Introduced in 2010, the Integrity Compliance Guidelines of the World Bank Group (“WBG”), have long served as the foundation of the bank’s approach to compliance.[1] The guidelines set out the core elements of an effective integrity compliance program and provide practical guidance on how organizations should prevent, detect, investigate, and remediate behavior in projects financed by its funds that facilitates any of the WBG’s five sanctionable practices; conduct that is: fraudulent; corrupt; collusive; coercive; or obstructive.
The guidelines are significant within the WBG sanctions framework as sanctioned or debarred entities are commonly required to implement an effective compliance program as a condition of release from sanctions and for the restoration of eligibility to participate in WBG-financed projects.
In November 2025, the WBG issued the first major revision. This coincided with a slight uptick in enforcement activity, with some 16% more cases opened in 2025 than the previous year: 65 vs. 56.[2] The updated framework reflects significant shifts in global compliance expectations and modernizes the institution’s approach to governance.[3]
Changes in the 2025 Guidelines
While the original guidelines operated as a roadmap for sanctioned or debarred entities seeking reinstatement, the revision positions them as a broader compliance benchmark for healthy organizations seeking to strengthen risk management controls.
The revisions move beyond traditional anti-bribery and corruption controls, introducing a comprehensive framework of 28 standards, comprising 13 core principles and 15 internal controls. These place greater emphasis on enterprise-wide integrity governance, dynamic risk assessment, third-party and supply chain oversight, organizational culture, technology-enabled compliance systems, and the need for demonstrable effectiveness.
Themes in the Revised Framework
Notable themes emerging from the revised guidelines include:
- Risk Assessment: Risk assessment has been elevated to a central organizing principle. Organizations must now commission recurring and comprehensive integrity risk assessments covering controlled affiliates, transactions, partnerships, and technologies used in business operations. This reflects the expectation that compliance programs must be dynamic, continuously updated, and responsive to evolving risks.
- Governance and Accountability: Adding to senior management commitment, board oversight, and the independence of compliance functions, the revised guidelines require detailed documentation of middle management responsibilities, reporting structures, conflicts of interest management, and the autonomy of the compliance function.
- Third-party and Supply Chain Risk: Third-party risk management is one of the most substantially developed areas. The revised guidelines adopt a lifecycle-based approach requiring risk-based due diligence, periodic reassessment, conflicts of interest management, audit rights, and enhanced oversight of supply chains, as well as the introduction of new risk areas, including politically exposed persons, merger and acquisition integration risks, and business development and bidding activities. This reflects the growing recognition that integrity risks often arise outside the organization.
- Whistleblowing and Reporting: In recognizing ‘speak-up culture,’ the update distinguishes between (i) an employee’s duty to report misconduct and (ii) whistleblowing, while extending whistle-blower protection to external parties. It encourages organizations to periodically test employee awareness, accessibility, and trust in reporting channels.
- Technology: Recognizing the growing use of automated compliance tools and AI-enabled interfaces such as chatbots, the guidelines introduce expectations for the governance of such tools, expecting confidentiality, accuracy, and oversight in the technology-assisted compliance processes.
- Investigations and Remediation: Employing an approach that is more operationally detailed and reflects increasing expectations that organizations demonstrate the effectiveness of their investigative action, greater emphasis has been placed on formalized investigative procedures, documentation standards, accountability structures, and anti-retaliation safeguards.
Implications for Global Transactions and Compliance
The 2025 revision of the WBG’s Integrity Compliance Guidelines marks a shift from a sanctions-focused reinstatement framework to a benchmark for integrity governance and enterprise risk management. Although developed for debarred and sanctioned entities, the guidelines now serve as an increasingly influential reference point for corporate compliance programs.
For companies participating in WBG-financed projects, the bar for eligibility and credibility has been raised with immediate effect: increased expectations for due diligence, third-party oversight, governance documentation, and demonstrable compliance effectiveness. Compliance is viewed as a continuously operating system capable of demonstrating real-world effectiveness, particularly in relation to intermediaries, supply chains, and technology-enabled processes.
As the revised guidelines influence due diligence standards in transactions and financing arrangements linked to WBG-financed projects – particularly where debarment or sanctions risk may extend to counterparties, affiliates, or project participants – those operating with WBG financing are wise to seek advice from a party with deep cross-border experience and a proven ability to help organizations navigate evolving standards.
