action. Access to the register must be restricted: declarations contain personal data and information about private interests that must not circulate beyond the authorised reviewers. Retention must comply with applicable law; in most EU jurisdictions, company law and anti-bribery legislation require retention for the duration of the relationship and a defined period thereafter. The register must be version-controlled so that the history of each declaration and its management can be reconstructed for an audit. Interest declarations containing personal data governed by GDPR must also be covered by the organisation's record of processing activities under Article 30 of Regulation (EU) 2016/679.
Gifts and Hospitality: Thresholds, Approval, Audit Trail
Gifts and hospitality management is a specific sub-process within the conflicts-of-interest programme. It covers gifts received from or offered to third parties, invitations to events, sponsored travel, and any other benefit that could create an appearance of obligation. The policy must define: the threshold above which a gift must be declared (and above which prior approval is required), the treatment of gifts from or to public officials (typically prohibited or subject to a lower threshold), and the approval workflow. Every declaration above the threshold must be logged with the value of the gift, the counterparty, the business justification, the decision, and the name of the approver. The gifts register provides evidence that the control is operational; a policy without a register is not verifiable.
How Software Structures Collection, Validation and Archiving of Declarations
Conflict-of-interest management software addresses three structural problems that a manual process cannot reliably solve: completeness (ensuring that every person in scope submits a declaration on the required cycle), qualification (routing each declaration to the correct reviewer based on the nature of the interest declared), and archiving (retaining a version-controlled record of every declaration and its outcome). The software must support both annual campaigns, where the full in-scope population is asked to declare simultaneously, and event-triggered declarations, where an individual declares when a new interest arises. Optivalue.ai provides a structured disclosure campaign workflow, assigns each declaration to a named reviewer, tracks the review deadline, and archives the complete history of each declaration with its audit trail. For organisations that must demonstrate compliance with an anti-bribery programme, the gifts register and the conflicts-of-interest register are part of the same evidence package.
Book a demonstration with Optivalue.ai
FAQ
What is the legal definition of a conflict of interest?
There is no single universal legal definition of a conflict of interest; the concept is defined differently in each applicable legal regime. In the context of company law, it typically covers situations where a director or officer has a personal interest, direct or indirect, in a transaction or decision to be made by the company. In the context of anti-bribery law, it covers situations where a private interest could influence a professional decision in a way that benefits the decision-maker at the expense of the organisation or a third party. ISO 37001 defines it as a situation where personal interests conflict with the interests of the organisation. The common element is the potential for private interest to distort professional judgement.
Is there a legal obligation to collect conflict-of-interest declarations in France?
Yes, in several overlapping regimes. Article 17 of the Sapin II law requires companies above the threshold to include conflict-of-interest management in their anti-bribery programme. Article L. 225-40-1 of the French Commercial Code requires directors to disclose interests in transactions submitted to the board. Specific obligations also apply in the financial sector under the Monetary and Financial Code, in the public sector under Law 2013-907 on transparency in public life, and in the health sector under the Sunshine Act (Article L. 1453-1 of the Public Health Code). Each regime defines the scope, the form, and the retention obligations independently.
How should a reviewer handle a declared conflict of interest?
When a declaration is received, the reviewer must assess whether the declared interest creates an actual conflict, a potential conflict, or no conflict with the declarant's professional duties. For an actual or potential conflict, the reviewer must decide on a management measure: recusal from the specific decision, transfer of responsibility, abstention from a vote, supervision by a third party, or, in serious cases, termination of the relationship. The decision and its rationale must be documented in the register. The declarant must be informed of the decision. If the reviewer is themselves subject to a potential conflict with respect to the declaration, the review must be escalated to an independent party.
What is the difference between an annual declaration and an event-driven declaration?
An annual declaration campaign asks all persons in scope to confirm or update their interest declarations at a fixed point in the year. An event-driven declaration is triggered when a relevant change occurs: a new financial interest, a new personal relationship, a new board mandate, or any other change that could create a conflict. Both types are necessary: the annual campaign provides a baseline and captures interests that arose during the year without triggering an event-driven declaration; the event-driven process ensures that new conflicts are disclosed promptly. A programme that relies solely on annual declarations creates a gap between the emergence of a conflict and its disclosure.
How long must conflict-of-interest declarations be retained?
Retention periods depend on the applicable legal regime and the purpose of the declaration. Under French company law, board meeting minutes and related disclosures must be retained for five years after dissolution. Under anti-bribery law, the AFA guidelines recommend retaining evidence of the anti-bribery programme measures for the duration of the programme plus a period sufficient to respond to an inspection. Under GDPR, the data minimisation principle requires that personal data in declarations not be retained longer than necessary for the purpose for which it was collected. The retention period must be documented in the organisation's record of processing activities.
Back to top
On the same topic