Voluntary Self-Disclosure, Penalties and Mitigation

A company that finds a sanctions or export violation has to decide whether to tell the government. The framework is built to make that decision easy in one direction: a disclosure made before the government knows carries substantial credit, and a disclosure made after it knows carries almost none. The harder questions are timing, scope and what to say.

What makes a disclosure voluntary

The Economic Sanctions Enforcement Guidelines define a voluntary self-disclosure as a self-initiated notification of an apparent violation by the subject person, made before or at the same time as the government or another party discovers it. The definition then removes several situations from the category.

A notification is not voluntary if the government has already commenced an investigation or inquiry into the conduct. It is not voluntary if a third party was required to and did file a report on the same transaction, which matters because a blocked or rejected transaction report by a bank can start the clock. And a disclosure that is materially incomplete is not treated as voluntary as to what it omitted.

How each regime wants it filed

The mechanics differ. The dual-use export regulations describe an initial notification of the apparent violation, followed by a thorough review and a narrative account of the conduct with supporting documents. The arms regulations require an initial notification and then a full disclosure within the period the section allows, with an explanation of what happened, what has been done about it and what is being done to prevent recurrence.

Sanctions disclosures follow the guidelines rather than a prescribed form, but the expected content is the same: what happened, when, who was involved, how it was found, what the exposure is, and what has changed. Every regime expects the submission to be supported by records rather than by assertion.

Scope is the hardest drafting decision. A disclosure that covers a single shipment when the underlying control failure affected a product line will look narrow once the records are produced. A disclosure that promises a review of everything commits the company to a project it may not be able to finish. The usual answer is to state precisely what was reviewed, over what period, and what remains under review, so that the boundaries are the company's own rather than something an investigator has to infer.

How a penalty is built

The guidelines proceed in stages. The conduct is first characterized as an egregious case or not, using factors including whether it was willful or reckless, whether the person was aware of the conduct, the harm to program objectives and the sophistication of the person involved. The presence or absence of a voluntary self-disclosure is then applied.

Those two determinations produce a base amount, and the base amount is substantially lower where there was a qualifying disclosure. It is then adjusted by the general factors. The statutory maximums that cap the result are subject to inflation adjustment, so any figure quoted from the statute itself will be out of date and the operative amounts have to be taken from the current regulation.

The factors that move an outcome

The general factors are applied to every case and they are the substance of most negotiations. Willfulness or recklessness and awareness of the conduct sit at the top, followed by the actual harm to program objectives. The existence and quality of a compliance program is weighed, and so is the remedial response: what was fixed, how quickly, and whether the fix addressed the cause rather than the symptom.

Cooperation is assessed separately from disclosure. A prior history of similar conduct is aggravating, and the absence of one is not especially mitigating. The commercial sophistication of the person, the size of the operation and the individual's role are all considered, which is why the same facts produce different outcomes for a global institution and a small manufacturer.

Remediation carries more weight than most companies expect, because it is the factor most within their control after the fact. Terminating the relationship, correcting the classification, retraining the people involved, changing the approval workflow and testing whether the change worked are all concrete and can be evidenced. A submission that describes the violation in detail and the fix in generalities invites a harder outcome than the reverse.

Outcomes short of a penalty

Not every apparent violation produces a monetary penalty. The available responses include taking no action, issuing a cautionary letter, issuing a finding of violation, imposing a civil monetary penalty, and settling. A finding of violation is a formal determination without a penalty, and it enters the person's history for the purpose of any later matter.

The most useful preparation for any of these outcomes is the record that existed before the problem arose. A documented classification file of the kind described in classification and the control number, screening records of the sort covered in end-use, end-user and red flag screening, and a clear account of what United States personnel did or did not approve under the facilitation prohibitions all shape how a matter is characterized. Where blocked property is involved, the separate reporting duties in what a listing does to property and dealings continue to run regardless of the disclosure.