What's Happening?
On October 27, the U.S. Department of the Treasury’s Office of Foreign Assets Control (OFAC) announced a $1.53 million settlement with Extreme Networks, Inc. The settlement resolves nine apparent violations of the Ukraine-/Russia-Related Sanctions Regulations,
31 C.F.R. part 589. These violations stemmed from exports made to JSC Moskovskiy Mashinostroitelniy Zavod Avangard (MMZA), a blocked Russian defense manufacturer, between September 2018 and March 2022. Although MMZA was not formally designated until 2022, it was considered blocked throughout the period under OFAC’s 50 Percent Rule. OFAC determined that Extreme Networks voluntarily self-disclosed the violations but deemed them egregious. The compliance failures originated from Extreme’s Russian subsidiary's 2018 purchase of customer accounts, including a contract naming MMZA as an end user. OFAC stated that Extreme did not conduct sufficient due diligence and approved purchase orders that falsely identified another Russian company as the end user, despite numerous red flags. The Department of Justice also announced a non-prosecution agreement, requiring Extreme to pay $975,721.84 in criminal penalties, crediting a portion of OFAC's settlement against this amount.
Why It's Important?
This case highlights the critical importance of robust sanctions compliance programs for U.S. companies, especially those with international operations or subsidiaries. The fact that MMZA was considered blocked under OFAC's 50 Percent Rule, even before formal designation, underscores the need for comprehensive due diligence that extends beyond explicit sanctions lists. The presence of 'red flags' that were reportedly overlooked by Extreme Networks serves as a stark warning to other businesses about the potential for severe penalties, even with voluntary disclosure. The differing views on the timeliness of disclosure between OFAC and the Department of Justice also indicate the complex and multi-faceted nature of sanctions enforcement, where companies may face scrutiny from various government agencies. This settlement reinforces the U.S. government's commitment to enforcing sanctions against Russia and preventing U.S. companies from inadvertently supporting its defense industry.
What's Next?
U.S. companies, particularly those with foreign subsidiaries or those involved in mergers and acquisitions, will likely increase their focus on sanctions due diligence and compliance training. The case serves as a precedent, emphasizing that the 50 Percent Rule and the need to identify ultimate beneficial ownership are crucial for avoiding sanctions violations. Companies will need to ensure that their compliance teams have adequate oversight of foreign affiliates and that red flags are promptly investigated. The U.S. government is expected to continue its aggressive enforcement of sanctions, especially those related to Russia and Ukraine, and will likely use such settlements to send a clear message about the consequences of non-compliance. This could lead to more proactive self-disclosures from companies that identify potential violations, hoping for more favorable settlement terms.
Beyond the Headlines
The Extreme Networks case sheds light on the intricate challenges of global corporate compliance in an era of complex and evolving sanctions regimes. The concept of 'egregious' violations, even with voluntary disclosure, suggests that the severity of the breach and the presence of clear warning signs weigh heavily in enforcement decisions. This situation also underscores the potential for U.S. sanctions to impact the operations of foreign subsidiaries, even if those subsidiaries are not directly U.S. entities. The case highlights the broader geopolitical context of U.S. sanctions, which aim to exert economic pressure on adversaries by limiting their access to goods, technology, and financial services. The enforcement action against Extreme Networks serves as a reminder that companies are expected to be vigilant and proactive in preventing any activities that could undermine U.S. foreign policy objectives, regardless of the complexity of their global operations.
