Sanctions: The UK Perspective

This is an Insight article, written by a selected partner as part of GIR's co-published content. Read more on Insight

44.1 Introduction

Sanctions are restrictive measures aimed at achieving foreign policy or national security objectives. With the creation of the Office of Financial Sanctions Implementation (OFSI) in March 2016 and recent increases to the size and severity of penalties for sanctions breaches, sanctions enforcement is a growing area of economic crime enforcement in the United Kingdom. The United Kingdom has now implemented its autonomous sanctions regime following its exit from the European Union on 31 December 2020, which will likely lead to an increase in enforcement activity against corporates and individuals in the United Kingdom.

The United Kingdom currently implements and enforces sanctions implemented by the United Nations and its own domestic sanctions regime (which includes the sanctions imposed by the European Union which were retained in UK law after Brexit) against individuals, entities and jurisdictions. These include various restrictive measures, such as trade sanctions (e.g., arms embargoes and restrictions on dual-use items); economic or financial sanctions (e.g., asset freezes and restrictions on a variety of financial markets and services); and immigration sanctions (e.g., travel bans). While the Foreign and Commonwealth Office has overall responsibility for UK government policy on international sanctions, trade sanctions are generally monitored and enforced by the Department for International Trade (DIT) (acting through the UK Export Control Joint Unit (ECJU)) or Her Majesty’s Revenue and Customs (HMRC). Financial sanctions are administered and enforced by OFSI (with support from the National Crime Agency (NCA)), and immigration sanctions by the Home Office. In addition to civil enforcement, criminal prosecution of sanctions violations may be pursued by HMRC or the Serious Fraud Office (SFO) upon referral by OFSI, or by the Crown Prosecution Service (CPS) for breaches of trade sanctions. Regulators, such as the Financial Conduct Authority (FCA), also ensure that regulated firms have adequate systems and controls in place to enable them to meet their sanctions obligations.

In this chapter, we set out an overview of the UK sanctions framework, and consider how investigations may arise and what are best practices when initiating or responding to investigations.

44.2 Overview of the UK sanctions regime

44.2.1 Statutes and official guidance

The United Kingdom has historically followed the United Nations and European Union in applying sanctions. EU sanctions are implemented through regulations with direct legal effect in Member States,² with individual Member States being responsible for enforcement of EU sanctions.³ Post-Brexit, EU sanctions no longer apply in the United Kingdom, but it has implemented EU sanctions into national law through secondary legislation. Existing EU sanctions regimes are addressed under the Sanctions and Anti-Money Laundering Act 2018 (SAMLA), which provides the legal basis for the United Kingdom to impose, update and lift sanctions following Brexit. The United Kingdom also has its own terrorist sanctions regime. Entities in the regulated sector are subject to the Anti-Terrorism, Crime and Security Act 2001, the Counter-Terrorism Act 2008 and the Terrorist Asset-Freezing etc. Act 2010. OFSI has issued guidance regarding its approach to financial sanctions under SAMLA,⁴ as well as an enforcement guide that summarises its approach to compliance and enforcement, including the imposition of penalties.⁵ Broadly speaking, the guidance issued by OFSI shows that it has high expectations with regard to sanctions compliance. In particular, licensing grounds are interpreted narrowly, and it is clear that general and specific reporting obligations are a key aspect of the United Kingdom’s sanctions enforcement apparatus. When assessing sanctions violations, OFSI will treat each breach on its own merits based on a number of aggravating and mitigating factors, and in particular, will place substantial value on co-operation and timely voluntary disclosure.

44.2.2 Persons to whom sanctions apply

UK nationals and entities established under UK law, and their overseas branches, must comply with UK sanctions regardless of where they are located or their activities take place. UK financial sanctions also apply to any individual or entity located within the United Kingdom or that carries out activities there. In its published guidance, OFSI provides a number of non-exhaustive examples of how a UK nexus might arise, including a UK company working overseas, transactions using clearing services in the United Kingdom, actions by a local subsidiary of a UK company, or actions taking place overseas but directed from within the United Kingdom.⁶

Restrictive sanctions measures apply to named individuals, entities, groups, sectors or countries. OFSI maintains a list of individuals and entities subject to financial sanctions to help individuals and businesses comply with those sanctions. Consistent with EU guidance, OFSI considers that if a designated person owns more than 50 per cent of, or otherwise controls, an entity (directly or indirectly),⁷ financial sanctions will apply to that entity as well.

Unlike the situation in the United States, the UK sanctions regime does not include secondary sanctions. Council Regulation (EC) No. 2271/96, known as the ‘Blocking Statute’, enshrined into law in the United Kingdom,⁸ prohibits UK residents and companies from complying with certain extraterritorial legislation, specifically in relation to US sanctions on Cuba and Iran, unless they are exceptionally authorised to do so by the Secretary of State. The Blocking Statute also allows UK residents and companies to recover damages arising from such legislation from the persons or entities causing them, and prevents any foreign court rulings based on the blocked legislation from having effect in the United Kingdom.⁹

44.2.3 Exemptions and licensing

The UK sanctions regime provides for certain exceptions from the restrictive measures imposed under sanctions legislation in the form of exemptions or licences. With respect to exemptions, in certain limited situations and conditions as set out in the legislation, particular activities are automatically exempt, meaning that parties may engage in the activity without a licence or authorisation. Alternatively, for activities that would otherwise be prohibited, parties may apply for a licence. OFSI oversees applications for licences in relation to financial sanctions, and DIT for trade sanctions. OFSI will only grant a licence where it falls within the specific grounds identified in the underlying legislation. Generally these cover areas such as basic needs, legal fees and disbursements, fees or charges relating to frozen accounts and other economic resources, payment of court judgments or arbitration decisions against a designated person, satisfaction of contractual obligations, and other extraordinary expenses.¹⁰

OFSI may also grant licences in accordance with the United Kingdom’s domestic terrorist sanctions regimes (without the need for specific licensing grounds), and can issue licences specific to individuals or generally applicable to all persons designated under particular domestic terror sanctions regimes.¹¹ As of August 2021, there is only one active general licence under the United Kingdom’s domestic terrorist sanctions regime.¹² General licences can be used without making an application to OFSI, but there is an obligation to report their use without delay.¹³

Where an individual or entity seeks to import or export goods restricted by sanctions, such as dual-use goods (items with both a military and civilian use), a licence may be required by the ECJU alongside one from OFSI.

44.2.4 Key jurisdictions

While a number of jurisdictions are sanctioned by the United Kingdom, three are particularly significant: Iran, North Korea and Russia/Ukraine.

44.2.4.1Iran

On 16 January 2016, the European Union lifted all of its economic and financial sanctions in connection with the Iranian nuclear programme pursuant to the Joint Comprehensive Plan of Action (JCPOA) between the E3/EU+3 (France, Germany and the United Kingdom, plus Russia, China and the United States) and Iran.

There are, however, certain measures and restrictions relating to proliferation that remain in place for the United Kingdom, including an arms embargo, restrictive measures relating to missile technology, restrictions on nuclear-related transfers and activities, and an authorisation regime for certain metals and software.¹⁴

Separate restrictive measures independent of the JCPOA also still apply. These were historically imposed by the European Union in relation to serious human rights violations in Iran, and include asset freezes, travel bans and a ban of exports to Iran of equipment that may be used for internal repression or equipment for monitoring telecommunications. Following the withdrawal of the United States from the JCPOA and the re-implementation of US secondary sanctions on Iran, the European Union amended the Blocking Statute to include the list of extraterritorial US sanctions on Iran. This change was retained by the United Kingdom following Brexit.¹⁵

44.2.4.2North Korea

North Korea is subject to a number of counter-proliferation measures aimed at preventing individuals and entities from obtaining funds, goods or services that could contribute to North Korea’s nuclear proliferation programme. These measures are wide-ranging and include, for example, asset freezes, travel bans, sectoral financial sanctions, restrictions on particular services and financial assistance, prohibitions on the export and procurement of arms and on the export of luxury or dual-use goods.¹⁶

44.2.4.3 Russia/Ukraine

The United Kingdom has retained numerous economic, trade and financial restrictive measures on Russia originally imposed by the European Union in response to the annexation of Crimea and Sevastopol, and actions that undermine or threaten the territorial sovereignty and independence of Ukraine. Alongside asset freezes and travel bans, it is also prohibited to:

import or export arms and related material to or from Russia;
sell, supply, transfer or export dual-use goods and technology for military use in Russia or to specific designated persons;
provide loans or credit with a maturity exceeding 30 days to specific designated persons;
export certain equipment, or provide technical and financial assistance or other services, in connection with the export, sale or transfer of such equipment without prior authorisation; and
provide services for particular forms of oil exploration and production.¹⁷

44.3 Offences and penalties

The various regulations for each sanctions regime set out prohibited conduct. Offences typically arise from dealing with funds or economic resources belonging to, owned, controlled or held by a designated person without a licence while knowing or suspecting that the transaction is prohibited. This can include making funds or economic resources available to a designated person, dealing with funds or economic resources that must be frozen, circumventing an asset freeze or breaching licensing conditions.¹⁸ For example, OFSI imposed a monetary penalty on Telia Carrier UK Limited for indirectly facilitating international phone calls to a designated Syrian entity, which counted as making funds and economic resources indirectly available to it.¹⁹ The sanctions regime allows criminal or civil cases to be brought for sanctions violations depending on the facts and the conduct in question.

44.3.1 Criminal penalties

Criminal prosecutions can only be brought if there is sufficient evidence to provide a realistic prospect of conviction, and the prosecution is in the public interest.²⁰ Criminal prosecutions of corporates for sanctions breaches are, however, unlikely, not least due to the difficulty of establishing corporate criminal liability in the United Kingdom. Civil breaches are enforced by OFSI, and criminal breaches are enforced by the SFO, HMRC and the CPS.

The penalties for breaches of sanctions in the United Kingdom are set out in the relevant statutory instruments. Criminal violations typically include unlimited criminal fines, and up to seven years’ imprisonment for sanctions violations, as set by the Policing and Crime Act 2017 (PACA).²¹

Criminal breaches of sanctions may also have money-laundering implications. The Proceeds of Crime Act 2002 (POCA), which broadly prohibits the handling of criminal property (defined as any benefit resulting from criminal conduct) has extraterritorial application, and even property resulting from criminal conduct that occurs abroad may be caught by POCA. For example, any payments received in the United Kingdom as part of a transaction that would constitute a sanctions offence would fall within the definition of ‘criminal property’ in POCA. The subsequent handling of those funds with the knowledge that they were criminal property would then constitute a money laundering offence. The maximum penalties for breaching POCA include an unlimited fine and up to 14 years’ imprisonment.²²

The Serious Crime Act 2007 also allows a High Court judge to impose a serious crime prevention order on an individual or entity that has been involved in a serious crime, including breaches of financial sanctions.

44.3.2 Civil penalties

For breaches of sanctions that satisfy the civil standard of proof, OFSI may also impose monetary penalties of up to £1 million or 50 per cent of the value of the breach, whichever is higher.²³

44.4 Sanctions investigations

Sanctions investigations can arise in a number of ways. Internally, a company may become aware of a whistleblower report, red flags arising from automated compliance systems and controls, or findings from internal or external audits. A company may also receive notification from a bank of a blocked payment. UK authorities also increasingly commence investigations based on suspicious activity reports (SARs) filed with the NCA, voluntary self-reports by the company itself,²⁴ or reports from other individuals, entities or enforcement agencies. There is no general notification requirement to inform a suspect that they are under investigation. As a result, a suspect may not become aware of an investigation without an overt act such as the service of production orders, the arrest of one or more individuals, an asset freeze or the execution of a search warrant.

OFSI has broad investigative powers to require any person located or resident in the United Kingdom to produce or provide information or documents to allow it to establish the extent of funds and economic resources linked to a designated person, obtain information concerning the disposal or transfer of such funds or economic resources, monitor compliance with or evasion of sanctions, or obtain evidence of the commission of an offence. Failure to comply with such requests without a reasonable excuse or obstructing OFSI in its investigation is a criminal offence.

Although OFSI is the primary agency responsible for sanctions, it may also refer a matter to other government agencies, such as the SFO or HMRC, both of which may also potentially pursue a criminal prosecution. The SFO and HMRC also have broad powers to request or require information,²⁵ and HMRC may also make arrests.

OFSI also works closely with the NCA and may receive information on suspected breaches from the NCA’s International Corruption Unit.²⁶ The NCA typically refers cases for prosecution to the CPS, which may also prosecute breaches of trade sanctions pursuant to the Crown and Excise Management Act 1979.

Regulated entities could also be subject to enforcement action by the FCA for failure to maintain effective systems and controls to address the risk of sanctions violations,²⁷ effective systems and controls relating to compliance, financial crime and money laundering,²⁸ and adequate policies and procedures to counter the risk of financial crime.²⁹

The FCA may issue notices to authorised persons requiring them to produce specified documents or information.³⁰ The FCA may choose to request that documents be provided voluntarily, in the first instance. Although regulated entities need not comply with voluntary requests, they must deal with the FCA ‘in an open and cooperative way’ and ‘disclose to the FCA appropriately anything relating to the firm of which that regulator would reasonably expect notice’.³¹

Once the FCA has formally commenced an investigation, it may require the subject of the investigation (or a person connected to the subject) to produce documents, attend interviews and answer questions, or otherwise provide information required by the investigator, where the documents or information sought are reasonably relevant to the investigation.³² Furthermore, the FCA may seek answers and documents from persons who are not actually subject to investigation or connected to a person subject to investigation, where ‘necessary or expedient for the purposes of the investigation’.³³

44.5 Best practices in investigations

44.5.1 Factors to consider

The creation of OFSI and recent enforcement activity in the United Kingdom demonstrates that sanctions enforcement and investigations is a priority area in the prosecution of economic crime. There is also a pronounced emphasis by UK enforcement authorities on voluntary disclosure and ongoing co-operation, with the FCA noting that ‘the requirement on firms to deal with their regulator openly and cooperatively is a central part of the Authority’s regulatory regime’,³⁴ and the SFO similarly stating that ‘co-operation will be a relevant consideration in the SFO’s charging decisions’.³⁵ For that reason, it will be important for a company to move quickly, while balancing speed against substance to ensure that it understands the nature of the alleged violation and the risks it presents. Issues for consideration may include:

to whom and when to give notice of the issue or investigation;
identifying who was involved in or responsible for the alleged breach;
preserving relevant information regarding the alleged breach and the company’s response;
conducting an internal investigation into the alleged breach and potentially any related transactions or departments;
remediation;
dealing with auditors;
disciplinary action; and
external communication strategy.

44.5.2 Co-operation

Co-operation with a UK authority may be mandatory where, for example, the authority has exercised its investigative powers and has issued notices requiring the provision of information or production of documents.

Where co-operation is voluntary, an individual or entity under investigation may still wish to co-operate fully with the UK authority for various reasons. Co-operation may result in a more positive outcome, such as a civil rather than criminal penalty, or conclusion of a criminal investigation by way of a deferred prosecution agreement (DPA). It may also result in a faster resolution of the matter, which may reduce legal fees and save valuable management time.

Other tangible benefits to co-operation include being able to work with the authority in shaping any public announcements as well as internal communications associated with the investigation, or the ability to gently influence an investigation through increased contact and rapport with the relevant authorities.

44.5.2.1 Self-reporting

Considerations

As of April 2021, OFSI has updated its enforcement guidance to state that breaches of financial sanctions ‘must’ be reported to it (a change from the previous ‘should’).³⁶ Specific reporting obligations also apply to certain ‘relevant firms’. Given the potential benefits, self-reporting is an important consideration when faced with a potential sanctions violation.

When assessing the seriousness of a case, authorities will take self-reporting into account, and may consequently offer a more lenient outcome.³⁷ Any delay in self-reporting risks the authorities discovering the violation through other sources. This may prevent a person from qualifying for the penalty reduction given by OFSI for prompt and complete voluntary self-disclosures, although OFSI does consider it reasonable for a person to take ‘some time to assess the nature and extent of the breach, or seek legal advice’ as long as this does not delay an effective response to the breach.³⁸ By way of example, in its investigation of Standard Chartered Bank, OFSI allowed the bank first to disclose the suspected breaches, followed by interim updates of its internal investigation and a final report at the end of the bank’s internal investigation.³⁹

However, self-reporting is not without risk. A self-report, especially if incomplete, may lead authorities to conduct further investigations of the company’s activities, which could be expensive and lengthy, and expose new issues. There is also no guarantee of a lenient approach, especially if the violations were carried out knowingly, were egregious, or were avoidable with an effective compliance programme. It is best practice, therefore, to consider a self-report with the guidance of experienced legal counsel and after a preliminary investigation of the facts.

Reporting obligations

All individuals and entities subject to UK sanctions must report any breaches of financial sanctions to OFSI.

Specific reporting obligations also apply to the following ‘relevant firms’:

persons with permission to carry out regulated activities;⁴⁰
businesses that transmit money by any means, operate a currency exchange office or cash cheques payable to customers;
a firm or sole practitioner that is a statutory auditor or local auditor;
a firm or sole practitioner that provides by way of business accountancy services, legal or notarial services, advice about tax affairs or certain trust or company services;
a firm or sole practitioner that carries out, or whose employees carry out, estate agency work;
the holder of a casino operating licence; or
a person engaged in the business of making, supplying, selling or exchanging articles made from gold, silver, platinum, palladium or precious stones or pearls.⁴¹

Relevant firms must report to OFSI if they have knowledge or reasonable cause to suspect that a third party is a designated person or has committed an offence under the regulations. If a relevant firm knows or has reasonable cause to suspect that a third party is a designated person, and is also a customer of the relevant firm, then the relevant firm must also state the nature and amount or quantity of any funds or economic resources held for that customer.

Additional reporting to other authorities may be necessary, such as to the FCA or the NCA. Specific reporting obligations may also arise under section 19 of the Terrorism Act 2000 for any act known or suspected to be linked to terrorist financing, as well as under the statutory scheme for each sanctions regime. Where the violation also involves complex fraud or international bribery and corruption, a person may also consider self-reporting to the SFO.

44.5.3 Settlement

OFSI has discretion in how it responds to breaches of financial sanctions. For example, it may simply require a company to provide additional information about its compliance practices. It may also impose monetary penalties or refer a matter to other regulators or criminal authorities for prosecution.⁴²

Criminal breaches of sanctions are eligible for DPAs with the CPS and SFO, allowing an organisation to make reparations for its behaviour without many of the consequences of a conviction. A DPA allows organisations that have co-operated with authorities during an investigation to have the proceedings against them suspended for a set period. The DPA will contain provisions that address the payment of a monetary penalty, compensation, or both; the implementation of a compliance programme; and an agreement for future co-operation with the relevant authority. Upon expiry of the DPA, assuming all obligations are fully met, the prosecution will be discontinued. A code of practice setting out guidance in relation to DPAs has been jointly issued by the CPS and SFO.⁴³ Since the United Kingdom introduced its DPA programme in 2014,⁴⁴ the SFO had entered into 12 DPAs as of August 2021.

For breaches that only satisfy the civil standard and would incur a monetary penalty from OFSI, it is also possible to minimise penalties by making a voluntary self-report in the first instance, making representations during the penalty decision process and appealing OFSI’s penalty recommendation through ministerial review.

In reaching a penalty decision, OFSI will assess the seriousness of a case based on a number of mitigating and aggravating factors, including but not limited to:

whether funds or economic resources were provided directly to a designated person;
whether there was an intentional circumvention of sanctions;
the value of the breach;
knowledge of sanctions and compliance systems (although ignorance is no defence);
the behaviour at issue, including, for example, whether the breach was deliberate or negligent, or any management involvement in the breach;
repeated, persistent or extended breaches; and
reporting of breaches to OFSI, including whether the disclosure was voluntary, materially complete and made in good faith.

Where OFSI concludes that the threshold for imposing a civil penalty has been met, it will begin with the statutory maximum penalty it can impose, which will be the greater of £1 million or 50 per cent of the value of the breach. OFSI then decides what level of penalty, between zero and the maximum, is reasonable and proportionate, based on aggravating and mitigating factors. Up to a 50 per cent reduction in the final penalty is available to persons who provide a prompt and complete voluntary disclosure. This applies to cases assessed as ‘serious’, while a 30 per cent reduction is available for cases assessed to be ‘most serious’. OFSI then produces a penalty recommendation, in respect of which the company can make representations.

Section 147 of the Policing and Crime Act 2017 also confers a right on any subject of OFSI enforcement action to appeal the fine by requesting a ministerial review of the penalty recommendation. Some OFSI enforcement decisions indicate that invoking this right may result in substantially reduced penalties.

44.6 Trends and key issues

44.6.1 Recent enforcement activity

As at August 2021, OFSI had imposed five monetary penalties for breaches of financial sanctions since it was first given powers to do so in April 2017. These fines have varied in size, and only two have exceeded £100,000.⁴⁵ Standard Chartered Bank (SCB) was fined £20.47 million in February 2020 for violating sanctions targeting Russia/Ukraine, making it the first fine in the United Kingdom relating to the EU Ukraine (Sovereignty and Territorial Integrity) sanctions regime.⁴⁶ Based on these violations, OFSI reached a penalty recommendation of £31.5 million. However, this was appealed by SCB through the ministerial review process and the penalty was subsequently reduced. Telia Carrier UK Limited likewise successfully appealed its original penalty recommendation of £300,000 through ministerial review, reducing it by roughly half in relation to sanctions violations targeting Syria.⁴⁷ Most recently in August 2021, TransferGo was fined £50,000 for transferring funds to accounts held with the Russian National Commercial Bank (RNCB), an entity subject to an asset freeze.⁴⁸ Although TransferGo’s fine is substantially lower than those levied on SCB or Telia, the total value of transactions in breach of sanctions was just £7,764.77. The size of the penalty therefore demonstrates that the financial value of relevant transactions is only one component in OFSI’s overall assessment of sanctions breaches.⁴⁹ Furthermore, notwithstanding later co-operation with OFSI, because TransferGo did not voluntarily disclose the transactions, it was not eligible for voluntary disclosure credit. TransferGo’s attempt to appeal the fine was unsuccessful.

In April 2019, the FCA fined SCB £102.2 million for anti-money laundering (AML) breaches connected in part to violations of US sanctions, based on findings of shortcomings in SCB’s internal assessments of the adequacy of its AML controls, its approach to identifying and mitigating money laundering risks and its escalation of money laundering risk.⁵⁰ This matter serves as a reminder that even if a particular transaction does not breach UK or EU sanctions, it may still face collateral enforcement action in the United Kingdom for compliance programme failures.

44.6.2 Potential pitfalls

While OFSI’s enforcement activity still pales in comparison to its US counterpart – the US Department of the Treasury’s Office of Foreign Assets Control – which issued US$1.29 billion of monetary penalties in 2019⁵¹ (although this figure decreased to US$24.6 million in 2020),⁵² the current trend of OFSI’s fines suggests that enforcement activity will only intensify. As an enforcement agency, OFSI continues to mature, and it is likely that OFSI has numerous investigations in the pipeline.

Brexit may also lead to a divergence between the EU and UK sanctions regimes. For example, EU sanctions provide an exemption to restrictions on particular financial activities in Russia for EU-based subsidiaries of designated entities. After 31 December 2020, any UK-based subsidiaries of designated entities under this sanctions regime will only be exempt from the UK equivalent of this restriction, and vice versa. The United Kingdom has also expanded the prohibition of ‘financial assistance’ relating to the supply of certain goods. While the Court of Justice of the European Union has held that ‘financial assistance’ does not include payment processing,⁵³ the UK equivalent of this sanctions regime refers to the provision of ‘financial services’ instead, which includes payment processing.⁵⁴

Additionally, OFSI has issued post-Brexit guidance extending the scope of financial sanctions to entities owned or controlled, directly or indirectly, by a designated person.⁵⁵ Substantial changes to the designation process are also in train. SAMLA brings with it a lower threshold for the imposition of sanctions as compared with the EU regime, requiring only that it be ‘appropriate’ to designate a person, rather than having to satisfy the ‘necessity test’ under EU law.⁵⁶ It also provides for the designation of persons by description,⁵⁷ which does not currently feature in the EU sanctions regime, and which may result in identification challenges for sanctions screening and compliance processes in future. Lastly, instead of seeking redress in the EU courts, a person designated under the United Kingdom’s autonomous sanctions regime post-Brexit may seek variation or revocation of the designation by the Secretary of State or HM Treasury.⁵⁸

SAMLA also introduces US-style general licence exemptions (separate from OFSI’s existing powers to issue general licences around the United Kingdom’s domestic terror sanctions regime), which allow a person to undertake acts that would otherwise be prohibited without the need to apply for a specific licence.⁵⁹

Further divergence from the European Union can be seen in the United Kingdom’s enactment of the Global Anti-Corruption Sanctions Regulations 2021 on 26 April 2021, which specifically target individuals involved in serious corruption, and authorise asset freezes and travel bans on individuals and asset freezes on entities.⁶⁰ This is in addition to the Global Human Rights Sanctions Regulations 2020,⁶¹ representing the United Kingdom’s first use of Magnitsky-style sanctions and preceding the European Union’s own set of human rights sanctions legislation by four months.⁶² These important developments demonstrate that the United Kingdom is still able and willing to take the lead on sanctions enforcement, instead of reacting and following in European footsteps.

In light of the above, individuals and entities are well advised to stay informed of any developments in this sphere, and to ensure that any sanctions compliance programme is sufficiently robust and agile enough to adapt to the shifting landscape of the United Kingdom’s autonomous sanctions regime.

Footnotes

¹ Rita Mitchell and Simon Osborn-King are partners, and Yannis Yuen is an associate, at Willkie Farr & Gallagher LLP.

² See, e.g., Council Regulation (EU) 2017/1509 of 30 August 2017 concerning restrictive measures against the Democratic People’s Republic of Korea and repealing Regulation (EC) No. 329/2007 (https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:02017R1509-20200603).

³ See, e.g., The Democratic People’s Republic of Korea (European Union Financial Sanctions) Regulations 2017 (https://www.legislation.gov.uk/uksi/2017/218).

⁴ OFSI Financial Sanctions Guidance (https://assets.publishing.service.gov.uk/government/uploads/system/uploads/attachment_data/file/961516/General_Guidance_-_UK_Financial_Sanctions.pdf.

⁵ OFSI Enforcement Guidance (https://assets.publishing.service.gov.uk/government/uploads/system/uploads/attachment_data/file/708991/Monetary_Penalties_Guidance_web.pdf).

⁶ OFSI Enforcement Guidance at paragraph 3.7 (https://assets.publishing.service.gov.uk/government/uploads/system/uploads/attachment_data/file/708991/Monetary_Penalties_Guidance_web.pdf ).

⁷ OFSI Financial Sanctions Guidance at section 4 (https://assets.publishing.service.gov.uk/government/uploads/system/uploads/attachment_data/file/961516/General_Guidance_-_UK_Financial_Sanctions.pdf).

⁸ Via The Protecting against the Effects of the Extraterritorial Application of Third Country Legislation (Amendment) (EU Exit) Regulations 2020 (https://www.legislation.gov.uk/uksi/2020/1660/contents/made).

⁹ Council Regulation (EC) No. 2271/96 (https://www.legislation.gov.uk/eur/1996/2271/contents), Articles 4, 5 and 6, as amended by The Protecting against the Effects of the Extraterritorial Application of Third Country Legislation (Amendment) (EU Exit) Regulations 2020.

¹⁰ OFSI Financial Sanctions Guidance (https://assets.publishing.service.gov.uk/government/uploads/system/uploads/attachment_data/file/961516/General_Guidance_-_UK_Financial_Sanctions.pdf) at para. 6.5.

¹¹ For example, see the Terrorist Asset-Freezing etc. Act 2010 (https://www.legislation.gov.uk/ukpga/ 2010/38/contents), s.17.

¹² General Licence INT/2020/G1 (https://assets.publishing.service.gov.uk/government/uploads/system/uploads/attachment_data/file/988364/General_Licence_-_INT2020G1_-_As_amended.pdf).

¹³ OFSI Financial Sanctions Guidance (https://assets.publishing.service.gov.uk/government/uploads/system/uploads/attachment_data/file/961516/General_Guidance_-_UK_Financial_Sanctions.pdf) at para. 6.8.1.

¹⁴ ‘UK sanctions relating to Iran (nuclear weapons)’ (https://www.gov.uk/government/collections/uk-sanctions-on-iran-relating-to-nuclear-weapons).

¹⁵ See Council Regulation (EC) No. 2271/96 (https://www.legislation.gov.uk/eur/1996/2271/contents), as amended by The Protecting against the Effects of the Extraterritorial Application of Third Country Legislation (Amendment) (EU Exit) Regulations 2020).

¹⁶ ‘UK sanctions relating to the Democratic People’s Republic of Korea’ (https://www.gov.uk/government/collections/uk-sanctions-on-the-democratic-peoples-republic-of-korea).

¹⁷ ‘UK sanctions relating to Russia’ (https://www.gov.uk/government/collections/uk-sanctions-on-russia).

¹⁸ See https://assets.publishing.service.gov.uk/government/uploads/system/uploads/attachment_data/file/961516/General_Guidance_-_UK_Financial_Sanctions.pdf.

¹⁹ ‘Imposition of Monetary Penalty – Telia Carrier UK Limited’ 9 September 2019 (https://assets.publishing.service.gov.uk/government/uploads/system/uploads/attachment_data/file/842548/Telia_monetary_penalty.pdf).

²⁰ The Code for Crown Prosecutors (https://www.cps.gov.uk/publication/code-crown-prosecutors).

²¹ This was an increase on the previous maximum penalty of two years. See the European Communities Act 1972 (https://www.legislation.gov.uk/ukpga/1972/68/contents), Schedule 2, para. 1(1)(d).

²² Proceeds of Crime Act 2002 (https://www.legislation.gov.uk/ukpga/2002/29/contents), s.334.

²³ Policing and Crime Act 2017 (https://www.legislation.gov.uk/ukpga/2017/3/contents/enacted), s.146(3).

²⁴ For example, under the Terrorist Asset Freezing etc. Act 2010, certain institutions have an affirmative reporting obligation to the Treasury where they have knowledge or reasonable cause to suspect that someone is a designated person or has committed an offence involving certain prohibitions in relation to designated persons. See Terrorist Asset Freezing etc. Act 2010, s.19.

²⁵ For example, see Criminal Justice Act 1987, s.2.

²⁶ See https://nationalcrimeagency.gov.uk/what-we-do/crime-threats/bribery-corruption-and-sanctions-evasion.

²⁷ FCA’s Principles for Business (https://www.handbook.fca.org.uk/handbook/PRIN/2/1.html), Principle 3.

²⁸ FCA’s Senior Management Arrangements, Systems and Controls Sourcebook (https://www.handbook.fca.org.uk/handbook/SYSC/3/2.html), Rule 3.2.6.

²⁹ ibid. (https://www.handbook.fca.org.uk/handbook/SYSC/6/1.html), Rule 6.1.1.

³⁰ Financial Services and Markets Act (FSMA) (https://www.legislation.gov.uk/ukpga/2000/8/section/165), s.165.

³¹ FCA’s Principles for Business (https://www.handbook.fca.org.uk/handbook/PRIN/2/1.html), Principle 11.

³² FSMA (https://www.legislation.gov.uk/ukpga/2000/8/section/171), s.171.

³³ ibid. (https://www.legislation.gov.uk/ukpga/2000/8/section/172), s.172.

³⁴ Final Notice – Tullett Prebon (Europe) Limited, 11 October 2019 (https://www.fca.org.uk/publication/final-notices/tullett-prebon-europe-limited-2019.pdf), para. 6.45.

³⁵ SFO Corporate Co-operation Guidance (https://www.sfo.gov.uk/publications/guidance-policy-and-protocols/sfo-operational-handbook/corporate-co-operation-guidance/).

³⁶ OFSI Enforcement Guidance (https://assets.publishing.service.gov.uk/government/uploads/system/uploads/attachment_data/file/708991/Monetary_Penalties_Guidance_web.pdf) at para. 3.27.

³⁷ For example, Standard Chartered Bank was able to secure a 30 per cent reduction for its voluntary self-disclosure (https://assets.publishing.service.gov.uk/government/uploads/system/uploads/attachment_data/file/876971/200331_-_SCB_Penalty_Report.pdf).

³⁸ OFSI Enforcement Guidance (https://assets.publishing.service.gov.uk/government/uploads/system/uploads/attachment_data/file/708991/Monetary_Penalties_Guidance_web.pdf), para. 3.32.

³⁹ ‘Imposition of Monetary Penalty – Standard Chartered Bank’, 18 February 2020 (https://assets.publishing.service.gov.uk/government/uploads/system/uploads/attachment_data/file/876971/200331_-_SCB_Penalty_Report.pdf).

⁴⁰ Under FSMA (https://www.legislation.gov.uk/ukpga/2000/8/contents), Part 4A.

⁴¹ Definitions of each of these businesses and professions can be found in the relevant UK regulation for each sanctions regime.

⁴² OFSI Enforcement Guidance (https://assets.publishing.service.gov.uk/government/uploads/
system/uploads/attachment_data/file/708991/Monetary_Penalties_Guidance_web.pdf), para. 3.2.

⁴³ ‘Deferred Prosecution Agreements Code of Practice’, 11 February 2014 (https://www.cps.gov.uk/sites/default/files/documents/publications/dpa_cop.pdf).

⁴⁴ Crime and Courts Act 2013 (https://www.legislation.gov.uk/ukpga/2013/22/contents/enacted), Schedule 17.

⁴⁵ ‘Enforcement of financial sanctions’ (https://www.gov.uk/government/collections/enforcement-of-financial-sanctions).

⁴⁶ ‘Imposition of Monetary Penalty – Standard Chartered Bank’, 18 February 2020 (https://assets.publishing.service.gov.uk/government/uploads/system/uploads/attachment_data/file/876971/200331_-_SCB_Penalty_Report.pdf).

⁴⁷ ‘Imposition of Monetary Penalty – Telia Carrier UK Limited’, 9 September 2019 (https://assets.publishing.service.gov.uk/government/uploads/system/uploads/attachment_data/file/842548/Telia_monetary_penalty.pdf).

⁴⁸ ‘Imposition of Monetary Penalty – TransferGo Limited’, 25 June 2021 (https://assets.publishing.service.gov.uk/government/uploads/system/uploads/attachment_data/file/1008859/050821_-_TransferGo_Penalty_Report.pdf).

⁴⁹ OFSI Enforcement Guidance (https://assets.publishing.service.gov.uk/government/uploads/system/uploads/attachment_data/file/708991/Monetary_Penalties_Guidance_web.pdf) at para. 3.17.

⁵⁰ ‘Decision Notice – Standard Chartered Bank’, 5 February 2019 (https://www.fca.org.uk/publication/decision-notices/standard-chartered-bank-2019.pdf).

⁵¹ 2019 Enforcement Information – US Department of the Treasury (https://home.treasury.gov/policy-issues/financial-sanctions/civil-penalties-and-enforcement-information/2019-enforcement-information).

⁵² 2020 Enforcement Information – US Department of the Treasury (https://home.treasury.gov/policy-issues/financial-sanctions/civil-penalties-and-enforcement-information/2020-enforcement-information)

⁵³ PJSC Rosneft Oil Company v. Her Majesty’s Treasury and Others (Case C-72/15) (http://curia.europa.eu/juris/celex.jsf?celex=62015CJ0072&lang1=en&type=TXT&ancre=).

⁵⁴ The Russia (Sanctions) (EU Exit) Regulations 2019 (https://www.legislation.gov.uk/uksi/2019/855/contents/made) ss.28, 37, 44, and 52. See also Russia Guidance – Guidance for the financial and investment restrictions in Russia (Sanctions) (EU Exit) Regulations 2019 (https://assets.publishing.service.gov.uk/government/uploads/system/uploads/attachment_data/file/892741/OFSI_-_Russia_guidance_-_June_2020.pdf) (noting that financial services includes payment processing).

⁵⁵ OFSI Financial Sanctions Guidance (https://assets.publishing.service.gov.uk/government/
uploads/system/uploads/attachment_data/file/961516/General_Guidance_-_UK_Financial
_Sanctions.pdf), s.4.

⁵⁶ Sanctions and Anti-Money Laundering Act 2018 (https://www.legislation.gov.uk/ukpga/2018/
13/contents), s.11.

⁵⁷ ibid., s.12.

⁵⁸ ibid., s.23.

⁵⁹ ibid., s.15.

⁶⁰ The Global Anti-Corruption Sanctions Regulations 2021 (https://www.legislation.gov.uk/uksi/2021/488/contents/made).

⁶¹ The Global Human Rights Sanctions Regulations 2020 (https://www.legislation.gov.uk/uksi/2020/680/contents/made).

⁶² Council Regulation (EU) 2020/1998 (https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A02020R1998-20210322).