What Happened — The SFO’s Case Against Ultra Electronics

The Investigation Background

In April 2018, Ultra Electronics Holdings Limited self-reported suspected corruption to the Serious Fraud Office. What followed was a seven-year criminal investigation that grew well beyond its original scope. By June 2023, the SFO had expanded the probe from suspected corruption in Algeria to include further suspected corruption in Oman — a reminder that self-reporting opens a door the regulator controls, not the company.

On 1 May 2026, that investigation concluded with a court-approved Deferred Prosecution Agreement. Ultra Electronics accepted responsibility for failure to prevent bribery under section 7 of the Bribery Act 2010, agreeing to pay £10 million in penalties plus £4.8 million toward the SFO’s investigation costs.

The Underlying Conduct

The wrongdoing at the heart of the case involved three public sector contracts pursued through agents — the classic high-risk bribery vector that compliance teams are routinely warned about.

The two Algerian contracts were ultimately not secured by the company but were expected to generate a combined profit of around £1.4 million. The use of third-party agents in each case to pursue public sector work in higher-risk jurisdictions is precisely the fact pattern that a robust anti-bribery programme is designed to catch and prevent.

What the DPA Requires Ultra Electronics to Do

Financial Penalties and Timelines

The financial exposure here is significant. Ultra Electronics must pay the £10 million penalty and £4.8 million in SFO investigation costs — a combined total of £14.8 million — within 30 days of the DPA being approved. For in-house counsel advising on corporate risk, that compressed payment window underlines that a DPA, while preferable to prosecution, is not a soft landing.

A Deferred Prosecution Agreement is a voluntary agreement between a prosecutor and an organisation, approved by a judge, under which prosecution is deferred in exchange for the company meeting defined conditions. Breach of those conditions can result in the prosecution resuming. The voluntary label should not be mistaken for discretionary — the court scrutiny is real and the obligations are enforceable.

Ongoing Compliance Obligations

Beyond the financial penalty, Ultra Electronics faces three years of annual reporting obligations. Each year, the company must demonstrate to the SFO the effectiveness of its anti-bribery and compliance programme. This is the forward-looking element of the DPA that compliance teams and their advisers need to plan for carefully.

Annual reporting of this kind is not a box-ticking exercise. The SFO will be looking for evidence of genuine, embedded change — not just updated policies. That means documented training, third-party due diligence records, tone-from-the-top communications, and audit trails that show the programme is operating in practice, not just on paper.

Why Negotiations Almost Failed — and What Turned Them Around

The path to this DPA was not straightforward. The SFO previously withdrew from negotiations entirely, concluding that the conditions for a meaningful agreement were not in place. That is a significant moment in the timeline — it signals that the regulator will not agree to

a DPA purely as a matter of process. Both sides must be genuinely committed to the outcome.

What changed was ownership. Ultra Electronics was part of the FTSE 250 until 1 August 2022, when it was taken private by Advent International. With that change came new leadership and a structural reset. The SFO satisfied itself that the incoming management had both the willingness and the capacity to engage in good faith — and only then did negotiations resume.

For practitioners advising companies in or approaching SFO investigations, that sequence matters. Corporate attitude is not background noise to the regulator — it is a central factor in whether a DPA becomes available at all. A company that cycles through tactical cooperation, delay, or partial disclosure may find, as Ultra Electronics initially did, that the SFO walks away.

Why This Matters for Corporate Compliance Lawyers

Failure to Prevent — Still a Live Risk

Section 7 of the Bribery Act 2010 creates a strict liability offence for commercial organisations that fail to prevent bribery by an associated person. The only defence is to demonstrate that adequate procedures were in place. Ultra Electronics is a further reminder that this provision has real teeth — and that the defence is not easily made out where agents are used to pursue high-value public sector contracts in higher-risk jurisdictions without robust controls.

The Ultra case also illustrates how exposure can accumulate quietly. The conduct involved contracts in two countries, pursued through agents, over a period of years. By the time the matter reached resolution, the combined financial consequences ran to nearly £15 million, the reputational damage was public, and the company had spent seven years under criminal investigation. The cost of adequate procedures at the outset would have been a fraction of that.

Self-Reporting: Risk or Reward?

Ultra Electronics self-reported in 2018. Eight years later, it has paid £14.8 million and undergone a seven-year investigation that expanded in scope and nearly collapsed entirely. That is not an argument against self-reporting — cooperation remains the most credible path toward a DPA rather than prosecution — but it is a realistic picture of what self-reporting actually involves.

Practitioners advising clients who are weighing whether to self-report should be honest about the timeline and cost. Self-reporting opens the process, but it does not control it. The SFO will investigate thoroughly, expand scope where evidence warrants it, and will not be hurried. The credit for cooperation is real, but it comes at the end of a long road.

What Good Faith Engagement Looks Like

The SFO’s language in the Ultra case is instructive. The regulator was explicit that negotiations only resumed when it was satisfied that new leadership had the willingness and capacity to engage in good faith. That framing rewards practitioners and their clients to consider what good faith engagement actually means in practice.

It means consistent disclosure rather than phased or selective production. It means leadership that treats the investigation as a compliance problem to be resolved, not a legal dispute to be managed. It means a compliance programme that is being actively improved, not held in place while negotiations continue. Companies that get this right shorten the process. Companies that get it wrong, as the Ultra timeline demonstrates, can find the regulator withdrawing from the table altogether.

Key Takeaways for In-House Counsel

The Ultra Electronics DPA offers a practical checklist for those advising on corporate compliance and bribery risk. Third-party agent due diligence is not optional — it is the front line of any adequate procedures defence under section 7, and the SFO will scrutinise it closely where agents are used to pursue public sector contracts abroad. That due diligence needs to be documented, proportionate to the risk, and repeated at meaningful intervals, not just completed once at onboarding.

Tone from the top matters to the SFO in a way that goes beyond policy statements. The Ultra case shows that a change of leadership and ownership was what ultimately unlocked a DPA.