On November 11, the UK Government proposed a new national security screening regime that would allow the Government to intervene in “potentially hostile” foreign investments that threatened UK national security while “ensuring the UK remains a global champion of free trade and an attractive place to invest.”

If approved by Parliament, the National Security and

Yesterday afternoon, the U.S. Department of State issued the first of two mandatory reports under the Hong Kong Autonomy Act (HKAA), identifying 10 Hong Kong and mainland China officials as materially contributing to the erosion of Hong Kong’s autonomy (the “Section 5(a) Report”).[1]  Because the same individuals were already designated on the List of Specially Designated and Blocked Persons (“SDN List”) maintained by the U.S. Department of the Treasury, Office of Foreign Assets Control (“OFAC”) on August 7, 2020,[2] the practical effect of the report is limited to setting a deadline of 30 to 60 days for the U.S. administration to issue the second required report under the HKAA identifying foreign financial institutions that knowingly conduct a “significant” transaction with the 10 individuals listed in yesterday’s Section 5(a) Report (the “Section 5(b) Report”).[3]  We discussed the reports required under the HKAA and the potential impact of those reports in our earlier blog post.[4]
Continue Reading State Department Releases Hong Kong Autonomy Act Persons Report, Starts the Clock for Foreign Financial Institutions Report

In the wake of one of the largest reported medical ransomware attacks in U.S. history,[1] the U.S. Department of the Treasury, Office of Foreign Assets Control (OFAC) and Financial Crimes Enforcement Network (FinCEN) issued last week a pair of advisories to assist in efforts to combat the increasing threat of ransomware attacks and related sanctions and anti-money laundering (AML) compliance issues.[2]  Like our blog post last month on the same topic, the advisories highlight the importance of considering the legal risks relating to ransomware payments and confirm that OFAC may pursue enforcement actions against ransomware payments that violate U.S. sanctions.[3]
Continue Reading OFAC and FinCEN Issue Advisories on Cyber Ransom Payments

On September 18, 2020, the U.S. Department of Commerce (Commerce) released for public inspection substantively identical notices[1] specifying the transactions relating to mobile applications TikTok and WeChat to be prohibited pursuant to the executive orders related to both entities issued by President Trump on August 6, 2020 (the TikTok Notice and the WeChat Notice, respectively, and together, the Notices).[2]  Commerce withdrew both Notices before formal publication on September 22, presumably to address uncertainty regarding the effective dates in light of developments in both matters; the TikTok Notice has already been re-issued with revised timing, but negotiations over a possible partial sale of TikTok continue.[3]  The WeChat Notice has yet to be re-issued, possibly as a result of timing uncertainty regarding the preliminary injunction discussed below.[4]
Continue Reading Commerce Provides Clarity on the Potential Scope of the TikTok and WeChat Bans; All Else Remains Murky

Last month, reports surfaced that fitness technology company Garmin may have made a multimillion dollar payment in response to a ransomware attack with reported links to Evil Corp, a Russian hacking group subject to U.S. sanctions.  This incident and other recent reports of ransomware attacks against large companies highlights that companies should consider potential civil and criminal liability under U.S. sanctions laws when responding to ransomware attacks.
Continue Reading Ransomware and Sanctions Compliance: Considerations for Responses to Attacks

The Court of Appeal confirmed[1] that a borrower under a Tier 2 facility agreement was excused from making payments because of the risk of U.S. secondary sanctions.

The court made it explicitly clear that whether or not non-performance may be excused will depend on the specific words of the affected contract and the wider context.  However, whilst fact sensitive, the decision also makes clear that the English court is likely to consider U.S. secondary sanctions as “mandatory” provisions of law.  
Continue Reading UK Court of Appeal Says Risk of U.S. Secondary Sanctions is a “Mandatory Provision of Law” Excusing Non-Payment

On August 21, the Financial Crimes Enforcement Network, together with the federal banking agencies, released a statement to clarify banks’ customer due diligence obligations for politically exposed persons. The Statement affirms that (i) there is no regulatory requirement, and no supervisory expectation, for banks’ Bank Secrecy Act / anti-money laundering programs to include “unique, additional

Following the enactment of the Hong Kong Autonomy Act (HKAA), the issuance of Executive Order 13936, which implemented sanctions authorities under the HKAA and other statutes, and other recent U.S. sanctions designations and enforcement actions, many multinational entities based or operating in Hong Kong are concerned with how to navigate the new

On 6 July 2020, the UK Government announced the introduction of a “Global Human Rights” sanctions regime (the “GHR Sanctions”). The regime marks the first time the UK Government has imposed sanctions measures independently from the European Union and the first time it has exercised its ability to impose sanctions directly in response to human rights violations. However, the new measures do not necessarily indicate the UK’s future policy direction, and after Brexit the UK sanctions regime will look broadly similar to that of the EU.
Continue Reading New UK Sanctions Regime Introduced