A recent OFAC press release, and guidance document, offers
some good advice, but also risks misleading readers. A careful read of the case
and guidance will reveal a hidden lesson to be learned. At first glance, the
guidance simply reminds companies to ensure their SPL lists are updated and
reviewed, and most readers will come away satisfied that they are compliant. A primary message in the guidance refers to
what they call “false hit lists”, and reminds readers to ensure entities on
that list are reviewed as regulations change. Upon a deeper look, however, this
Finding of Violation contains another lesson, one that may surprise readers and
give them reason to review their compliance program. Before we explain that
statement, let’s take a good look at the finding, and the guidance.