civil investigative demand attorney reviewing federal CID with clientIf you’ve received a civil investigative demand, you likely have a deadline you didn’t expect and a list of documents that feels impossible to gather in the time given.

This page answers the questions that matter most in the first 24 hours: what a CID actually is, what it means that you got one, what you’re legally required to do, and what happens if you get it wrong.

Watson & Associates, LLC responds to civil investigative demands from DOJ, HHS-OIG, the SEC, FTC, and CFPB on behalf of government contractors, healthcare companies, and executives nationwide. Our team includes former DOJ attorneys and — distinctly from most firms handling CID matters — former federal contracting officers and procurement officials, which matters most when the CID involves a government contract.

Call 1.866.601.5518 for a free, confidential case review, or download our CID Response Checklist before your first internal meeting about it. Our lines are open 24/7.

What Is a Civil Investigative Demand?

A civil investigative demand (CID) is a formal, pre-litigation investigative tool that federal agencies use to compel documents, sworn written answers, and sworn oral testimony from a person or company — without first getting a judge’s approval. Under the federal False Claims Act (31 U.S.C. § 3733), the DOJ can issue a CID to investigate suspected fraud involving federal funds. The FTC, CFPB, and SEC have similar authority under their own governing statutes for antitrust, consumer financial protection, and securities matters, respectively.

The word “civil” is easy to misread as “not serious.” It isn’t. A CID means a federal agency already believes it has enough basis to investigate you — and depending on what the investigation finds, it can lead to civil penalties, exclusion from federal programs, or a referral for criminal prosecution.

A CID can compel:

  • Documents — contracts, invoices, bank records, emails, subcontracts (for federal contractors) billing records, and electronic files, often going back several years ( the cost of getting huge amount of CID response documents can be costly.  Speak to our CID attorneys about this.
  • Written interrogatory answers — sworn, detailed responses to specific questions about your operations, ownership, or certifications
  • Oral testimony — sworn depositions of company officers, employees, or third parties ( you do not want to apporach this without legal counsel)
  • Any combination of the three in a single demand

CID vs. Other Government Investigative Tools

Tool Court Approval Needed? Issued Before a Lawsuit? Can It Lead to Criminal Charges?
Civil Investigative Demand No Yes Yes — frequently
Grand Jury Subpoena Yes Yes Yes — always criminal
Civil Discovery Subpoena Yes No — filed after a lawsuit Rarely
Routine Audit / Compliance Request No No formal case exists Rarely

Federal Civil Investigative Demand LAW Firm - CID MeaningReceiving a CID does not automatically mean you’re the target of the investigation — sometimes agencies issue CIDs to third parties who may simply hold relevant information.

But you cannot assume that’s your situation. Determining whether you’re a witness, a subject, or a target is one of the first things a CID attorney should assess.

If You Just Received a Civil Investigative Demand, Do This First 

  1. Do not respond informally, even if it seems cooperative. A phone call to “clarify” the request, made before counsel is involved, can be used against you later — including to challenge your credibility if the matter proceeds.
  2. Note every deadline in the document. A single CID often contains multiple deadlines — a “meet and confer” date, a document production date, and a testimony date — and missing any one of them can waive rights you’d otherwise have.
  3. Implement a legal hold immediately — see below. This is the single most time-sensitive step and the one most companies get wrong.
  4. Do not assume the scope is fixed. Virtually every CID’s scope is negotiable. Companies that comply with an unreasonably broad demand without ever asking DOJ to narrow it are making the process harder — and more expensive — than it needs to be. If you are unsure about what the CID calls for, you should contact the POC on the document. Waiting until a mistake is made to say you did not understand will not be enough.

Call a civil investigative demand attorney before your first internal meeting about the CID: 1.866.601.5518. Ask to speak to Mr. Watson.

The CID Hold: What It Is and Why the First 72 Hours Matter 

One of the most consequential decisions made after receiving a CID is whether — and how well — you implement a legal hold (sometimes called a “CID hold”): a formal, internal suspension of all routine document destruction, auto-deletion schedules, and backup overwrite cycles for anything potentially relevant to the demand.

A proper legal hold must cover:

  • Electronic data — email, Slack, Teams, SharePoint, ERP and accounting systems, CRMs
  • Physical documents — contracts, invoices, purchase orders, notebooks, correspondence
  • Personal devices — if employees use personal phones or laptops for business communications, those are in scope too
  • Third-party data — information held by vendors, cloud providers, or subcontractors may also need preservation

What happens if you don’t implement one properly:

  • Spoliation sanctions — a court can instruct a jury that destroyed evidence would have been unfavorable to you
  • Obstruction exposure — willful destruction of evidence after receiving a CID can become a separate criminal matter, entirely apart from whatever the original investigation was about
  • Privilege waiver — mishandling attorney-client communications during a rushed hold can waive protection over exactly the advice you need protected
  • Credibility damage — even in a purely civil matter, evidence of poor document management undermines your position at every later stage

The single most common mistake we see: a company issues a hold notice to executives but never tells IT to pause the backup-and-overwrite cycle. Sixty days of records get overwritten before anyone notices. That’s not a hypothetical — it’s the most frequent way companies turn a manageable CID into a much larger problem.

How We Respond to a Civil Investigative Demand: Our Process

Be Careful Not to Volunteer Information that Makes You a Defendant

Most law firms treat a CID like an oversized subpoena — collect everything responsive and send it. That approach is exactly how CID recipients become defendants. Ours is different:

1. Immediate Triage (Same Day). Once retained, we will identify the issuing agency (advise that you are represented – this stops the uneasy communications – they will deal directly with our CID lawyers), review the demand’s actual scope, and give you clear, written guidance on what to stop doing in the next 24–72 hours. The legal hold goes in place at this stage, not later.

2. Risk Assessment and Action Plan (First 7–10 Days). We map your exposure across civil, criminal, and administrative tracks (including suspension/debarment risk for contractors) and deliver a written plan: custodians, data sources, privilege considerations, and a realistic production timeline.

3. Scope Negotiation. We contact the issuing attorney directly to negotiate date ranges, custodians, search terms, and production format. Almost every CID’s scope can be narrowed — compliance without ever asking is one of the costliest mistakes a company can make.

4. Privilege Review and Controlled Production. As your CID lawyers, we conduct a full privilege review and organize the production so it tells your side of the story accurately, rather than simply handing over boxes for the government to interpret on its own.

5. Through Resolution. If the investigation leads to a complaint, a negotiated resolution, suspension/debarment proceedings, or a parallel criminal referral, the same team that learned your business during the CID response carries the matter forward. Continuity matters — rebuilding institutional knowledge with new counsel mid-investigation costs time you don’t have.

What Happens in the First 72 Hours After a CID

Real Mistakes That Turn a CID Into an Indictment 

Executives who come to us after a CID has already gone wrong tend to have made one of the same handful of mistakes:

Investigating internally over email. A government contractor’s in-house team reviewed a suspected billing issue over email, including a message asking “did we overbill on Contract X?” That question, unprotected by privilege, became a discoverable admission and the foundation of the government’s eventual complaint. Let our attorneys conduct your internal investigations.

Letting auto-deletion keep running. A healthcare company issued a hold to its executives but never told IT to pause the server backup cycle. Sixty days of billing records were overwritten. DOJ sought spoliation sanctions, and the case settled for roughly three times the company’s original exposure estimate.

Taking an informal call with the government. A CEO, believing it would demonstrate good faith, agreed to speak informally with the investigating attorney before retaining counsel. Statements from that call were later used to impeach him in deposition.

Treating it as “civil only.” A defense contractor responded to a DOJ CID focused on billing irregularities without considering criminal exposure. Six months after voluntarily producing documents, the company learned that a parallel grand jury investigation had opened — based on the same records.

The pattern across all four: decisions made in the first days, before anyone realized how much they mattered.

Who Receives a Civil Investigative Demand 

A CID can be issued to a company, an individual, an officer, or an uninvolved third party believed to hold relevant information. Four groups see them most often:

Government contractors (DoD, SBA, GSA). Common triggers: procurement fraud (overbilling, cross-charging, misrepresented costs or labor hours), small business program fraud (8(a), SDVOSB, HUBZone eligibility issues), defective pricing under the Truth in Negotiations Act, and non-conforming goods or services delivered while certifying compliance.

Healthcare providers and companies. HHS-OIG CIDs are often the most complex because they intersect multiple statutes — the False Claims Act, Anti-Kickback Statute, and Stark Law — creating both civil and criminal exposure at once. We represent hospital systems, physician groups, pharmaceutical and device companies, labs, telehealth providers, and home health agencies.

PPP borrowers and COVID-relief recipients. DOJ continues pursuing False Claims Act CIDs against PPP borrowers, particularly loans over $400,000, on theories including false certification of necessity and misrepresented headcount. A $1 million loan can generate $3 million in treble damages alone, before per-claim penalties.

Corporate executives. When DOJ or the SEC targets an individual executive with a CID, they are frequently building toward individual exposure separate from the company’s. We build a clear line between the company’s cooperation obligations and an executive’s personal rights from day one.

Civil Investigative Demand FAQs 

Theodore Watson — civil investigative demand attorney and former federal procurement officialIf your company, government contracting business, or healthcare organization has received a civil investigative demand, the government’s case has already begun. Each decision — from how you implement a CID hold to what you produce and how you communicate with investigators — shapes what happens next.

At Watson & Associates, you speak directly with the attorneys who will handle your matter. Not a case manager. Not an intake coordinator. The lawyers.

Call us at 1.866.601.5518, Speak With Our Lead Counsel About You Recent Civil Investigative Demand, Theodore Watson, directly,  or contact him online for a free, confidential consultation. All communications are protected by attorney-client privilege from the moment of your first call.

15 Questions Companies Ask Before Hiring Counsel for a Government Investigation or CID

1. What exactly is a Civil Investigative Demand, and how is it different from a subpoena?

A Civil Investigative Demand (CID) is a pre-litigation investigative tool — most commonly issued under the False Claims Act — that lets the government compel a company to produce documents, answer written interrogatories, or give oral testimony before any lawsuit is even filed. Under 31 U.S.C. § 3733, only the Attorney General or a designee can issue one, and it must state the specific conduct under investigation and the law allegedly violated. Unlike a grand jury subpoena tied to a criminal proceeding, a CID is a civil tool used while the government is still deciding whether a case exists at all — which means receiving one does not mean charges are coming, but it does mean the government already believes you have something it needs.

2. My company just received a CID — how much time do we actually have to respond, and can we negotiate the deadline?

The statute requires the government to set “a reasonable period of time” for document production and at least seven days’ notice before oral testimony can begin, per 31 U.S.C. § 3733. In practice, “reasonable” is negotiable — government investigators regularly grant extensions when a company engages promptly, proposes a realistic production schedule, and explains the scope of what needs to be gathered. What is not negotiable is silence: missing a deadline without any contact is treated very differently than requesting more time in writing before it passes.

3. Should we use our regular corporate counsel, or bring in a firm that specializes in government contract investigations?

Your regular business or transactional counsel may be excellent at contracts and corporate matters and still have never handled a CID, a suspension and debarment referral, or a False Claims Act investigation — these are specialized, fast-moving matters governed by FAR, DFARS, and federal fraud statutes that most general practitioners rarely encounter. The risk of using unfamiliar counsel isn’t incompetence; it’s not knowing what the government is really asking for in a document request, or missing a privilege issue that experienced government-contracts counsel would catch on sight. Many companies bring in specialized counsel to run the investigation response while keeping regular counsel informed, rather than switching entirely.

4. Do individual employees need their own separate attorney, or can one lawyer represent the whole company?

Company counsel represents the company — not any individual employee, even one who has worked there for decades and is deeply loyal to it. If an employee’s own conduct is potentially at issue, or if their account of events might conflict with the company’s position, that employee needs independent counsel, because company counsel has a duty to the corporation that can directly conflict with what’s best for that individual. This is exactly why attorneys conducting internal interviews are required to give what’s known as an “Upjohn warning” — see question 9 below.

5. What is a litigation hold, and what happens if we don’t put one in place immediately?

A litigation hold is a formal internal notice instructing employees to stop any routine deletion, auto-archiving, or destruction of documents, emails, and data that could be relevant to the investigation — including things like scheduled email purges or device wipes that happen automatically as part of normal IT policy. Under Federal Rule of Civil Procedure 37(e), a company that fails to take reasonable steps to preserve electronically stored information it should have known was relevant can face court-ordered sanctions — including, in serious cases, a jury instruction that the missing evidence would have been unfavorable to the company. The hold needs to go out the same day you learn of the investigation, not after your first meeting with counsel.

6. What should we NOT do the moment we learn about an investigation?

Do not instruct anyone to delete, alter, or “clean up” files — even ones you believe are unrelated or simply embarrassing rather than incriminating. Federal law makes it a separate crime, under 18 U.S.C. § 1519, to knowingly destroy or falsify records “in relation to or contemplation of” a federal investigation, and this obstruction charge can apply even if the underlying conduct being investigated turns out to be entirely lawful. Do not let employees discuss the investigation informally over email or Slack, where it becomes discoverable. Do not respond to the government’s request, produce a single document, or issue any internal or public statement before counsel has reviewed it.

7. Do we have to disclose the investigation to our board, investors, or the public?

That depends on your corporate structure, any contractual disclosure obligations, and — for public companies — securities law materiality standards, which is a determination that should be made with counsel rather than assumed either way. What’s consistent across most companies: the board (or a designated committee) generally needs to know promptly so it can authorize outside counsel, approve a budget for the response, and oversee the company’s decisions, even when a broader public or shareholder disclosure isn’t legally required.

8. Should we voluntarily self-disclose potential misconduct to the government before they find it out themselves?

This is one of the highest-stakes strategic calls in the entire process, and it should never be made without counsel who has actually negotiated a self-disclosure before. The Department of Justice’s Corporate Enforcement and Voluntary Self-Disclosure Policy, announced in March 2026, offers companies that voluntarily disclose misconduct, fully cooperate, and timely remediate the chance to be eligible for a declination — meaning no charges at all — while companies that come close but fall short can still receive a 50–75% reduction off the low end of the federal sentencing guidelines fine range. The catch: DOJ requires that the disclosure happen before an obligation to disclose otherwise arises and before you have reason to believe the government already knows — which means the earlier this conversation happens with counsel, the more options remain on the table.

9. The government wants to interview our employees directly — can we require company counsel to be present, and what do we tell staff beforehand?

Employees generally cannot be forced to have company counsel present for a government interview, and in fact many investigators prefer to speak with employees without company counsel in the room specifically to avoid any appearance of coaching. What you can and should do is make sure every employee understands their rights before any interview happens: they can have their own attorney present, they can decline an informal interview and ask that any request go through counsel, and — this is critical — if your own counsel interviews them first as part of an internal investigation, that lawyer must give what’s called an Upjohn warning, named after the 1981 Supreme Court case Upjohn Co. v. United States: a clear statement that counsel represents the company, not the individual, and that the privilege over that conversation belongs to the company, which can choose to waive it later. Skipping this warning is one of the more common and more damaging mistakes we see in early internal investigations.

10. Can we continue bidding on and performing existing government contracts while under investigation?

In most cases, yes — an investigation alone does not automatically bar you from bidding or performing. But suspension can be imposed based on an indictment or even credible evidence of fraud, before any conviction, under the suspension and debarment procedures in FAR Subpart 9.4, and a listing in SAM.gov’s exclusion database can end your eligibility for new federal work government-wide. If your revenue depends heavily on federal contracts, addressing suspension and debarment exposure needs to be handled on its own track, in parallel with the underlying investigation — not as an afterthought.

11. What happens if we ignore a CID or miss the response deadline?

The government does not simply move on. A CID carries the weight of federal law, and non-compliance can be enforced through a petition to a federal district court, which can order compliance and, in more serious cases, treat continued refusal as contempt. Beyond the legal exposure, ignoring a CID also removes your best opportunity to negotiate scope, timing, and the format of production — leverage that exists at the beginning of the process and shrinks the longer you wait.

Many Directors & Officers (D&O) and Errors & Omissions (E&O) policies include coverage for the costs of responding to a government investigation, including a CID, but this varies significantly by policy language, and some policies specifically exclude fraud-related investigations or require prompt notice to the insurer as a condition of coverage. The practical step: notify your broker or carrier as soon as you retain counsel, not after the matter has progressed, since late notice is one of the most common reasons insurers deny coverage they would otherwise provide.

13. What does this typically cost, and how long does it usually take?

Both vary enormously based on the scope of the CID, how many custodians and how much data need to be reviewed, and whether the matter resolves civilly, gets declined, or proceeds toward litigation — there’s no honest single number to give you here, and any attorney who quotes one before seeing your CID is guessing. What we can tell you: the cost of a fast, organized response with experienced CID defense counsel from day one is consistently lower than the cost of a slow, disorganized one that invites a broader inquiry, additional document requests, or a credibility problem with the investigators.

14. What should we actually look for when choosing a CID defense attorney for a government contract investigation?

Look for specific experience with CIDs and False Claims Act matters, not general litigation or criminal defense experience alone — ask directly how many CID responses the attorney has personally managed in the last few years. Ask whether they have relationships with the relevant agency Office of Inspector General or U.S. Attorney’s office, since investigators respond differently to counsel they’ve dealt with professionally before. And ask what their first 30 days of engagement would actually look like — a vague answer here is often a sign of inexperience with the process, not diplomacy.

See Ten Ways Government Contractors Accidentally Make Their Case Worse After Receiving a Civil Investigative Demand (CID).

15. Is everything we tell our attorney protected, even during internal investigation interviews with our own employees?

federal investigation CID procurement fraud defense law firm

Attorney-client privilege protects communications between the company and its counsel made for the purpose of obtaining legal advice, and this extends to internal investigation interviews conducted by or at the direction of counsel — but the privilege belongs to the company, not the interviewed employee, which is exactly why the Upjohn warning in question 9 exists.

Separately, 31 U.S.C. § 3733 itself recognizes that a CID cannot compel production of material otherwise protected under grand jury subpoena standards or the Federal Rules of Civil Procedure — meaning legitimately privileged material has real protection, but only if it was actually protected correctly from the start. An experienced attorney reviews every document for privilege before it goes out the door; a rushed or inexperienced response risks an accidental waiver that can’t be undone.

What DOJ Is Building Toward: Exposure Under a False Claims Act (FCA)-Related CID

When a CID relates to a False Claims Act investigation, DOJ is typically evaluating one or more of the following:

  • Treble damages — three times the government’s alleged loss
  • Civil penalties of $14,308 to $28,619 per false claim (current figure, adjusted for inflation, in effect through 2026) — which compounds fast in cases involving hundreds or thousands of individual billings
  • Exclusion from federal programs — often more damaging long-term than the financial penalty, especially for healthcare providers and contractors
  • Criminal referral — where civil evidence suggests willful conduct, DOJ can refer the matter for prosecution under wire fraud, false statements (18 U.S.C. § 1001), or conspiracy statutes

A CID response built by attorneys who understand this endgame doesn’t just answer document requests — it identifies where the government’s theory is weakest and starts building the counter-narrative from the first production.

Our Lead Civil Investigative Demand Defense Team

Executives want to know who’s actually in the room. Here’s who leads CID matters at Watson & Associates:

  • Theodore P. Watson, Esq. — National Practice Leader, admitted to the U.S. Supreme Court, former federal procurement official. Read more.
  • Carolyn L. Oliver, Esq. — Former DOJ Prosecutor, Assistant U.S. Attorney, Major Frauds Section (Central District of California). Read more.
  • Chris Mancini, Esq. — Former Assistant U.S. Attorney and Deputy Chief, Criminal and Civil Divisions, Southern District of Florida. Read more.
  • Cheryl Adams — Former federal contracting officer and procurement official — a credential few firms handling government-contractor CIDs actually have. Read more.
  • Robert “Bob” Ayers, Esq. — Former federal prosecutor, corporate executive defense. Read more.
  • Wise D. Allen, Esq. — Former Judge Advocate, procurement fraud and False Claims Act focus. Read more.

See How the DOJ Decides Whether to Intervene in a Qui Tam Case Against Your Company

Civil Investigative Demand Defense — All 50 States

Watson & Associates LLC defends clients in civil investigative demand matters nationwide. Our federal practice means we appear where the investigation is — not only where our offices are. Our attorneys are admitted in federal courts and before federal agencies across the country.

We represent clients facing civil investigative demands from DOJ Civil Fraud Section and U.S. Attorney’s Offices, HHS-OIG, DOD-OIG, VA-OIG, SBA-OIG, SEC, FTC, and CFPB — in every state including Alaska, Arizona, Arkansas, California, Colorado, Connecticut, Delaware, Florida, Georgia, Hawaii, Illinois, Indiana, Kansas, Louisiana, Maine, Maryland, Massachusetts, Michigan, Minnesota, Mississippi, Missouri, Montana, Nebraska, Nevada, New Hampshire, New Mexico, New York, North Carolina, Ohio, Oklahoma, Pennsylvania, Rhode Island, South Carolina, Tennessee, Texas, Utah, Vermont, Virginia, Washington, Washington DC, West Virginia, Wisconsin, and Wyoming.

Talk to a Civil Investigative Demand Attorney Today

If you or your company has received a civil investigative demand, the earlier we’re involved, the more options — and leverage — you have. Consultations are free and confidential.

Call 1.866.601.5518

Washington, DC — 1629 K Street, N.W., Suite 300, Washington, DC 20006 See our other locations.

We represent clients responding to civil investigative demands from DOJ Civil Fraud and U.S. Attorney’s Offices, HHS-OIG, DOD-OIG, VA-OIG, the SEC, FTC, CFPB, and SBA-OIG, in all 50 states.

DOWNLOAD OUR FREE CID RESPONSE CHECKLIST →